This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/47kFmSy2Gmd9C5gR_j8zVGS8eh8.roa File: 47kFmSy2Gmd9C5gR_j8zVGS8eh8.roa (raw, json) Hash identifier: TyDSYTFqFRZ+nZ7P9qrY4NFiG2V+3ac2Kk6s+JbVeY4= Subject key identifier: E3:B9:05:99:2C:B6:1A:67:7D:0B:98:11:FE:3F:33:54:64:BC:7A:1F Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Certificate serial: 019B797E6A7AAD9C4CE9FB9623758658CDD7 Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/47kFmSy2Gmd9C5gR_j8zVGS8eh8.roa Signing time: Thu 01 Jan 2026 12:18:06 +0000 ROA not before: Thu 01 Jan 2026 12:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25198 IP address blocks: 89.21.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:6a:7a:ad:9c:4c:e9:fb:96:23:75:86:58:cd:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Validity Not Before: Jan 1 12:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e3b905992cb61a677d0b9811fe3f335464bc7a1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a1:a0:ca:ce:89:28:14:90:77:89:1a:9a:65: ef:38:19:2c:8b:51:f2:4d:93:b6:c2:c3:1d:26:ad: d5:fd:80:41:49:49:8b:33:d4:70:16:7f:fc:bb:55: 39:56:38:09:99:98:06:de:da:73:39:92:4a:56:c2: ee:3c:fd:07:07:05:44:de:f5:0c:04:37:52:46:e0: 92:f1:2b:7c:a3:34:93:51:95:ec:95:5a:f1:b1:ab: 6d:b1:b1:86:9d:b5:19:e8:87:aa:f5:5c:dc:6f:84: d6:ac:85:48:66:c5:59:d6:ec:67:d0:cf:d7:91:04: 52:e2:fe:ec:84:4e:82:f1:ab:f5:33:f6:62:8b:f1: b5:f7:aa:cf:56:69:7a:0e:c7:f9:c8:3b:d8:1a:8d: 0e:1c:60:71:04:97:58:26:2c:63:59:41:f6:33:1e: 5e:c6:f6:39:80:f5:7c:da:92:3e:62:01:d5:34:1e: 34:92:8f:ed:0b:0b:99:54:4d:b1:75:00:57:7a:1d: 51:fa:14:10:04:81:43:d1:c8:09:8c:1a:23:50:6d: c4:21:a6:8e:a8:78:1c:66:00:29:ff:b7:d0:56:60: 75:7b:51:48:f3:b4:91:16:73:81:08:5a:ff:c3:c2: 83:cd:21:19:32:be:11:f8:bc:c8:d7:e4:07:be:af: 29:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:B9:05:99:2C:B6:1A:67:7D:0B:98:11:FE:3F:33:54:64:BC:7A:1F X509v3 Authority Key Identifier: keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/47kFmSy2Gmd9C5gR_j8zVGS8eh8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.21.87.0/24 Signature Algorithm: sha256WithRSAEncryption 90:27:c8:c6:04:72:fe:09:ab:11:12:01:ae:99:6a:73:90:3b: 89:a6:73:23:a5:8b:fc:c2:38:90:e9:0e:98:cc:05:95:6a:96: 60:91:bc:e2:f1:80:20:86:4e:84:46:10:24:be:fa:60:a5:e7: 4e:22:89:58:f6:28:e9:b8:74:89:0e:e2:50:47:60:14:a7:ba: b1:28:5b:b0:be:e6:8e:ab:22:ad:dc:3f:09:f4:d2:54:42:5a: 91:d8:c6:83:21:c5:06:cd:07:99:13:06:49:95:69:b5:4d:e4: 27:d0:fd:9d:d7:10:cc:6d:18:c7:42:45:d0:24:a4:b4:76:85: dd:8c:a0:6c:59:47:ba:5e:a8:b0:23:ff:c2:f3:86:e8:33:e0: 7b:a7:b1:53:16:77:96:bb:21:97:ea:5a:87:87:c9:9f:fe:a4: 3c:9c:f7:c6:0c:60:49:fe:92:d5:85:7f:85:8f:c8:04:af:39: 9a:cd:7f:9c:be:3a:54:37:0c:01:b2:86:54:1d:92:0c:fa:9c: fd:d1:fc:e3:ab:eb:5f:12:a8:e7:a7:a2:93:a1:a8:c2:e0:50: 34:4d:cf:bd:0d:a6:a5:d7:2e:02:bd:67:8d:40:a8:aa:76:69: fd:af:cb:97:87:b6:d2:a9:fb:b7:4a:85:ee:3f:a8:8a:ca:16: d8:80:b3:18 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fmp6rZxM6fuWI3WGWM3XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj NWFjOGQwHhcNMjYwMTAxMTIxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlM2I5MDU5OTJjYjYxYTY3N2QwYjk4MTFmZTNmMzM1NDY0YmM3YTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6Ggys6JKBSQd4kammXvOBksi1Hy TZO2wsMdJq3V/YBBSUmLM9RwFn/8u1U5VjgJmZgG3tpzOZJKVsLuPP0HBwVE3vUM BDdSRuCS8St8ozSTUZXslVrxsattsbGGnbUZ6Ieq9Vzcb4TWrIVIZsVZ1uxn0M/X kQRS4v7shE6C8av1M/Zii/G196rPVml6Dsf5yDvYGo0OHGBxBJdYJixjWUH2Mx5e xvY5gPV82pI+YgHVNB40ko/tCwuZVE2xdQBXeh1R+hQQBIFD0cgJjBojUG3EIaaO qHgcZgAp/7fQVmB1e1FI87SRFnOBCFr/w8KDzSEZMr4R+LzI1+QHvq8pWQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOO5BZksthpnfQuYEf4/M1RkvHofMB8GA1UdIwQY MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt MzE4YTI2ZDRhOGM5LzEvNDdrRm1TeTJHbWQ5QzVnUl9qOHpWR1M4ZWg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5 LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWRVXMA0G CSqGSIb3DQEBCwUAA4IBAQCQJ8jGBHL+CasREgGumWpzkDuJpnMjpYv8wjiQ6Q6Y zAWVapZgkbzi8YAghk6ERhAkvvpgpedOIolY9ijpuHSJDuJQR2AUp7qxKFuwvuaO qyKt3D8J9NJUQlqR2MaDIcUGzQeZEwZJlWm1TeQn0P2d1xDMbRjHQkXQJKS0doXd jKBsWUe6XqiwI//C84boM+B7p7FTFneWuyGX6lqHh8mf/qQ8nPfGDGBJ/pLVhX+F j8gErzmazX+cvjpUNwwBsoZUHZIM+pz90fzjq+tfEqjnp6KToajC4FA0Tc+9Daal 1y4CvWeNQKiqdmn9r8uXh7bSqfu3SoXuP6iKyhbYgLMY -----END CERTIFICATE-----Generated at Mon Jan 19 13:54:03 2026 by rpki-client