This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/wJ_on4ke6oZxChgu1SxnITQidH8.roa File: wJ_on4ke6oZxChgu1SxnITQidH8.roa (raw, json) Hash identifier: 57jA4HWinH5NYKXKx8WCI3JhQMBTXI2tQwC7DHjJPTE= Subject key identifier: C0:9F:E8:9F:89:1E:EA:86:71:0A:18:2E:D5:2C:67:21:34:22:74:7F Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Certificate serial: 019B78A2CE4ACA59EE56D1CF1AA110260BE5 Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/wJ_on4ke6oZxChgu1SxnITQidH8.roa Signing time: Thu 01 Jan 2026 08:18:14 +0000 ROA not before: Thu 01 Jan 2026 08:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211826 IP address blocks: 89.185.2.0/24 maxlen: 24 109.72.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:ce:4a:ca:59:ee:56:d1:cf:1a:a1:10:26:0b:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe Validity Not Before: Jan 1 08:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c09fe89f891eea86710a182ed52c67213422747f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:bd:9c:41:e0:1b:1a:61:2d:5d:d8:c1:e3:a1: fd:aa:30:e7:56:71:f0:49:a1:21:7f:c6:4b:06:7c: 20:56:70:34:f9:0e:ff:37:fe:be:05:47:cc:34:dc: eb:b9:dc:ec:34:eb:74:88:73:0e:92:76:19:a4:9e: ae:ad:6c:c1:f7:d3:61:a1:f2:3d:28:13:be:5e:31: dd:eb:dd:d6:e9:9e:a7:3e:b0:fb:c9:cb:fc:37:6b: 2c:19:58:9c:85:51:de:dc:50:ea:7a:9c:7f:76:73: e9:4f:d3:2e:fe:35:e8:75:12:e2:80:8d:fb:e3:a7: e2:c6:8e:c3:a5:4c:90:12:d0:07:9c:5e:6e:73:2a: a1:cb:a3:aa:25:57:ae:4c:ea:ef:40:e0:94:ff:6c: c3:d5:9f:4e:07:98:b8:6e:f3:89:e9:06:3c:3c:f1: 1a:80:82:e7:cc:1e:a3:17:39:9a:94:3e:e2:9f:44: 12:79:cc:49:62:5d:a3:b5:c8:49:57:e9:37:96:94: 59:ad:f8:46:93:d4:42:5b:6d:95:fc:f9:7c:14:a4: ab:b0:0c:b9:37:5f:e6:4b:0b:6b:ce:7a:9e:5c:02: 23:6e:e3:ce:06:94:73:99:76:7a:85:cf:44:65:ad: 8d:ec:0d:02:e5:57:09:27:83:ed:77:52:4c:44:ca: 63:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:9F:E8:9F:89:1E:EA:86:71:0A:18:2E:D5:2C:67:21:34:22:74:7F X509v3 Authority Key Identifier: keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/wJ_on4ke6oZxChgu1SxnITQidH8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.185.2.0/24 109.72.126.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:24:ed:ab:d5:78:13:7f:bd:3b:ae:55:d8:25:9a:57:03:40: d1:a1:5f:36:09:d3:a9:5f:e0:62:dc:6b:b9:59:41:bf:97:71: 19:98:44:11:af:f2:84:5e:13:56:f9:1d:00:60:c7:f7:ea:4d: 1f:bf:d4:d0:b0:63:5d:72:ae:db:cd:35:46:79:4f:1a:87:b0: f6:94:c9:80:e4:81:34:cd:a5:ff:4f:e4:c7:d6:d7:c3:61:28: 33:71:55:fb:32:3d:c4:48:8b:3b:81:28:10:37:9e:95:c6:62: 43:5c:44:42:79:e8:a1:01:af:8a:b0:fe:63:e7:82:dc:86:fd: 44:86:c0:e1:1b:49:f1:06:1d:7d:da:6e:74:30:ad:cf:cf:43: 6a:39:06:f3:cd:d3:6c:38:e9:6c:45:6c:51:55:44:82:2d:c5: f0:0b:7b:8c:ed:b9:6c:5e:b8:36:c3:58:8f:34:ac:43:a9:3c: b9:43:51:2a:9b:b4:52:f6:e3:a1:b7:c7:c3:53:56:cb:50:53: 10:b0:f3:fa:b7:c3:f6:ba:22:a0:5d:9f:65:7a:5d:f3:c9:57: 0b:92:99:6c:90:7e:de:3b:31:a6:e7:90:5f:4e:21:2b:4a:c3: 0a:57:8e:30:ed:fd:9b:d9:73:db:08:96:10:8e:47:6f:a2:9c: b5:af:4d:7b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4os5KylnuVtHPGqEQJgvlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk OGRhYmUwHhcNMjYwMTAxMDgxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDlmZTg5Zjg5MWVlYTg2NzEwYTE4MmVkNTJjNjcyMTM0MjI3NDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjL2cQeAbGmEtXdjB46H9qjDnVnHw SaEhf8ZLBnwgVnA0+Q7/N/6+BUfMNNzrudzsNOt0iHMOknYZpJ6urWzB99NhofI9 KBO+XjHd693W6Z6nPrD7ycv8N2ssGVichVHe3FDqepx/dnPpT9Mu/jXodRLigI37 46fixo7DpUyQEtAHnF5ucyqhy6OqJVeuTOrvQOCU/2zD1Z9OB5i4bvOJ6QY8PPEa gILnzB6jFzmalD7in0QSecxJYl2jtchJV+k3lpRZrfhGk9RCW22V/Pl8FKSrsAy5 N1/mSwtrznqeXAIjbuPOBpRzmXZ6hc9EZa2N7A0C5VcJJ4Ptd1JMRMpj3QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMCf6J+JHuqGcQoYLtUsZyE0InR/MB8GA1UdIwQY MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt ODJhZDE0NTU1ZWFhLzEvd0pfb240a2U2b1p4Q2hndTFTeG5JVFFpZEg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWbkCAwQA bUh+MA0GCSqGSIb3DQEBCwUAA4IBAQBKJO2r1XgTf707rlXYJZpXA0DRoV82CdOp X+Bi3Gu5WUG/l3EZmEQRr/KEXhNW+R0AYMf36k0fv9TQsGNdcq7bzTVGeU8ah7D2 lMmA5IE0zaX/T+TH1tfDYSgzcVX7Mj3ESIs7gSgQN56VxmJDXERCeeihAa+KsP5j 54Lchv1EhsDhG0nxBh192m50MK3Pz0NqOQbzzdNsOOlsRWxRVUSCLcXwC3uM7bls Xrg2w1iPNKxDqTy5Q1Eqm7RS9uOht8fDU1bLUFMQsPP6t8P2uiKgXZ9lel3zyVcL kplskH7eOzGm55BfTiErSsMKV44w7f2b2XPbCJYQjkdvopy1r017 -----END CERTIFICATE-----Generated at Sun Jan 25 13:07:32 2026 by rpki-client