This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/o89o84C8IY4ZuJiD-GO4XGjoKpQ.roa File: o89o84C8IY4ZuJiD-GO4XGjoKpQ.roa (raw, json) Hash identifier: DA2ohPueYISFkGAHRfbnGxjHQmolVugXZitJG76FnKw= Subject key identifier: A3:CF:68:F3:80:BC:21:8E:19:B8:98:83:F8:63:B8:5C:68:E8:2A:94 Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722 Certificate serial: 019B7B3572F6D08811657C813C2381E7B7F4 Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/o89o84C8IY4ZuJiD-GO4XGjoKpQ.roa Signing time: Thu 01 Jan 2026 20:17:38 +0000 ROA not before: Thu 01 Jan 2026 20:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44148 IP address blocks: 85.121.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:72:f6:d0:88:11:65:7c:81:3c:23:81:e7:b7:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722 Validity Not Before: Jan 1 20:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a3cf68f380bc218e19b89883f863b85c68e82a94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:9d:21:86:c6:fa:80:1c:61:7e:13:12:3b:20: 9f:ef:ac:c9:ec:ff:2b:c7:dd:13:2c:d3:ac:dd:8a: 61:9e:78:c0:02:17:4a:a3:6c:6f:f0:11:29:d7:56: 74:26:d5:13:54:87:21:a9:8a:1a:01:07:23:f3:c1: 11:6a:0e:e5:34:ef:b7:7a:cc:6e:39:c1:67:53:04: 78:e7:99:a0:fb:6d:6e:9c:b4:dd:ee:91:22:aa:af: d0:66:8c:ae:64:14:2b:70:8f:db:b7:78:25:fa:a0: 29:87:07:72:cd:e8:0b:ee:08:24:3c:f4:de:0f:5e: 96:de:45:31:4c:c9:3a:79:1c:7e:2f:c6:b5:65:7f: 21:2f:6f:f3:6b:5c:b8:03:16:43:42:79:3a:96:8f: 5d:4c:f0:57:8a:14:33:eb:a3:a9:7b:d9:2d:6e:05: 9a:73:a3:13:c6:b0:d9:de:d6:3a:bb:ef:7e:83:5a: 7c:5a:2a:0b:43:61:7e:71:d4:f7:55:c0:ca:2a:52: 6d:f0:68:da:9b:d8:5f:27:66:c6:2d:57:38:38:7f: 1c:52:39:cc:e6:11:11:00:e2:41:8a:62:93:d6:1e: 43:18:7f:91:ba:21:42:ac:60:21:1e:c1:33:16:f6: 23:9d:98:59:49:d9:c4:ba:20:88:64:a8:3c:4c:6a: e4:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:CF:68:F3:80:BC:21:8E:19:B8:98:83:F8:63:B8:5C:68:E8:2A:94 X509v3 Authority Key Identifier: keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/o89o84C8IY4ZuJiD-GO4XGjoKpQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.121.190.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:c4:e9:5a:fd:87:a5:a9:c0:5a:df:24:a5:19:8b:8d:88:be: 9f:37:a7:2f:04:a5:f5:f2:cd:20:3f:96:ff:ec:67:ac:6a:50: 6c:f7:01:f7:4a:ea:46:05:03:ae:d5:54:14:11:5f:80:bc:d0: e8:31:50:3d:52:b5:ee:64:11:a0:b5:28:89:2b:f7:0d:ae:09: 3b:db:0e:b6:25:14:81:fb:ee:e1:ec:95:dc:d4:ae:25:5d:85: b8:88:15:a4:46:67:ac:ad:dd:08:09:73:bc:12:05:3a:c5:a5: 20:20:29:c6:b8:13:a0:33:93:16:f4:c9:41:7b:c7:48:69:bb: ee:d4:cf:75:8a:81:1f:83:e9:cc:91:8b:ea:98:59:65:4f:1e: 5f:c8:d3:44:81:6b:0c:16:51:b8:1b:e0:85:18:5b:df:e0:8d: 2e:3d:69:20:b5:35:2b:34:5e:9b:5d:17:61:0b:bc:e3:2d:d4: 08:97:5c:b7:80:0c:34:97:0f:6a:f4:5a:8b:e9:46:1d:63:2d: 67:b7:fe:db:6c:55:cb:66:37:6a:83:d2:3d:13:e8:d8:21:c1: 7b:dc:e1:3e:0b:e8:2e:95:ef:dd:70:57:1f:63:22:86:c3:c0: 0a:92:74:dd:d6:ec:0d:2b:14:0f:3b:d0:a7:e8:4c:54:e7:7b: eb:09:77:25 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NXL20IgRZXyBPCOB57f0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh MTU3MjIwHhcNMjYwMTAxMjAxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhM2NmNjhmMzgwYmMyMThlMTliODk4ODNmODYzYjg1YzY4ZTgyYTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Z0hhsb6gBxhfhMSOyCf76zJ7P8r x90TLNOs3YphnnjAAhdKo2xv8BEp11Z0JtUTVIchqYoaAQcj88ERag7lNO+3esxu OcFnUwR455mg+21unLTd7pEiqq/QZoyuZBQrcI/bt3gl+qAphwdyzegL7ggkPPTe D16W3kUxTMk6eRx+L8a1ZX8hL2/za1y4AxZDQnk6lo9dTPBXihQz66Ope9ktbgWa c6MTxrDZ3tY6u+9+g1p8WioLQ2F+cdT3VcDKKlJt8Gjam9hfJ2bGLVc4OH8cUjnM 5hERAOJBimKT1h5DGH+RuiFCrGAhHsEzFvYjnZhZSdnEuiCIZKg8TGrkTwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKPPaPOAvCGOGbiYg/hjuFxo6CqUMB8GA1UdIwQY MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt ZjUyYzQ3YzIyNWRiLzEvbzg5bzg0QzhJWTRadUppRC1HTzRYR2pvS3BRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVXm+MA0G CSqGSIb3DQEBCwUAA4IBAQAdxOla/YelqcBa3ySlGYuNiL6fN6cvBKX18s0gP5b/ 7GesalBs9wH3SupGBQOu1VQUEV+AvNDoMVA9UrXuZBGgtSiJK/cNrgk72w62JRSB ++7h7JXc1K4lXYW4iBWkRmesrd0ICXO8EgU6xaUgICnGuBOgM5MW9MlBe8dIabvu 1M91ioEfg+nMkYvqmFllTx5fyNNEgWsMFlG4G+CFGFvf4I0uPWkgtTUrNF6bXRdh C7zjLdQIl1y3gAw0lw9q9FqL6UYdYy1nt/7bbFXLZjdqg9I9E+jYIcF73OE+C+gu le/dcFcfYyKGw8AKknTd1uwNKxQPO9Cn6ExU53vrCXcl -----END CERTIFICATE-----Generated at Tue Jan 20 02:49:13 2026 by rpki-client