This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/189oV8GncXIuUHjeoI_E8INYiQs.roa File: 189oV8GncXIuUHjeoI_E8INYiQs.roa (raw, json) Hash identifier: 0A49Lxa8+HmOmnCCbU77IrfpJ/mis7ETSIxuX6hEu0Q= Subject key identifier: D7:CF:68:57:C1:A7:71:72:2E:50:78:DE:A0:8F:C4:F0:83:58:89:0B Certificate issuer: /CN=b9df156ee18b6958d4306b6311b4a086763eff62 Certificate serial: 019B7F15B35BE1B4A1566F328CF60274D606 Authority key identifier: B9:DF:15:6E:E1:8B:69:58:D4:30:6B:63:11:B4:A0:86:76:3E:FF:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ud8VbuGLaVjUMGtjEbSghnY-_2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/189oV8GncXIuUHjeoI_E8INYiQs.roa Signing time: Fri 02 Jan 2026 14:21:27 +0000 ROA not before: Fri 02 Jan 2026 14:21:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12779 IP address blocks: 86.105.14.0/24 maxlen: 24 91.245.234.0/24 maxlen: 24 195.189.244.0/24 maxlen: 24 2a0c:79c0:2::/48 maxlen: 48 2a0c:79c0:4::/48 maxlen: 48 2a0c:79c0:7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.mft rsync://rpki.ripe.net/repository/DEFAULT/ud8VbuGLaVjUMGtjEbSghnY-_2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:b3:5b:e1:b4:a1:56:6f:32:8c:f6:02:74:d6:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9df156ee18b6958d4306b6311b4a086763eff62 Validity Not Before: Jan 2 14:21:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d7cf6857c1a771722e5078dea08fc4f08358890b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:58:91:ae:20:a8:3d:16:b0:fe:a1:a3:52:60: ec:ad:3f:df:02:91:ff:93:5a:df:bd:9c:27:d3:72: d0:25:96:64:25:54:37:dd:56:c2:2e:12:9a:09:cf: 28:f7:78:79:44:5e:d5:08:47:e7:41:08:a9:7b:07: 5a:66:c3:d5:0c:a4:c3:8d:fe:ce:70:31:15:fd:71: 8c:dc:6e:ec:c0:c5:6d:cc:4b:c8:5f:66:15:2f:96: 8c:cb:be:4b:11:eb:5b:0d:30:e7:b6:cd:1b:07:1c: 54:af:43:c3:b0:68:1d:46:c3:06:8d:08:87:6b:e9: 45:59:d7:2c:44:72:f8:de:ab:2a:42:f6:d5:04:1a: dd:75:dc:44:ce:22:d9:39:ba:f8:0d:0e:d7:7e:b0: 27:be:2c:00:75:61:d8:0e:0b:f8:69:a1:8d:38:e5: 84:7e:2e:94:8a:24:90:ff:3b:0a:25:7f:f0:a4:4a: e3:d2:0b:05:72:61:6d:40:d6:f1:fe:c0:99:4c:b5: 47:ba:3b:b7:20:6b:49:91:ef:d8:f5:2c:9f:b2:87: 04:22:8e:19:cb:f4:c5:88:fb:52:fe:ac:0a:93:79: 3b:d7:22:77:d7:2a:38:ef:84:ab:3a:32:98:81:d4: df:74:0b:f7:6d:37:55:f7:0f:1c:b1:ec:21:7b:8e: e6:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:CF:68:57:C1:A7:71:72:2E:50:78:DE:A0:8F:C4:F0:83:58:89:0B X509v3 Authority Key Identifier: keyid:B9:DF:15:6E:E1:8B:69:58:D4:30:6B:63:11:B4:A0:86:76:3E:FF:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ud8VbuGLaVjUMGtjEbSghnY-_2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/189oV8GncXIuUHjeoI_E8INYiQs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.105.14.0/24 91.245.234.0/24 195.189.244.0/24 IPv6: 2a0c:79c0:2::/48 2a0c:79c0:4::/48 2a0c:79c0:7::/48 Signature Algorithm: sha256WithRSAEncryption 82:18:36:d0:d3:25:c7:44:73:d0:f3:e0:bd:4d:ff:7a:4d:07: d5:04:56:46:7a:92:f5:a8:68:e5:96:d6:d4:20:f7:0e:5b:7d: ef:b3:11:3e:c8:6d:d1:f9:26:9c:59:02:0d:e0:1a:14:12:e7: bd:76:16:57:91:e2:ed:0f:5c:46:ae:b6:78:62:d4:62:38:c3: eb:e9:eb:55:d1:50:a1:46:e7:8e:ef:3d:5e:9d:37:ad:ab:5b: ad:fd:2e:24:80:e6:c7:a4:39:0b:91:68:8f:70:f4:28:42:f9: 1f:bc:3c:38:77:62:7b:40:02:fa:e1:55:f6:b7:1f:7d:54:e5: 7d:6e:bd:1d:61:1a:25:9b:5d:32:ea:41:c1:eb:44:0b:65:f2: 4d:66:cc:2f:62:a0:ae:93:52:0b:46:9b:95:ac:80:e4:fa:85: 09:46:e8:9d:e4:d2:14:00:9b:30:18:14:76:c1:b6:7a:66:b3: a7:e4:78:40:fb:40:40:7f:cf:06:31:89:0d:26:5c:0c:da:41: 61:99:2e:8e:07:21:a6:d3:62:20:6c:02:04:93:0e:2a:20:cd: 4e:15:5d:9f:59:3e:ac:a1:96:2d:c8:64:56:bb:a7:96:0c:1c: ca:7f:19:74:86:53:1d:86:59:38:12:06:5a:63:02:7d:61:4f: 23:a7:29:50 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgISAZt/FbNb4bShVm8yjPYCdNYGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5ZGYxNTZlZTE4YjY5NThkNDMwNmI2MzExYjRhMDg2NzYz ZWZmNjIwHhcNMjYwMTAyMTQyMTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkN2NmNjg1N2MxYTc3MTcyMmU1MDc4ZGVhMDhmYzRmMDgzNTg4OTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1iRriCoPRaw/qGjUmDsrT/fApH/ k1rfvZwn03LQJZZkJVQ33VbCLhKaCc8o93h5RF7VCEfnQQipewdaZsPVDKTDjf7O cDEV/XGM3G7swMVtzEvIX2YVL5aMy75LEetbDTDnts0bBxxUr0PDsGgdRsMGjQiH a+lFWdcsRHL43qsqQvbVBBrdddxEziLZObr4DQ7XfrAnviwAdWHYDgv4aaGNOOWE fi6UiiSQ/zsKJX/wpErj0gsFcmFtQNbx/sCZTLVHuju3IGtJke/Y9SyfsocEIo4Z y/TFiPtS/qwKk3k71yJ31yo474SrOjKYgdTfdAv3bTdV9w8csewhe47mewIDAQAB o4ICODCCAjQwHQYDVR0OBBYEFNfPaFfBp3FyLlB43qCPxPCDWIkLMB8GA1UdIwQY MBaAFLnfFW7hi2lY1DBrYxG0oIZ2Pv9iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWQ4VmJ1R0xhVmpVTUd0akViU2doblktXzJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9kNjQ2MWYtMTdlMy00OTg2LWE1ZjYt NzJhNGIzYTliYjQ0LzEvMTg5b1Y4R25jWEl1VUhqZW9JX0U4SU5ZaVFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9kNjQ2MWYtMTdlMy00OTg2LWE1ZjYtNzJhNGIzYTliYjQ0 LzEvdWQ4VmJ1R0xhVmpVTUd0akViU2doblktXzJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTAYBAIAATASAwQAVmkOAwQA W/XqAwQAw730MCEEAgACMBsDBwAqDHnAAAIDBwAqDHnAAAQDBwAqDHnAAAcwDQYJ KoZIhvcNAQELBQADggEBAIIYNtDTJcdEc9Dz4L1N/3pNB9UEVkZ6kvWoaOWW1tQg 9w5bfe+zET7IbdH5JpxZAg3gGhQS5712FleR4u0PXEautnhi1GI4w+vp61XRUKFG 547vPV6dN62rW639LiSA5sekOQuRaI9w9ChC+R+8PDh3YntAAvrhVfa3H31U5X1u vR1hGiWbXTLqQcHrRAtl8k1mzC9ioK6TUgtGm5WsgOT6hQlG6J3k0hQAmzAYFHbB tnpms6fkeED7QEB/zwYxiQ0mXAzaQWGZLo4HIabTYiBsAgSTDiogzU4VXZ9ZPqyh li3IZFa7p5YMHMp/GXSGUx2GWTgSBlpjAn1hTyOnKVA= -----END CERTIFICATE-----Generated at Tue Jan 27 02:09:32 2026 by rpki-client