This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/9YtEkRCHIj4dmSp4JS1F5AqaY_4.roa File: 9YtEkRCHIj4dmSp4JS1F5AqaY_4.roa (raw, json) Hash identifier: i9Buut1BCksnh/lH3srnXnRKTpe4zi3FtcU/f7Wiu7U= Subject key identifier: F5:8B:44:91:10:87:22:3E:1D:99:2A:78:25:2D:45:E4:0A:9A:63:FE Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Certificate serial: 019B797E68161FB5539A3E496CB78EBCB6F8 Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/9YtEkRCHIj4dmSp4JS1F5AqaY_4.roa Signing time: Thu 01 Jan 2026 12:18:05 +0000 ROA not before: Thu 01 Jan 2026 12:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16276 IP address blocks: 89.251.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:68:16:1f:b5:53:9a:3e:49:6c:b7:8e:bc:b6:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Validity Not Before: Jan 1 12:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f58b44911087223e1d992a78252d45e40a9a63fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:73:08:db:84:24:15:e2:3b:e7:9a:d4:d7:3a: 6c:31:fc:a9:93:b1:81:4f:ea:50:cc:1b:65:a1:0a: fa:30:d5:44:a1:e5:bd:5a:77:61:19:9d:96:26:d3: dd:a5:bc:32:ee:85:71:71:8b:bb:0c:67:96:de:5b: 21:80:2d:b1:e2:37:46:99:01:31:1c:2d:63:a7:9d: 8a:44:a9:ca:8c:08:8e:7d:ef:71:f4:a7:68:12:0c: 8a:88:7c:4a:e2:da:c0:02:94:33:28:bb:8c:06:f9: 4f:cf:e7:c6:d6:3a:eb:54:31:ae:b9:fd:ce:d7:e6: 84:4b:10:52:ba:37:d8:f8:b4:ce:56:59:6c:f4:80: 73:58:cb:86:a1:2e:91:4a:75:3c:54:4c:af:58:e2: e9:a4:8b:05:1e:ae:95:73:94:b3:50:45:73:2d:9c: 83:50:45:d7:96:d2:06:c8:09:4c:ad:f9:23:17:37: 72:63:59:c2:04:5c:2d:34:97:3d:44:3b:e5:6f:5b: 82:db:86:a5:21:b6:42:86:86:73:21:23:3c:e7:55: e4:f8:a2:6f:12:85:36:ef:f3:7a:4f:07:97:a0:5d: ec:44:a5:15:3c:6e:10:98:d5:2f:07:89:c6:93:1c: f5:8d:99:f9:60:48:df:b7:94:d2:c6:b1:e1:27:85: 1b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:8B:44:91:10:87:22:3E:1D:99:2A:78:25:2D:45:E4:0A:9A:63:FE X509v3 Authority Key Identifier: keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/9YtEkRCHIj4dmSp4JS1F5AqaY_4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.251.28.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:72:7e:28:73:9f:fc:d4:ac:74:75:41:65:01:61:82:9e:78: a1:82:6f:ca:cf:b8:e0:36:9b:d6:3e:5e:49:e3:21:f0:0d:5c: 56:36:a3:36:8e:06:a4:aa:9b:00:13:56:45:d7:66:c4:de:14: b1:5b:0d:d1:98:86:43:63:ed:d2:bf:34:37:9d:51:bb:e9:7b: 59:b0:dc:11:9a:09:63:60:49:e7:8a:bd:ae:b5:65:af:08:0e: 70:2d:70:92:f2:54:5d:5a:01:b6:6d:28:89:e6:1e:8b:14:33: b5:f6:4d:0f:5b:19:b3:b9:fc:eb:8f:82:72:31:47:1e:46:09: 6e:fc:5a:6b:0c:04:7e:73:dd:ca:f2:5b:98:01:4e:b2:ec:58: 64:4b:ff:e1:fe:9d:d3:af:ab:79:d2:ca:65:f9:af:6a:e8:13: 87:7f:43:1c:54:59:83:b8:fb:68:4f:9e:1f:9d:09:64:27:52: 87:8c:ce:aa:b4:a4:fd:f4:5f:32:27:d7:fd:78:26:a0:e3:93: cf:10:f2:56:d3:33:29:9e:ed:18:b9:ba:f5:dc:4d:05:dd:94: 09:6b:19:53:b1:86:50:3d:52:bd:c1:47:6e:8c:54:3f:1e:dd: f4:e4:4e:ca:b2:7c:5a:bc:f5:74:25:75:e4:12:e2:b0:af:cd: 33:aa:9c:a3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fmgWH7VTmj5JbLeOvLb4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj NWFjOGQwHhcNMjYwMTAxMTIxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNThiNDQ5MTEwODcyMjNlMWQ5OTJhNzgyNTJkNDVlNDBhOWE2M2ZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXMI24QkFeI755rU1zpsMfypk7GB T+pQzBtloQr6MNVEoeW9WndhGZ2WJtPdpbwy7oVxcYu7DGeW3lshgC2x4jdGmQEx HC1jp52KRKnKjAiOfe9x9KdoEgyKiHxK4trAApQzKLuMBvlPz+fG1jrrVDGuuf3O 1+aESxBSujfY+LTOVlls9IBzWMuGoS6RSnU8VEyvWOLppIsFHq6Vc5SzUEVzLZyD UEXXltIGyAlMrfkjFzdyY1nCBFwtNJc9RDvlb1uC24alIbZChoZzISM851Xk+KJv EoU27/N6TweXoF3sRKUVPG4QmNUvB4nGkxz1jZn5YEjft5TSxrHhJ4UbMQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPWLRJEQhyI+HZkqeCUtReQKmmP+MB8GA1UdIwQY MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt MzE4YTI2ZDRhOGM5LzEvOVl0RWtSQ0hJajRkbVNwNEpTMUY1QXFhWV80LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5 LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWfscMA0G CSqGSIb3DQEBCwUAA4IBAQCPcn4oc5/81Kx0dUFlAWGCnnihgm/Kz7jgNpvWPl5J 4yHwDVxWNqM2jgakqpsAE1ZF12bE3hSxWw3RmIZDY+3SvzQ3nVG76XtZsNwRmglj YEnnir2utWWvCA5wLXCS8lRdWgG2bSiJ5h6LFDO19k0PWxmzufzrj4JyMUceRglu /FprDAR+c93K8luYAU6y7FhkS//h/p3Tr6t50spl+a9q6BOHf0McVFmDuPtoT54f nQlkJ1KHjM6qtKT99F8yJ9f9eCag45PPEPJW0zMpnu0Yubr13E0F3ZQJaxlTsYZQ PVK9wUdujFQ/Ht305E7KsnxavPV0JXXkEuKwr80zqpyj -----END CERTIFICATE-----Generated at Mon Jan 19 13:53:23 2026 by rpki-client