This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/N7A86p6PRImcj39W7i3dmRULO6M.roa File: N7A86p6PRImcj39W7i3dmRULO6M.roa (raw, json) Hash identifier: aoYmassX8XrXtggl4g+64gU3So7LOrBiC8s9TUO4xas= Subject key identifier: 37:B0:3C:EA:9E:8F:44:89:9C:8F:7F:56:EE:2D:DD:99:15:0B:3B:A3 Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9 Certificate serial: 019B7C809296E8B5061D2ABE42C26549FDAB Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/N7A86p6PRImcj39W7i3dmRULO6M.roa Signing time: Fri 02 Jan 2026 02:19:19 +0000 ROA not before: Fri 02 Jan 2026 02:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35161 IP address blocks: 89.47.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 04:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:92:96:e8:b5:06:1d:2a:be:42:c2:65:49:fd:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9 Validity Not Before: Jan 2 02:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=37b03cea9e8f44899c8f7f56ee2ddd99150b3ba3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:13:3a:36:5e:e6:06:07:f0:c7:9d:0f:d9:21: df:1a:f9:82:28:c0:b6:85:8f:4f:11:fc:cd:bc:29: eb:ad:ea:2e:5e:93:bf:16:70:a5:63:72:51:0a:6e: f5:64:3b:09:ae:1c:db:28:f3:fa:35:ff:6e:f7:c8: 07:1f:b1:4c:a4:ea:71:ea:91:52:ca:19:ee:af:0c: 7e:d2:60:26:49:95:a8:89:10:06:70:22:8b:68:5f: ca:e5:03:8f:d5:3b:35:bb:2b:b1:f3:bd:eb:c7:0b: 6a:14:70:cc:39:7b:48:5b:b0:1b:cb:c8:96:96:e8: da:d9:d7:ba:5a:0a:89:41:c2:40:69:f5:2a:9a:f6: 74:03:7a:c4:aa:8e:f4:57:eb:ae:05:f5:3a:a0:8e: cb:d9:19:32:f0:58:77:be:f4:61:c8:c9:b4:76:61: d9:a4:9c:77:a5:3e:66:2e:ee:8c:83:32:78:da:70: 76:49:ce:87:f1:8a:e6:ad:93:93:9a:25:4e:d4:f8: 73:ee:f1:01:2e:23:5d:66:50:67:6e:82:08:8d:30: d2:81:a2:94:c7:df:d1:84:c9:3b:e2:26:3d:dd:88: 59:af:a1:bf:56:1a:a9:bd:41:78:9f:8e:f8:6b:b9: d0:ed:cb:fe:3b:b9:c6:28:a2:37:63:9a:99:50:9a: d7:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:B0:3C:EA:9E:8F:44:89:9C:8F:7F:56:EE:2D:DD:99:15:0B:3B:A3 X509v3 Authority Key Identifier: keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/N7A86p6PRImcj39W7i3dmRULO6M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.47.54.0/24 Signature Algorithm: sha256WithRSAEncryption a2:37:a6:28:ef:cf:98:89:9d:12:36:be:07:a7:37:60:76:24: 3c:61:03:82:8d:8e:d8:29:a5:cd:87:20:c8:01:23:91:d9:0c: 26:fe:07:53:2f:d5:04:a9:8b:cf:0b:8c:35:72:22:ae:17:47: 37:4e:7a:96:88:f7:66:17:04:d9:9c:de:84:d6:6c:df:07:39: ad:eb:25:0a:21:9e:ae:bc:45:07:94:b2:3e:32:1c:f4:34:de: 9f:a8:d4:42:f8:f4:73:36:1d:06:00:2e:67:72:38:9a:2c:c5: db:92:26:87:28:03:09:7c:2a:c3:d4:98:a0:23:d3:9d:39:09: a9:94:a7:53:e9:46:53:a4:bf:d2:ec:7c:33:81:7a:ac:c9:32: b6:88:08:65:ae:9f:d9:b0:88:f7:58:7c:f7:f8:02:de:b3:66: de:a3:26:dc:41:d5:d9:f2:5e:7e:71:70:5d:f0:ad:38:62:07: 5b:15:4c:b7:71:a6:4e:68:4b:6c:9b:5d:b9:8a:b6:d6:ad:a6: c5:1b:d5:bb:31:1f:19:7f:8e:a0:17:f6:17:b6:56:87:b7:1d: d0:39:9e:75:fa:d9:7a:3e:99:02:91:d7:f0:8f:37:f7:42:61: 02:11:63:bb:fe:63:2b:14:8d:5b:1a:bb:29:c5:f2:cb:24:44: b9:df:b2:d2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gJKW6LUGHSq+QsJlSf2rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlNTg5NTJkMzkzOTM1ZjBkM2JjZTgxNGZkOTE3OGQwNDY5 M2FlYjkwHhcNMjYwMTAyMDIxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzN2IwM2NlYTllOGY0NDg5OWM4ZjdmNTZlZTJkZGQ5OTE1MGIzYmEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphM6Nl7mBgfwx50P2SHfGvmCKMC2 hY9PEfzNvCnrreouXpO/FnClY3JRCm71ZDsJrhzbKPP6Nf9u98gHH7FMpOpx6pFS yhnurwx+0mAmSZWoiRAGcCKLaF/K5QOP1Ts1uyux873rxwtqFHDMOXtIW7Aby8iW luja2de6WgqJQcJAafUqmvZ0A3rEqo70V+uuBfU6oI7L2Rky8Fh3vvRhyMm0dmHZ pJx3pT5mLu6MgzJ42nB2Sc6H8YrmrZOTmiVO1Phz7vEBLiNdZlBnboIIjTDSgaKU x9/RhMk74iY93YhZr6G/VhqpvUF4n474a7nQ7cv+O7nGKKI3Y5qZUJrXzQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDewPOqej0SJnI9/Vu4t3ZkVCzujMB8GA1UdIwQY MBaAFP5YlS05OTXw07zoFP2ReNBGk665MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUt NWQ0OGI2NWNlNTczLzEvTjdBODZwNlBSSW1jajM5VzdpM2RtUlVMTzZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUtNWQ0OGI2NWNlNTcz LzEvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWS82MA0G CSqGSIb3DQEBCwUAA4IBAQCiN6Yo78+YiZ0SNr4HpzdgdiQ8YQOCjY7YKaXNhyDI ASOR2Qwm/gdTL9UEqYvPC4w1ciKuF0c3TnqWiPdmFwTZnN6E1mzfBzmt6yUKIZ6u vEUHlLI+Mhz0NN6fqNRC+PRzNh0GAC5ncjiaLMXbkiaHKAMJfCrD1JigI9OdOQmp lKdT6UZTpL/S7HwzgXqsyTK2iAhlrp/ZsIj3WHz3+ALes2beoybcQdXZ8l5+cXBd 8K04YgdbFUy3caZOaEtsm125irbWrabFG9W7MR8Zf46gF/YXtlaHtx3QOZ51+tl6 PpkCkdfwjzf3QmECEWO7/mMrFI1bGrspxfLLJES537LS -----END CERTIFICATE-----Generated at Wed Jan 21 10:47:24 2026 by rpki-client