This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/fa6080-3cdd-4b34-8f13-0db296d54578/1/SiFSfPzw5ybCSlARqgm1OIsBFRg.roa File: SiFSfPzw5ybCSlARqgm1OIsBFRg.roa (raw, json) Hash identifier: GsDEUKb/AwB9xCnavcaQiiPNHkkXEoojiw+fKuWtDoM= Subject key identifier: 4A:21:52:7C:FC:F0:E7:26:C2:4A:50:11:AA:09:B5:38:8B:01:15:18 Certificate issuer: /CN=a7e05eeda36b1d86c5a3a3f0c0515bec4822e5f4 Certificate serial: 019B7AC7DA16C2BD3708895C16249BF5AC5A Authority key identifier: A7:E0:5E:ED:A3:6B:1D:86:C5:A3:A3:F0:C0:51:5B:EC:48:22:E5:F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-Be7aNrHYbFo6PwwFFb7Egi5fQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa6080-3cdd-4b34-8f13-0db296d54578/1/SiFSfPzw5ybCSlARqgm1OIsBFRg.roa Signing time: Thu 01 Jan 2026 18:17:56 +0000 ROA not before: Thu 01 Jan 2026 18:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213804 IP address blocks: 89.186.23.0/24 maxlen: 24 89.186.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/fa6080-3cdd-4b34-8f13-0db296d54578/1/p-Be7aNrHYbFo6PwwFFb7Egi5fQ.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/fa6080-3cdd-4b34-8f13-0db296d54578/1/p-Be7aNrHYbFo6PwwFFb7Egi5fQ.mft rsync://rpki.ripe.net/repository/DEFAULT/p-Be7aNrHYbFo6PwwFFb7Egi5fQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:da:16:c2:bd:37:08:89:5c:16:24:9b:f5:ac:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7e05eeda36b1d86c5a3a3f0c0515bec4822e5f4 Validity Not Before: Jan 1 18:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4a21527cfcf0e726c24a5011aa09b5388b011518 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0c:25:54:23:19:23:c5:53:3c:7d:db:0a:1f: 30:af:eb:5f:3d:e3:9c:69:99:91:f4:79:0b:58:c4: 62:b0:6b:88:aa:65:5f:8a:37:2e:f6:d3:5b:57:4a: 0c:63:af:6a:35:40:07:06:17:7a:4e:c7:8d:5e:81: 79:96:42:3c:34:6a:be:fd:b8:4b:30:a2:fa:d4:41: a1:8a:98:d4:56:44:8d:e2:d5:c7:ae:2e:63:17:35: b6:c2:fd:15:cf:11:26:fc:b1:cd:9b:9a:15:85:4b: 1a:b4:30:75:38:e7:bc:97:a8:13:36:28:66:07:a8: 4d:55:20:cb:2c:10:79:40:4c:93:5d:95:89:44:eb: a1:50:91:b0:22:7e:c5:a7:5a:6c:70:be:ac:34:3e: a6:94:ed:30:c2:6e:26:4a:c9:8d:18:63:9b:1c:6a: 2a:53:96:f3:fd:6c:f4:1b:1c:33:32:9b:5a:cd:d2: 03:cf:c2:ea:51:6f:84:c7:af:92:55:44:11:a3:e2: 17:1e:48:cd:e1:1e:a3:1f:94:e8:be:18:1d:35:d4: 40:02:d6:24:a5:e2:09:17:6a:77:b0:14:7c:ac:da: 7f:17:40:dc:dd:c1:37:5f:51:fd:56:db:2a:ea:66: c1:db:9d:35:4e:c4:2c:30:eb:20:df:77:7d:b9:63: 22:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:21:52:7C:FC:F0:E7:26:C2:4A:50:11:AA:09:B5:38:8B:01:15:18 X509v3 Authority Key Identifier: keyid:A7:E0:5E:ED:A3:6B:1D:86:C5:A3:A3:F0:C0:51:5B:EC:48:22:E5:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-Be7aNrHYbFo6PwwFFb7Egi5fQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa6080-3cdd-4b34-8f13-0db296d54578/1/SiFSfPzw5ybCSlARqgm1OIsBFRg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fa6080-3cdd-4b34-8f13-0db296d54578/1/p-Be7aNrHYbFo6PwwFFb7Egi5fQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.186.23.0/24 89.186.28.0/23 Signature Algorithm: sha256WithRSAEncryption c7:91:d3:d4:83:f9:21:24:c5:de:28:97:2c:16:b7:27:c6:83: d6:5d:b5:9c:72:00:8c:bd:aa:2d:f7:4d:bd:df:f9:e8:0d:a1: 69:d0:cc:04:38:74:7d:27:78:71:3c:2e:f4:01:0f:6f:00:b7: da:44:0e:0b:27:62:24:9a:05:4e:dc:4b:d7:e4:b0:76:2f:95: bc:e1:da:00:41:79:14:6b:f2:a5:d6:eb:d7:8a:5b:fe:11:9d: 7e:96:37:13:74:86:c4:c8:2c:af:d9:a6:5f:1f:f5:ba:2f:cf: 0d:f6:6e:03:f3:72:ca:22:83:b7:30:38:a1:33:00:4a:b1:63: e7:fe:b1:b4:af:ec:07:44:37:9d:b5:f9:0b:f0:6b:3f:b8:34: f7:a2:34:0f:f6:0d:d3:57:27:c7:47:2d:ac:23:80:f7:9f:0a: 13:1a:df:79:da:b9:99:4a:d2:d4:73:45:d2:66:5f:41:6e:c7: fe:59:83:cb:f9:ad:80:37:7c:cb:8b:76:57:0a:45:5c:32:46: a1:e9:4e:2e:a8:0c:74:7a:b3:8d:67:47:1e:28:58:2c:0d:6a: ca:8e:7c:71:5c:dc:f9:ff:93:fb:71:c2:52:56:46:e5:49:a6: bc:e0:19:8c:a2:68:bf:86:a7:7d:ac:81:af:a0:de:d8:f2:6d: 72:d4:d1:05 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6x9oWwr03CIlcFiSb9axaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3ZTA1ZWVkYTM2YjFkODZjNWEzYTNmMGMwNTE1YmVjNDgy MmU1ZjQwHhcNMjYwMTAxMTgxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTIxNTI3Y2ZjZjBlNzI2YzI0YTUwMTFhYTA5YjUzODhiMDExNTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAwlVCMZI8VTPH3bCh8wr+tfPeOc aZmR9HkLWMRisGuIqmVfijcu9tNbV0oMY69qNUAHBhd6TseNXoF5lkI8NGq+/bhL MKL61EGhipjUVkSN4tXHri5jFzW2wv0VzxEm/LHNm5oVhUsatDB1OOe8l6gTNihm B6hNVSDLLBB5QEyTXZWJROuhUJGwIn7Fp1pscL6sND6mlO0wwm4mSsmNGGObHGoq U5bz/Wz0GxwzMptazdIDz8LqUW+Ex6+SVUQRo+IXHkjN4R6jH5TovhgdNdRAAtYk peIJF2p3sBR8rNp/F0Dc3cE3X1H9Vtsq6mbB2501TsQsMOsg33d9uWMiMwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEohUnz88OcmwkpQEaoJtTiLARUYMB8GA1UdIwQY MBaAFKfgXu2jax2GxaOj8MBRW+xIIuX0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcC1CZTdhTnJIWWJGbzZQd3dGRmI3RWdpNWZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9mYTYwODAtM2NkZC00YjM0LThmMTMt MGRiMjk2ZDU0NTc4LzEvU2lGU2ZQenc1eWJDU2xBUnFnbTFPSXNCRlJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi9mYTYwODAtM2NkZC00YjM0LThmMTMtMGRiMjk2ZDU0NTc4 LzEvcC1CZTdhTnJIWWJGbzZQd3dGRmI3RWdpNWZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWboXAwQB WbocMA0GCSqGSIb3DQEBCwUAA4IBAQDHkdPUg/khJMXeKJcsFrcnxoPWXbWccgCM vaot90293/noDaFp0MwEOHR9J3hxPC70AQ9vALfaRA4LJ2IkmgVO3EvX5LB2L5W8 4doAQXkUa/Kl1uvXilv+EZ1+ljcTdIbEyCyv2aZfH/W6L88N9m4D83LKIoO3MDih MwBKsWPn/rG0r+wHRDedtfkL8Gs/uDT3ojQP9g3TVyfHRy2sI4D3nwoTGt952rmZ StLUc0XSZl9Bbsf+WYPL+a2AN3zLi3ZXCkVcMkah6U4uqAx0erONZ0ceKFgsDWrK jnxxXNz5/5P7ccJSVkblSaa84BmMomi/hqd9rIGvoN7Y8m1y1NEF -----END CERTIFICATE-----Generated at Tue Feb 10 03:57:22 2026 by rpki-client