This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/I9zpyWAN-xNWTvwD3jTc-h-2YB4.roa File: I9zpyWAN-xNWTvwD3jTc-h-2YB4.roa (raw, json) Hash identifier: 1D2AsC3t5Oo+fCH9DuB+RX3mIGavPSGBYdO7E8JcruM= Subject key identifier: 23:DC:E9:C9:60:0D:FB:13:56:4E:FC:03:DE:34:DC:FA:1F:B6:60:1E Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9 Certificate serial: 019B7C8090BCA007EF687CD6D90BC75670B9 Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/I9zpyWAN-xNWTvwD3jTc-h-2YB4.roa Signing time: Fri 02 Jan 2026 02:19:19 +0000 ROA not before: Fri 02 Jan 2026 02:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31554 IP address blocks: 89.33.5.0/24 maxlen: 24 89.33.248.0/23 maxlen: 23 89.35.160.0/23 maxlen: 23 89.37.156.0/23 maxlen: 23 89.39.110.0/24 maxlen: 24 89.44.214.0/23 maxlen: 23 188.212.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 04:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:90:bc:a0:07:ef:68:7c:d6:d9:0b:c7:56:70:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9 Validity Not Before: Jan 2 02:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=23dce9c9600dfb13564efc03de34dcfa1fb6601e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:6a:90:22:d0:2a:9e:ed:99:1b:79:70:8d:0b: 4d:83:c7:43:20:ab:4b:27:4d:27:d9:21:c9:25:5f: 73:d7:f8:e0:0d:2a:f1:62:48:44:a8:67:94:8a:44: f5:3c:f1:e5:46:54:57:9c:5e:8b:ca:46:6b:60:25: d6:aa:7d:b4:ac:e2:cd:02:ad:01:ab:60:8e:44:08: 92:6a:a1:e2:14:c2:36:c4:ff:63:8d:ab:f0:f0:ee: 18:e5:17:f3:22:54:8a:c3:8e:3d:27:c3:92:bf:21: 8e:4c:ca:6d:c9:00:89:24:b8:da:64:ba:fb:0c:31: e2:c2:d3:55:74:8d:9d:04:11:0f:a5:75:21:98:aa: 2c:e1:b5:4e:79:b3:fa:76:c6:37:06:d8:5b:cb:57: 0e:bc:51:b6:7a:d5:19:44:7d:d0:bc:37:30:68:de: cf:64:5a:ce:eb:1f:8d:8d:36:2a:1e:e6:1d:3d:b7: 22:f1:dd:f9:79:fa:00:bb:c4:bf:d3:e6:e0:46:0a: 1c:a6:d9:5a:ca:52:79:23:21:b2:cc:09:70:f9:ad: e4:36:b1:4e:56:e3:fd:bd:16:d5:02:26:bc:11:f7: 53:2f:1c:0d:a9:e5:c0:9e:14:e3:6d:ff:dc:66:46: a5:95:3f:49:9d:75:0c:89:1e:cb:a6:19:5c:d9:23: 04:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:DC:E9:C9:60:0D:FB:13:56:4E:FC:03:DE:34:DC:FA:1F:B6:60:1E X509v3 Authority Key Identifier: keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/I9zpyWAN-xNWTvwD3jTc-h-2YB4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.33.5.0/24 89.33.248.0/23 89.35.160.0/23 89.37.156.0/23 89.39.110.0/24 89.44.214.0/23 188.212.134.0/24 Signature Algorithm: sha256WithRSAEncryption cb:10:1e:75:29:07:33:20:88:fe:bf:87:d5:2d:ef:22:14:55: e0:cc:a3:58:36:de:e6:e3:b1:87:e4:6e:c1:38:a7:a1:80:ee: 66:cd:92:19:62:f0:d1:2c:c2:83:53:85:4b:26:c6:37:f6:3a: e4:61:ab:37:bc:90:d7:61:21:a9:da:c1:de:0a:b9:55:32:be: 0a:48:59:17:a6:db:61:c2:37:dc:8c:07:ed:92:8e:06:d7:28: 02:2a:b1:f4:14:7d:af:4a:f1:0f:77:21:d8:c2:f0:12:4e:f1: 87:49:2e:c6:82:11:fe:33:77:7d:4a:fc:9f:4f:a6:96:14:b8: db:8b:1d:da:45:bc:02:97:74:7b:da:01:ee:36:ee:3a:36:ca: 5e:62:7b:68:23:e7:52:d3:69:e9:2c:f2:23:ae:1e:a0:09:f8: 5f:14:3e:b8:19:8d:62:65:f5:ec:81:0e:75:75:97:91:c0:55: f7:76:87:e1:80:92:1e:23:6c:3a:6c:b0:97:3f:51:9b:8b:bf: 67:91:79:17:62:48:9e:fe:24:71:cc:9c:46:7b:b7:fb:b4:b4: 47:e0:ba:05:4f:a8:cf:2f:43:9e:21:80:53:06:e2:42:8c:69: d4:2c:6c:78:eb:67:66:73:43:17:e9:36:4f:63:8d:70:18:ad: 8c:59:c8:be -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt8gJC8oAfvaHzW2QvHVnC5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlNTg5NTJkMzkzOTM1ZjBkM2JjZTgxNGZkOTE3OGQwNDY5 M2FlYjkwHhcNMjYwMTAyMDIxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyM2RjZTljOTYwMGRmYjEzNTY0ZWZjMDNkZTM0ZGNmYTFmYjY2MDFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mqQItAqnu2ZG3lwjQtNg8dDIKtL J00n2SHJJV9z1/jgDSrxYkhEqGeUikT1PPHlRlRXnF6LykZrYCXWqn20rOLNAq0B q2CORAiSaqHiFMI2xP9jjavw8O4Y5RfzIlSKw449J8OSvyGOTMptyQCJJLjaZLr7 DDHiwtNVdI2dBBEPpXUhmKos4bVOebP6dsY3Bthby1cOvFG2etUZRH3QvDcwaN7P ZFrO6x+NjTYqHuYdPbci8d35efoAu8S/0+bgRgocptlaylJ5IyGyzAlw+a3kNrFO VuP9vRbVAia8EfdTLxwNqeXAnhTjbf/cZkallT9JnXUMiR7Lphlc2SME9QIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFCPc6clgDfsTVk78A9403PoftmAeMB8GA1UdIwQY MBaAFP5YlS05OTXw07zoFP2ReNBGk665MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUt NWQ0OGI2NWNlNTczLzEvSTl6cHlXQU4teE5XVHZ3RDNqVGMtaC0yWUI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUtNWQ0OGI2NWNlNTcz LzEvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAWSEFAwQB WSH4AwQBWSOgAwQBWSWcAwQAWSduAwQBWSzWAwQAvNSGMA0GCSqGSIb3DQEBCwUA A4IBAQDLEB51KQczIIj+v4fVLe8iFFXgzKNYNt7m47GH5G7BOKehgO5mzZIZYvDR LMKDU4VLJsY39jrkYas3vJDXYSGp2sHeCrlVMr4KSFkXptthwjfcjAftko4G1ygC KrH0FH2vSvEPdyHYwvASTvGHSS7GghH+M3d9SvyfT6aWFLjbix3aRbwCl3R72gHu Nu46NspeYntoI+dS02npLPIjrh6gCfhfFD64GY1iZfXsgQ51dZeRwFX3dofhgJIe I2w6bLCXP1Gbi79nkXkXYkie/iRxzJxGe7f7tLRH4LoFT6jPL0OeIYBTBuJCjGnU LGx462dmc0MX6TZPY41wGK2MWci+ -----END CERTIFICATE-----Generated at Wed Jan 21 10:48:33 2026 by rpki-client