This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/3f6dd4-2283-42ba-bd62-52a15d785403/1/tTIiXNFmVwT5T0hHiGKIodMu4-0.roa File: tTIiXNFmVwT5T0hHiGKIodMu4-0.roa (raw, json) Hash identifier: 1Yst/9/lTuLJaVKmnwJPraD68CwcsXf9gsuFNgo7ggI= Subject key identifier: B5:32:22:5C:D1:66:57:04:F9:4F:48:47:88:62:88:A1:D3:2E:E3:ED Certificate issuer: /CN=f6f483acd88b51f5d47f577f101b5457785e0edb Certificate serial: 019BB2E3876F58F4BE1580E2A8AA002F0142 Authority key identifier: F6:F4:83:AC:D8:8B:51:F5:D4:7F:57:7F:10:1B:54:57:78:5E:0E:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9vSDrNiLUfXUf1d_EBtUV3heDts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6dd4-2283-42ba-bd62-52a15d785403/1/tTIiXNFmVwT5T0hHiGKIodMu4-0.roa Signing time: Mon 12 Jan 2026 15:46:54 +0000 ROA not before: Mon 12 Jan 2026 15:46:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204132 IP address blocks: 89.44.106.0/24 maxlen: 24 89.45.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6dd4-2283-42ba-bd62-52a15d785403/1/9vSDrNiLUfXUf1d_EBtUV3heDts.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6dd4-2283-42ba-bd62-52a15d785403/1/9vSDrNiLUfXUf1d_EBtUV3heDts.mft rsync://rpki.ripe.net/repository/DEFAULT/9vSDrNiLUfXUf1d_EBtUV3heDts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b2:e3:87:6f:58:f4:be:15:80:e2:a8:aa:00:2f:01:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6f483acd88b51f5d47f577f101b5457785e0edb Validity Not Before: Jan 12 15:46:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b532225cd1665704f94f4847886288a1d32ee3ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:06:91:3d:1a:99:f9:92:ad:3f:2a:8c:1c:8c: 4d:90:56:2b:d6:14:df:b0:3d:79:66:5e:79:38:91: a9:96:b7:e8:40:63:ad:28:91:75:ff:af:39:35:57: d0:5b:93:74:3a:96:76:18:2e:02:c3:5c:ad:d2:e1: 96:be:0a:d8:42:4d:1d:79:3b:82:15:ab:6c:a8:e3: af:be:bc:10:0f:57:89:9e:c1:0a:ed:f6:24:a6:9a: 19:3a:e1:05:3e:82:59:f0:b3:98:2c:a9:a7:70:6d: 09:3a:27:d1:1d:5d:2c:ae:44:f8:31:f8:f6:f7:5d: 8b:ee:1c:4e:ef:a9:2c:ac:d7:38:93:c6:a4:02:e4: c4:93:d1:a0:7b:70:25:97:f8:98:50:c3:23:bd:ce: 86:f5:37:fc:2f:8b:6c:53:69:9b:7b:0c:04:64:e0: 10:05:d2:52:83:b9:5c:37:6e:e1:0b:c2:53:1d:b4: d9:7b:90:27:12:1b:19:d7:86:de:be:a6:d8:2d:75: 39:5a:bc:0c:26:d3:28:57:8c:eb:ab:cf:59:fc:2c: c0:0c:18:b7:9d:22:71:00:6b:4f:cc:86:5f:1a:15: 22:ac:6d:de:1f:32:29:bc:3f:6b:40:aa:73:2f:01: bd:ce:25:16:06:4e:60:fe:ee:b9:81:ae:52:a3:55: ea:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:32:22:5C:D1:66:57:04:F9:4F:48:47:88:62:88:A1:D3:2E:E3:ED X509v3 Authority Key Identifier: keyid:F6:F4:83:AC:D8:8B:51:F5:D4:7F:57:7F:10:1B:54:57:78:5E:0E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vSDrNiLUfXUf1d_EBtUV3heDts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6dd4-2283-42ba-bd62-52a15d785403/1/tTIiXNFmVwT5T0hHiGKIodMu4-0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3f6dd4-2283-42ba-bd62-52a15d785403/1/9vSDrNiLUfXUf1d_EBtUV3heDts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.44.106.0/24 89.45.9.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:62:19:c3:fd:55:42:30:35:8d:55:d1:da:e2:71:0e:ab:e3: ac:c7:fa:9a:bc:66:48:44:78:7a:cf:4c:dc:24:e4:5f:86:6b: df:f7:79:74:21:46:c4:97:a3:2c:21:1d:bb:6e:5a:e5:e1:6c: fa:1d:63:ea:9f:07:b3:ae:74:70:ee:1d:01:f3:71:f4:5c:86: fd:b9:65:2c:48:d7:b6:7b:54:84:e9:04:51:7c:0f:ff:b9:77: 11:5f:c8:f3:88:43:4a:85:34:18:1c:40:ac:62:63:0e:ca:f4: 7b:20:e8:8b:20:75:96:38:f6:97:ed:a8:12:9c:ff:7d:5f:4d: 3b:b0:5c:49:9c:02:f6:01:e2:e2:b9:3a:6b:3c:77:0b:1d:21: 34:99:e7:0a:16:3f:1d:ef:40:d1:1c:0b:2c:9a:14:a1:88:d2: 9c:a7:f2:b9:8b:c4:86:f2:4b:5b:4a:e1:dd:69:45:b6:19:87: f4:37:a3:58:fc:44:ed:67:39:c0:93:fe:cd:cf:29:dc:30:2b: 1b:7f:9c:e0:98:0c:5b:1c:92:f1:e0:a0:4b:3d:02:7d:7d:d5: bb:4e:d4:f4:3c:6f:1a:36:73:1a:be:4e:fb:bf:c7:79:ae:ae: 75:a6:ac:3a:c6:ab:ab:7d:f6:e5:f7:04:61:4d:3b:e5:68:0e: 0c:ca:5e:24 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZuy44dvWPS+FYDiqKoALwFCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2ZjQ4M2FjZDg4YjUxZjVkNDdmNTc3ZjEwMWI1NDU3Nzg1 ZTBlZGIwHhcNMjYwMTEyMTU0NjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTMyMjI1Y2QxNjY1NzA0Zjk0ZjQ4NDc4ODYyODhhMWQzMmVlM2VkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgaRPRqZ+ZKtPyqMHIxNkFYr1hTf sD15Zl55OJGplrfoQGOtKJF1/685NVfQW5N0OpZ2GC4Cw1yt0uGWvgrYQk0deTuC FatsqOOvvrwQD1eJnsEK7fYkppoZOuEFPoJZ8LOYLKmncG0JOifRHV0srkT4Mfj2 912L7hxO76ksrNc4k8akAuTEk9Gge3All/iYUMMjvc6G9Tf8L4tsU2mbewwEZOAQ BdJSg7lcN27hC8JTHbTZe5AnEhsZ14bevqbYLXU5WrwMJtMoV4zrq89Z/CzADBi3 nSJxAGtPzIZfGhUirG3eHzIpvD9rQKpzLwG9ziUWBk5g/u65ga5So1XqFQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLUyIlzRZlcE+U9IR4hiiKHTLuPtMB8GA1UdIwQY MBaAFPb0g6zYi1H11H9XfxAbVFd4Xg7bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXZTRHJOaUxVZlhVZjFkX0VCdFVWM2hlRHRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS8zZjZkZDQtMjI4My00MmJhLWJkNjIt NTJhMTVkNzg1NDAzLzEvdFRJaVhORm1Wd1Q1VDBoSGlHS0lvZE11NC0wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS8zZjZkZDQtMjI4My00MmJhLWJkNjItNTJhMTVkNzg1NDAz LzEvOXZTRHJOaUxVZlhVZjFkX0VCdFVWM2hlRHRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWSxqAwQA WS0JMA0GCSqGSIb3DQEBCwUAA4IBAQA8YhnD/VVCMDWNVdHa4nEOq+Osx/qavGZI RHh6z0zcJORfhmvf93l0IUbEl6MsIR27blrl4Wz6HWPqnwezrnRw7h0B83H0XIb9 uWUsSNe2e1SE6QRRfA//uXcRX8jziENKhTQYHECsYmMOyvR7IOiLIHWWOPaX7agS nP99X007sFxJnAL2AeLiuTprPHcLHSE0mecKFj8d70DRHAssmhShiNKcp/K5i8SG 8ktbSuHdaUW2GYf0N6NY/ETtZznAk/7NzyncMCsbf5zgmAxbHJLx4KBLPQJ9fdW7 TtT0PG8aNnMavk77v8d5rq51pqw6xqurffbl9wRhTTvlaA4Myl4k -----END CERTIFICATE-----Generated at Sun Jan 25 21:34:51 2026 by rpki-client