This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/DxHZ9tIiE6Br_CjO_KZrQuyQVf0.roa File: DxHZ9tIiE6Br_CjO_KZrQuyQVf0.roa (raw, json) Hash identifier: 6F6Qg6kxedLXKk4s17Vv0in/fOumsyERMHRreHir8U4= Subject key identifier: 0F:11:D9:F6:D2:22:13:A0:6B:FC:28:CE:FC:A6:6B:42:EC:90:55:FD Certificate issuer: /CN=07a32999c47eb31d5fbf16ecc3872eaefd43bad7 Certificate serial: 019B7F15AC91A13F2598281FDC7F6F97A922 Authority key identifier: 07:A3:29:99:C4:7E:B3:1D:5F:BF:16:EC:C3:87:2E:AE:FD:43:BA:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6MpmcR-sx1fvxbsw4curv1Dutc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/DxHZ9tIiE6Br_CjO_KZrQuyQVf0.roa Signing time: Fri 02 Jan 2026 14:21:25 +0000 ROA not before: Fri 02 Jan 2026 14:21:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34914 IP address blocks: 89.222.0.0/20 maxlen: 24 89.222.2.0/23 maxlen: 23 89.222.32.0/20 maxlen: 24 89.222.32.0/23 maxlen: 23 89.222.34.0/23 maxlen: 23 89.222.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.mft rsync://rpki.ripe.net/repository/DEFAULT/B6MpmcR-sx1fvxbsw4curv1Dutc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:ac:91:a1:3f:25:98:28:1f:dc:7f:6f:97:a9:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07a32999c47eb31d5fbf16ecc3872eaefd43bad7 Validity Not Before: Jan 2 14:21:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0f11d9f6d22213a06bfc28cefca66b42ec9055fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7c:a0:a2:77:0f:8e:ea:6a:54:d2:37:d6:ea: 79:3b:f0:bb:38:2a:2f:80:c8:b9:f4:ab:7c:77:91: 8a:45:eb:5d:f8:2d:31:3a:bb:00:71:54:dc:3c:c0: 5e:67:e7:a2:f4:11:81:9a:da:99:bb:a2:89:55:ee: b3:ec:cb:f8:f2:3e:9c:98:c5:d4:c2:3c:a1:fa:54: 34:45:8d:c4:fe:d9:13:c3:d9:34:ee:f9:bb:fa:c5: 2a:43:15:23:2e:98:95:08:13:43:0a:bf:91:61:6f: f3:60:15:0a:1f:91:f9:80:9c:85:a8:e5:5e:67:7d: c9:53:e7:90:8a:b4:eb:2b:e7:c9:7c:8d:32:88:99: 8c:37:98:a2:d1:f8:4a:84:c0:58:43:a9:0d:d3:7a: f4:34:10:de:13:df:16:1c:48:16:84:34:eb:d8:09: 0c:23:dc:18:46:bc:57:ef:a5:cd:b1:d3:ca:93:54: 2a:87:a5:65:52:77:82:38:7c:e6:1e:bc:97:d6:63: 3b:ec:9b:2c:f6:1a:5f:51:32:c2:5a:57:83:1e:b4: 22:59:69:f0:d1:e3:84:a4:17:98:db:f1:94:00:e6: 40:9b:6a:bb:93:34:d9:18:ea:ef:89:72:22:0f:73: 8a:12:14:df:bb:bf:0f:b6:24:1e:ae:44:a3:b5:30: 89:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:11:D9:F6:D2:22:13:A0:6B:FC:28:CE:FC:A6:6B:42:EC:90:55:FD X509v3 Authority Key Identifier: keyid:07:A3:29:99:C4:7E:B3:1D:5F:BF:16:EC:C3:87:2E:AE:FD:43:BA:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6MpmcR-sx1fvxbsw4curv1Dutc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/DxHZ9tIiE6Br_CjO_KZrQuyQVf0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.222.0.0/20 89.222.32.0/19 Signature Algorithm: sha256WithRSAEncryption 8f:79:61:62:9a:db:9c:fe:4b:bf:b2:60:38:65:2f:13:ac:9b: 98:ab:9a:14:60:a0:1f:5c:0f:f4:8e:d1:c8:7d:49:6f:23:78: fc:62:29:fa:a5:98:9b:a6:e1:fb:08:74:ff:84:1d:19:a4:6c: b3:be:b0:38:aa:26:29:f5:bd:80:1c:7b:22:19:70:5b:7f:30: 80:6b:ec:fe:50:6d:cb:76:64:c4:c9:6f:77:70:d4:f6:76:87: 5f:22:f4:27:de:bc:ad:6a:a0:81:0a:00:96:29:0a:d4:92:30: d4:ff:db:02:fb:fe:36:5f:78:b6:af:7c:ce:ac:9f:e3:e8:dd: 02:2b:24:fd:f0:8a:ac:bc:12:f2:fb:14:b5:eb:c1:e1:a1:dd: a7:3a:c7:c4:44:10:94:18:01:8a:03:96:b9:8a:9f:c0:11:45: 01:b4:ba:61:25:14:b2:c6:5e:b6:fd:a7:36:79:26:10:a8:c0: b1:f6:5c:87:a4:0c:58:50:0a:c2:a4:93:27:27:0a:4d:75:f0: 2a:e3:77:7f:f3:cf:d2:98:e9:81:96:d5:b7:a5:67:51:0f:18: 57:5e:3c:6f:fb:e8:b5:38:1e:13:1a:bc:8d:52:57:57:01:a9: 2a:ed:4f:67:2a:fd:c2:a1:f2:8b:3c:4f:34:77:c1:35:60:f4: cf:6c:88:aa -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FayRoT8lmCgf3H9vl6kiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3YTMyOTk5YzQ3ZWIzMWQ1ZmJmMTZlY2MzODcyZWFlZmQ0 M2JhZDcwHhcNMjYwMTAyMTQyMTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjExZDlmNmQyMjIxM2EwNmJmYzI4Y2VmY2E2NmI0MmVjOTA1NWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3ygoncPjupqVNI31up5O/C7OCov gMi59Kt8d5GKRetd+C0xOrsAcVTcPMBeZ+ei9BGBmtqZu6KJVe6z7Mv48j6cmMXU wjyh+lQ0RY3E/tkTw9k07vm7+sUqQxUjLpiVCBNDCr+RYW/zYBUKH5H5gJyFqOVe Z33JU+eQirTrK+fJfI0yiJmMN5ii0fhKhMBYQ6kN03r0NBDeE98WHEgWhDTr2AkM I9wYRrxX76XNsdPKk1Qqh6VlUneCOHzmHryX1mM77Jss9hpfUTLCWleDHrQiWWnw 0eOEpBeY2/GUAOZAm2q7kzTZGOrviXIiD3OKEhTfu78PtiQerkSjtTCJRwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFA8R2fbSIhOga/wozvyma0LskFX9MB8GA1UdIwQY MBaAFAejKZnEfrMdX78W7MOHLq79Q7rXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjZNcG1jUi1zeDFmdnhic3c0Y3VydjFEdXRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83MzgxNzktY2Y2Ny00MTk5LWI1MzIt MmZiMjk1OGFiOGJiLzEvRHhIWjl0SWlFNkJyX0NqT19LWnJRdXlRVmYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83MzgxNzktY2Y2Ny00MTk5LWI1MzItMmZiMjk1OGFiOGJi LzEvQjZNcG1jUi1zeDFmdnhic3c0Y3VydjFEdXRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEWd4AAwQF Wd4gMA0GCSqGSIb3DQEBCwUAA4IBAQCPeWFimtuc/ku/smA4ZS8TrJuYq5oUYKAf XA/0jtHIfUlvI3j8Yin6pZibpuH7CHT/hB0ZpGyzvrA4qiYp9b2AHHsiGXBbfzCA a+z+UG3LdmTEyW93cNT2dodfIvQn3rytaqCBCgCWKQrUkjDU/9sC+/42X3i2r3zO rJ/j6N0CKyT98IqsvBLy+xS168Hhod2nOsfERBCUGAGKA5a5ip/AEUUBtLphJRSy xl62/ac2eSYQqMCx9lyHpAxYUArCpJMnJwpNdfAq43d/88/SmOmBltW3pWdRDxhX Xjxv++i1OB4TGryNUldXAakq7U9nKv3CofKLPE80d8E1YPTPbIiq -----END CERTIFICATE-----Generated at Sat Jan 10 04:20:49 2026 by rpki-client