This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/j2kshuHVZgy_a_ks9i17d_oN-wE.roa File: j2kshuHVZgy_a_ks9i17d_oN-wE.roa (raw, json) Hash identifier: pcR01H5nRjsqzd6YXqWm7ztOqd7e8cS1jZjUNHiylns= Subject key identifier: 8F:69:2C:86:E1:D5:66:0C:BF:6B:F9:2C:F6:2D:7B:77:FA:0D:FB:01 Certificate issuer: /CN=c9b4d6823ecb28b4a35e40dc11ef229cb2375cdf Certificate serial: 019B77C6E24BDDB994AED0719D576D88D684 Authority key identifier: C9:B4:D6:82:3E:CB:28:B4:A3:5E:40:DC:11:EF:22:9C:B2:37:5C:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybTWgj7LKLSjXkDcEe8inLI3XN8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/j2kshuHVZgy_a_ks9i17d_oN-wE.roa Signing time: Thu 01 Jan 2026 04:18:01 +0000 ROA not before: Thu 01 Jan 2026 04:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209522 IP address blocks: 152.89.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/ybTWgj7LKLSjXkDcEe8inLI3XN8.crl rsync://rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/ybTWgj7LKLSjXkDcEe8inLI3XN8.mft rsync://rpki.ripe.net/repository/DEFAULT/ybTWgj7LKLSjXkDcEe8inLI3XN8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:e2:4b:dd:b9:94:ae:d0:71:9d:57:6d:88:d6:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9b4d6823ecb28b4a35e40dc11ef229cb2375cdf Validity Not Before: Jan 1 04:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8f692c86e1d5660cbf6bf92cf62d7b77fa0dfb01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f5:42:53:2a:57:b5:97:2e:2f:76:58:51:62: 52:06:02:63:e8:49:fd:04:25:0e:87:48:e3:ed:3c: a3:1f:80:54:fb:3c:14:77:04:32:78:a1:29:45:fb: c1:30:70:9f:62:24:fc:78:b8:1b:0b:f3:77:8b:b6: 14:09:a1:bd:83:7f:a1:f7:c7:24:d8:5a:38:9a:60: d1:17:21:9f:ae:f5:ab:1c:d7:cb:43:a6:07:fe:79: 44:bc:01:55:b8:a2:7d:f8:41:92:fe:87:40:a8:8b: ce:10:11:84:8b:bb:a1:51:a0:0b:18:ae:90:1d:5c: ae:75:e3:a1:0d:8e:f4:13:1b:9f:9f:0b:97:26:65: 38:82:0e:00:90:f3:92:d1:7b:65:0c:ff:47:a0:84: 5f:a9:20:4f:5f:c4:cf:67:14:28:ee:44:e5:d2:1e: 63:eb:20:02:cd:5f:95:08:01:04:f0:29:58:52:c9: af:36:1c:6f:e1:78:86:95:ed:26:2b:ad:4e:16:f0: 65:44:61:43:45:ea:67:4e:3a:2e:df:95:78:c3:cb: 8b:ba:9c:a6:f2:5b:84:75:97:0c:9c:9c:bb:ce:66: 5f:1d:ea:ea:9a:64:c9:e3:73:8e:1c:fa:78:34:93: 57:85:00:c2:58:5f:6f:33:22:99:fa:89:fc:55:73: 49:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:69:2C:86:E1:D5:66:0C:BF:6B:F9:2C:F6:2D:7B:77:FA:0D:FB:01 X509v3 Authority Key Identifier: keyid:C9:B4:D6:82:3E:CB:28:B4:A3:5E:40:DC:11:EF:22:9C:B2:37:5C:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybTWgj7LKLSjXkDcEe8inLI3XN8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/j2kshuHVZgy_a_ks9i17d_oN-wE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/766988-3f1e-43d4-bec4-9fa95aa9b079/1/ybTWgj7LKLSjXkDcEe8inLI3XN8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.89.52.0/22 Signature Algorithm: sha256WithRSAEncryption 97:f9:cc:45:31:de:90:df:3c:43:a8:4a:68:32:46:f2:b8:1c: f5:95:da:81:b9:a9:24:d5:a1:63:cf:da:65:a5:66:1f:0d:b1: 14:07:89:90:9c:c4:18:36:be:29:22:af:33:ec:68:f5:27:50: 1b:c5:61:bf:3b:3c:46:88:83:a1:a1:9d:4b:43:74:b6:56:f8: f2:21:c8:99:dc:02:90:6d:ae:46:fe:0b:f9:98:6e:38:3f:0f: bf:88:7f:65:07:74:50:4f:0a:fb:f6:d6:40:89:04:a2:03:2c: 40:f2:a7:cd:35:01:31:e3:ef:08:91:6b:93:4c:97:45:da:13: 3f:72:5e:8b:04:fc:55:fc:93:d2:4a:87:00:70:4d:7d:b7:0e: c4:0e:bb:e9:fb:f3:62:45:71:68:5c:9b:ff:48:05:60:43:bf: 65:73:d1:33:ea:65:e3:22:d6:38:a0:3d:ec:bf:dd:7a:77:71: 50:52:af:7e:b9:ef:ae:e1:37:13:60:fa:5a:7e:87:96:08:37: 14:79:5e:1d:ad:19:8d:0d:9a:a3:e8:d3:77:98:fb:46:76:9f: 6f:39:1f:5f:f9:6b:e4:01:7f:25:33:0f:31:b4:09:f6:5f:bc: cf:ec:23:c1:4d:5c:5c:aa:e6:4a:e0:0f:03:d1:c8:81:4c:0d: 8e:e8:51:34 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xuJL3bmUrtBxnVdtiNaEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5YjRkNjgyM2VjYjI4YjRhMzVlNDBkYzExZWYyMjljYjIz NzVjZGYwHhcNMjYwMTAxMDQxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZjY5MmM4NmUxZDU2NjBjYmY2YmY5MmNmNjJkN2I3N2ZhMGRmYjAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/VCUypXtZcuL3ZYUWJSBgJj6En9 BCUOh0jj7TyjH4BU+zwUdwQyeKEpRfvBMHCfYiT8eLgbC/N3i7YUCaG9g3+h98ck 2Fo4mmDRFyGfrvWrHNfLQ6YH/nlEvAFVuKJ9+EGS/odAqIvOEBGEi7uhUaALGK6Q HVyudeOhDY70ExufnwuXJmU4gg4AkPOS0XtlDP9HoIRfqSBPX8TPZxQo7kTl0h5j 6yACzV+VCAEE8ClYUsmvNhxv4XiGle0mK61OFvBlRGFDRepnTjou35V4w8uLupym 8luEdZcMnJy7zmZfHerqmmTJ43OOHPp4NJNXhQDCWF9vMyKZ+on8VXNJoQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI9pLIbh1WYMv2v5LPYte3f6DfsBMB8GA1UdIwQY MBaAFMm01oI+yyi0o15A3BHvIpyyN1zfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWJUV2dqN0xLTFNqWGtEY0VlOGluTEkzWE44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni83NjY5ODgtM2YxZS00M2Q0LWJlYzQt OWZhOTVhYTliMDc5LzEvajJrc2h1SFZaZ3lfYV9rczlpMTdkX29OLXdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni83NjY5ODgtM2YxZS00M2Q0LWJlYzQtOWZhOTVhYTliMDc5 LzEveWJUV2dqN0xLTFNqWGtEY0VlOGluTEkzWE44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmFk0MA0G CSqGSIb3DQEBCwUAA4IBAQCX+cxFMd6Q3zxDqEpoMkbyuBz1ldqBuakk1aFjz9pl pWYfDbEUB4mQnMQYNr4pIq8z7Gj1J1AbxWG/OzxGiIOhoZ1LQ3S2VvjyIciZ3AKQ ba5G/gv5mG44Pw+/iH9lB3RQTwr79tZAiQSiAyxA8qfNNQEx4+8IkWuTTJdF2hM/ cl6LBPxV/JPSSocAcE19tw7EDrvp+/NiRXFoXJv/SAVgQ79lc9Ez6mXjItY4oD3s v916d3FQUq9+ue+u4TcTYPpafoeWCDcUeV4drRmNDZqj6NN3mPtGdp9vOR9f+Wvk AX8lMw8xtAn2X7zP7CPBTVxcquZK4A8D0ciBTA2O6FE0 -----END CERTIFICATE-----Generated at Tue Feb 10 01:15:36 2026 by rpki-client