This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/kK28w-fO3Eg4DfbsTspsI3-r7zw.roa File: kK28w-fO3Eg4DfbsTspsI3-r7zw.roa (raw, json) Hash identifier: RyhTX2UNnVnrX6wsq211l02R7fDlD/dkhEnR9+GqksQ= Subject key identifier: 90:AD:BC:C3:E7:CE:DC:48:38:0D:F6:EC:4E:CA:6C:23:7F:AB:EF:3C Certificate issuer: /CN=9ffc98428c2451c1aedf8affc072a95868ecee8b Certificate serial: 019B7EA56EA6AC1ABD6A0C4E66E705618251 Authority key identifier: 9F:FC:98:42:8C:24:51:C1:AE:DF:8A:FF:C0:72:A9:58:68:EC:EE:8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/kK28w-fO3Eg4DfbsTspsI3-r7zw.roa Signing time: Fri 02 Jan 2026 12:18:49 +0000 ROA not before: Fri 02 Jan 2026 12:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39791 IP address blocks: 89.111.64.0/18 maxlen: 18 89.111.72.0/21 maxlen: 21 89.111.72.0/22 maxlen: 22 89.111.76.0/22 maxlen: 22 89.111.102.0/24 maxlen: 24 193.109.176.0/21 maxlen: 21 2a01:a040::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.crl rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:6e:a6:ac:1a:bd:6a:0c:4e:66:e7:05:61:82:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ffc98428c2451c1aedf8affc072a95868ecee8b Validity Not Before: Jan 2 12:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=90adbcc3e7cedc48380df6ec4eca6c237fabef3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:65:d0:33:5a:9b:a9:0c:9f:51:74:17:c6:40: 61:33:d9:b3:f2:eb:6d:d7:ee:ce:2c:77:7d:54:ce: 3d:2d:9c:6a:73:0a:8c:35:69:9b:f1:91:5d:a3:55: b1:b4:23:fb:a4:c3:4d:2b:ea:47:70:0d:3c:87:a8: ee:73:1f:48:58:40:3b:30:ac:f2:61:d3:bf:1e:87: 89:b3:9e:c2:36:b7:87:d1:28:77:ca:4f:34:25:db: a0:de:18:de:f9:cd:e4:78:02:f5:94:12:2b:71:26: 15:cb:85:d7:fe:60:2d:07:ae:ac:7d:1a:f6:0e:9e: e3:9c:79:d8:90:84:52:ab:e1:10:cb:d3:b1:b4:25: f2:27:2d:10:6b:3d:3d:b5:17:ca:cc:81:00:dd:01: a3:d0:52:1f:94:5b:e9:e5:d9:cc:dc:ae:b2:52:fb: d3:64:88:87:79:55:cf:52:11:62:0a:38:a7:09:08: 5e:b1:fb:f5:5e:d5:37:c1:81:bc:75:5c:03:fa:03: 7b:c3:a8:6a:18:c8:91:e2:5e:35:29:ac:1c:6e:b7: 63:e9:1a:a9:c1:81:62:e8:66:fd:62:09:c3:06:1b: 30:0f:8d:7d:ce:31:94:46:5e:50:65:b4:cd:6b:91: 60:0a:89:f5:54:4c:9b:30:04:1e:5c:34:a1:eb:1d: 74:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:AD:BC:C3:E7:CE:DC:48:38:0D:F6:EC:4E:CA:6C:23:7F:AB:EF:3C X509v3 Authority Key Identifier: keyid:9F:FC:98:42:8C:24:51:C1:AE:DF:8A:FF:C0:72:A9:58:68:EC:EE:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/kK28w-fO3Eg4DfbsTspsI3-r7zw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.111.64.0/18 193.109.176.0/21 IPv6: 2a01:a040::/32 Signature Algorithm: sha256WithRSAEncryption 03:27:7c:4d:21:19:1e:dc:cf:99:ed:09:2d:95:78:f0:ff:47: f9:06:51:e2:30:78:6a:65:33:24:56:8c:68:cb:85:55:35:a7: 1d:85:9c:10:5b:78:63:7f:3e:2c:ae:ac:75:d9:7a:66:18:22: 7f:c8:19:d2:8b:ab:b6:5d:1f:d4:e4:d9:9e:c9:06:0a:6f:4c: 5d:0e:b7:96:c5:0b:44:84:c7:82:03:2a:46:90:31:6d:85:33: 76:53:52:94:3a:70:e0:18:ed:ed:13:06:cd:8e:91:18:84:89: 90:81:a7:eb:ac:dc:bc:44:10:d3:e2:dd:56:37:05:02:37:4f: ca:78:42:55:4e:9e:df:94:56:6f:93:5d:23:79:f8:83:1d:31: f2:41:61:a0:74:5e:51:ae:4c:92:01:eb:70:fb:3a:59:eb:99: 50:4a:ed:0a:54:10:ec:34:30:c1:89:1e:f2:1a:74:86:59:1f: a7:6b:90:b9:b9:79:e8:a2:44:fd:2b:f3:d0:eb:e7:76:7a:39: ba:da:3b:6d:34:50:47:e9:9e:66:bc:5e:8a:58:ad:48:8b:f4: 72:83:3e:92:06:4d:4c:09:3b:5d:57:5e:53:4c:93:69:4c:a7: 33:c2:d1:ca:7d:7a:53:0b:c3:93:2e:37:d4:24:a1:19:c3:cd: d7:99:f6:53 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt+pW6mrBq9agxOZucFYYJRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmZmM5ODQyOGMyNDUxYzFhZWRmOGFmZmMwNzJhOTU4Njhl Y2VlOGIwHhcNMjYwMTAyMTIxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MGFkYmNjM2U3Y2VkYzQ4MzgwZGY2ZWM0ZWNhNmMyMzdmYWJlZjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWXQM1qbqQyfUXQXxkBhM9mz8utt 1+7OLHd9VM49LZxqcwqMNWmb8ZFdo1WxtCP7pMNNK+pHcA08h6jucx9IWEA7MKzy YdO/HoeJs57CNreH0Sh3yk80Jdug3hje+c3keAL1lBIrcSYVy4XX/mAtB66sfRr2 Dp7jnHnYkIRSq+EQy9OxtCXyJy0Qaz09tRfKzIEA3QGj0FIflFvp5dnM3K6yUvvT ZIiHeVXPUhFiCjinCQhesfv1XtU3wYG8dVwD+gN7w6hqGMiR4l41Kawcbrdj6Rqp wYFi6Gb9YgnDBhswD419zjGURl5QZbTNa5FgCon1VEybMAQeXDSh6x10ewIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFJCtvMPnztxIOA327E7KbCN/q+88MB8GA1UdIwQY MBaAFJ/8mEKMJFHBrt+K/8ByqVho7O6LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbl95WVFvd2tVY0d1MzRyX3dIS3BXR2pzN29zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS83MjQzMjgtMDlkMy00OTY0LWFjYzQt Yjk2ZDJmYmVmZWJkLzEva0syOHctZk8zRWc0RGZic1RzcHNJMy1yN3p3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS83MjQzMjgtMDlkMy00OTY0LWFjYzQtYjk2ZDJmYmVmZWJk LzEvbl95WVFvd2tVY0d1MzRyX3dIS3BXR2pzN29zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQGWW9AAwQD wW2wMA0EAgACMAcDBQAqAaBAMA0GCSqGSIb3DQEBCwUAA4IBAQADJ3xNIRke3M+Z 7QktlXjw/0f5BlHiMHhqZTMkVoxoy4VVNacdhZwQW3hjfz4srqx12XpmGCJ/yBnS i6u2XR/U5NmeyQYKb0xdDreWxQtEhMeCAypGkDFthTN2U1KUOnDgGO3tEwbNjpEY hImQgafrrNy8RBDT4t1WNwUCN0/KeEJVTp7flFZvk10jefiDHTHyQWGgdF5RrkyS Aetw+zpZ65lQSu0KVBDsNDDBiR7yGnSGWR+na5C5uXnookT9K/PQ6+d2ejm62jtt NFBH6Z5mvF6KWK1Ii/Rygz6SBk1MCTtdV15TTJNpTKczwtHKfXpTC8OTLjfUJKEZ w83XmfZT -----END CERTIFICATE-----Generated at Mon Jan 26 12:57:58 2026 by rpki-client