This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/etyrPt1aZEu7O63zljCUb1u_zQU.roa File: etyrPt1aZEu7O63zljCUb1u_zQU.roa (raw, json) Hash identifier: hrkIclXJJEK/pVdQYztmKRJMv7stBIcGF3RpANQ6FpQ= Subject key identifier: 7A:DC:AB:3E:DD:5A:64:4B:BB:3B:AD:F3:96:30:94:6F:5B:BF:CD:05 Certificate issuer: /CN=b8c8aa18730f4a83e2852c5692551abb5b1ee7ea Certificate serial: 019B7D5C8ABE0AA2015263C147BDD9080FCF Authority key identifier: B8:C8:AA:18:73:0F:4A:83:E2:85:2C:56:92:55:1A:BB:5B:1E:E7:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/etyrPt1aZEu7O63zljCUb1u_zQU.roa Signing time: Fri 02 Jan 2026 06:19:35 +0000 ROA not before: Fri 02 Jan 2026 06:19:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216050 IP address blocks: 89.38.41.0/24 maxlen: 24 89.38.43.0/24 maxlen: 24 89.38.44.0/24 maxlen: 24 89.38.46.0/24 maxlen: 24 89.38.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.mft rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:8a:be:0a:a2:01:52:63:c1:47:bd:d9:08:0f:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8c8aa18730f4a83e2852c5692551abb5b1ee7ea Validity Not Before: Jan 2 06:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7adcab3edd5a644bbb3badf39630946f5bbfcd05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4a:30:7f:dc:00:f2:7d:45:66:37:9b:72:d4: 16:f3:74:11:db:79:fe:b4:3b:52:07:58:c0:89:5a: 83:4c:fb:dd:75:d2:bd:d1:9c:bf:fa:ed:81:57:bd: e3:4b:4a:4b:fd:77:c3:e0:2c:c5:9b:09:e5:78:a2: fe:17:8c:0a:79:d5:6c:eb:38:ef:e0:9c:83:70:ee: 34:06:8c:bb:f5:a4:d0:9f:75:b9:63:d3:a0:f5:9e: 7c:bb:d6:b6:21:ab:af:48:c8:10:dd:4f:fd:bf:85: e3:12:af:32:71:42:d6:58:2a:00:29:5b:d8:f8:5d: 7c:3a:f6:da:e9:a1:e0:d1:61:e9:a1:6b:a3:13:7f: ae:03:49:cb:fb:0c:e9:5d:24:d2:0d:08:f9:03:81: 93:f5:cc:32:b2:1a:92:3f:bd:92:2d:6f:fd:c4:35: ec:60:3d:f1:62:6d:bb:2d:fe:21:c3:19:d9:2f:26: b9:f4:1d:e6:64:cd:57:f1:4c:af:27:a1:ce:ff:1c: dc:a8:00:b4:4e:83:ba:eb:5a:18:17:39:f5:97:0e: 52:db:c7:62:f2:7a:d1:6c:b9:75:1f:aa:be:6d:42: 03:e5:90:11:96:2b:84:ca:be:79:75:e7:4c:c1:eb: b2:ea:ff:ee:b1:7a:e1:9b:e9:d6:47:41:68:6e:71: 2c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:DC:AB:3E:DD:5A:64:4B:BB:3B:AD:F3:96:30:94:6F:5B:BF:CD:05 X509v3 Authority Key Identifier: keyid:B8:C8:AA:18:73:0F:4A:83:E2:85:2C:56:92:55:1A:BB:5B:1E:E7:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/etyrPt1aZEu7O63zljCUb1u_zQU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.38.41.0/24 89.38.43.0-89.38.44.255 89.38.46.0/23 Signature Algorithm: sha256WithRSAEncryption a0:3b:ac:18:e1:05:19:65:50:4b:08:d9:d1:77:d2:e8:ed:2b: 83:13:58:d3:b4:a5:74:e7:f3:a6:28:92:7d:fa:88:de:82:34: 8a:20:86:7b:df:85:8f:5f:99:59:11:a5:58:63:f5:7c:57:8d: 0c:1a:d7:b7:22:8a:60:76:f5:3f:59:a0:3b:a0:2d:55:c0:de: c9:4f:fe:00:28:0a:13:e3:27:f2:d0:c1:db:19:d0:f2:d5:fb: 1e:e0:88:09:8d:f4:3b:f8:f5:27:89:42:4c:a0:ca:e7:f6:77: ed:09:be:a1:b7:04:06:2c:77:71:64:e7:2d:ef:53:78:78:4a: 59:44:ba:34:2b:7e:8e:81:fc:a1:72:0a:d8:67:c8:ee:35:6d: 83:0a:9c:be:ae:11:6e:48:29:6c:ee:a9:33:3a:37:51:89:40: 70:bb:df:5d:03:39:da:c5:ee:91:8f:e7:18:09:38:43:ca:cb: 4a:d3:e9:05:b8:8d:c3:3c:38:73:16:ec:9e:b3:0c:e9:fb:65: f1:b7:b6:af:fe:10:27:28:4c:26:32:5a:df:9d:18:31:13:1d: 01:55:32:bc:9d:cc:97:b5:d1:13:ad:92:01:c2:6d:bd:e6:62: 70:b1:30:5e:9b:7b:1a:67:35:ed:77:08:5a:52:f7:d2:07:21: 59:d4:03:72 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt9XIq+CqIBUmPBR73ZCA/PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4YzhhYTE4NzMwZjRhODNlMjg1MmM1NjkyNTUxYWJiNWIx ZWU3ZWEwHhcNMjYwMTAyMDYxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YWRjYWIzZWRkNWE2NDRiYmIzYmFkZjM5NjMwOTQ2ZjViYmZjZDA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0owf9wA8n1FZjebctQW83QR23n+ tDtSB1jAiVqDTPvdddK90Zy/+u2BV73jS0pL/XfD4CzFmwnleKL+F4wKedVs6zjv 4JyDcO40Boy79aTQn3W5Y9Og9Z58u9a2IauvSMgQ3U/9v4XjEq8ycULWWCoAKVvY +F18Ovba6aHg0WHpoWujE3+uA0nL+wzpXSTSDQj5A4GT9cwyshqSP72SLW/9xDXs YD3xYm27Lf4hwxnZLya59B3mZM1X8UyvJ6HO/xzcqAC0ToO661oYFzn1lw5S28di 8nrRbLl1H6q+bUID5ZARliuEyr55dedMweuy6v/usXrhm+nWR0FobnEsaQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFHrcqz7dWmRLuzut85YwlG9bv80FMB8GA1UdIwQY MBaAFLjIqhhzD0qD4oUsVpJVGrtbHufqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdU1pcUdITVBTb1BpaFN4V2tsVWF1MXNlNS1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9hOTQ5OTItNTY2Yi00YjZmLWE2ODkt YTU3NjA0YTNmNmJiLzEvZXR5clB0MWFaRXU3TzYzemxqQ1ViMXVfelFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9hOTQ5OTItNTY2Yi00YjZmLWE2ODktYTU3NjA0YTNmNmJi LzEvdU1pcUdITVBTb1BpaFN4V2tsVWF1MXNlNS1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAWSYpMAwD BABZJisDBABZJiwDBAFZJi4wDQYJKoZIhvcNAQELBQADggEBAKA7rBjhBRllUEsI 2dF30ujtK4MTWNO0pXTn86Yokn36iN6CNIoghnvfhY9fmVkRpVhj9XxXjQwa17ci imB29T9ZoDugLVXA3slP/gAoChPjJ/LQwdsZ0PLV+x7giAmN9Dv49SeJQkygyuf2 d+0JvqG3BAYsd3Fk5y3vU3h4SllEujQrfo6B/KFyCthnyO41bYMKnL6uEW5IKWzu qTM6N1GJQHC7310DOdrF7pGP5xgJOEPKy0rT6QW4jcM8OHMW7J6zDOn7ZfG3tq/+ ECcoTCYyWt+dGDETHQFVMrydzJe10ROtkgHCbb3mYnCxMF6bexpnNe13CFpS99IH IVnUA3I= -----END CERTIFICATE-----Generated at Wed Jan 21 08:21:48 2026 by rpki-client