This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/mCIC92cl3T6GhQbTB55U2XIIpv8.roa File: mCIC92cl3T6GhQbTB55U2XIIpv8.roa (raw, json) Hash identifier: BhbC6w4oNSw9OhA9aYn5uXWLSKczbBtQQF01ljl/Mwc= Subject key identifier: 98:22:02:F7:67:25:DD:3E:86:85:06:D3:07:9E:54:D9:72:08:A6:FF Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80 Certificate serial: 019B7D5B7DB664661560947B8C3FFA91AE25 Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/mCIC92cl3T6GhQbTB55U2XIIpv8.roa Signing time: Fri 02 Jan 2026 06:18:26 +0000 ROA not before: Fri 02 Jan 2026 06:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21509 IP address blocks: 89.167.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:7d:b6:64:66:15:60:94:7b:8c:3f:fa:91:ae:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80 Validity Not Before: Jan 2 06:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=982202f76725dd3e868506d3079e54d97208a6ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:cd:ec:13:df:90:51:76:b8:44:11:e5:37:ac: e6:2b:40:db:6e:bb:f8:95:e3:d6:9e:09:15:5b:c8: 1c:23:2d:e5:b0:73:16:a6:8e:02:9d:09:d0:4a:a8: 3f:58:f9:bb:71:97:90:21:40:0e:99:76:84:eb:f2: d9:ff:7c:c4:b5:f4:3b:60:94:59:e2:aa:e2:95:8c: b4:19:04:ae:6d:78:bf:86:fd:24:d3:cf:de:71:aa: b3:f7:a0:39:a4:a7:a8:e9:5c:fe:5f:24:84:2a:fe: 2a:3c:0b:00:7c:f9:8e:ea:01:f2:93:c8:29:9f:c5: 1b:79:38:e5:9e:a4:0e:3a:87:20:97:0a:a6:a7:3b: bf:34:9d:b3:8e:b9:50:65:4b:76:83:04:38:74:ec: 56:e2:54:3f:f4:e1:1c:6a:d3:e2:7a:0c:6b:35:67: 72:a5:7b:bd:3a:36:06:91:7f:e1:c7:ac:7b:28:f4: 0a:a5:ac:76:ce:19:f1:e9:50:39:78:6b:a6:1e:af: e0:c1:b3:51:ec:0e:eb:07:55:8c:7b:b9:95:39:72: 9d:f4:2f:63:6b:94:3e:ac:75:c4:2f:af:47:71:40: e2:dd:0b:28:51:7f:e4:fb:7e:ec:70:0b:8e:16:f3: 70:47:8d:8a:10:2c:d0:a9:d7:41:30:fc:e5:1b:a8: 67:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:22:02:F7:67:25:DD:3E:86:85:06:D3:07:9E:54:D9:72:08:A6:FF X509v3 Authority Key Identifier: keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/mCIC92cl3T6GhQbTB55U2XIIpv8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.167.135.0/24 Signature Algorithm: sha256WithRSAEncryption 41:4e:80:91:47:89:76:bc:ee:5e:c4:a1:ff:25:fb:52:0f:36: 30:fb:bf:17:75:1e:a6:39:1d:88:d4:eb:50:43:7c:9f:e4:f1: 71:85:97:f1:9e:f3:03:1f:51:60:5d:d7:1c:8d:e8:3d:cc:35: 2a:34:f2:52:ef:1c:b2:f5:db:08:1e:72:2c:d6:a1:8c:89:75: da:30:ee:29:f2:54:df:f4:68:a9:2a:67:3a:3f:83:da:46:e5: 60:f5:36:85:8b:35:27:c2:f8:c3:13:b6:27:8b:91:cb:d2:de: 81:d8:bf:73:da:8d:0b:45:47:1c:4b:d6:4a:7f:56:1a:c1:92: 6e:c0:e4:58:89:96:c3:34:2f:4e:2f:38:62:75:ae:ae:36:5e: 02:0e:0a:ba:44:b5:e5:32:fa:6c:f1:b1:fe:cf:9e:d2:be:9d: 35:43:9e:b9:26:b5:24:4c:97:fb:b1:cb:c5:a9:21:4f:56:69: b6:7f:dc:93:e9:8f:0f:34:52:74:57:cd:61:ef:05:38:5d:28: c0:17:5b:73:68:55:11:85:b7:d7:81:8d:fd:23:df:80:ab:f8: f7:3a:7b:71:69:c6:4a:ad:83:c1:4e:61:7b:d8:e2:d8:b9:9c: 93:e8:7b:14:c5:41:be:c5:e6:55:39:e1:ea:ec:9d:26:ac:74: 82:4a:1a:55 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9W322ZGYVYJR7jD/6ka4lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZjNlMTYwMTcyZWNjNzVjOGNhYjFiYWUyNzFiZTNlYmY0 MDdhODAwHhcNMjYwMTAyMDYxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODIyMDJmNzY3MjVkZDNlODY4NTA2ZDMwNzllNTRkOTcyMDhhNmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv83sE9+QUXa4RBHlN6zmK0Dbbrv4 lePWngkVW8gcIy3lsHMWpo4CnQnQSqg/WPm7cZeQIUAOmXaE6/LZ/3zEtfQ7YJRZ 4qrilYy0GQSubXi/hv0k08/ecaqz96A5pKeo6Vz+XySEKv4qPAsAfPmO6gHyk8gp n8UbeTjlnqQOOocglwqmpzu/NJ2zjrlQZUt2gwQ4dOxW4lQ/9OEcatPiegxrNWdy pXu9OjYGkX/hx6x7KPQKpax2zhnx6VA5eGumHq/gwbNR7A7rB1WMe7mVOXKd9C9j a5Q+rHXEL69HcUDi3QsoUX/k+37scAuOFvNwR42KECzQqddBMPzlG6hnpQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJgiAvdnJd0+hoUG0weeVNlyCKb/MB8GA1UdIwQY MBaAFAXz4WAXLsx1yMqxuuJxvj6/QHqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0Nzkt NWQ1NjA5ODljZjdiLzEvbUNJQzkyY2wzVDZHaFFiVEI1NVUyWElJcHY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0NzktNWQ1NjA5ODljZjdi LzEvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWaeHMA0G CSqGSIb3DQEBCwUAA4IBAQBBToCRR4l2vO5exKH/JftSDzYw+78XdR6mOR2I1OtQ Q3yf5PFxhZfxnvMDH1FgXdccjeg9zDUqNPJS7xyy9dsIHnIs1qGMiXXaMO4p8lTf 9GipKmc6P4PaRuVg9TaFizUnwvjDE7Yni5HL0t6B2L9z2o0LRUccS9ZKf1YawZJu wORYiZbDNC9OLzhida6uNl4CDgq6RLXlMvps8bH+z57Svp01Q565JrUkTJf7scvF qSFPVmm2f9yT6Y8PNFJ0V81h7wU4XSjAF1tzaFURhbfXgY39I9+Aq/j3OntxacZK rYPBTmF72OLYuZyT6HsUxUG+xeZVOeHq7J0mrHSCShpV -----END CERTIFICATE-----Generated at Sun Jan 25 15:01:12 2026 by rpki-client