This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/rIcQA0PO2akobpTqeGzHXp2G0TE.roa File: rIcQA0PO2akobpTqeGzHXp2G0TE.roa (raw, json) Hash identifier: gnpP7TKJ2gUEEh/2CwGN3owunzcJzMcnrCHqbCH3s3M= Subject key identifier: AC:87:10:03:43:CE:D9:A9:28:6E:94:EA:78:6C:C7:5E:9D:86:D1:31 Certificate issuer: /CN=54296d23def4c8521c647dc68acb3c123f611d89 Certificate serial: 019B7F823CB4E37208E44E7759B080B86887 Authority key identifier: 54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/rIcQA0PO2akobpTqeGzHXp2G0TE.roa Signing time: Fri 02 Jan 2026 16:20:00 +0000 ROA not before: Fri 02 Jan 2026 16:20:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35725 IP address blocks: 89.123.192.0/20 maxlen: 20 109.101.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:3c:b4:e3:72:08:e4:4e:77:59:b0:80:b8:68:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54296d23def4c8521c647dc68acb3c123f611d89 Validity Not Before: Jan 2 16:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ac87100343ced9a9286e94ea786cc75e9d86d131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:8b:51:b8:b3:06:82:b1:d0:f0:83:d0:91:3f: 91:10:03:64:48:d7:fa:46:9c:69:89:28:3d:c0:4e: eb:96:4f:ca:f5:5f:df:47:4b:b2:ab:21:ee:29:da: da:25:82:e4:78:68:d2:cf:5a:06:cd:4d:d9:16:c6: dd:7f:d2:04:21:b5:d7:a1:20:a4:74:27:94:34:51: cd:6c:de:6c:01:ab:8e:b8:63:1a:d6:76:5c:7c:00: c3:9f:c5:63:c1:a9:b6:47:6c:16:e4:6d:77:c0:48: 0e:6c:17:4e:5b:e3:1c:b3:91:a4:46:82:24:bf:9c: 1c:a2:1d:c8:39:94:a2:84:76:37:1c:74:7a:76:79: 70:92:66:7e:71:de:3d:0e:e3:e5:ee:43:e7:9e:ea: c2:ff:c8:46:4d:68:3a:1c:bd:4c:4d:d9:d6:95:33: f7:5a:76:40:a0:24:23:98:56:c3:99:59:ee:af:39: 44:0f:d8:ba:fb:cf:b4:4e:de:b7:fc:8c:1f:c7:03: 05:f6:22:7e:1b:58:43:5d:ca:7f:19:8a:78:44:54: 71:54:a3:82:ef:d5:fd:2b:04:77:a5:df:1f:69:cf: 7b:5f:f2:5b:d1:2c:24:d4:02:f8:01:44:b1:ef:7a: 9a:2e:6d:55:02:c6:25:58:dd:b5:ae:50:ad:74:94: f2:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:87:10:03:43:CE:D9:A9:28:6E:94:EA:78:6C:C7:5E:9D:86:D1:31 X509v3 Authority Key Identifier: keyid:54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/rIcQA0PO2akobpTqeGzHXp2G0TE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.123.192.0/20 109.101.160.0/19 Signature Algorithm: sha256WithRSAEncryption a2:64:9a:23:ed:a4:bd:86:ca:0a:2b:bf:2d:c0:6d:48:f6:1e: af:26:e1:a5:3c:bd:e1:fb:81:13:a7:16:f8:f7:aa:fe:01:6b: ab:23:81:61:b5:2d:5e:78:24:c3:0f:ba:26:1c:b6:95:d6:80: 99:01:9a:6e:20:92:ba:40:2e:23:37:25:61:36:22:b5:f7:bd: 11:cd:33:03:a5:12:24:31:2e:4c:d9:e8:4d:45:70:a7:29:35: 27:5a:a7:21:7e:3b:8a:0a:6a:6d:c3:9c:61:07:cc:20:44:7b: 81:dd:3b:d5:86:5b:b1:b2:1b:48:db:30:29:8e:d2:24:b2:df: f4:af:3e:59:ad:98:10:e5:69:6b:2b:f1:46:81:88:33:35:26: b9:91:30:e7:93:27:da:0d:63:81:55:ca:95:ae:d5:b9:2c:ab: 30:f9:32:79:b3:47:ab:0a:69:52:72:5b:89:41:27:95:8b:15: b9:64:43:fa:25:f6:70:b8:a9:86:eb:28:57:51:9d:2c:9c:04: e5:67:dd:f4:17:ee:b4:80:38:53:95:b7:30:e6:1d:1e:11:fb: 86:c7:48:03:34:9b:ad:4b:3d:86:aa:a5:86:2b:6d:b9:20:ab: a1:0d:25:5d:33:eb:3a:0e:0a:63:76:8d:f4:4e:54:af:07:45: 92:63:c3:83 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/gjy043II5E53WbCAuGiHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Mjk2ZDIzZGVmNGM4NTIxYzY0N2RjNjhhY2IzYzEyM2Y2 MTFkODkwHhcNMjYwMTAyMTYyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzg3MTAwMzQzY2VkOWE5Mjg2ZTk0ZWE3ODZjYzc1ZTlkODZkMTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYtRuLMGgrHQ8IPQkT+REANkSNf6 RpxpiSg9wE7rlk/K9V/fR0uyqyHuKdraJYLkeGjSz1oGzU3ZFsbdf9IEIbXXoSCk dCeUNFHNbN5sAauOuGMa1nZcfADDn8Vjwam2R2wW5G13wEgObBdOW+Mcs5GkRoIk v5wcoh3IOZSihHY3HHR6dnlwkmZ+cd49DuPl7kPnnurC/8hGTWg6HL1MTdnWlTP3 WnZAoCQjmFbDmVnurzlED9i6+8+0Tt63/IwfxwMF9iJ+G1hDXcp/GYp4RFRxVKOC 79X9KwR3pd8fac97X/Jb0Swk1AL4AUSx73qaLm1VAsYlWN21rlCtdJTyWQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKyHEANDztmpKG6U6nhsx16dhtExMB8GA1UdIwQY MBaAFFQpbSPe9MhSHGR9xorLPBI/YR2JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81Y2I0NTQtN2JlZS00ZTVkLWIyOTUt OTQyNDgyZjhkMmVhLzEvckljUUEwUE8yYWtvYnBUcWVHekhYcDJHMFRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy81Y2I0NTQtN2JlZS00ZTVkLWIyOTUtOTQyNDgyZjhkMmVh LzEvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEWXvAAwQF bWWgMA0GCSqGSIb3DQEBCwUAA4IBAQCiZJoj7aS9hsoKK78twG1I9h6vJuGlPL3h +4ETpxb496r+AWurI4FhtS1eeCTDD7omHLaV1oCZAZpuIJK6QC4jNyVhNiK1970R zTMDpRIkMS5M2ehNRXCnKTUnWqchfjuKCmptw5xhB8wgRHuB3TvVhluxshtI2zAp jtIkst/0rz5ZrZgQ5WlrK/FGgYgzNSa5kTDnkyfaDWOBVcqVrtW5LKsw+TJ5s0er CmlScluJQSeVixW5ZEP6JfZwuKmG6yhXUZ0snATlZ930F+60gDhTlbcw5h0eEfuG x0gDNJutSz2GqqWGK225IKuhDSVdM+s6Dgpjdo30TlSvB0WSY8OD -----END CERTIFICATE-----Generated at Sun Jan 25 23:31:49 2026 by rpki-client