This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/Toj2MXLv_0tnvaOa8SabyfyAH7M.roa File: Toj2MXLv_0tnvaOa8SabyfyAH7M.roa (raw, json) Hash identifier: LJgBJJsZvDC+Ue6FuF++Df+Q+t0hp3VFYM3vhkZt4FQ= Subject key identifier: 4E:88:F6:31:72:EF:FF:4B:67:BD:A3:9A:F1:26:9B:C9:FC:80:1F:B3 Certificate issuer: /CN=af6eaeff123ca67446d0e49401e495057078e174 Certificate serial: 019B7DCB5CB0DAC818DA16F8AA837D02A63E Authority key identifier: AF:6E:AE:FF:12:3C:A6:74:46:D0:E4:94:01:E4:95:05:70:78:E1:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r26u_xI8pnRG0OSUAeSVBXB44XQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/Toj2MXLv_0tnvaOa8SabyfyAH7M.roa Signing time: Fri 02 Jan 2026 08:20:38 +0000 ROA not before: Fri 02 Jan 2026 08:20:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30962 IP address blocks: 93.89.4.0/22 maxlen: 22 93.89.4.0/24 maxlen: 24 93.89.5.0/24 maxlen: 24 93.89.6.0/24 maxlen: 24 93.89.7.0/24 maxlen: 24 2a0b:2301::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r26u_xI8pnRG0OSUAeSVBXB44XQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r26u_xI8pnRG0OSUAeSVBXB44XQ.mft rsync://rpki.ripe.net/repository/DEFAULT/r26u_xI8pnRG0OSUAeSVBXB44XQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:5c:b0:da:c8:18:da:16:f8:aa:83:7d:02:a6:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af6eaeff123ca67446d0e49401e495057078e174 Validity Not Before: Jan 2 08:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4e88f63172efff4b67bda39af1269bc9fc801fb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:62:e9:4d:a2:ff:84:c1:62:d6:1d:61:b5:23: 28:32:c7:f1:54:bc:ea:ae:93:ac:60:af:f9:71:bd: a1:24:5d:9b:98:7e:ce:b5:ed:a2:9a:2f:9c:19:8b: a9:9e:0d:cc:57:9a:72:27:14:3a:63:24:14:b0:fb: 1e:d6:fe:1b:4c:be:94:4d:90:cf:b1:7c:b8:27:33: 55:14:36:bc:72:d8:73:47:02:08:c6:b0:27:e2:c8: 90:4a:e5:8d:0d:09:e3:5c:67:ff:bd:6c:4d:11:88: b5:ff:24:76:90:8c:2d:83:5d:43:21:26:cf:9c:41: 6c:3e:d5:29:e9:3d:75:f7:6d:44:cf:34:6f:43:53: 65:83:14:43:23:12:2a:20:f3:7b:de:26:90:63:9e: 46:a8:bc:99:80:17:4e:03:2e:15:37:97:c9:d9:e3: 93:77:a2:c1:1c:0e:33:38:e8:f0:d3:68:e1:fd:22: 66:0f:9c:c8:4a:1c:26:0b:5c:ce:45:aa:be:80:37: 7c:1e:9c:8b:44:7e:25:8b:3c:27:22:91:2d:03:f4: a4:40:f6:a8:e1:15:8a:34:3b:9b:d6:86:10:eb:c1: b8:a8:cb:ad:96:70:db:86:9d:7b:38:42:aa:80:86: 43:fc:97:26:89:aa:d6:49:4b:ed:95:b4:77:b8:52: 10:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:88:F6:31:72:EF:FF:4B:67:BD:A3:9A:F1:26:9B:C9:FC:80:1F:B3 X509v3 Authority Key Identifier: keyid:AF:6E:AE:FF:12:3C:A6:74:46:D0:E4:94:01:E4:95:05:70:78:E1:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r26u_xI8pnRG0OSUAeSVBXB44XQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/Toj2MXLv_0tnvaOa8SabyfyAH7M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r26u_xI8pnRG0OSUAeSVBXB44XQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.89.4.0/22 IPv6: 2a0b:2301::/32 Signature Algorithm: sha256WithRSAEncryption 69:05:32:10:42:8a:99:c6:c8:42:df:82:51:74:0a:24:5b:71: f2:9e:d2:fe:5c:15:29:b8:20:10:de:1c:ec:83:64:59:0b:d5: c0:0d:10:6b:e5:8c:83:0f:23:81:db:78:07:a9:0e:03:33:32: 9d:1e:b4:07:d0:04:33:b9:6e:68:8c:cd:a0:ca:1f:86:8e:e5: 38:35:53:0f:aa:0c:cb:1e:17:8e:21:a9:60:67:c0:79:1e:35: fe:c1:20:61:23:09:00:07:fa:ff:e0:57:39:93:ac:7c:2c:2c: 34:92:67:39:a3:ef:a3:3f:2f:f4:a1:a6:ec:e3:0b:dd:71:a8: 17:b7:55:4a:19:9b:f9:59:2f:a1:50:89:24:4e:38:d1:33:82: 30:8c:b2:f6:72:31:5e:9e:a6:7a:b5:7a:b6:50:9c:d2:6b:59: 80:4d:00:6f:55:00:e9:50:2a:08:66:f0:c9:44:7e:63:7d:e1: ba:57:e8:94:39:d8:5c:5b:76:d9:21:f0:1f:12:1e:e5:c0:91: 70:cb:19:15:d7:ef:88:48:9f:7e:d2:ad:c0:6e:05:fb:dc:28: 63:32:be:9c:a4:7e:3c:2b:11:0b:a8:8e:47:f0:7b:60:ad:6b: bc:91:3d:32:73:84:90:92:a6:d5:d0:a0:ef:47:70:49:f8:68: b2:0b:6a:59 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9y1yw2sgY2hb4qoN9AqY+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNmVhZWZmMTIzY2E2NzQ0NmQwZTQ5NDAxZTQ5NTA1NzA3 OGUxNzQwHhcNMjYwMTAyMDgyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZTg4ZjYzMTcyZWZmZjRiNjdiZGEzOWFmMTI2OWJjOWZjODAxZmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mLpTaL/hMFi1h1htSMoMsfxVLzq rpOsYK/5cb2hJF2bmH7Ote2imi+cGYupng3MV5pyJxQ6YyQUsPse1v4bTL6UTZDP sXy4JzNVFDa8cthzRwIIxrAn4siQSuWNDQnjXGf/vWxNEYi1/yR2kIwtg11DISbP nEFsPtUp6T11921EzzRvQ1NlgxRDIxIqIPN73iaQY55GqLyZgBdOAy4VN5fJ2eOT d6LBHA4zOOjw02jh/SJmD5zIShwmC1zORaq+gDd8HpyLRH4lizwnIpEtA/SkQPao 4RWKNDub1oYQ68G4qMutlnDbhp17OEKqgIZD/JcmiarWSUvtlbR3uFIQZwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFE6I9jFy7/9LZ72jmvEmm8n8gB+zMB8GA1UdIwQY MBaAFK9urv8SPKZ0RtDklAHklQVweOF0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjI2dV94SThwblJHME9TVUFlU1ZCWEI0NFhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy83MDAxNjQtODlkMS00MDRmLWFmMzUt NGVmNDdmYzRiZDdmLzEvVG9qMk1YTHZfMHRudmFPYThTYWJ5ZnlBSDdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy83MDAxNjQtODlkMS00MDRmLWFmMzUtNGVmNDdmYzRiZDdm LzEvcjI2dV94SThwblJHME9TVUFlU1ZCWEI0NFhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCXVkEMA0E AgACMAcDBQAqCyMBMA0GCSqGSIb3DQEBCwUAA4IBAQBpBTIQQoqZxshC34JRdAok W3HyntL+XBUpuCAQ3hzsg2RZC9XADRBr5YyDDyOB23gHqQ4DMzKdHrQH0AQzuW5o jM2gyh+GjuU4NVMPqgzLHheOIalgZ8B5HjX+wSBhIwkAB/r/4Fc5k6x8LCw0kmc5 o++jPy/0oabs4wvdcagXt1VKGZv5WS+hUIkkTjjRM4IwjLL2cjFenqZ6tXq2UJzS a1mATQBvVQDpUCoIZvDJRH5jfeG6V+iUOdhcW3bZIfAfEh7lwJFwyxkV1++ISJ9+ 0q3AbgX73ChjMr6cpH48KxELqI5H8HtgrWu8kT0yc4SQkqbV0KDvR3BJ+GiyC2pZ -----END CERTIFICATE-----Generated at Mon Jan 26 22:33:01 2026 by rpki-client