This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/D-_lyCJV9Sz2bTIt9fGq5z3Su_8.roa File: D-_lyCJV9Sz2bTIt9fGq5z3Su_8.roa (raw, json) Hash identifier: +XSDkotkiwpFYKYiGdXlu1uwl2+rO95QfzY33Skq8BM= Subject key identifier: 0F:EF:E5:C8:22:55:F5:2C:F6:6D:32:2D:F5:F1:AA:E7:3D:D2:BB:FF Certificate issuer: /CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7 Certificate serial: 019B790FFD2428BD0149B242B279F49F3BCD Authority key identifier: 59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/D-_lyCJV9Sz2bTIt9fGq5z3Su_8.roa Signing time: Thu 01 Jan 2026 10:17:29 +0000 ROA not before: Thu 01 Jan 2026 10:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207582 IP address blocks: 89.107.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:0f:fd:24:28:bd:01:49:b2:42:b2:79:f4:9f:3b:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7 Validity Not Before: Jan 1 10:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0fefe5c82255f52cf66d322df5f1aae73dd2bbff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:da:ee:61:6e:95:fe:4f:2f:5b:f0:b7:43:be: b5:34:3c:db:c9:42:ee:e0:81:f9:7b:d5:ba:c8:92: cc:ff:96:1f:51:52:01:4b:15:95:4d:c6:88:7a:83: b2:f9:87:ea:4d:c0:a0:dc:3a:c6:a7:b3:7a:e7:50: 3a:06:4b:de:5a:2a:ab:70:56:81:47:eb:87:75:f4: a4:cb:7d:1a:bc:90:8e:47:d8:73:c6:52:9c:af:0a: bb:9b:ac:00:0f:cd:16:a5:39:10:c2:db:e9:78:28: 1e:bb:02:94:09:fa:ad:1c:89:40:99:52:02:a9:55: 33:21:cb:74:f8:c8:fe:57:0c:2b:85:ee:8e:70:0a: 2c:e4:a4:65:39:d3:d1:65:49:15:cd:b6:ca:42:f5: 4a:3d:86:07:b5:8b:87:b0:58:e6:c5:9e:49:57:8b: c0:43:c7:ba:49:02:0c:4f:fb:6f:1f:fe:d9:30:3e: 3b:3c:26:fa:f0:83:ab:1f:cf:6b:15:7c:39:fd:24: a1:22:8a:3a:f8:02:4c:59:14:b0:99:12:bc:b8:e3: d1:a6:8a:ac:c6:40:94:d4:0b:34:4a:d0:29:bf:ce: 1a:53:7a:c4:b7:e3:e5:37:4b:65:55:91:16:eb:75: a4:8e:52:bd:e1:ac:68:ac:0b:ae:99:e3:1a:e4:8a: 69:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:EF:E5:C8:22:55:F5:2C:F6:6D:32:2D:F5:F1:AA:E7:3D:D2:BB:FF X509v3 Authority Key Identifier: keyid:59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/D-_lyCJV9Sz2bTIt9fGq5z3Su_8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.107.225.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:40:f2:52:5b:a8:bd:c1:3d:17:e1:4b:ce:95:f0:7c:35:58: 36:9d:e3:ca:4b:1c:0b:08:08:8f:41:36:6e:9b:05:e2:58:7e: 89:3c:29:c8:b0:79:19:d6:d3:39:df:92:20:e3:f8:a2:9f:a7: 68:e6:a3:d4:56:dc:5b:a4:ee:26:27:79:8e:84:74:a1:5a:48: 18:24:fe:79:61:57:13:dc:97:a1:a6:9f:bd:78:68:b7:d7:8d: 3c:45:f0:b6:8c:9b:e8:d5:6c:a0:59:48:86:a5:15:e1:28:87: 54:8e:68:e1:9f:b9:c3:af:cb:cb:91:a1:e5:c1:a3:14:7a:47: 20:aa:73:92:0e:ad:db:98:55:f9:21:8d:c3:6e:3b:c6:69:dd: b0:86:c7:0e:23:ad:33:c5:9c:6b:a6:f6:1e:c4:43:af:f2:70: 2a:bb:9d:44:4a:d7:b5:5c:d4:11:dc:38:cc:ab:c1:96:3f:55: 6b:c7:d6:ac:9e:e5:db:d0:ef:33:55:83:9e:5e:00:41:01:41: aa:3c:c9:aa:4b:d1:1e:c0:f9:82:90:5a:ae:d4:46:a8:d8:c3: 7a:b6:9c:66:4d:d8:65:11:28:01:f5:ae:a0:5b:0d:a8:7d:08: f9:70:6f:ec:9e:d5:8b:ca:5c:e3:2b:85:5f:e7:b0:3e:b0:e1: 39:20:a1:1b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5D/0kKL0BSbJCsnn0nzvNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5MmU3YzFmMjM5NGMzZTNhYWE4Y2NiNjQ3ZmQ4MzY3MWQ2 MDk4YjcwHhcNMjYwMTAxMTAxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZmVmZTVjODIyNTVmNTJjZjY2ZDMyMmRmNWYxYWFlNzNkZDJiYmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtruYW6V/k8vW/C3Q761NDzbyULu 4IH5e9W6yJLM/5YfUVIBSxWVTcaIeoOy+YfqTcCg3DrGp7N651A6BkveWiqrcFaB R+uHdfSky30avJCOR9hzxlKcrwq7m6wAD80WpTkQwtvpeCgeuwKUCfqtHIlAmVIC qVUzIct0+Mj+Vwwrhe6OcAos5KRlOdPRZUkVzbbKQvVKPYYHtYuHsFjmxZ5JV4vA Q8e6SQIMT/tvH/7ZMD47PCb68IOrH89rFXw5/SShIoo6+AJMWRSwmRK8uOPRpoqs xkCU1As0StApv84aU3rEt+PlN0tlVZEW63WkjlK94axorAuumeMa5IpplQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA/v5cgiVfUs9m0yLfXxquc90rv/MB8GA1UdIwQY MBaAFFkufB8jlMPjqqjMtkf9g2cdYJi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1M1OEh5T1V3LU9xcU15MlJfMkRaeDFnbUxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi85NTcxZDYtOTc0Zi00MzI3LWI5ZTAt NDQzYmU2M2ZjMTIzLzEvRC1fbHlDSlY5U3oyYlRJdDlmR3E1ejNTdV84LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi85NTcxZDYtOTc0Zi00MzI3LWI5ZTAtNDQzYmU2M2ZjMTIz LzEvV1M1OEh5T1V3LU9xcU15MlJfMkRaeDFnbUxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWWvhMA0G CSqGSIb3DQEBCwUAA4IBAQBNQPJSW6i9wT0X4UvOlfB8NVg2nePKSxwLCAiPQTZu mwXiWH6JPCnIsHkZ1tM535Ig4/iin6do5qPUVtxbpO4mJ3mOhHShWkgYJP55YVcT 3Jehpp+9eGi31408RfC2jJvo1WygWUiGpRXhKIdUjmjhn7nDr8vLkaHlwaMUekcg qnOSDq3bmFX5IY3DbjvGad2whscOI60zxZxrpvYexEOv8nAqu51ESte1XNQR3DjM q8GWP1Vrx9asnuXb0O8zVYOeXgBBAUGqPMmqS9EewPmCkFqu1Eao2MN6tpxmTdhl ESgB9a6gWw2ofQj5cG/sntWLylzjK4Vf57A+sOE5IKEb -----END CERTIFICATE-----Generated at Wed Jan 21 17:16:55 2026 by rpki-client