This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/xJmLpZQSUqn2p0sl4yH-zTjLxSU.roa File: xJmLpZQSUqn2p0sl4yH-zTjLxSU.roa (raw, json) Hash identifier: 3C0CJjezLxbHBKLVQeKBHPmtT1qFFsnDxafe76+pogU= Subject key identifier: C4:99:8B:A5:94:12:52:A9:F6:A7:4B:25:E3:21:FE:CD:38:CB:C5:25 Certificate issuer: /CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930 Certificate serial: 019B7EA6CBAC7A2F2E4A02FAFE6AC8832012 Authority key identifier: DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/xJmLpZQSUqn2p0sl4yH-zTjLxSU.roa Signing time: Fri 02 Jan 2026 12:20:18 +0000 ROA not before: Fri 02 Jan 2026 12:20:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203507 IP address blocks: 89.105.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:cb:ac:7a:2f:2e:4a:02:fa:fe:6a:c8:83:20:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930 Validity Not Before: Jan 2 12:20:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c4998ba5941252a9f6a74b25e321fecd38cbc525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:e4:3e:c9:c3:1c:c3:10:9b:ca:31:22:c3:58: 6c:0e:77:ce:06:67:2d:6f:80:a0:db:6a:97:25:0d: c1:99:68:45:4b:a0:3a:27:5c:9e:2a:97:67:cc:f8: ed:3c:8f:b4:a5:22:03:c7:f9:8c:ae:a5:5d:51:25: c6:8f:f9:8e:80:a8:47:ab:c0:18:dc:9a:f9:a6:fa: 94:25:48:20:80:b8:e1:15:ac:70:d4:ae:bc:d4:17: a8:57:b1:09:a3:13:33:8e:f1:72:75:32:3b:77:9d: 20:6b:be:f0:3d:b6:13:6b:41:c2:f6:c3:2e:9f:ab: 06:52:a3:65:77:59:67:d8:6d:5a:df:9e:b9:17:b2: a4:5f:86:bf:66:1e:45:51:64:83:8b:3b:54:24:7d: b3:de:aa:ac:e0:45:32:68:3c:ec:6f:dd:12:f7:e3: 56:1c:8a:09:86:1d:76:d8:f2:3c:0e:c3:39:c0:b0: d9:ca:6b:9f:f4:b5:00:51:4a:49:79:a0:26:48:18: 2b:95:cf:8b:ec:9d:fd:62:df:3e:4f:7f:2c:a0:f8: 8e:2f:a3:bb:b7:bb:97:59:d4:f7:a9:70:f6:fc:00: 0b:8c:35:06:52:dc:7d:8d:1e:41:ab:bc:c6:f6:9d: 12:ef:10:b9:dd:2f:c0:bf:88:13:45:97:52:ce:de: 28:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:99:8B:A5:94:12:52:A9:F6:A7:4B:25:E3:21:FE:CD:38:CB:C5:25 X509v3 Authority Key Identifier: keyid:DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/xJmLpZQSUqn2p0sl4yH-zTjLxSU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.105.213.0/24 Signature Algorithm: sha256WithRSAEncryption 77:02:9e:73:4e:18:cb:3a:30:d3:24:40:94:7e:c0:68:07:0b: e0:fd:97:4b:e8:fc:a2:7b:21:f1:c7:5f:dd:67:f9:12:1a:02: c8:2c:3e:b4:3b:72:ce:98:a0:07:31:01:0b:07:ce:6a:0e:d5: f1:b5:57:a5:20:f5:cc:5b:e7:49:20:8d:b5:d2:87:d4:79:35: 7f:5c:75:27:ad:5e:99:b2:03:ee:d2:e7:f1:c1:ae:2c:07:4a: 31:8c:57:2b:39:b4:3e:3a:dc:e1:1c:c4:ad:f0:a2:74:d5:56: 84:c2:98:d6:2e:30:8b:94:7f:c6:b7:cd:40:1e:c5:4c:23:ef: 1b:2b:51:fa:0f:63:ba:9d:f2:1a:03:27:c4:41:cd:23:6c:9d: 06:7f:c3:e8:cd:45:4f:b5:c9:fe:1e:90:9d:bd:3c:59:1d:97: cd:ae:99:7b:86:3a:f0:e7:8f:a6:71:1f:e5:c4:d6:57:4f:09: f3:c1:83:92:7c:8c:43:cf:5e:82:8b:44:29:bb:4e:59:0b:90: 2f:cd:72:36:f2:38:a1:c6:64:28:1a:aa:60:40:64:ee:66:a6: e0:34:63:69:86:2d:63:d1:bb:b6:24:7d:8b:a5:62:2f:55:93: 2c:20:70:58:9c:eb:e5:26:f7:7a:db:c3:ef:6a:fa:eb:4b:66: dc:9e:42:00 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+psusei8uSgL6/mrIgyASMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjOTBlMGFlZTFlY2MzMTA2NmNiNzQ0ZjhhN2ZlZWRlZmIz Zjc5MzAwHhcNMjYwMTAyMTIyMDE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDk5OGJhNTk0MTI1MmE5ZjZhNzRiMjVlMzIxZmVjZDM4Y2JjNTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7OQ+ycMcwxCbyjEiw1hsDnfOBmct b4Cg22qXJQ3BmWhFS6A6J1yeKpdnzPjtPI+0pSIDx/mMrqVdUSXGj/mOgKhHq8AY 3Jr5pvqUJUgggLjhFaxw1K681BeoV7EJoxMzjvFydTI7d50ga77wPbYTa0HC9sMu n6sGUqNld1ln2G1a3565F7KkX4a/Zh5FUWSDiztUJH2z3qqs4EUyaDzsb90S9+NW HIoJhh122PI8DsM5wLDZymuf9LUAUUpJeaAmSBgrlc+L7J39Yt8+T38soPiOL6O7 t7uXWdT3qXD2/AALjDUGUtx9jR5Bq7zG9p0S7xC53S/Av4gTRZdSzt4o9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMSZi6WUElKp9qdLJeMh/s04y8UlMB8GA1UdIwQY MBaAFNyQ4K7h7MMQZst0T4p/7t77P3kwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0pEZ3J1SHN3eEJteTNSUGluX3UzdnNfZVRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi84N2IyNjctNDljMi00MjY5LTlmNjYt MDBiY2Q5YjkxYzFiLzEveEptTHBaUVNVcW4ycDBzbDR5SC16VGpMeFNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi84N2IyNjctNDljMi00MjY5LTlmNjYtMDBiY2Q5YjkxYzFi LzEvM0pEZ3J1SHN3eEJteTNSUGluX3UzdnNfZVRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWWnVMA0G CSqGSIb3DQEBCwUAA4IBAQB3Ap5zThjLOjDTJECUfsBoBwvg/ZdL6PyieyHxx1/d Z/kSGgLILD60O3LOmKAHMQELB85qDtXxtVelIPXMW+dJII210ofUeTV/XHUnrV6Z sgPu0ufxwa4sB0oxjFcrObQ+OtzhHMSt8KJ01VaEwpjWLjCLlH/Gt81AHsVMI+8b K1H6D2O6nfIaAyfEQc0jbJ0Gf8PozUVPtcn+HpCdvTxZHZfNrpl7hjrw54+mcR/l xNZXTwnzwYOSfIxDz16Ci0Qpu05ZC5AvzXI28jihxmQoGqpgQGTuZqbgNGNphi1j 0bu2JH2LpWIvVZMsIHBYnOvlJvd628PvavrrS2bcnkIA -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:33 2026 by rpki-client