This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/7RtMm2j-PlOCYgaaTNEF5okOR88.roa File: 7RtMm2j-PlOCYgaaTNEF5okOR88.roa (raw, json) Hash identifier: o9nbppRhQLGi1iXoR8bUr5miDVbhGF0IKswvoLQNlQM= Subject key identifier: ED:1B:4C:9B:68:FE:3E:53:82:62:06:9A:4C:D1:05:E6:89:0E:47:CF Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80 Certificate serial: 019B7D5B81C74E01650B4AFC340AFA0E8A0D Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/7RtMm2j-PlOCYgaaTNEF5okOR88.roa Signing time: Fri 02 Jan 2026 06:18:27 +0000 ROA not before: Fri 02 Jan 2026 06:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47480 IP address blocks: 89.167.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:81:c7:4e:01:65:0b:4a:fc:34:0a:fa:0e:8a:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80 Validity Not Before: Jan 2 06:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ed1b4c9b68fe3e538262069a4cd105e6890e47cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:88:2e:04:b3:36:1d:be:41:52:5b:e7:09:6d: 30:72:7a:02:e0:29:56:b6:77:ca:7f:9f:9a:90:e6: a8:9a:2d:f2:24:c6:98:73:f7:eb:cf:3a:ab:f7:e5: f5:44:83:8b:24:ce:5e:e1:c8:cd:3c:37:6f:d7:cf: 79:21:9f:a4:85:04:0d:1a:b4:bb:c3:30:67:7c:91: 79:3f:22:04:ce:65:65:e2:c7:00:32:f6:1c:e8:ae: db:ef:c9:95:cb:1f:75:c2:0a:6b:35:a5:c2:b7:15: b0:2a:7b:6a:60:0f:d7:df:0d:3c:e1:fa:4b:b0:32: 09:23:ae:fb:f9:bd:c7:d9:91:a6:4c:fe:45:1f:99: 7d:3b:84:dd:4d:89:21:a7:ed:26:04:ee:5f:84:6c: 0c:1d:b7:2d:44:9d:f0:68:ac:2f:36:15:19:37:f5: a1:e2:b3:26:c2:36:b6:40:8f:7b:16:a0:13:8f:aa: 6e:ac:d5:33:bb:a0:71:56:ac:e3:fe:5e:c7:94:3a: 51:b3:fb:79:dc:52:a0:59:f4:67:b7:57:26:38:46: c4:18:07:ed:db:b2:d7:28:fb:df:8a:ae:bc:ed:b9: 88:6b:8d:3a:17:98:d6:ef:e2:81:31:19:30:0f:da: c1:4e:50:f7:f9:3c:60:82:02:f9:c6:71:00:52:c4: a1:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:1B:4C:9B:68:FE:3E:53:82:62:06:9A:4C:D1:05:E6:89:0E:47:CF X509v3 Authority Key Identifier: keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/7RtMm2j-PlOCYgaaTNEF5okOR88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.167.239.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:16:0c:5f:2e:36:26:e9:06:80:f1:e9:c1:79:2c:af:44:1c: a3:52:51:65:25:82:d1:a9:e6:3f:9a:46:73:94:f9:d4:f0:78: a1:24:ed:4f:3b:28:a2:72:c6:15:b8:f1:13:4d:b3:fd:6a:1d: d4:57:1e:0f:12:f6:1a:76:18:c5:56:db:fb:af:bd:43:ed:d1: 37:91:2a:33:51:9d:b1:01:0c:14:00:ad:50:dd:c3:73:df:7d: 65:78:9d:0d:fe:6f:3f:05:51:f8:c4:e1:8e:d0:2d:68:1d:db: 7c:af:d3:e2:d6:2c:95:97:d7:68:9e:4f:e2:e3:4d:3a:20:bb: 75:f4:e9:ec:ff:2e:08:cb:88:7d:31:e7:e1:ef:5b:64:51:15: 24:96:b0:ea:18:97:2f:c2:57:e5:8b:8f:b9:9d:dc:57:89:cf: a4:f3:a8:b0:31:1f:fe:9d:18:60:d6:07:2c:b8:4c:4a:91:87: 1d:bc:b7:76:ab:ec:e6:59:8f:6b:a5:57:65:22:8c:b0:85:32: 1d:10:f9:4d:05:fc:f4:16:40:1a:31:2d:a9:b6:1d:82:3a:63: 03:8a:34:50:fe:d5:2a:a3:63:6f:31:7f:43:41:70:8d:67:45: 5d:92:cd:88:78:3e:e7:a3:42:88:19:e6:86:f0:00:7b:c6:de: ab:f3:c1:a3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9W4HHTgFlC0r8NAr6DooNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZjNlMTYwMTcyZWNjNzVjOGNhYjFiYWUyNzFiZTNlYmY0 MDdhODAwHhcNMjYwMTAyMDYxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDFiNGM5YjY4ZmUzZTUzODI2MjA2OWE0Y2QxMDVlNjg5MGU0N2NmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IguBLM2Hb5BUlvnCW0wcnoC4ClW tnfKf5+akOaomi3yJMaYc/frzzqr9+X1RIOLJM5e4cjNPDdv1895IZ+khQQNGrS7 wzBnfJF5PyIEzmVl4scAMvYc6K7b78mVyx91wgprNaXCtxWwKntqYA/X3w084fpL sDIJI677+b3H2ZGmTP5FH5l9O4TdTYkhp+0mBO5fhGwMHbctRJ3waKwvNhUZN/Wh 4rMmwja2QI97FqATj6purNUzu6BxVqzj/l7HlDpRs/t53FKgWfRnt1cmOEbEGAft 27LXKPvfiq687bmIa406F5jW7+KBMRkwD9rBTlD3+TxgggL5xnEAUsShdQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO0bTJto/j5TgmIGmkzRBeaJDkfPMB8GA1UdIwQY MBaAFAXz4WAXLsx1yMqxuuJxvj6/QHqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0Nzkt NWQ1NjA5ODljZjdiLzEvN1J0TW0yai1QbE9DWWdhYVRORUY1b2tPUjg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0NzktNWQ1NjA5ODljZjdi LzEvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWafvMA0G CSqGSIb3DQEBCwUAA4IBAQAOFgxfLjYm6QaA8enBeSyvRByjUlFlJYLRqeY/mkZz lPnU8HihJO1POyiicsYVuPETTbP9ah3UVx4PEvYadhjFVtv7r71D7dE3kSozUZ2x AQwUAK1Q3cNz331leJ0N/m8/BVH4xOGO0C1oHdt8r9Pi1iyVl9donk/i4006ILt1 9Ons/y4Iy4h9Mefh71tkURUklrDqGJcvwlfli4+5ndxXic+k86iwMR/+nRhg1gcs uExKkYcdvLd2q+zmWY9rpVdlIoywhTIdEPlNBfz0FkAaMS2pth2COmMDijRQ/tUq o2NvMX9DQXCNZ0Vdks2IeD7no0KIGeaG8AB7xt6r88Gj -----END CERTIFICATE-----Generated at Sun Jan 25 15:02:16 2026 by rpki-client