This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/RBUh44AE5rSzFYc95aIB9_pOY7E.roa File: RBUh44AE5rSzFYc95aIB9_pOY7E.roa (raw, json) Hash identifier: n/InZr+XZA/QD3JE9NlRzqL+9H6JBTkTEtrw8TPzano= Subject key identifier: 44:15:21:E3:80:04:E6:B4:B3:15:87:3D:E5:A2:01:F7:FA:4E:63:B1 Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Certificate serial: 019B7C134D390B5F0AD0FD88F4FDED522A68 Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/RBUh44AE5rSzFYc95aIB9_pOY7E.roa Signing time: Fri 02 Jan 2026 00:19:58 +0000 ROA not before: Fri 02 Jan 2026 00:19:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 274208 IP address blocks: 89.190.152.0/22 maxlen: 22 89.190.152.0/24 maxlen: 24 89.190.153.0/24 maxlen: 24 89.190.154.0/24 maxlen: 24 89.190.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 18:47:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:4d:39:0b:5f:0a:d0:fd:88:f4:fd:ed:52:2a:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Validity Not Before: Jan 2 00:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=441521e38004e6b4b315873de5a201f7fa4e63b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:5b:31:66:4e:58:00:1c:f0:52:98:e2:4f:db: 5a:62:60:c7:67:fa:d1:48:20:c5:2b:81:fa:0c:cd: 94:a1:ca:a1:f0:fa:ec:ea:48:78:06:84:2a:4a:8e: 75:4d:62:7b:4b:5f:74:5f:38:08:bf:ac:bb:a1:d5: 87:8d:ba:36:a8:a5:7e:e4:4b:de:72:9a:96:78:4b: 1f:7c:bb:85:90:52:ad:ee:b6:b9:dd:85:0c:7a:0c: 51:61:7b:2c:b2:d9:33:ba:ed:c9:a5:fc:d9:ee:48: 56:a5:d3:8b:c8:6a:34:3d:5e:31:81:bf:13:17:0d: 94:b3:48:8b:8f:54:2a:93:a5:98:c8:22:8f:58:5f: d2:60:95:10:73:98:65:93:45:35:ab:9d:eb:25:8c: de:ee:02:af:a4:c3:d7:7f:7f:4c:1f:13:40:1a:2f: f6:7e:39:7b:b0:ce:38:7d:ab:dd:45:50:74:85:1b: 27:22:95:59:67:51:57:2e:f6:9c:4d:5c:19:1d:0d: b4:0a:49:fb:c6:0f:3b:19:8f:4a:88:05:57:15:39: 0e:44:3c:73:7a:54:89:d9:6c:70:16:58:07:46:43: b8:e4:11:4a:a3:9a:3e:99:ef:e5:52:8e:85:f5:65: 61:a2:7f:6d:7a:48:88:f1:e2:5e:9c:69:b2:ae:f7: 9f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:15:21:E3:80:04:E6:B4:B3:15:87:3D:E5:A2:01:F7:FA:4E:63:B1 X509v3 Authority Key Identifier: keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/RBUh44AE5rSzFYc95aIB9_pOY7E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.190.152.0/22 Signature Algorithm: sha256WithRSAEncryption a2:d2:3e:b6:d6:f9:22:cb:d3:99:a8:7a:8e:8b:1a:fb:44:34: 44:ff:89:f3:61:bf:b8:e2:c7:d2:bd:1a:fd:db:05:4e:11:5b: b1:28:9e:6e:97:e1:24:a9:ff:8b:22:ef:3d:1b:5e:ea:b4:e7: 43:a9:86:91:8c:04:d6:fa:34:62:32:79:69:57:ac:c3:a5:37: 06:24:82:ad:e5:9e:ce:55:00:37:d6:4f:cd:fc:b3:6c:47:db: 80:3c:4b:92:50:31:99:ab:db:52:ae:bc:86:fa:5d:d3:66:4a: 7f:9d:86:68:29:bf:fe:cf:1d:16:3e:4d:ac:c7:f8:ec:2d:26: 2c:1e:1b:c1:17:61:f7:e7:4d:bc:37:8f:10:1a:f2:87:ee:d0: 53:a8:d8:ac:72:ec:fd:b9:48:ec:52:c5:62:16:75:81:ad:58: 1b:2e:cb:b5:9c:b8:25:49:f2:83:1b:47:76:0b:dd:c3:e3:bb: 10:bf:b0:b6:8b:14:a3:4f:56:1b:61:f5:30:12:79:27:22:9a: df:4b:c1:36:34:ed:ae:e8:af:ee:b1:86:48:54:d0:d4:a4:25: 9c:8b:63:31:2b:f0:f7:26:f4:5c:ed:df:a2:21:ae:94:70:08: 2f:d0:eb:dd:f5:f4:30:57:f0:a1:cc:34:ff:36:f6:6e:90:ba: 94:f1:dd:63 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E005C18K0P2I9P3tUipoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy N2E0NjcwHhcNMjYwMTAyMDAxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NDE1MjFlMzgwMDRlNmI0YjMxNTg3M2RlNWEyMDFmN2ZhNGU2M2IxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FsxZk5YABzwUpjiT9taYmDHZ/rR SCDFK4H6DM2Uocqh8Prs6kh4BoQqSo51TWJ7S190XzgIv6y7odWHjbo2qKV+5Eve cpqWeEsffLuFkFKt7ra53YUMegxRYXssstkzuu3JpfzZ7khWpdOLyGo0PV4xgb8T Fw2Us0iLj1Qqk6WYyCKPWF/SYJUQc5hlk0U1q53rJYze7gKvpMPXf39MHxNAGi/2 fjl7sM44favdRVB0hRsnIpVZZ1FXLvacTVwZHQ20Ckn7xg87GY9KiAVXFTkORDxz elSJ2WxwFlgHRkO45BFKo5o+me/lUo6F9WVhon9tekiI8eJenGmyrvefmwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEQVIeOABOa0sxWHPeWiAff6TmOxMB8GA1UdIwQY MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt Y2Q3ZTA2Y2JiNTMxLzEvUkJVaDQ0QUU1clN6RlljOTVhSUI5X3BPWTdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCWb6YMA0G CSqGSIb3DQEBCwUAA4IBAQCi0j621vkiy9OZqHqOixr7RDRE/4nzYb+44sfSvRr9 2wVOEVuxKJ5ul+Ekqf+LIu89G17qtOdDqYaRjATW+jRiMnlpV6zDpTcGJIKt5Z7O VQA31k/N/LNsR9uAPEuSUDGZq9tSrryG+l3TZkp/nYZoKb/+zx0WPk2sx/jsLSYs HhvBF2H35028N48QGvKH7tBTqNiscuz9uUjsUsViFnWBrVgbLsu1nLglSfKDG0d2 C93D47sQv7C2ixSjT1YbYfUwEnknIprfS8E2NO2u6K/usYZIVNDUpCWci2MxK/D3 JvRc7d+iIa6UcAgv0Ovd9fQwV/ChzDT/NvZukLqU8d1j -----END CERTIFICATE-----Generated at Fri Jan 23 21:38:26 2026 by rpki-client