This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/54lg5Z3PwYcVlmy8U--OorXyIRU.roa File: 54lg5Z3PwYcVlmy8U--OorXyIRU.roa (raw, json) Hash identifier: p4H+ojtQvC4UXZDuYUx4ZnC8qPB6jzl83dV6d963YfA= Subject key identifier: E7:89:60:E5:9D:CF:C1:87:15:96:6C:BC:53:EF:8E:A2:B5:F2:21:15 Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9 Certificate serial: 019B797EF2418511BE390574BFEB816CC520 Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/54lg5Z3PwYcVlmy8U--OorXyIRU.roa Signing time: Thu 01 Jan 2026 12:18:41 +0000 ROA not before: Thu 01 Jan 2026 12:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13335 IP address blocks: 89.249.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:f2:41:85:11:be:39:05:74:bf:eb:81:6c:c5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9 Validity Not Before: Jan 1 12:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e78960e59dcfc18715966cbc53ef8ea2b5f22115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:31:90:13:1c:84:8f:51:46:d7:91:f1:a1:9d: 24:db:b8:93:24:e1:b6:e5:78:0b:2d:40:b3:a2:65: 10:9e:0c:1b:68:2c:47:f8:75:90:ce:9b:0b:6f:7a: 34:88:38:d2:35:f9:b5:35:69:50:97:da:f7:d5:3b: ea:d0:e2:d3:e9:63:66:3a:83:ba:af:69:16:98:ba: de:1b:71:34:59:c2:4b:cd:59:55:c9:b8:24:72:54: e8:26:cd:96:ce:b6:0c:47:0a:10:6b:2e:63:b7:fa: 09:be:b7:76:4a:f9:12:5a:9f:dd:ac:33:45:5e:7f: c6:44:91:e9:90:51:ff:6f:e0:88:5d:fa:6a:64:fb: 36:9e:aa:01:41:19:aa:a0:2e:c5:72:97:ca:a7:16: cf:01:08:ed:15:d2:08:b7:14:9a:c4:44:1f:5c:9f: 5b:08:ab:b0:90:98:6a:ab:ad:1c:46:14:01:5c:81: fa:37:6e:a9:44:4d:77:25:7c:22:53:7f:41:0e:15: f1:e1:0a:73:ce:40:27:ef:72:18:0a:1c:61:a9:a7: 0d:25:51:be:5f:1d:2e:14:46:56:33:6d:66:39:34: 3a:d3:55:c8:1e:48:05:96:16:08:7c:bd:d9:a1:fa: 29:f7:47:bd:c4:60:cf:17:34:d3:83:cc:49:80:7a: 85:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:89:60:E5:9D:CF:C1:87:15:96:6C:BC:53:EF:8E:A2:B5:F2:21:15 X509v3 Authority Key Identifier: keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/54lg5Z3PwYcVlmy8U--OorXyIRU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.249.200.0/24 Signature Algorithm: sha256WithRSAEncryption bb:25:83:b4:51:a7:f9:79:db:38:d1:cb:bc:62:98:c4:e4:bf: 62:3d:7d:de:c7:1c:40:52:75:55:92:60:7c:0f:97:6a:fc:78: 79:49:22:14:b6:2e:53:f8:4c:d0:f3:77:96:60:4a:88:2e:a1: 63:30:d0:7b:27:76:dc:09:10:85:d2:40:c2:50:50:aa:e0:99: 8a:8f:88:18:42:69:54:08:e9:22:5d:7a:ef:41:55:09:74:99: d9:d0:c7:6f:16:e7:79:0d:c9:34:0e:af:fc:f0:d7:d8:f3:5e: f2:89:4e:3b:99:f9:89:31:5c:c9:28:67:72:57:b6:fa:d9:25: 0c:3b:8e:d0:e9:e8:f2:2c:91:03:7e:95:45:ac:16:54:87:d8: 21:e6:c4:c0:bc:a3:fb:fb:a2:50:08:f9:87:e2:22:4c:2a:a1: 2f:eb:b9:9d:7d:60:6d:9d:2f:9c:e1:73:af:5b:fa:cd:74:8c: 57:00:63:f0:ef:80:8a:e3:f3:6c:34:b2:e0:46:81:d2:6e:c3: b7:3d:94:9f:5e:c0:89:ff:ed:38:b0:85:bf:4b:62:43:ba:68: a9:9f:fe:c6:d2:a7:3b:f1:bd:7b:d0:1b:76:d4:9f:44:44:43: 96:63:8c:d6:72:c6:53:8a:81:21:a2:47:cb:93:ca:66:7d:e4: 1b:44:31:fe -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fvJBhRG+OQV0v+uBbMUgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzIyZTQ1MTNhMzk2NzhkOGFiMjNiMmQ2NDk3NzUzNDA1 MThjYjkwHhcNMjYwMTAxMTIxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzg5NjBlNTlkY2ZjMTg3MTU5NjZjYmM1M2VmOGVhMmI1ZjIyMTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4TGQExyEj1FG15HxoZ0k27iTJOG2 5XgLLUCzomUQngwbaCxH+HWQzpsLb3o0iDjSNfm1NWlQl9r31Tvq0OLT6WNmOoO6 r2kWmLreG3E0WcJLzVlVybgkclToJs2WzrYMRwoQay5jt/oJvrd2SvkSWp/drDNF Xn/GRJHpkFH/b+CIXfpqZPs2nqoBQRmqoC7FcpfKpxbPAQjtFdIItxSaxEQfXJ9b CKuwkJhqq60cRhQBXIH6N26pRE13JXwiU39BDhXx4QpzzkAn73IYChxhqacNJVG+ Xx0uFEZWM21mOTQ601XIHkgFlhYIfL3Zofop90e9xGDPFzTTg8xJgHqFtQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOeJYOWdz8GHFZZsvFPvjqK18iEVMB8GA1UdIwQY MBaAFA1yLkUTo5Z42KsjstZJd1NAUYy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDIt MzQyNWIxMjVlYWE3LzEvNTRsZzVaM1B3WWNWbG15OFUtLU9vclh5SVJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDItMzQyNWIxMjVlYWE3 LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWfnIMA0G CSqGSIb3DQEBCwUAA4IBAQC7JYO0Uaf5eds40cu8YpjE5L9iPX3exxxAUnVVkmB8 D5dq/Hh5SSIUti5T+EzQ83eWYEqILqFjMNB7J3bcCRCF0kDCUFCq4JmKj4gYQmlU COkiXXrvQVUJdJnZ0MdvFud5Dck0Dq/88NfY817yiU47mfmJMVzJKGdyV7b62SUM O47Q6ejyLJEDfpVFrBZUh9gh5sTAvKP7+6JQCPmH4iJMKqEv67mdfWBtnS+c4XOv W/rNdIxXAGPw74CK4/NsNLLgRoHSbsO3PZSfXsCJ/+04sIW/S2JDumipn/7G0qc7 8b170Bt21J9EREOWY4zWcsZTioEhokfLk8pmfeQbRDH+ -----END CERTIFICATE-----Generated at Sat Jan 10 21:06:49 2026 by rpki-client