This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/z6W-ju86AAkQ89lNsx5bv2beJTg.roa File: z6W-ju86AAkQ89lNsx5bv2beJTg.roa (raw, json) Hash identifier: 0wpQQ3UwgrG95wCVLeMnyN31LS5yxPfmHFe5h0LmgtM= Subject key identifier: CF:A5:BE:8E:EF:3A:00:09:10:F3:D9:4D:B3:1E:5B:BF:66:DE:25:38 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B7C12D875644A7C0E147EE386E842AECF Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/z6W-ju86AAkQ89lNsx5bv2beJTg.roa Signing time: Fri 02 Jan 2026 00:19:28 +0000 ROA not before: Fri 02 Jan 2026 00:19:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 55286 IP address blocks: 89.144.53.0/24 maxlen: 24 89.144.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:d8:75:64:4a:7c:0e:14:7e:e3:86:e8:42:ae:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 2 00:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cfa5be8eef3a000910f3d94db31e5bbf66de2538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a5:c5:49:89:cd:36:fa:1d:41:35:ed:34:dd: bc:f6:9d:01:12:62:5b:de:7d:ab:2b:05:d0:64:10: 7a:32:44:fc:89:16:aa:f8:6a:0a:67:9c:3e:8b:87: 96:54:f6:b3:c4:5f:0a:3e:aa:58:dd:80:2f:5a:15: 1c:24:91:bb:89:1a:8c:ba:a7:97:d8:74:6d:65:eb: ca:c3:ac:6e:4c:c1:b9:2e:47:7a:30:d3:f4:73:d3: a9:06:5a:c0:f7:0d:b4:12:67:a2:4d:71:d8:27:3b: 82:5e:d1:f4:fa:87:8b:6b:d8:1c:dd:65:ed:bf:c9: 89:c1:fb:bc:c9:5c:06:e1:c1:56:4b:bb:0f:1e:1f: bd:d7:a0:ea:76:a2:e7:d0:f9:02:75:3a:4a:a7:7f: 8d:3b:c5:33:24:4f:9d:e7:1e:cd:f1:09:e1:d8:61: 89:f5:06:95:71:bc:4a:c9:27:d3:8b:53:5c:43:7b: ee:99:32:42:23:6f:ef:9d:52:2c:07:49:a9:6f:e4: d2:a3:15:2f:ca:94:c3:82:43:5a:f8:fb:a5:a2:94: 44:ba:06:d7:94:da:0d:9d:d2:54:ac:3d:5c:c6:68: 77:63:15:f8:2f:e0:77:87:c3:38:aa:50:a2:ed:ff: f8:e4:02:1e:20:83:e5:0f:a5:6f:49:c2:d5:ee:03: 41:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:A5:BE:8E:EF:3A:00:09:10:F3:D9:4D:B3:1E:5B:BF:66:DE:25:38 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/z6W-ju86AAkQ89lNsx5bv2beJTg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.144.53.0-89.144.54.255 Signature Algorithm: sha256WithRSAEncryption 3f:62:f0:db:5a:c2:fe:bc:ec:3b:3b:c4:86:22:a1:b6:8a:b1: fe:41:97:52:20:aa:21:d6:65:61:e4:c8:16:a3:c0:6f:f7:44: c0:68:ae:90:99:ce:43:8b:f0:18:91:c8:06:0f:0d:85:94:32: 50:38:b4:07:2d:a1:f3:7d:87:51:61:64:07:e7:29:8f:9d:44: 05:01:2a:7d:66:8c:30:6a:26:1d:3c:b9:b3:6d:c8:2f:ae:e1: cb:51:5a:db:b6:4e:67:66:2b:61:f4:bf:ce:1a:ce:47:f2:8f: f9:03:e4:ef:89:50:90:d5:25:c4:48:00:b9:93:e7:04:e5:a0: 79:4c:95:5b:c2:83:a7:29:2e:a9:cb:44:81:43:61:ab:89:a3: b6:5a:8a:42:77:a1:0f:8b:ea:25:a5:91:87:17:dc:71:81:56: b1:3b:86:92:ee:43:d6:b0:ef:77:01:1c:b1:9b:1b:52:69:90: 04:1e:c8:de:48:da:73:36:58:e8:eb:36:00:f6:19:52:d0:c8: c3:4d:ce:dc:f6:c8:a5:06:e1:ac:bb:c9:9a:37:3e:1c:ed:1c: 7b:f0:14:ed:19:34:60:72:0c:f4:25:e8:87:27:10:5a:f1:f3: 54:bd:b3:f9:04:c5:b9:34:51:70:db:69:b9:de:16:ad:65:a2: c1:6e:f9:6d -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt8Eth1ZEp8DhR+44boQq7PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTAyMDAxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZmE1YmU4ZWVmM2EwMDA5MTBmM2Q5NGRiMzFlNWJiZjY2ZGUyNTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKXFSYnNNvodQTXtNN289p0BEmJb 3n2rKwXQZBB6MkT8iRaq+GoKZ5w+i4eWVPazxF8KPqpY3YAvWhUcJJG7iRqMuqeX 2HRtZevKw6xuTMG5Lkd6MNP0c9OpBlrA9w20EmeiTXHYJzuCXtH0+oeLa9gc3WXt v8mJwfu8yVwG4cFWS7sPHh+916DqdqLn0PkCdTpKp3+NO8UzJE+d5x7N8Qnh2GGJ 9QaVcbxKySfTi1NcQ3vumTJCI2/vnVIsB0mpb+TSoxUvypTDgkNa+PulopREugbX lNoNndJUrD1cxmh3YxX4L+B3h8M4qlCi7f/45AIeIIPlD6VvScLV7gNBIwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFM+lvo7vOgAJEPPZTbMeW79m3iU4MB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvejZXLWp1ODZBQWtRODlsTnN4NWJ2MmJlSlRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABZkDUD BABZkDYwDQYJKoZIhvcNAQELBQADggEBAD9i8Ntawv687Ds7xIYiobaKsf5Bl1Ig qiHWZWHkyBajwG/3RMBorpCZzkOL8BiRyAYPDYWUMlA4tActofN9h1FhZAfnKY+d RAUBKn1mjDBqJh08ubNtyC+u4ctRWtu2TmdmK2H0v84azkfyj/kD5O+JUJDVJcRI ALmT5wTloHlMlVvCg6cpLqnLRIFDYauJo7ZaikJ3oQ+L6iWlkYcX3HGBVrE7hpLu Q9aw73cBHLGbG1JpkAQeyN5I2nM2WOjrNgD2GVLQyMNNztz2yKUG4ay7yZo3Phzt HHvwFO0ZNGByDPQl6IcnEFrx81S9s/kExbk0UXDbabneFq1losFu+W0= -----END CERTIFICATE-----Generated at Sun Jan 11 07:39:55 2026 by rpki-client