This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/0LLCIOYO2u2ncsAa9ch0Fxek_0g.roa File: 0LLCIOYO2u2ncsAa9ch0Fxek_0g.roa (raw, json) Hash identifier: TfGSU8XCSgVMZOD41y1990e2kIyriSC3XmqU7n3kfvE= Subject key identifier: D0:B2:C2:20:E6:0E:DA:ED:A7:72:C0:1A:F5:C8:74:17:17:A4:FF:48 Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9 Certificate serial: 019B797EF547DF09CF591FEA0F73EAD4956C Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/0LLCIOYO2u2ncsAa9ch0Fxek_0g.roa Signing time: Thu 01 Jan 2026 12:18:42 +0000 ROA not before: Thu 01 Jan 2026 12:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58212 IP address blocks: 89.249.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:f5:47:df:09:cf:59:1f:ea:0f:73:ea:d4:95:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9 Validity Not Before: Jan 1 12:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d0b2c220e60edaeda772c01af5c8741717a4ff48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:9b:37:41:da:7a:5a:b1:bd:3e:1f:b8:05:03: 75:8d:66:a1:16:60:91:5b:9c:46:d6:18:db:41:38: 21:5a:8b:83:b9:fc:7d:97:f8:15:21:9c:7a:3c:1a: cd:f8:34:dd:24:16:d9:73:d4:86:a6:fd:a6:1c:62: a0:dc:fc:6f:5a:91:09:1e:77:ed:cf:a5:3b:a0:76: 4d:c6:29:c3:1f:cd:56:db:08:e8:b3:b7:7b:f8:26: 00:5d:51:28:71:a6:f1:24:1b:7c:1c:6a:95:1a:0d: ea:57:44:a7:d0:3a:32:3f:cf:94:ab:85:ee:29:ed: 66:2b:d1:69:98:65:6a:06:e2:03:83:90:f5:96:7c: d3:d7:6f:16:6f:cd:77:2b:a6:4f:a6:5a:2f:38:85: 85:67:0b:c2:b6:c5:50:91:db:3a:0f:03:45:62:45: f1:a7:65:a0:7c:6e:37:43:35:65:24:5a:fb:9e:bf: 0c:2c:1b:4f:60:68:16:d5:64:1b:93:af:5f:cc:60: 71:8a:32:0c:98:d3:01:5f:23:22:e4:55:cd:aa:34: b2:27:e5:26:9b:5f:8a:b7:8f:1e:4d:03:ad:84:da: 62:65:33:f6:06:c6:75:c3:bb:f6:5c:54:05:a5:a5: 31:db:53:44:f4:df:5a:84:54:cf:ab:64:29:2d:19: e2:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:B2:C2:20:E6:0E:DA:ED:A7:72:C0:1A:F5:C8:74:17:17:A4:FF:48 X509v3 Authority Key Identifier: keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/0LLCIOYO2u2ncsAa9ch0Fxek_0g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.249.207.0/24 Signature Algorithm: sha256WithRSAEncryption d7:47:8b:5e:ee:4c:33:d2:33:fe:12:d7:0d:c0:19:79:55:2f: c5:b3:57:42:b7:0d:1c:b2:1b:fd:c2:fc:a3:25:1a:4e:b0:a4: 77:df:24:a5:a8:ee:9b:b8:2c:9b:58:a3:7d:38:6c:b2:bc:c6: 46:83:c9:d8:dd:c4:fb:6f:14:1d:09:d4:c3:23:9b:23:c4:6e: ff:23:16:6d:db:52:ae:97:a1:2e:63:5e:05:e1:4a:9a:65:30: c7:0d:94:89:f8:ba:f6:16:5e:35:2e:29:3e:05:47:ad:65:8d: 54:a9:43:e5:96:ad:80:97:44:45:d9:4a:5f:d0:f8:1b:b8:f9: 1b:dd:96:e8:90:b2:dc:8e:9e:d9:79:63:b3:0f:81:71:32:49: ab:4f:f7:62:a8:5b:68:ef:5c:49:e7:ea:a1:f3:5f:89:4a:15: 68:72:a7:1e:f0:e9:65:f0:eb:e6:22:f4:d2:95:47:8f:10:96: 65:14:85:74:af:be:90:48:29:76:58:07:c7:90:dd:d9:da:3d: f5:b2:88:a0:af:31:0e:af:df:87:94:17:68:91:14:55:d6:b6: 96:5c:5c:8b:f4:21:9a:9a:87:c8:5c:f5:ca:05:8a:38:fb:82: 6b:d6:af:75:bf:01:5c:b8:ed:ed:9d:dc:98:39:f3:fc:2a:94: 97:40:65:80 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fvVH3wnPWR/qD3Pq1JVsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzIyZTQ1MTNhMzk2NzhkOGFiMjNiMmQ2NDk3NzUzNDA1 MThjYjkwHhcNMjYwMTAxMTIxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMGIyYzIyMGU2MGVkYWVkYTc3MmMwMWFmNWM4NzQxNzE3YTRmZjQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJs3Qdp6WrG9Ph+4BQN1jWahFmCR W5xG1hjbQTghWouDufx9l/gVIZx6PBrN+DTdJBbZc9SGpv2mHGKg3PxvWpEJHnft z6U7oHZNxinDH81W2wjos7d7+CYAXVEocabxJBt8HGqVGg3qV0Sn0DoyP8+Uq4Xu Ke1mK9FpmGVqBuIDg5D1lnzT128Wb813K6ZPplovOIWFZwvCtsVQkds6DwNFYkXx p2WgfG43QzVlJFr7nr8MLBtPYGgW1WQbk69fzGBxijIMmNMBXyMi5FXNqjSyJ+Um m1+Kt48eTQOthNpiZTP2BsZ1w7v2XFQFpaUx21NE9N9ahFTPq2QpLRnizwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNCywiDmDtrtp3LAGvXIdBcXpP9IMB8GA1UdIwQY MBaAFA1yLkUTo5Z42KsjstZJd1NAUYy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDIt MzQyNWIxMjVlYWE3LzEvMExMQ0lPWU8ydTJuY3NBYTljaDBGeGVrXzBnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDItMzQyNWIxMjVlYWE3 LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWfnPMA0G CSqGSIb3DQEBCwUAA4IBAQDXR4te7kwz0jP+EtcNwBl5VS/Fs1dCtw0cshv9wvyj JRpOsKR33ySlqO6buCybWKN9OGyyvMZGg8nY3cT7bxQdCdTDI5sjxG7/IxZt21Ku l6EuY14F4UqaZTDHDZSJ+Lr2Fl41Lik+BUetZY1UqUPllq2Al0RF2Upf0PgbuPkb 3ZbokLLcjp7ZeWOzD4FxMkmrT/diqFto71xJ5+qh81+JShVocqce8Oll8OvmIvTS lUePEJZlFIV0r76QSCl2WAfHkN3Z2j31soigrzEOr9+HlBdokRRV1raWXFyL9CGa mofIXPXKBYo4+4Jr1q91vwFcuO3tndyYOfP8KpSXQGWA -----END CERTIFICATE-----Generated at Sat Jan 10 21:05:57 2026 by rpki-client