This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/89B9QRpsAYslipobPKLMe4rYzLU.roa File: 89B9QRpsAYslipobPKLMe4rYzLU.roa (raw, json) Hash identifier: sMU4kNtcmn2Zuj4Vpvbkloa2tK9j6EDzNo9Vzz7bFFo= Subject key identifier: F3:D0:7D:41:1A:6C:01:8B:25:8A:9A:1B:3C:A2:CC:7B:8A:D8:CC:B5 Certificate issuer: /CN=ab7773aa1c71a02265146ba336ccc2e58deadb88 Certificate serial: 019B7CED19D5C45E0E372D9A0FB8DF8BFC84 Authority key identifier: AB:77:73:AA:1C:71:A0:22:65:14:6B:A3:36:CC:C2:E5:8D:EA:DB:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3dzqhxxoCJlFGujNszC5Y3q24g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/89B9QRpsAYslipobPKLMe4rYzLU.roa Signing time: Fri 02 Jan 2026 04:17:51 +0000 ROA not before: Fri 02 Jan 2026 04:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202928 IP address blocks: 2001:678:18c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.crl rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.mft rsync://rpki.ripe.net/repository/DEFAULT/q3dzqhxxoCJlFGujNszC5Y3q24g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:19:d5:c4:5e:0e:37:2d:9a:0f:b8:df:8b:fc:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab7773aa1c71a02265146ba336ccc2e58deadb88 Validity Not Before: Jan 2 04:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f3d07d411a6c018b258a9a1b3ca2cc7b8ad8ccb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:24:de:92:bd:ab:06:c8:fd:3a:3f:6b:10:ae: b7:c1:9e:b8:4d:c6:ac:b5:91:57:6b:6d:50:f4:44: 42:67:82:5c:5b:88:b7:cd:d2:d7:a5:16:c4:89:8a: 6a:da:d4:c2:8d:38:7f:8a:8e:ea:5a:42:69:44:98: 7e:47:ef:c6:27:79:ab:9f:41:d1:6c:29:e1:6f:d4: af:cf:6f:3e:f3:a7:32:f8:ef:73:91:e0:73:57:4f: 98:c6:fe:7f:7f:64:82:68:dc:37:99:37:11:d0:d1: a9:b5:ce:49:bc:5b:06:04:76:22:8c:60:0b:10:ab: dc:28:18:93:ed:e8:c0:99:78:20:07:84:30:59:e4: fd:f9:f3:89:eb:36:f0:1c:6c:be:16:16:19:78:9d: 4c:0e:d7:a6:61:ef:34:79:fc:2c:af:5e:56:31:69: fa:aa:c4:2c:e8:fd:4c:a3:78:69:ee:13:f4:bd:92: 73:c4:94:85:27:7f:30:b5:b8:ec:a3:bd:87:52:cb: f6:fc:66:2a:e9:2a:d5:30:7f:ba:50:74:5b:fb:61: a4:67:91:5d:2c:fa:5c:5b:68:f5:72:f8:a0:30:78: 15:ee:b9:62:3c:f8:60:da:7b:ee:1c:16:43:21:95: 2b:4b:c5:d4:5d:e1:b7:85:db:a8:eb:a8:51:33:a8: 98:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:D0:7D:41:1A:6C:01:8B:25:8A:9A:1B:3C:A2:CC:7B:8A:D8:CC:B5 X509v3 Authority Key Identifier: keyid:AB:77:73:AA:1C:71:A0:22:65:14:6B:A3:36:CC:C2:E5:8D:EA:DB:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3dzqhxxoCJlFGujNszC5Y3q24g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/89B9QRpsAYslipobPKLMe4rYzLU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:18c::/48 Signature Algorithm: sha256WithRSAEncryption 28:09:7e:1d:77:04:ae:ca:40:fb:52:93:47:96:4e:f0:2f:50: 1b:8d:b6:d9:69:80:a6:90:a9:7c:de:36:77:79:f0:a3:29:23: c4:6b:46:44:d7:48:de:2b:04:a8:c8:f3:6a:6d:a0:1e:b7:bb: 34:30:7d:3b:5c:cc:6b:ee:4b:4b:7a:76:a2:f1:b4:74:7d:c6: b2:81:e6:c1:71:87:80:6c:00:6d:2a:23:d5:37:13:fd:01:9e: 31:99:29:2e:11:4e:36:86:d0:ce:29:ec:a1:5d:e6:30:29:fa: c2:fc:bf:eb:5c:77:41:f0:a1:11:04:e0:8b:df:31:d8:50:06: f2:c6:6e:6a:3a:16:4a:79:66:c9:85:57:97:86:d2:6a:c5:db: c6:1a:42:41:ad:2d:e0:e0:90:25:fd:6f:80:10:91:a2:b1:d0: 96:76:9a:05:e9:35:df:f4:99:99:b8:d8:86:4f:8a:e9:ae:2b: f0:a3:ef:ad:a3:e3:52:f6:74:ea:7e:3f:b9:0c:af:14:7d:ee: 75:ef:2b:c0:a1:72:2f:53:32:93:e5:4f:26:b4:fd:22:c6:31: 42:e7:ed:c5:fb:86:c5:fb:50:88:9c:2f:a7:c1:f9:ae:45:39: db:42:fd:57:5e:bf:c1:c3:af:7b:e1:9d:20:88:3b:96:1f:8d: db:70:4e:00 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt87RnVxF4ONy2aD7jfi/yEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiNzc3M2FhMWM3MWEwMjI2NTE0NmJhMzM2Y2NjMmU1OGRl YWRiODgwHhcNMjYwMTAyMDQxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmM2QwN2Q0MTFhNmMwMThiMjU4YTlhMWIzY2EyY2M3YjhhZDhjY2I1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5yTekr2rBsj9Oj9rEK63wZ64Tcas tZFXa21Q9ERCZ4JcW4i3zdLXpRbEiYpq2tTCjTh/io7qWkJpRJh+R+/GJ3mrn0HR bCnhb9Svz28+86cy+O9zkeBzV0+Yxv5/f2SCaNw3mTcR0NGptc5JvFsGBHYijGAL EKvcKBiT7ejAmXggB4QwWeT9+fOJ6zbwHGy+FhYZeJ1MDtemYe80efwsr15WMWn6 qsQs6P1Mo3hp7hP0vZJzxJSFJ38wtbjso72HUsv2/GYq6SrVMH+6UHRb+2GkZ5Fd LPpcW2j1cvigMHgV7rliPPhg2nvuHBZDIZUrS8XUXeG3hduo66hRM6iYrQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPPQfUEabAGLJYqaGzyizHuK2My1MB8GA1UdIwQY MBaAFKt3c6occaAiZRRrozbMwuWN6tuIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTNkenFoeHhvQ0psRkd1ak5zekM1WTNxMjRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8wMWY5OTctZjAyNy00YTNhLTg1NTIt ZTZkZmJhMWRmMjMwLzEvODlCOVFScHNBWXNsaXBvYlBLTE1lNHJZekxVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8wMWY5OTctZjAyNy00YTNhLTg1NTItZTZkZmJhMWRmMjMw LzEvcTNkenFoeHhvQ0psRkd1ak5zekM1WTNxMjRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAGM MA0GCSqGSIb3DQEBCwUAA4IBAQAoCX4ddwSuykD7UpNHlk7wL1AbjbbZaYCmkKl8 3jZ3efCjKSPEa0ZE10jeKwSoyPNqbaAet7s0MH07XMxr7ktLenai8bR0fcaygebB cYeAbABtKiPVNxP9AZ4xmSkuEU42htDOKeyhXeYwKfrC/L/rXHdB8KERBOCL3zHY UAbyxm5qOhZKeWbJhVeXhtJqxdvGGkJBrS3g4JAl/W+AEJGisdCWdpoF6TXf9JmZ uNiGT4rprivwo++to+NS9nTqfj+5DK8Ufe517yvAoXIvUzKT5U8mtP0ixjFC5+3F +4bF+1CInC+nwfmuRTnbQv1XXr/Bw6974Z0giDuWH43bcE4A -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:26 2026 by rpki-client