This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/q4J7inXLdfvTxzgZzcdEl_n6nio.roa File: q4J7inXLdfvTxzgZzcdEl_n6nio.roa (raw, json) Hash identifier: tU27AK3PO1qj8TjiCSuyTiU7iIickoD0PNPU49OzhWk= Subject key identifier: AB:82:7B:8A:75:CB:75:FB:D3:C7:38:19:CD:C7:44:97:F9:FA:9E:2A Certificate issuer: /CN=845c58752f3336422ff0ee1726474591e7a41e5f Certificate serial: 019B7FF0628E9C0216DE37C6DBC8C604A7BC Authority key identifier: 84:5C:58:75:2F:33:36:42:2F:F0:EE:17:26:47:45:91:E7:A4:1E:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/q4J7inXLdfvTxzgZzcdEl_n6nio.roa Signing time: Fri 02 Jan 2026 18:20:18 +0000 ROA not before: Fri 02 Jan 2026 18:20:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5539 IP address blocks: 89.35.174.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.mft rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f0:62:8e:9c:02:16:de:37:c6:db:c8:c6:04:a7:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=845c58752f3336422ff0ee1726474591e7a41e5f Validity Not Before: Jan 2 18:20:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ab827b8a75cb75fbd3c73819cdc74497f9fa9e2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:81:b3:d6:13:d2:eb:c7:f2:26:6d:3f:fe:30: 13:31:37:bc:fb:54:b7:e7:05:d4:61:3e:cf:ec:a3: 86:fc:77:61:38:b4:41:50:d4:ac:ec:6e:b8:3b:20: d6:71:dd:63:31:b4:30:69:56:94:67:47:e8:b0:af: bc:40:fe:1e:bb:02:37:1e:2d:2a:06:ce:f1:91:a5: 67:e1:c4:ff:d5:75:b0:07:26:ea:ac:87:04:e2:13: 08:a1:29:0a:e8:86:06:ec:de:cf:2b:ea:b5:1d:3e: aa:b6:18:d9:1b:5e:07:a7:6d:fd:23:54:d8:67:07: f3:3a:80:ec:12:20:b3:c5:32:a5:40:62:af:4a:ad: 2e:59:14:ea:6f:ad:d7:e6:22:bb:49:ca:b9:df:91: 87:51:0d:81:48:8c:7d:37:c8:26:f1:5a:d4:2c:6e: 17:4d:7a:ae:a6:78:1f:d2:2a:0e:38:1a:31:0e:85: 66:d2:85:b3:ec:99:cc:5d:f3:5c:ff:96:eb:1f:4e: 73:04:30:f2:78:dc:90:e5:eb:0b:76:f2:5d:09:90: 22:09:3a:09:82:99:dd:d1:4a:5e:85:e8:52:2b:91: 47:dc:69:ee:33:eb:48:1a:4e:a4:2b:d6:ce:ff:e0: 83:fa:d2:80:da:d7:4a:c6:c6:23:95:ab:eb:b7:da: 9c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:82:7B:8A:75:CB:75:FB:D3:C7:38:19:CD:C7:44:97:F9:FA:9E:2A X509v3 Authority Key Identifier: keyid:84:5C:58:75:2F:33:36:42:2F:F0:EE:17:26:47:45:91:E7:A4:1E:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFxYdS8zNkIv8O4XJkdFkeekHl8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/q4J7inXLdfvTxzgZzcdEl_n6nio.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/64e3ab-228c-4a23-9216-f134e51cc05b/1/hFxYdS8zNkIv8O4XJkdFkeekHl8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.35.174.0/23 Signature Algorithm: sha256WithRSAEncryption 29:98:83:80:94:bf:ac:c3:cd:0a:d8:cb:21:e1:87:7b:50:7a: 9a:28:d5:f4:3b:63:ac:ad:56:f5:a5:99:1e:89:3c:d3:f8:57: b3:79:1e:62:20:ae:71:0a:dc:6f:b0:d3:15:34:dc:0a:7c:24: 5b:64:a7:e3:e3:5e:43:d9:5a:da:23:34:49:f1:4c:ee:d2:a5: e1:6e:50:aa:bf:50:2f:3b:09:75:00:9b:19:e7:55:15:aa:68: 68:80:2c:96:e1:75:df:ad:e6:71:c1:57:dd:73:f3:6b:c4:6b: 58:04:40:ff:13:eb:dd:db:77:ce:49:9f:c1:02:c2:28:26:33: bc:4f:75:82:76:d0:d7:57:8e:dd:8f:25:bd:ec:5e:c1:6f:ab: a7:b3:75:7f:ea:ea:8b:bc:64:1a:d2:9c:bc:1f:6c:d2:4c:10: 39:17:9a:6f:15:58:a4:9d:11:7f:78:93:11:e1:37:56:7a:70: ea:f8:91:95:0b:e3:23:d1:e6:2e:35:e6:5d:30:01:cf:6e:44: a3:f3:5c:49:e8:b8:af:0a:b0:41:89:4a:fb:13:bc:a8:55:9c: 8e:9d:32:9f:eb:54:b5:aa:fd:62:3f:6a:dd:64:43:f6:79:4c: 48:24:52:be:54:79:32:c8:8e:a2:36:4e:b3:a7:51:63:d2:ea: df:09:aa:fb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8GKOnAIW3jfG28jGBKe8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NWM1ODc1MmYzMzM2NDIyZmYwZWUxNzI2NDc0NTkxZTdh NDFlNWYwHhcNMjYwMTAyMTgyMDE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYjgyN2I4YTc1Y2I3NWZiZDNjNzM4MTljZGM3NDQ5N2Y5ZmE5ZTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4Gz1hPS68fyJm0//jATMTe8+1S3 5wXUYT7P7KOG/HdhOLRBUNSs7G64OyDWcd1jMbQwaVaUZ0fosK+8QP4euwI3Hi0q Bs7xkaVn4cT/1XWwBybqrIcE4hMIoSkK6IYG7N7PK+q1HT6qthjZG14Hp239I1TY ZwfzOoDsEiCzxTKlQGKvSq0uWRTqb63X5iK7Scq535GHUQ2BSIx9N8gm8VrULG4X TXqupngf0ioOOBoxDoVm0oWz7JnMXfNc/5brH05zBDDyeNyQ5esLdvJdCZAiCToJ gpnd0UpehehSK5FH3GnuM+tIGk6kK9bO/+CD+tKA2tdKxsYjlavrt9qcwQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKuCe4p1y3X708c4Gc3HRJf5+p4qMB8GA1UdIwQY MBaAFIRcWHUvMzZCL/DuFyZHRZHnpB5fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEZ4WWRTOHpOa0l2OE80WEprZEZrZWVrSGw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS82NGUzYWItMjI4Yy00YTIzLTkyMTYt ZjEzNGU1MWNjMDViLzEvcTRKN2luWExkZnZUeHpnWnpjZEVsX242bmlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS82NGUzYWItMjI4Yy00YTIzLTkyMTYtZjEzNGU1MWNjMDVi LzEvaEZ4WWRTOHpOa0l2OE80WEprZEZrZWVrSGw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBWSOuMA0G CSqGSIb3DQEBCwUAA4IBAQApmIOAlL+sw80K2Msh4Yd7UHqaKNX0O2OsrVb1pZke iTzT+FezeR5iIK5xCtxvsNMVNNwKfCRbZKfj415D2VraIzRJ8Uzu0qXhblCqv1Av Owl1AJsZ51UVqmhogCyW4XXfreZxwVfdc/NrxGtYBED/E+vd23fOSZ/BAsIoJjO8 T3WCdtDXV47djyW97F7Bb6uns3V/6uqLvGQa0py8H2zSTBA5F5pvFViknRF/eJMR 4TdWenDq+JGVC+Mj0eYuNeZdMAHPbkSj81xJ6LivCrBBiUr7E7yoVZyOnTKf61S1 qv1iP2rdZEP2eUxIJFK+VHkyyI6iNk6zp1Fj0urfCar7 -----END CERTIFICATE-----Generated at Mon Jan 26 09:25:45 2026 by rpki-client