This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/yt9D2jLsreAMWCWEdKVQm0MM7k8.roa File: yt9D2jLsreAMWCWEdKVQm0MM7k8.roa (raw, json) Hash identifier: lKhmu0VxkSr9o+yCKmoctbtSS//EnsnvUzIyvtwGci0= Subject key identifier: CA:DF:43:DA:32:EC:AD:E0:0C:58:25:84:74:A5:50:9B:43:0C:EE:4F Certificate issuer: /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b Certificate serial: 019B7C11551C1C02E5F4A76B28294FDE86F5 Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/yt9D2jLsreAMWCWEdKVQm0MM7k8.roa Signing time: Fri 02 Jan 2026 00:17:49 +0000 ROA not before: Fri 02 Jan 2026 00:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12357 IP address blocks: 89.140.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:55:1c:1c:02:e5:f4:a7:6b:28:29:4f:de:86:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b Validity Not Before: Jan 2 00:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cadf43da32ecade00c58258474a5509b430cee4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fb:94:58:79:bc:e9:74:61:95:cd:dc:90:6f: 1c:43:b8:16:16:60:06:f0:63:d0:fc:e5:6a:c7:40: b7:a5:82:bc:0d:f3:b2:0b:32:fa:84:17:57:1e:b4: a6:b3:94:65:1e:60:e3:96:47:1e:23:c1:dc:ec:86: 86:80:3f:8a:a9:74:03:b1:b9:49:e2:0b:ee:ab:ae: 4d:09:2f:12:98:c6:46:c3:9f:ef:18:17:8a:8c:be: 23:37:41:b2:d5:ed:e3:ed:a9:13:5b:a7:85:a7:86: 56:0a:40:94:3f:72:9a:f1:28:61:3c:e2:33:08:ec: 53:8f:50:51:bd:37:5d:51:c8:2e:70:a1:00:1c:15: a1:4b:5e:47:30:c5:5e:35:a0:34:4f:83:94:8a:57: 4a:3e:12:99:af:09:2d:a9:f3:23:65:3a:b4:fe:06: a9:7e:b6:e3:98:94:3f:08:fa:f6:e5:b1:b2:fd:38: 71:9e:23:6b:6a:e3:25:42:1f:ef:1a:fe:60:2b:b7: 31:a2:b6:72:2b:99:9c:ff:a1:7b:94:43:15:38:81: e3:70:ba:50:cc:fb:71:a0:32:96:4c:db:2a:09:93: 1c:f4:6a:e8:09:eb:9d:14:be:cf:de:27:11:15:c8: e4:6c:a6:c0:41:d6:f5:77:4d:12:36:56:d1:d5:77: 84:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:DF:43:DA:32:EC:AD:E0:0C:58:25:84:74:A5:50:9B:43:0C:EE:4F X509v3 Authority Key Identifier: keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/yt9D2jLsreAMWCWEdKVQm0MM7k8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.140.23.0/24 Signature Algorithm: sha256WithRSAEncryption 11:d7:a6:a4:96:18:3c:c4:99:5b:fb:3a:70:0f:18:a8:18:73: a7:25:fc:eb:8a:bf:51:6d:3b:18:34:1a:46:e2:6e:a6:db:d9: 1a:64:84:21:c5:43:4c:d0:d4:9f:3e:f8:bc:92:36:b8:3e:c3: 2c:e2:b9:42:0d:08:df:56:2b:0c:ec:25:8f:21:6d:b5:e5:eb: 2d:73:87:bc:d5:32:b9:fc:b1:68:1b:23:49:39:27:79:a8:b7: 7d:7b:d1:3d:18:d6:8c:4a:d1:24:59:74:86:25:94:e2:8b:f3: f2:af:60:04:04:24:d6:14:4c:07:01:7e:42:a1:29:ce:c4:d9: 23:4f:bc:97:47:b2:31:2b:74:16:43:71:08:e1:38:3a:78:8e: ba:eb:19:59:31:ae:23:a6:17:86:85:c7:2c:f1:c4:24:ad:3f: bb:30:f0:4f:24:bc:55:bc:ec:a7:b2:7f:4f:e2:69:33:87:27: 2e:67:8b:ac:aa:dd:1d:16:7d:ac:e7:09:fb:a5:17:41:2a:bc: ed:2a:21:a2:f7:af:6e:91:fa:a1:da:91:fa:06:53:f6:ce:54: bd:e9:40:61:c5:b9:cf:44:80:2b:14:40:d1:05:9a:69:b0:7e: 53:df:e2:c8:6a:d2:6c:2b:d7:bf:03:a7:2f:1c:f5:85:85:ca: 50:f2:d6:fc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EVUcHALl9KdrKClP3ob1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0MzRmMTY4NjEwMjg3NmM2MjE2YmNlYTI4YTVlNTAyZWMw ZDdiNmIwHhcNMjYwMTAyMDAxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYWRmNDNkYTMyZWNhZGUwMGM1ODI1ODQ3NGE1NTA5YjQzMGNlZTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPuUWHm86XRhlc3ckG8cQ7gWFmAG 8GPQ/OVqx0C3pYK8DfOyCzL6hBdXHrSms5RlHmDjlkceI8Hc7IaGgD+KqXQDsblJ 4gvuq65NCS8SmMZGw5/vGBeKjL4jN0Gy1e3j7akTW6eFp4ZWCkCUP3Ka8ShhPOIz COxTj1BRvTddUcgucKEAHBWhS15HMMVeNaA0T4OUildKPhKZrwktqfMjZTq0/gap frbjmJQ/CPr25bGy/ThxniNrauMlQh/vGv5gK7cxorZyK5mc/6F7lEMVOIHjcLpQ zPtxoDKWTNsqCZMc9GroCeudFL7P3icRFcjkbKbAQdb1d00SNlbR1XeE4wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMrfQ9oy7K3gDFglhHSlUJtDDO5PMB8GA1UdIwQY MBaAFNQ08WhhAodsYha86iil5QLsDXtrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMURUeGFHRUNoMnhpRnJ6cUtLWGxBdXdOZTJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC83MjZiYjQtNWQ4Ny00MDJkLTkxY2Ut NTcxMmQ5NWFlNjM4LzEveXQ5RDJqTHNyZUFNV0NXRWRLVlFtME1NN2s4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC83MjZiYjQtNWQ4Ny00MDJkLTkxY2UtNTcxMmQ5NWFlNjM4 LzEvMURUeGFHRUNoMnhpRnJ6cUtLWGxBdXdOZTJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWYwXMA0G CSqGSIb3DQEBCwUAA4IBAQAR16aklhg8xJlb+zpwDxioGHOnJfzrir9RbTsYNBpG 4m6m29kaZIQhxUNM0NSfPvi8kja4PsMs4rlCDQjfVisM7CWPIW215estc4e81TK5 /LFoGyNJOSd5qLd9e9E9GNaMStEkWXSGJZTii/Pyr2AEBCTWFEwHAX5CoSnOxNkj T7yXR7IxK3QWQ3EI4Tg6eI666xlZMa4jpheGhccs8cQkrT+7MPBPJLxVvOynsn9P 4mkzhycuZ4usqt0dFn2s5wn7pRdBKrztKiGi969ukfqh2pH6BlP2zlS96UBhxbnP RIArFEDRBZppsH5T3+LIatJsK9e/A6cvHPWFhcpQ8tb8 -----END CERTIFICATE-----Generated at Mon Jan 26 10:23:34 2026 by rpki-client