This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/RUWdvZOnBJK0iIW0niXlms-_ZTE.roa File: RUWdvZOnBJK0iIW0niXlms-_ZTE.roa (raw, json) Hash identifier: 2+wMNcHhj5TvnlxNSP9HNjiQphs6X1jHdgsBG2jH8oQ= Subject key identifier: 45:45:9D:BD:93:A7:04:92:B4:88:85:B4:9E:25:E5:9A:CF:BF:65:31 Certificate issuer: /CN=9145ead8d3f1284402b6f75614a87257503ce1bc Certificate serial: 019B7AC8B27BF76A9EE24145DF727553D901 Authority key identifier: 91:45:EA:D8:D3:F1:28:44:02:B6:F7:56:14:A8:72:57:50:3C:E1:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUXq2NPxKEQCtvdWFKhyV1A84bw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/RUWdvZOnBJK0iIW0niXlms-_ZTE.roa Signing time: Thu 01 Jan 2026 18:18:51 +0000 ROA not before: Thu 01 Jan 2026 18:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43938 IP address blocks: 89.36.89.0/24 maxlen: 24 89.36.193.0/24 maxlen: 24 188.208.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.crl rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.mft rsync://rpki.ripe.net/repository/DEFAULT/kUXq2NPxKEQCtvdWFKhyV1A84bw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:b2:7b:f7:6a:9e:e2:41:45:df:72:75:53:d9:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9145ead8d3f1284402b6f75614a87257503ce1bc Validity Not Before: Jan 1 18:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=45459dbd93a70492b48885b49e25e59acfbf6531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7c:a0:8b:37:53:17:83:54:55:1f:8f:1b:68: aa:78:13:91:cf:f4:68:4b:80:fd:d0:b9:3c:3c:d6: e1:13:58:63:64:27:71:72:89:d6:f4:eb:9b:7a:ee: 51:6b:05:69:03:fd:d0:7b:40:59:9a:01:a1:84:76: 24:10:df:b8:b6:fd:05:51:cd:1f:17:82:66:eb:ab: cd:31:f2:67:72:f6:5c:75:93:35:ad:bb:d6:1f:0d: af:99:8c:c8:20:4d:5f:cc:22:35:0b:9b:1c:ec:b4: f6:88:76:34:77:a4:26:b3:60:7a:f3:c3:6a:41:05: f6:df:5c:5a:97:9a:0d:40:dc:49:b2:69:57:78:66: ba:d1:5c:d0:62:7a:d2:35:53:f6:62:81:8b:72:06: ba:13:13:34:bb:49:62:91:ec:14:a2:1d:ef:28:c4: 2a:2b:53:8f:e6:68:fc:36:7e:fe:74:12:04:77:a1: 0f:a1:d9:13:0d:db:41:a1:25:c9:a7:43:70:5a:a5: ec:89:4d:b4:29:8b:29:1f:85:72:4c:cf:31:b5:a3: 51:36:36:7a:b2:33:aa:44:ef:76:3f:f4:75:3c:03: 45:13:e4:a3:53:39:0d:1f:ad:01:4f:5e:d8:fc:7c: b8:40:25:04:30:d5:6b:7b:d3:4c:ea:aa:0e:24:eb: 5f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:45:9D:BD:93:A7:04:92:B4:88:85:B4:9E:25:E5:9A:CF:BF:65:31 X509v3 Authority Key Identifier: keyid:91:45:EA:D8:D3:F1:28:44:02:B6:F7:56:14:A8:72:57:50:3C:E1:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUXq2NPxKEQCtvdWFKhyV1A84bw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/RUWdvZOnBJK0iIW0niXlms-_ZTE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.36.89.0/24 89.36.193.0/24 188.208.30.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:37:2e:f4:7d:a3:fe:eb:20:95:e0:53:f4:14:c0:d8:65:2d: b5:24:bd:b5:cd:25:6f:f5:62:4c:23:77:ac:b0:b4:e1:14:80: 79:eb:f3:d5:13:98:ed:3b:0a:1a:6e:11:f9:49:2c:32:77:66: ba:5f:f5:3a:3f:4f:bc:c1:e5:67:0e:01:73:f1:cc:a6:70:55: a3:16:bd:1f:24:1f:bb:cf:fc:8b:5c:6a:bc:f9:75:0c:e0:e0: 96:45:a2:53:76:83:5f:21:dc:a9:61:eb:14:e3:2a:1b:f5:8f: 34:ab:a0:44:53:09:b4:38:0b:e9:fe:25:23:e5:de:55:45:dd: 6f:84:af:c8:b1:04:99:7d:03:9c:cb:e9:66:80:19:49:d2:c2: 5e:01:d4:35:4a:5e:1f:4d:8a:60:04:08:81:12:28:f0:ca:b0: 7a:a9:36:3a:7d:20:1f:d0:98:be:25:c7:13:ad:e5:13:0a:7e: 4b:d5:09:d4:d8:e6:99:53:da:ce:86:e8:ee:b9:47:5e:2b:14: 92:dc:b6:76:84:17:7c:20:48:d3:15:60:19:b8:ff:04:3f:03: 95:03:1b:bb:35:4d:1e:51:72:ac:95:df:c1:7e:32:1a:64:ce: 29:1c:e3:72:67:55:96:f8:8a:95:e7:ff:d0:8a:6c:99:dc:f2: 21:74:70:49 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt6yLJ792qe4kFF33J1U9kBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxNDVlYWQ4ZDNmMTI4NDQwMmI2Zjc1NjE0YTg3MjU3NTAz Y2UxYmMwHhcNMjYwMTAxMTgxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTQ1OWRiZDkzYTcwNDkyYjQ4ODg1YjQ5ZTI1ZTU5YWNmYmY2NTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3ygizdTF4NUVR+PG2iqeBORz/Ro S4D90Lk8PNbhE1hjZCdxconW9Oubeu5RawVpA/3Qe0BZmgGhhHYkEN+4tv0FUc0f F4Jm66vNMfJncvZcdZM1rbvWHw2vmYzIIE1fzCI1C5sc7LT2iHY0d6Qms2B688Nq QQX231xal5oNQNxJsmlXeGa60VzQYnrSNVP2YoGLcga6ExM0u0likewUoh3vKMQq K1OP5mj8Nn7+dBIEd6EPodkTDdtBoSXJp0NwWqXsiU20KYspH4VyTM8xtaNRNjZ6 sjOqRO92P/R1PANFE+SjUzkNH60BT17Y/Hy4QCUEMNVre9NM6qoOJOtfQwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFEVFnb2TpwSStIiFtJ4l5ZrPv2UxMB8GA1UdIwQY MBaAFJFF6tjT8ShEArb3VhSocldQPOG8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1VYcTJOUHhLRVFDdHZkV0ZLaHlWMUE4NGJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9hNTIzNWYtNjJmYi00YWJiLTgwMzct MmFkMTk1MjY0YzcyLzEvUlVXZHZaT25CSkswaUlXMG5pWGxtcy1fWlRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9hNTIzNWYtNjJmYi00YWJiLTgwMzctMmFkMTk1MjY0Yzcy LzEva1VYcTJOUHhLRVFDdHZkV0ZLaHlWMUE4NGJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAWSRZAwQA WSTBAwQAvNAeMA0GCSqGSIb3DQEBCwUAA4IBAQAuNy70faP+6yCV4FP0FMDYZS21 JL21zSVv9WJMI3essLThFIB56/PVE5jtOwoabhH5SSwyd2a6X/U6P0+8weVnDgFz 8cymcFWjFr0fJB+7z/yLXGq8+XUM4OCWRaJTdoNfIdypYesU4yob9Y80q6BEUwm0 OAvp/iUj5d5VRd1vhK/IsQSZfQOcy+lmgBlJ0sJeAdQ1Sl4fTYpgBAiBEijwyrB6 qTY6fSAf0Ji+JccTreUTCn5L1QnU2OaZU9rOhujuuUdeKxSS3LZ2hBd8IEjTFWAZ uP8EPwOVAxu7NU0eUXKsld/BfjIaZM4pHONyZ1WW+IqV5//QimyZ3PIhdHBJ -----END CERTIFICATE-----Generated at Mon Feb 9 18:44:28 2026 by rpki-client