This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/dIlVX31KigJ6uzmopk-08_s9BaI.roa File: dIlVX31KigJ6uzmopk-08_s9BaI.roa (raw, json) Hash identifier: qfVMhGQ1p1bTL3qJOPoO+zrwFToB6+GUrIK7ZBJ8Guo= Subject key identifier: 74:89:55:5F:7D:4A:8A:02:7A:BB:39:A8:A6:4F:B4:F3:FB:3D:05:A2 Certificate issuer: /CN=07a32999c47eb31d5fbf16ecc3872eaefd43bad7 Certificate serial: 019B7F15AB986A816D00F5F73CAE3AC83858 Authority key identifier: 07:A3:29:99:C4:7E:B3:1D:5F:BF:16:EC:C3:87:2E:AE:FD:43:BA:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6MpmcR-sx1fvxbsw4curv1Dutc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/dIlVX31KigJ6uzmopk-08_s9BaI.roa Signing time: Fri 02 Jan 2026 14:21:25 +0000 ROA not before: Fri 02 Jan 2026 14:21:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 89.222.36.0/24 maxlen: 24 89.222.37.0/24 maxlen: 24 89.222.38.0/24 maxlen: 24 89.222.39.0/24 maxlen: 24 89.222.40.0/24 maxlen: 24 89.222.41.0/24 maxlen: 24 89.222.42.0/24 maxlen: 24 89.222.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.mft rsync://rpki.ripe.net/repository/DEFAULT/B6MpmcR-sx1fvxbsw4curv1Dutc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 11:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:ab:98:6a:81:6d:00:f5:f7:3c:ae:3a:c8:38:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07a32999c47eb31d5fbf16ecc3872eaefd43bad7 Validity Not Before: Jan 2 14:21:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7489555f7d4a8a027abb39a8a64fb4f3fb3d05a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:fb:42:6c:4d:73:e7:c4:cc:56:94:d1:d5:26: cc:18:2d:d6:54:5f:16:01:a2:1c:37:b8:8c:30:95: e0:83:27:b3:18:95:79:ff:00:b7:32:87:70:2a:86: 51:92:17:72:19:49:2b:98:e4:15:d4:91:15:22:3c: 1e:3e:59:10:a5:b5:51:47:e5:c4:e6:cf:65:28:c7: 0d:de:2a:bf:8b:3b:61:3c:b9:22:a2:60:91:f1:23: d1:50:10:59:04:56:e9:5d:3f:2a:df:ec:67:88:3e: 76:4c:56:24:23:02:cd:13:d7:7d:fd:51:35:87:be: 1a:80:73:a0:18:21:5c:7b:6f:e2:3b:35:75:88:78: 2b:f5:9d:ed:c6:c5:5f:ae:b5:f1:8a:70:5d:f3:35: 54:68:4e:cb:bc:59:8d:31:ff:2e:17:1b:9f:b6:32: 2b:0b:5e:1e:ae:fc:2c:f4:15:02:de:22:9e:c5:23: 66:02:56:4e:b0:13:82:7d:e0:f6:5e:e3:9d:28:62: 36:64:56:84:86:a1:11:2f:84:2a:5f:1f:5b:97:e3: a9:ed:ce:13:51:41:1a:17:8f:c8:1f:b6:0f:9e:83: a8:42:0e:18:1b:29:42:a5:20:6e:ab:47:d3:bd:ab: a9:92:d8:34:e6:af:0a:c1:0d:4b:c0:da:bd:72:37: 22:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:89:55:5F:7D:4A:8A:02:7A:BB:39:A8:A6:4F:B4:F3:FB:3D:05:A2 X509v3 Authority Key Identifier: keyid:07:A3:29:99:C4:7E:B3:1D:5F:BF:16:EC:C3:87:2E:AE:FD:43:BA:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6MpmcR-sx1fvxbsw4curv1Dutc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/dIlVX31KigJ6uzmopk-08_s9BaI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.222.36.0-89.222.43.255 Signature Algorithm: sha256WithRSAEncryption 4b:ec:e4:00:c8:7a:62:36:b0:3d:65:96:d0:45:72:a1:d8:33: b8:fc:c1:69:96:ab:cc:06:07:9c:72:a9:2f:ae:8e:aa:b9:84: df:05:c2:70:1d:33:e4:36:49:fc:67:72:b1:51:4f:dd:20:0e: ec:39:15:53:b9:95:ed:55:db:51:e8:72:eb:16:34:fc:66:21: c9:e4:57:42:26:0f:4f:03:1b:2e:bf:84:7c:31:5e:a9:14:1e: db:e7:87:eb:1d:29:cf:a2:ef:b9:5c:34:e0:48:ef:80:f6:32: 1e:e1:58:40:06:95:2d:f7:e3:9e:77:b9:fe:81:2b:98:85:16: a7:83:14:65:fe:f3:2c:d8:27:dc:6b:24:0b:35:62:a9:a5:e2: a6:9b:4b:e9:96:bd:6b:02:de:d9:32:ac:3e:92:6a:6d:c0:90: 5c:b2:01:b5:e1:6f:cd:e3:ca:82:13:bb:3f:7c:aa:f6:dc:fc: 12:66:42:0a:3d:06:45:92:36:37:a0:94:a4:c8:55:2e:4c:b2: 7f:c2:6f:ed:65:7d:7f:d5:97:03:3d:a8:51:5e:26:28:08:84: fa:8a:83:7c:1b:14:e9:71:ed:e0:f8:96:c4:b9:64:65:e8:cb: 25:33:a2:5d:05:fc:28:48:b1:46:a8:c3:ca:d4:18:b3:40:5d: 29:1f:0c:bf -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt/FauYaoFtAPX3PK46yDhYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3YTMyOTk5YzQ3ZWIzMWQ1ZmJmMTZlY2MzODcyZWFlZmQ0 M2JhZDcwHhcNMjYwMTAyMTQyMTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDg5NTU1ZjdkNGE4YTAyN2FiYjM5YThhNjRmYjRmM2ZiM2QwNWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5vtCbE1z58TMVpTR1SbMGC3WVF8W AaIcN7iMMJXggyezGJV5/wC3ModwKoZRkhdyGUkrmOQV1JEVIjwePlkQpbVRR+XE 5s9lKMcN3iq/izthPLkiomCR8SPRUBBZBFbpXT8q3+xniD52TFYkIwLNE9d9/VE1 h74agHOgGCFce2/iOzV1iHgr9Z3txsVfrrXxinBd8zVUaE7LvFmNMf8uFxuftjIr C14ervws9BUC3iKexSNmAlZOsBOCfeD2XuOdKGI2ZFaEhqERL4QqXx9bl+Op7c4T UUEaF4/IH7YPnoOoQg4YGylCpSBuq0fTvaupktg05q8KwQ1LwNq9cjci8wIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFHSJVV99SooCers5qKZPtPP7PQWiMB8GA1UdIwQY MBaAFAejKZnEfrMdX78W7MOHLq79Q7rXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjZNcG1jUi1zeDFmdnhic3c0Y3VydjFEdXRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83MzgxNzktY2Y2Ny00MTk5LWI1MzIt MmZiMjk1OGFiOGJiLzEvZElsVlgzMUtpZ0o2dXptb3BrLTA4X3M5QmFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83MzgxNzktY2Y2Ny00MTk5LWI1MzItMmZiMjk1OGFiOGJi LzEvQjZNcG1jUi1zeDFmdnhic3c0Y3VydjFEdXRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAJZ3iQD BAJZ3igwDQYJKoZIhvcNAQELBQADggEBAEvs5ADIemI2sD1lltBFcqHYM7j8wWmW q8wGB5xyqS+ujqq5hN8FwnAdM+Q2SfxncrFRT90gDuw5FVO5le1V21HocusWNPxm IcnkV0ImD08DGy6/hHwxXqkUHtvnh+sdKc+i77lcNOBI74D2Mh7hWEAGlS334553 uf6BK5iFFqeDFGX+8yzYJ9xrJAs1Yqml4qabS+mWvWsC3tkyrD6Sam3AkFyyAbXh b83jyoITuz98qvbc/BJmQgo9BkWSNjeglKTIVS5Msn/Cb+1lfX/VlwM9qFFeJigI hPqKg3wbFOlx7eD4lsS5ZGXoyyUzol0F/ChIsUaow8rUGLNAXSkfDL8= -----END CERTIFICATE-----Generated at Sat Jan 10 20:49:48 2026 by rpki-client