This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/9cfee8-9446-4f5e-ad1e-0554311d87b5/1/89HlQnFi1jjgVu3o144zm_i7MVg.roa File: 89HlQnFi1jjgVu3o144zm_i7MVg.roa (raw, json) Hash identifier: pXOl1biYVQ4AeN4FfZGn1CbDkAfN36PG1w9KMqoPa6E= Subject key identifier: F3:D1:E5:42:71:62:D6:38:E0:56:ED:E8:D7:8E:33:9B:F8:BB:31:58 Certificate issuer: /CN=fbbe33c8d18e53bfd24822098dc748640550c504 Certificate serial: 019B7910BC5CC8E70D8ED1B4D5BAD4B26997 Authority key identifier: FB:BE:33:C8:D1:8E:53:BF:D2:48:22:09:8D:C7:48:64:05:50:C5:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/9cfee8-9446-4f5e-ad1e-0554311d87b5/1/89HlQnFi1jjgVu3o144zm_i7MVg.roa Signing time: Thu 01 Jan 2026 10:18:18 +0000 ROA not before: Thu 01 Jan 2026 10:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 174 IP address blocks: 185.118.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/9cfee8-9446-4f5e-ad1e-0554311d87b5/1/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.crl rsync://rpki.ripe.net/repository/DEFAULT/70/9cfee8-9446-4f5e-ad1e-0554311d87b5/1/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:bc:5c:c8:e7:0d:8e:d1:b4:d5:ba:d4:b2:69:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbbe33c8d18e53bfd24822098dc748640550c504 Validity Not Before: Jan 1 10:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f3d1e5427162d638e056ede8d78e339bf8bb3158 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f2:3e:8c:8e:59:c2:0b:57:10:ba:f5:3a:c5: 33:51:00:7c:74:f3:c0:69:e1:d6:f4:2a:d5:87:cd: 14:23:b1:75:1f:e3:5d:17:47:22:9e:cb:e8:e4:d5: 6f:9b:86:68:95:f5:06:9d:1c:13:21:e5:18:44:a7: f9:37:95:13:bc:7a:2d:46:4c:a9:26:fa:85:c5:84: ed:75:74:7e:15:80:1c:96:20:fc:f2:9b:6d:ef:e2: aa:d8:30:eb:ec:6d:a8:55:1d:07:56:5c:0d:d2:a3: e4:48:46:9f:1d:f0:a5:19:20:ff:63:a0:ae:5b:72: 01:88:88:36:e0:fd:08:aa:a5:20:2a:8a:02:1f:68: ff:a8:67:91:39:41:64:90:eb:6d:99:b1:9c:a5:71: 5c:b9:f5:f0:b2:b7:22:4c:ee:fd:ae:38:71:2c:39: ae:28:3d:b5:4c:cb:ad:a0:f5:6d:24:20:e8:3e:77: d7:31:8f:b1:76:68:2f:a8:2e:42:a9:7a:8e:ff:70: b2:09:f9:07:8d:76:19:1c:0a:4e:87:85:5e:09:98: 7a:5d:d4:f7:3a:b9:ff:75:6b:15:94:83:e2:2e:ad: 85:13:61:7c:4d:78:66:dc:9c:31:d8:60:a4:25:f0: 51:dd:e3:39:d6:71:3f:60:1d:9b:56:98:31:63:d8: 49:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:D1:E5:42:71:62:D6:38:E0:56:ED:E8:D7:8E:33:9B:F8:BB:31:58 X509v3 Authority Key Identifier: keyid:FB:BE:33:C8:D1:8E:53:BF:D2:48:22:09:8D:C7:48:64:05:50:C5:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9cfee8-9446-4f5e-ad1e-0554311d87b5/1/89HlQnFi1jjgVu3o144zm_i7MVg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9cfee8-9446-4f5e-ad1e-0554311d87b5/1/1-74zyNGOU7_SSCIJjcdIZAVQxQQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.118.105.0/24 Signature Algorithm: sha256WithRSAEncryption 34:8d:88:b5:44:05:56:b2:63:91:be:1b:f7:d4:fd:99:e6:63: 9f:5a:5e:19:49:f7:a8:67:1d:5a:a0:dd:8e:20:cd:49:e7:fc: 58:67:be:28:ff:c7:83:9f:e1:8f:58:7d:9b:3e:28:42:e5:5d: 73:5d:36:22:e8:5f:4b:7c:5c:fe:a7:ab:6f:bb:fb:c1:9f:3f: a3:f1:53:ed:bc:8e:9d:c2:e6:3e:90:8f:a5:9b:79:16:9a:6e: 86:25:a1:b0:14:b0:ea:c3:82:44:6e:04:8d:f1:c6:33:3f:55: 16:5e:ea:ad:f0:7d:d1:8a:71:9d:91:22:2a:4f:4e:36:ed:14: 62:b5:71:96:a5:ab:55:bb:bc:1b:84:43:12:80:f4:a4:8d:ec: a5:6e:44:9b:3e:bf:13:ab:54:06:92:29:44:f1:13:ad:00:0a: 0e:ef:8b:5c:10:46:ee:70:80:74:60:6f:40:fa:d5:52:fa:5d: 73:2d:64:27:27:e6:9a:3c:be:78:ca:af:3e:fd:e8:ed:17:7c: 3f:a5:dd:c8:88:da:81:88:39:16:bf:a4:f2:1a:85:9f:8b:17: 82:02:ff:cf:9d:8f:17:9f:70:eb:0c:68:05:ba:40:ac:db:81: 52:c5:db:5a:94:69:42:4f:50:b1:5c:0e:63:97:bb:bf:06:39: cf:ee:dc:50 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt5ELxcyOcNjtG01brUsmmXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiYmUzM2M4ZDE4ZTUzYmZkMjQ4MjIwOThkYzc0ODY0MDU1 MGM1MDQwHhcNMjYwMTAxMTAxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmM2QxZTU0MjcxNjJkNjM4ZTA1NmVkZThkNzhlMzM5YmY4YmIzMTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPI+jI5ZwgtXELr1OsUzUQB8dPPA aeHW9CrVh80UI7F1H+NdF0cinsvo5NVvm4ZolfUGnRwTIeUYRKf5N5UTvHotRkyp JvqFxYTtdXR+FYAcliD88ptt7+Kq2DDr7G2oVR0HVlwN0qPkSEafHfClGSD/Y6Cu W3IBiIg24P0IqqUgKooCH2j/qGeROUFkkOttmbGcpXFcufXwsrciTO79rjhxLDmu KD21TMutoPVtJCDoPnfXMY+xdmgvqC5CqXqO/3CyCfkHjXYZHApOh4VeCZh6XdT3 Orn/dWsVlIPiLq2FE2F8TXhm3Jwx2GCkJfBR3eM51nE/YB2bVpgxY9hJkwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFPPR5UJxYtY44Fbt6NeOM5v4uzFYMB8GA1UdIwQY MBaAFPu+M8jRjlO/0kgiCY3HSGQFUMUEMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS03NHp5TkdPVTdfU1NDSUpqY2RJWkFWUXhRUS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzAvOWNmZWU4LTk0NDYtNGY1ZS1hZDFl LTA1NTQzMTFkODdiNS8xLzg5SGxRbkZpMWpqZ1Z1M28xNDR6bV9pN01WZy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzAvOWNmZWU4LTk0NDYtNGY1ZS1hZDFlLTA1NTQzMTFkODdi NS8xLzEtNzR6eU5HT1U3X1NTQ0lKamNkSVpBVlF4UVEuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC5dmkw DQYJKoZIhvcNAQELBQADggEBADSNiLVEBVayY5G+G/fU/ZnmY59aXhlJ96hnHVqg 3Y4gzUnn/Fhnvij/x4Of4Y9YfZs+KELlXXNdNiLoX0t8XP6nq2+7+8GfP6PxU+28 jp3C5j6Qj6WbeRaaboYlobAUsOrDgkRuBI3xxjM/VRZe6q3wfdGKcZ2RIipPTjbt FGK1cZalq1W7vBuEQxKA9KSN7KVuRJs+vxOrVAaSKUTxE60ACg7vi1wQRu5wgHRg b0D61VL6XXMtZCcn5po8vnjKrz796O0XfD+l3ciI2oGIORa/pPIahZ+LF4IC/8+d jxefcOsMaAW6QKzbgVLF21qUaUJPULFcDmOXu78GOc/u3FA= -----END CERTIFICATE-----Generated at Mon Jan 12 00:51:39 2026 by rpki-client