This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/cHYtz0fE0Gf2gEw71zp7-_n7bKM.roa File: cHYtz0fE0Gf2gEw71zp7-_n7bKM.roa (raw, json) Hash identifier: +Fv7+PmSV+PRme6dzZZU9PgJUe/h8p6I8IdPYqe++Bg= Subject key identifier: 70:76:2D:CF:47:C4:D0:67:F6:80:4C:3B:D7:3A:7B:FB:F9:FB:6C:A3 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B7C130433E7B2C547E4FAC5C2CC324EFA Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/cHYtz0fE0Gf2gEw71zp7-_n7bKM.roa Signing time: Fri 02 Jan 2026 00:19:39 +0000 ROA not before: Fri 02 Jan 2026 00:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214299 IP address blocks: 89.106.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:04:33:e7:b2:c5:47:e4:fa:c5:c2:cc:32:4e:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 2 00:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70762dcf47c4d067f6804c3bd73a7bfbf9fb6ca3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7a:ba:94:7c:1f:35:36:43:fe:69:a4:ba:af: 38:6a:27:ae:dc:bd:02:5a:3b:09:9b:fd:56:d9:50: 37:3b:9b:18:d5:38:d1:ba:b6:b4:2b:a5:d6:7d:8f: 00:78:e5:bc:bf:2b:bd:5d:23:3a:e8:89:f2:fe:4f: 48:89:23:b9:de:d4:c5:c9:72:35:ee:d4:48:9c:5f: fc:01:31:fa:13:3f:3a:b4:32:bc:65:24:f7:48:24: f9:f6:89:59:ee:9f:52:be:07:dc:de:4f:0f:76:b1: 55:4b:c1:89:49:b8:f9:44:e8:88:d5:bc:cc:da:ca: c9:81:49:65:73:c0:bf:1a:c8:ae:48:a7:97:c5:81: 64:07:20:85:be:15:80:8b:5e:9b:c3:74:11:25:5d: 48:c8:3d:6c:df:59:1d:22:00:a7:68:a6:34:05:a6: fc:33:16:d5:ae:ca:d8:ae:bc:28:64:d0:04:26:00: 67:c4:68:a7:3c:56:87:37:aa:3c:16:da:84:51:09: 24:7f:80:b4:aa:50:a3:59:db:e9:2f:fc:9a:54:6a: 2e:42:e5:2e:b4:07:2c:5b:52:f0:ab:2d:f2:a0:c6: 25:c3:1e:e4:ae:e3:7a:5e:cc:f8:73:1a:59:a7:a7: ee:3b:8e:ad:b9:c7:76:cc:c5:42:c1:ea:3f:25:ab: ec:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:76:2D:CF:47:C4:D0:67:F6:80:4C:3B:D7:3A:7B:FB:F9:FB:6C:A3 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/cHYtz0fE0Gf2gEw71zp7-_n7bKM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.106.72.0/24 Signature Algorithm: sha256WithRSAEncryption 78:17:e5:35:e1:97:b8:73:c1:39:15:b9:e8:7c:0b:cd:13:72: 5e:00:9b:fb:3a:cc:30:e0:c0:1a:d6:ac:c1:48:9e:d1:1d:aa: 86:b8:b9:46:7a:e4:24:c4:9a:a9:f8:72:75:b6:81:5f:d6:46: 3b:0d:22:31:8b:9f:6a:87:c0:80:ee:2d:c2:05:aa:dd:ee:6e: 3f:86:55:19:d5:4c:16:bd:89:1c:23:98:0d:d0:68:35:6d:9e: 4a:3b:6f:5b:59:9d:32:0f:e4:a2:6e:f7:9f:97:80:42:dc:d5: 56:93:a8:c9:98:f4:ed:0a:2c:a8:e0:af:96:51:a6:12:09:19: 4d:84:68:57:d7:b5:7b:b5:5f:6e:f0:40:64:df:61:10:c5:8c: dd:47:9a:9e:15:95:c5:b9:75:ba:a4:c5:2b:4b:3d:c9:e0:ea: f3:ca:f6:3e:a5:b2:cf:ee:eb:a1:39:bd:1a:d9:a4:e2:f5:41: c7:5f:c2:33:d5:92:0b:ea:5b:05:29:f7:14:11:a6:8f:3d:12: 4d:83:f1:72:a3:ea:94:ef:d3:83:08:16:ea:5a:24:b4:25:55: 7e:0d:1f:e4:cf:6e:88:7c:8d:f8:e8:04:28:12:ac:a0:5f:3d: ab:8c:87:ad:0c:45:62:eb:38:c9:a3:fb:fb:0e:fa:08:cd:b7: a4:3d:74:a5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EwQz57LFR+T6xcLMMk76MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTAyMDAxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDc2MmRjZjQ3YzRkMDY3ZjY4MDRjM2JkNzNhN2JmYmY5ZmI2Y2EzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXq6lHwfNTZD/mmkuq84aieu3L0C WjsJm/1W2VA3O5sY1TjRura0K6XWfY8AeOW8vyu9XSM66Iny/k9IiSO53tTFyXI1 7tRInF/8ATH6Ez86tDK8ZST3SCT59olZ7p9Svgfc3k8PdrFVS8GJSbj5ROiI1bzM 2srJgUllc8C/GsiuSKeXxYFkByCFvhWAi16bw3QRJV1IyD1s31kdIgCnaKY0Bab8 MxbVrsrYrrwoZNAEJgBnxGinPFaHN6o8FtqEUQkkf4C0qlCjWdvpL/yaVGouQuUu tAcsW1Lwqy3yoMYlwx7kruN6Xsz4cxpZp6fuO46tucd2zMVCweo/JavsCwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHB2Lc9HxNBn9oBMO9c6e/v5+2yjMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvY0hZdHowZkUwR2YyZ0V3NzF6cDctX243YktNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWWpIMA0G CSqGSIb3DQEBCwUAA4IBAQB4F+U14Ze4c8E5FbnofAvNE3JeAJv7Osww4MAa1qzB SJ7RHaqGuLlGeuQkxJqp+HJ1toFf1kY7DSIxi59qh8CA7i3CBard7m4/hlUZ1UwW vYkcI5gN0Gg1bZ5KO29bWZ0yD+Sibvefl4BC3NVWk6jJmPTtCiyo4K+WUaYSCRlN hGhX17V7tV9u8EBk32EQxYzdR5qeFZXFuXW6pMUrSz3J4OrzyvY+pbLP7uuhOb0a 2aTi9UHHX8Iz1ZIL6lsFKfcUEaaPPRJNg/Fyo+qU79ODCBbqWiS0JVV+DR/kz26I fI346AQoEqygXz2rjIetDEVi6zjJo/v7DvoIzbekPXSl -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:55 2026 by rpki-client