This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/fa6080-3cdd-4b34-8f13-0db296d54578/1/CrOqxRcW75o4aRdWm0p9XWdbx98.roa File: CrOqxRcW75o4aRdWm0p9XWdbx98.roa (raw, json) Hash identifier: IrzNxLHpjCPUfunvuk128Mos98JNYP40+XMrBYBSSM4= Subject key identifier: 0A:B3:AA:C5:17:16:EF:9A:38:69:17:56:9B:4A:7D:5D:67:5B:C7:DF Certificate issuer: /CN=a7e05eeda36b1d86c5a3a3f0c0515bec4822e5f4 Certificate serial: 019B7AC7D9CBB8E78A6B3314DD9357CD534B Authority key identifier: A7:E0:5E:ED:A3:6B:1D:86:C5:A3:A3:F0:C0:51:5B:EC:48:22:E5:F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-Be7aNrHYbFo6PwwFFb7Egi5fQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa6080-3cdd-4b34-8f13-0db296d54578/1/CrOqxRcW75o4aRdWm0p9XWdbx98.roa Signing time: Thu 01 Jan 2026 18:17:56 +0000 ROA not before: Thu 01 Jan 2026 18:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42667 IP address blocks: 89.186.2.0/24 maxlen: 24 89.186.3.0/24 maxlen: 24 89.186.14.0/24 maxlen: 24 89.186.18.0/24 maxlen: 24 89.186.19.0/24 maxlen: 24 89.186.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa6080-3cdd-4b34-8f13-0db296d54578/1/p-Be7aNrHYbFo6PwwFFb7Egi5fQ.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/fa6080-3cdd-4b34-8f13-0db296d54578/1/p-Be7aNrHYbFo6PwwFFb7Egi5fQ.mft rsync://rpki.ripe.net/repository/DEFAULT/p-Be7aNrHYbFo6PwwFFb7Egi5fQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:d9:cb:b8:e7:8a:6b:33:14:dd:93:57:cd:53:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7e05eeda36b1d86c5a3a3f0c0515bec4822e5f4 Validity Not Before: Jan 1 18:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ab3aac51716ef9a386917569b4a7d5d675bc7df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:36:30:9e:ce:13:e4:22:f9:35:6d:be:08:75: 47:07:4f:b5:ba:ce:a6:08:44:39:2c:b3:7e:b9:37: 71:35:df:1c:34:87:a1:00:32:2b:93:75:d2:89:a9: fa:07:f8:03:95:93:8c:3e:97:b8:3d:8a:f2:cc:cf: 81:a7:2d:96:21:46:d7:1f:6b:5e:23:ab:26:6f:2c: 50:b2:87:5c:14:09:2e:47:85:81:2c:12:49:73:ad: 13:83:f7:f4:08:87:0b:04:52:f6:e2:9c:41:9c:b9: 18:ad:47:0c:32:58:c2:62:35:c4:49:bb:c4:3e:d3: f9:08:3a:5f:cf:fe:5b:d3:35:07:74:73:52:37:12: 2e:6f:01:c7:5f:e9:72:ef:e8:62:4c:77:76:44:03: f7:71:2b:04:52:d7:aa:01:fc:f5:7b:d0:23:a1:80: d0:c0:f8:18:1d:53:5c:ca:60:8d:a1:fe:9c:9d:46: 2a:6a:a0:ce:f7:a9:52:ab:62:96:16:50:a3:89:bc: 84:10:8a:f9:5f:f5:be:30:9d:f6:f8:97:31:32:78: 3b:bc:c5:a8:20:6c:93:e3:06:1d:02:48:b2:e4:f4: ff:0e:7a:06:f2:28:a8:99:c4:90:7c:11:e7:10:44: ab:71:74:a2:2b:04:a6:8e:43:fa:fd:24:25:d5:36: 4f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:B3:AA:C5:17:16:EF:9A:38:69:17:56:9B:4A:7D:5D:67:5B:C7:DF X509v3 Authority Key Identifier: keyid:A7:E0:5E:ED:A3:6B:1D:86:C5:A3:A3:F0:C0:51:5B:EC:48:22:E5:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-Be7aNrHYbFo6PwwFFb7Egi5fQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa6080-3cdd-4b34-8f13-0db296d54578/1/CrOqxRcW75o4aRdWm0p9XWdbx98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa6080-3cdd-4b34-8f13-0db296d54578/1/p-Be7aNrHYbFo6PwwFFb7Egi5fQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.186.2.0/23 89.186.14.0/24 89.186.18.0-89.186.20.255 Signature Algorithm: sha256WithRSAEncryption dd:75:4a:60:7f:9f:83:3d:b9:d6:66:cf:1c:cc:1d:42:76:29: 71:f5:76:c9:8e:b7:2e:e8:a7:00:60:c9:ca:1f:b2:5e:c5:57: 6b:6c:60:5b:e1:b1:a2:88:2c:c4:3b:31:06:e8:53:95:4a:50: f1:eb:0e:15:80:e3:f1:40:c9:dd:53:23:84:4a:2b:d3:ec:dc: c0:00:bd:e3:0d:85:1e:7c:a6:ad:e5:39:61:69:c9:c7:0d:97: 14:b3:1d:69:5c:ee:1e:2b:ae:35:28:68:6a:2d:c6:fb:0f:d0: 27:f0:54:ba:82:bf:18:d1:63:c9:8b:25:32:2e:f1:35:13:61: ab:01:db:f1:84:d9:58:79:63:0d:1a:3a:23:fc:0e:32:d0:75: 4c:83:01:6b:cb:c6:1a:92:bd:b1:f5:7a:79:dc:1e:3a:45:52: 42:8e:06:98:0e:df:10:d0:98:77:89:a1:8e:37:22:92:00:68: cd:3e:89:32:3d:4e:95:66:f2:ce:b7:f4:1a:aa:3d:f3:ea:51: f9:42:b6:7e:91:b6:54:de:07:db:5e:9e:39:19:3b:2d:9d:a4: 50:cb:3f:07:1a:87:16:79:d5:b9:39:f4:15:07:22:fb:f6:d4: eb:61:09:93:5f:6b:be:e6:20:cb:9d:14:7d:18:d7:c5:4b:f6: db:0a:bd:34 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt6x9nLuOeKazMU3ZNXzVNLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3ZTA1ZWVkYTM2YjFkODZjNWEzYTNmMGMwNTE1YmVjNDgy MmU1ZjQwHhcNMjYwMTAxMTgxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYWIzYWFjNTE3MTZlZjlhMzg2OTE3NTY5YjRhN2Q1ZDY3NWJjN2RmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTYwns4T5CL5NW2+CHVHB0+1us6m CEQ5LLN+uTdxNd8cNIehADIrk3XSian6B/gDlZOMPpe4PYryzM+Bpy2WIUbXH2te I6smbyxQsodcFAkuR4WBLBJJc60Tg/f0CIcLBFL24pxBnLkYrUcMMljCYjXESbvE PtP5CDpfz/5b0zUHdHNSNxIubwHHX+ly7+hiTHd2RAP3cSsEUteqAfz1e9AjoYDQ wPgYHVNcymCNof6cnUYqaqDO96lSq2KWFlCjibyEEIr5X/W+MJ32+JcxMng7vMWo IGyT4wYdAkiy5PT/DnoG8iiomcSQfBHnEESrcXSiKwSmjkP6/SQl1TZPnwIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFAqzqsUXFu+aOGkXVptKfV1nW8ffMB8GA1UdIwQY MBaAFKfgXu2jax2GxaOj8MBRW+xIIuX0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcC1CZTdhTnJIWWJGbzZQd3dGRmI3RWdpNWZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9mYTYwODAtM2NkZC00YjM0LThmMTMt MGRiMjk2ZDU0NTc4LzEvQ3JPcXhSY1c3NW80YVJkV20wcDlYV2RieDk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi9mYTYwODAtM2NkZC00YjM0LThmMTMtMGRiMjk2ZDU0NTc4 LzEvcC1CZTdhTnJIWWJGbzZQd3dGRmI3RWdpNWZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQBWboCAwQA WboOMAwDBAFZuhIDBABZuhQwDQYJKoZIhvcNAQELBQADggEBAN11SmB/n4M9udZm zxzMHUJ2KXH1dsmOty7opwBgycofsl7FV2tsYFvhsaKILMQ7MQboU5VKUPHrDhWA 4/FAyd1TI4RKK9Ps3MAAveMNhR58pq3lOWFpyccNlxSzHWlc7h4rrjUoaGotxvsP 0CfwVLqCvxjRY8mLJTIu8TUTYasB2/GE2Vh5Yw0aOiP8DjLQdUyDAWvLxhqSvbH1 enncHjpFUkKOBpgO3xDQmHeJoY43IpIAaM0+iTI9TpVm8s639BqqPfPqUflCtn6R tlTeB9tenjkZOy2dpFDLPwcahxZ51bk59BUHIvv21OthCZNfa77mIMudFH0Y18VL 9tsKvTQ= -----END CERTIFICATE-----Generated at Tue Feb 10 06:55:47 2026 by rpki-client