This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/ddMAIyT-Bg6VBZDUpFb1sZXNUGU.roa File: ddMAIyT-Bg6VBZDUpFb1sZXNUGU.roa (raw, json) Hash identifier: ZJNIgGVCnwwLExWWtHO1eDKLXNM052in6SsRsPrXcKw= Subject key identifier: 75:D3:00:23:24:FE:06:0E:95:05:90:D4:A4:56:F5:B1:95:CD:50:65 Certificate issuer: /CN=60e10a1c66a0e60024abab62d332682c713aa347 Certificate serial: 019B7FF226288C75FB84433622E4C70E66B2 Authority key identifier: 60:E1:0A:1C:66:A0:E6:00:24:AB:AB:62:D3:32:68:2C:71:3A:A3:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOEKHGag5gAkq6ti0zJoLHE6o0c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/ddMAIyT-Bg6VBZDUpFb1sZXNUGU.roa Signing time: Fri 02 Jan 2026 18:22:14 +0000 ROA not before: Fri 02 Jan 2026 18:22:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41454 IP address blocks: 89.18.32.0/23 maxlen: 23 89.18.34.0/24 maxlen: 24 89.18.35.0/24 maxlen: 24 89.18.36.0/22 maxlen: 22 89.18.40.0/23 maxlen: 23 89.18.42.0/24 maxlen: 24 89.18.43.0/24 maxlen: 24 89.18.44.0/22 maxlen: 22 89.18.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.crl rsync://rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.mft rsync://rpki.ripe.net/repository/DEFAULT/YOEKHGag5gAkq6ti0zJoLHE6o0c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:26:28:8c:75:fb:84:43:36:22:e4:c7:0e:66:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60e10a1c66a0e60024abab62d332682c713aa347 Validity Not Before: Jan 2 18:22:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=75d3002324fe060e950590d4a456f5b195cd5065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:65:3a:34:77:c6:1f:3e:3d:32:9e:45:b5:fb: 1c:26:5f:5e:a3:8c:45:62:a7:d6:91:cd:bd:19:b7: 3b:27:53:1d:0a:13:8b:34:4b:78:8e:09:96:ef:26: 93:7d:90:5a:52:20:5d:8d:9b:cc:66:ef:f8:d6:bc: 90:81:dc:1f:3b:fe:87:6c:2c:10:33:ca:18:f5:c4: 0f:c7:8b:9b:82:26:12:1c:47:44:1f:b6:85:f2:f2: cb:95:6f:92:2d:dc:05:4e:bc:42:f0:48:5c:44:b4: 97:c3:de:24:9a:03:34:6b:07:68:cf:71:99:61:6c: 03:3e:6f:a4:f7:50:52:0d:cb:01:ed:c4:24:2e:39: 7d:c1:18:a9:f8:a3:95:b8:36:3b:52:23:28:2c:67: 6e:b4:02:4d:fa:68:55:85:57:3b:0b:58:d2:0e:60: 88:c7:b1:af:7e:df:8a:98:17:f7:1a:2f:fb:e4:7c: 25:50:d1:5a:9f:7e:68:c4:2f:54:39:51:e7:57:e7: 39:ac:79:38:82:59:76:da:66:55:5f:6a:01:56:a0: 8c:f7:4f:91:31:f8:13:74:5c:cf:b7:11:21:8c:60: 93:df:17:b5:ae:85:47:d0:7d:8a:db:8b:9b:45:60: 49:df:d0:81:74:b3:f7:ac:ca:b6:db:3c:6c:75:83: 35:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:D3:00:23:24:FE:06:0E:95:05:90:D4:A4:56:F5:B1:95:CD:50:65 X509v3 Authority Key Identifier: keyid:60:E1:0A:1C:66:A0:E6:00:24:AB:AB:62:D3:32:68:2C:71:3A:A3:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOEKHGag5gAkq6ti0zJoLHE6o0c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/ddMAIyT-Bg6VBZDUpFb1sZXNUGU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/d95566-c6ff-4cc5-b93c-6417707517d6/1/YOEKHGag5gAkq6ti0zJoLHE6o0c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.18.32.0-89.18.51.255 Signature Algorithm: sha256WithRSAEncryption 7e:01:f3:be:a2:8a:d3:ba:a4:c3:d1:52:60:c7:3b:e0:ea:ca: 44:58:f4:86:06:61:eb:d3:ce:c2:d2:e6:ff:83:1d:58:50:d1: b6:15:09:70:c2:03:57:bd:a6:01:99:c3:54:dc:b4:98:f9:56: 13:45:c8:79:8a:b2:de:43:c5:95:57:11:04:55:cf:5e:4e:26: d6:4d:72:5e:10:06:12:a8:42:15:a8:c7:76:fb:13:96:1e:29: a6:61:0c:53:d8:39:ec:da:00:29:03:01:5d:25:2f:0b:f2:ef: e9:4c:17:3c:36:5d:ed:e7:c7:2d:d2:a2:77:d3:03:f2:be:5b: 6d:dd:da:a5:89:d6:f7:98:82:b1:78:bb:65:d6:ef:13:53:c5: c0:3c:ed:56:0c:b1:6b:3d:d5:6d:52:ab:7f:3c:2f:72:f6:b9: b5:f1:9b:b6:3f:a7:c8:61:5b:0b:2f:8c:02:b9:9b:22:9a:31: 8a:c7:2b:8c:d9:78:df:ea:02:3e:32:86:d4:e8:a6:ce:aa:28: f3:6c:d3:6d:30:10:fb:dd:ad:ba:4e:ba:82:1a:23:cc:af:c1: df:ea:84:3d:81:38:28:22:be:59:b2:05:49:42:a5:23:e4:3b: 5d:69:ed:3b:1b:71:30:ea:a4:59:cc:dc:38:39:94:b6:fe:8b: 04:48:3e:a8 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt/8iYojHX7hEM2IuTHDmayMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwZTEwYTFjNjZhMGU2MDAyNGFiYWI2MmQzMzI2ODJjNzEz YWEzNDcwHhcNMjYwMTAyMTgyMjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NWQzMDAyMzI0ZmUwNjBlOTUwNTkwZDRhNDU2ZjViMTk1Y2Q1MDY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2U6NHfGHz49Mp5FtfscJl9eo4xF YqfWkc29Gbc7J1MdChOLNEt4jgmW7yaTfZBaUiBdjZvMZu/41ryQgdwfO/6HbCwQ M8oY9cQPx4ubgiYSHEdEH7aF8vLLlW+SLdwFTrxC8EhcRLSXw94kmgM0awdoz3GZ YWwDPm+k91BSDcsB7cQkLjl9wRip+KOVuDY7UiMoLGdutAJN+mhVhVc7C1jSDmCI x7Gvft+KmBf3Gi/75HwlUNFan35oxC9UOVHnV+c5rHk4gll22mZVX2oBVqCM90+R MfgTdFzPtxEhjGCT3xe1roVH0H2K24ubRWBJ39CBdLP3rMq22zxsdYM1zwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFHXTACMk/gYOlQWQ1KRW9bGVzVBlMB8GA1UdIwQY MBaAFGDhChxmoOYAJKurYtMyaCxxOqNHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWU9FS0hHYWc1Z0FrcTZ0aTB6Sm9MSEU2bzBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9kOTU1NjYtYzZmZi00Y2M1LWI5M2Mt NjQxNzcwNzUxN2Q2LzEvZGRNQUl5VC1CZzZWQlpEVXBGYjFzWlhOVUdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9kOTU1NjYtYzZmZi00Y2M1LWI5M2MtNjQxNzcwNzUxN2Q2 LzEvWU9FS0hHYWc1Z0FrcTZ0aTB6Sm9MSEU2bzBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAVZEiAD BAJZEjAwDQYJKoZIhvcNAQELBQADggEBAH4B876iitO6pMPRUmDHO+DqykRY9IYG YevTzsLS5v+DHVhQ0bYVCXDCA1e9pgGZw1TctJj5VhNFyHmKst5DxZVXEQRVz15O JtZNcl4QBhKoQhWox3b7E5YeKaZhDFPYOezaACkDAV0lLwvy7+lMFzw2Xe3nxy3S onfTA/K+W23d2qWJ1veYgrF4u2XW7xNTxcA87VYMsWs91W1Sq388L3L2ubXxm7Y/ p8hhWwsvjAK5myKaMYrHK4zZeN/qAj4yhtTops6qKPNs020wEPvdrbpOuoIaI8yv wd/qhD2BOCgivlmyBUlCpSPkO11p7TsbcTDqpFnM3Dg5lLb+iwRIPqg= -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:09 2026 by rpki-client