This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/pMgJ7DyqU5HPBbDvW89xshUu4_o.roa File: pMgJ7DyqU5HPBbDvW89xshUu4_o.roa (raw, json) Hash identifier: tg7TkerHHxzhjcv8Nh0EANlqkUCu4RNg5jarNVpMb6Y= Subject key identifier: A4:C8:09:EC:3C:AA:53:91:CF:05:B0:EF:5B:CF:71:B2:15:2E:E3:FA Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Certificate serial: 019B797E741D700BF5D04D75D4F7856AB2C3 Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/pMgJ7DyqU5HPBbDvW89xshUu4_o.roa Signing time: Thu 01 Jan 2026 12:18:08 +0000 ROA not before: Thu 01 Jan 2026 12:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206987 IP address blocks: 89.21.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 02:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:74:1d:70:0b:f5:d0:4d:75:d4:f7:85:6a:b2:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Validity Not Before: Jan 1 12:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a4c809ec3caa5391cf05b0ef5bcf71b2152ee3fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:21:7b:58:10:d7:e0:ad:af:05:31:30:f8:73: 78:61:19:6e:99:6f:53:ed:70:e8:70:b9:1d:50:d6: f6:27:3f:d9:7e:6e:ea:68:2a:25:f0:51:d0:dc:4f: 57:91:75:aa:73:5a:17:cc:17:6f:8c:94:ed:b8:c1: 56:6e:5e:74:9c:b0:48:95:b4:82:69:87:a8:b2:34: 25:a0:d6:db:71:24:0f:80:ce:9d:1e:ef:a0:96:29: 6e:dc:52:96:66:5c:e3:87:40:1e:6c:ee:31:ce:0e: eb:41:17:13:a0:f3:f0:da:09:d6:95:90:94:a4:9b: 63:da:bc:ae:ae:c6:51:2e:9b:da:ea:5d:4b:6b:28: 36:88:0c:e8:b6:a0:d2:ae:63:32:c7:78:08:5d:91: 1e:75:c2:2f:c0:88:69:2f:64:89:7c:8c:7d:84:ff: cb:f3:7d:29:a8:47:73:11:0f:f8:28:e7:a6:6d:55: a3:b6:f7:cb:09:b3:58:5c:62:ab:08:62:6c:f9:ce: ef:38:93:5f:1c:b9:1a:0c:18:09:37:e2:6a:36:07: 59:ab:ce:3a:f8:16:57:5e:aa:89:c8:cb:ed:4a:bf: 03:3d:af:34:7d:25:9c:2d:52:4e:e0:5d:77:b7:2f: a7:8a:db:a9:3a:ed:d7:4a:bc:75:59:7d:7e:ab:22: bb:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:C8:09:EC:3C:AA:53:91:CF:05:B0:EF:5B:CF:71:B2:15:2E:E3:FA X509v3 Authority Key Identifier: keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/pMgJ7DyqU5HPBbDvW89xshUu4_o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.21.84.0/24 Signature Algorithm: sha256WithRSAEncryption 55:b9:b6:6b:8d:f1:bc:99:2c:ba:44:d5:b9:fd:77:0a:c9:e4: f4:88:40:b4:98:32:83:ab:78:39:e1:ef:9a:ea:18:33:32:ed: 89:8d:65:90:f9:21:b2:53:bf:af:d2:26:83:d1:77:fe:e4:54: c1:de:76:8d:21:8d:3a:e8:e2:df:3d:27:a8:18:fb:92:8a:69: dd:4c:3e:0f:d1:6e:04:d8:16:09:6e:9c:c1:08:42:75:3a:9e: ed:95:87:f9:55:a2:e0:bb:4f:c2:b4:32:12:d7:48:01:c6:f4: 52:f9:ae:cc:9b:69:3d:10:e8:ca:80:53:03:cc:2a:e3:7c:76: 32:5e:83:ea:05:e5:e9:cd:42:af:54:10:1e:cc:ef:13:87:ce: f8:b3:8d:89:0e:f3:26:ff:e1:01:7e:91:ea:ac:3e:6f:e0:67: 6e:0d:5e:7c:2e:3e:f9:ef:32:16:37:34:3c:24:2c:41:ca:65: 5e:e7:90:e7:c4:45:7e:40:ea:97:5f:51:f4:45:3c:43:b8:a9: 9d:5d:da:d9:ab:e4:2e:e4:39:b5:c4:dc:28:79:0a:40:2c:dd: 00:81:c8:e0:24:ca:a6:b3:ca:d2:0b:93:ab:63:6c:f2:d2:5b: 2a:f8:ef:2e:96:96:c4:d1:00:b8:f6:f4:59:6f:2d:41:c8:f9: 30:c4:01:c9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fnQdcAv10E111PeFarLDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj NWFjOGQwHhcNMjYwMTAxMTIxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNGM4MDllYzNjYWE1MzkxY2YwNWIwZWY1YmNmNzFiMjE1MmVlM2ZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCF7WBDX4K2vBTEw+HN4YRlumW9T 7XDocLkdUNb2Jz/Zfm7qaCol8FHQ3E9XkXWqc1oXzBdvjJTtuMFWbl50nLBIlbSC aYeosjQloNbbcSQPgM6dHu+glilu3FKWZlzjh0AebO4xzg7rQRcToPPw2gnWlZCU pJtj2ryursZRLpva6l1Layg2iAzotqDSrmMyx3gIXZEedcIvwIhpL2SJfIx9hP/L 830pqEdzEQ/4KOembVWjtvfLCbNYXGKrCGJs+c7vOJNfHLkaDBgJN+JqNgdZq846 +BZXXqqJyMvtSr8DPa80fSWcLVJO4F13ty+nitupOu3XSrx1WX1+qyK7tQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKTICew8qlORzwWw71vPcbIVLuP6MB8GA1UdIwQY MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt MzE4YTI2ZDRhOGM5LzEvcE1nSjdEeXFVNUhQQmJEdlc4OXhzaFV1NF9vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5 LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWRVUMA0G CSqGSIb3DQEBCwUAA4IBAQBVubZrjfG8mSy6RNW5/XcKyeT0iEC0mDKDq3g54e+a 6hgzMu2JjWWQ+SGyU7+v0iaD0Xf+5FTB3naNIY066OLfPSeoGPuSimndTD4P0W4E 2BYJbpzBCEJ1Op7tlYf5VaLgu0/CtDIS10gBxvRS+a7Mm2k9EOjKgFMDzCrjfHYy XoPqBeXpzUKvVBAezO8Th874s42JDvMm/+EBfpHqrD5v4GduDV58Lj757zIWNzQ8 JCxBymVe55DnxEV+QOqXX1H0RTxDuKmdXdrZq+Qu5Dm1xNwoeQpALN0AgcjgJMqm s8rSC5OrY2zy0lsq+O8ulpbE0QC49vRZby1ByPkwxAHJ -----END CERTIFICATE-----Generated at Sun Jan 11 13:07:31 2026 by rpki-client