This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/0H4yqkBQ_Tw0Wc2hgXpXoAs6y74.roa File: 0H4yqkBQ_Tw0Wc2hgXpXoAs6y74.roa (raw, json) Hash identifier: TXGYHpEkbA/gmBzhb7MEKc4sA2Fqy0eb/p6I+gL0THg= Subject key identifier: D0:7E:32:AA:40:50:FD:3C:34:59:CD:A1:81:7A:57:A0:0B:3A:CB:BE Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9 Certificate serial: 019B7C8091E119ACF1864E59B22342B64184 Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/0H4yqkBQ_Tw0Wc2hgXpXoAs6y74.roa Signing time: Fri 02 Jan 2026 02:19:19 +0000 ROA not before: Fri 02 Jan 2026 02:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34723 IP address blocks: 86.106.200.0/21 maxlen: 24 89.45.16.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 04:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:91:e1:19:ac:f1:86:4e:59:b2:23:42:b6:41:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9 Validity Not Before: Jan 2 02:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d07e32aa4050fd3c3459cda1817a57a00b3acbbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:6e:8f:46:41:83:35:48:e5:81:2b:57:14:ca: 61:e7:69:fd:1c:ea:28:10:78:c3:8e:28:3d:83:ff: 99:21:f6:ea:cb:79:c7:cf:60:72:a5:8c:cf:4f:b4: 34:a5:36:bf:dd:96:da:38:27:16:b4:76:62:9d:97: 46:8a:f4:9d:f4:ab:8f:8b:9c:af:3f:79:5f:c3:4c: d0:4e:a0:fd:2f:de:17:8e:93:a9:47:bf:cc:1c:f7: 09:fb:f2:ce:3d:d2:ab:b7:cf:3c:0c:5b:a7:60:52: 8b:31:4f:a8:3d:4d:6b:22:8c:fd:02:f8:04:59:8e: ae:c8:6f:ac:2f:2e:c7:2a:57:6d:ae:a1:4b:cb:b9: 3a:e2:7e:45:e2:6f:c0:3d:e7:ce:ff:4f:25:15:42: e0:cb:6c:59:4d:4f:20:a8:8a:5d:4a:18:00:93:68: dd:9f:55:8e:6b:33:c5:6d:40:81:e0:be:ac:ed:5f: bd:92:97:f9:ae:c5:ad:0a:6b:d0:71:65:9c:9f:25: a9:e0:8c:ec:56:01:33:e2:d8:72:80:90:be:dc:93: fe:05:45:62:b0:48:4f:e6:99:3c:b8:98:76:1c:b6: f7:e6:6d:76:84:ea:33:70:07:21:af:81:2d:ee:27: d3:9a:82:0e:8a:26:10:c3:08:fd:32:1a:1d:4b:83: c5:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:7E:32:AA:40:50:FD:3C:34:59:CD:A1:81:7A:57:A0:0B:3A:CB:BE X509v3 Authority Key Identifier: keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/0H4yqkBQ_Tw0Wc2hgXpXoAs6y74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.106.200.0/21 89.45.16.0/21 Signature Algorithm: sha256WithRSAEncryption 41:21:9b:0c:1b:69:89:3d:47:e1:fb:ff:30:7d:ac:7c:48:a9: 46:24:b0:fe:e2:25:14:12:3c:10:26:5a:78:37:4a:39:54:fc: dc:0d:c7:a0:4a:8e:46:8f:47:5b:3b:10:38:55:1f:4f:43:09: f4:e4:20:b0:87:da:37:05:c5:d8:7d:6e:1e:8c:a6:15:ea:94: eb:38:a5:93:27:ac:16:2d:68:d5:5d:46:d3:6d:42:1f:f4:f0: 48:d9:88:74:d4:22:29:e0:18:7d:76:b0:0c:e7:23:81:8d:0c: 35:74:f4:a2:22:72:a0:d6:22:ad:98:a8:67:93:d5:2f:55:ce: 74:b1:de:4c:1c:c7:5f:a4:1c:a9:9c:0c:47:9e:d7:73:05:68: 24:eb:15:29:40:32:03:8a:1e:99:c3:1a:9a:14:da:1b:94:3e: 29:b6:6a:c1:7b:69:98:8d:54:f2:5f:a1:fa:c5:69:b9:a8:e5: 7b:81:04:db:d8:9a:a6:50:ec:2a:3e:15:a5:52:4b:e7:09:62: 4c:1b:7d:be:51:41:41:09:0d:3f:b8:46:64:97:97:eb:46:63: 8a:6e:04:e0:98:54:fb:bc:05:cf:f7:ca:63:a4:37:14:28:f7: ee:7b:cf:b5:8a:64:86:bd:65:64:dd:b9:6a:58:cc:59:95:bb: e0:3c:4d:12 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8gJHhGazxhk5ZsiNCtkGEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlNTg5NTJkMzkzOTM1ZjBkM2JjZTgxNGZkOTE3OGQwNDY5 M2FlYjkwHhcNMjYwMTAyMDIxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMDdlMzJhYTQwNTBmZDNjMzQ1OWNkYTE4MTdhNTdhMDBiM2FjYmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4G6PRkGDNUjlgStXFMph52n9HOoo EHjDjig9g/+ZIfbqy3nHz2BypYzPT7Q0pTa/3ZbaOCcWtHZinZdGivSd9KuPi5yv P3lfw0zQTqD9L94XjpOpR7/MHPcJ+/LOPdKrt888DFunYFKLMU+oPU1rIoz9AvgE WY6uyG+sLy7HKldtrqFLy7k64n5F4m/APefO/08lFULgy2xZTU8gqIpdShgAk2jd n1WOazPFbUCB4L6s7V+9kpf5rsWtCmvQcWWcnyWp4IzsVgEz4thygJC+3JP+BUVi sEhP5pk8uJh2HLb35m12hOozcAchr4Et7ifTmoIOiiYQwwj9MhodS4PFEQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNB+MqpAUP08NFnNoYF6V6ALOsu+MB8GA1UdIwQY MBaAFP5YlS05OTXw07zoFP2ReNBGk665MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUt NWQ0OGI2NWNlNTczLzEvMEg0eXFrQlFfVHcwV2MyaGdYcFhvQXM2eTc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUtNWQ0OGI2NWNlNTcz LzEvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDVmrIAwQD WS0QMA0GCSqGSIb3DQEBCwUAA4IBAQBBIZsMG2mJPUfh+/8wfax8SKlGJLD+4iUU EjwQJlp4N0o5VPzcDcegSo5Gj0dbOxA4VR9PQwn05CCwh9o3BcXYfW4ejKYV6pTr OKWTJ6wWLWjVXUbTbUIf9PBI2Yh01CIp4Bh9drAM5yOBjQw1dPSiInKg1iKtmKhn k9UvVc50sd5MHMdfpBypnAxHntdzBWgk6xUpQDIDih6ZwxqaFNoblD4ptmrBe2mY jVTyX6H6xWm5qOV7gQTb2JqmUOwqPhWlUkvnCWJMG32+UUFBCQ0/uEZkl5frRmOK bgTgmFT7vAXP98pjpDcUKPfue8+1imSGvWVk3blqWMxZlbvgPE0S -----END CERTIFICATE-----Generated at Wed Jan 21 10:48:12 2026 by rpki-client