This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/rDKGPxVegdVjKSh5RnICAFOVm5s.roa File: rDKGPxVegdVjKSh5RnICAFOVm5s.roa (raw, json) Hash identifier: Xcgmgg/GuSeVcsd6rM/OBeKREsZ93Yvuqbvwr0v7xYc= Subject key identifier: AC:32:86:3F:15:5E:81:D5:63:29:28:79:46:72:02:00:53:95:9B:9B Certificate issuer: /CN=c4cc02f8fa74cf0da81e8ce2943ea7f9ed2a85f4 Certificate serial: 019B7F15864212FAFB168C38AB7FDB904B8B Authority key identifier: C4:CC:02:F8:FA:74:CF:0D:A8:1E:8C:E2:94:3E:A7:F9:ED:2A:85:F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMwC-Pp0zw2oHozilD6n-e0qhfQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/rDKGPxVegdVjKSh5RnICAFOVm5s.roa Signing time: Fri 02 Jan 2026 14:21:15 +0000 ROA not before: Fri 02 Jan 2026 14:21:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57069 IP address blocks: 89.22.64.0/19 maxlen: 19 89.22.64.0/24 maxlen: 24 89.22.66.0/23 maxlen: 23 89.22.68.0/22 maxlen: 22 89.22.72.0/21 maxlen: 21 89.22.82.0/24 maxlen: 24 89.22.83.0/24 maxlen: 24 89.22.84.0/22 maxlen: 22 89.22.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft rsync://rpki.ripe.net/repository/DEFAULT/xMwC-Pp0zw2oHozilD6n-e0qhfQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:86:42:12:fa:fb:16:8c:38:ab:7f:db:90:4b:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4cc02f8fa74cf0da81e8ce2943ea7f9ed2a85f4 Validity Not Before: Jan 2 14:21:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ac32863f155e81d5632928794672020053959b9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e7:e1:18:e1:ff:38:87:cc:16:5b:32:71:1a: f7:4a:97:80:ff:7b:d6:1e:02:38:8a:95:a2:88:86: 4a:21:e5:88:f5:8f:87:42:ad:21:d0:28:3d:83:28: ce:5d:5e:69:2b:30:e7:66:25:c1:c2:0e:5f:eb:df: 3a:0c:80:ee:21:f6:06:6f:e9:14:43:e5:e8:62:ab: 5a:03:7a:62:51:e6:19:aa:8c:f9:36:1e:a0:ec:c4: 25:b7:e8:50:2c:77:c6:12:be:40:42:13:10:d9:05: 13:41:8a:91:93:5c:b8:49:12:7f:65:50:03:3a:9c: 58:2e:44:86:a5:b9:e0:9b:4b:26:0b:60:54:df:2e: bb:45:04:25:e2:18:3e:88:55:49:97:2c:e9:b0:1b: 9a:b4:67:a3:1f:19:db:f8:42:01:94:58:75:f6:eb: 0f:75:ab:9f:d4:e7:7d:27:87:b1:07:89:b8:8e:c6: 34:a9:6f:8a:f0:ee:81:2f:d2:60:af:0f:81:5c:cf: ca:2e:23:45:1f:44:9e:83:52:fb:e1:24:c6:68:66: 3b:c2:55:22:e5:ca:5e:7f:07:b8:a4:64:d9:f2:b0: 4b:da:97:30:ba:2b:f7:5c:47:f1:c9:31:87:61:90: 35:5c:a0:a5:47:10:6a:9f:0c:3e:0e:0e:21:9e:3b: c1:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:32:86:3F:15:5E:81:D5:63:29:28:79:46:72:02:00:53:95:9B:9B X509v3 Authority Key Identifier: keyid:C4:CC:02:F8:FA:74:CF:0D:A8:1E:8C:E2:94:3E:A7:F9:ED:2A:85:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMwC-Pp0zw2oHozilD6n-e0qhfQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/rDKGPxVegdVjKSh5RnICAFOVm5s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.22.64.0/19 Signature Algorithm: sha256WithRSAEncryption 4e:69:9d:d8:c2:fc:98:c8:8c:04:0f:fa:ce:3a:e5:9e:c3:c3: b5:83:6e:61:f2:84:c3:cf:d8:f8:aa:c5:08:b2:04:65:a3:82: 56:3c:fd:00:cd:cc:c6:7a:db:66:6c:05:3d:dd:62:e1:4f:a9: f7:cf:ea:42:af:61:1d:c5:8b:c2:3b:41:98:40:6c:17:f3:b7: 32:b1:78:39:79:5d:cf:6e:ac:3e:44:31:17:d8:1d:85:12:02: be:3c:b6:82:d2:a0:ae:ff:28:88:ca:44:02:90:2f:e8:7a:7e: f1:76:3d:55:1c:b6:ed:9a:da:5b:97:72:73:e0:4e:cb:9e:f0: a2:e9:79:f0:c6:1c:05:4a:a4:0e:da:e0:93:cb:94:d3:7b:64: 70:dd:1c:87:d5:25:36:29:8b:41:b4:60:6e:d1:ae:32:ae:9e: f1:4c:be:23:ae:4a:94:40:f8:ce:07:d4:a8:e7:0c:f5:e9:20: cc:71:e4:7b:cd:7d:42:e6:2d:09:b1:4b:b2:1a:a3:f9:04:3c: e1:1c:2c:1b:ab:94:ca:16:7b:51:8e:95:1e:7d:50:53:29:60: 45:30:b9:2a:9c:e7:6e:80:52:43:f3:e5:e3:f9:23:80:5d:3f: 2e:33:f8:a7:be:b5:00:c2:6d:a8:f7:12:66:ac:04:dc:45:63: 3b:2f:45:5f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FYZCEvr7Fow4q3/bkEuLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0Y2MwMmY4ZmE3NGNmMGRhODFlOGNlMjk0M2VhN2Y5ZWQy YTg1ZjQwHhcNMjYwMTAyMTQyMTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzMyODYzZjE1NWU4MWQ1NjMyOTI4Nzk0NjcyMDIwMDUzOTU5YjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvufhGOH/OIfMFlsycRr3SpeA/3vW HgI4ipWiiIZKIeWI9Y+HQq0h0Cg9gyjOXV5pKzDnZiXBwg5f6986DIDuIfYGb+kU Q+XoYqtaA3piUeYZqoz5Nh6g7MQlt+hQLHfGEr5AQhMQ2QUTQYqRk1y4SRJ/ZVAD OpxYLkSGpbngm0smC2BU3y67RQQl4hg+iFVJlyzpsBuatGejHxnb+EIBlFh19usP dauf1Od9J4exB4m4jsY0qW+K8O6BL9Jgrw+BXM/KLiNFH0Seg1L74STGaGY7wlUi 5cpefwe4pGTZ8rBL2pcwuiv3XEfxyTGHYZA1XKClRxBqnww+Dg4hnjvB2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKwyhj8VXoHVYykoeUZyAgBTlZubMB8GA1UdIwQY MBaAFMTMAvj6dM8NqB6M4pQ+p/ntKoX0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveE13Qy1QcDB6dzJvSG96aWxENm4tZTBxaGZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9lMzQ4ZjEtYmI3MC00YjM0LWJlMTIt MjE5ZTc5ZDg0ZTQzLzEvckRLR1B4VmVnZFZqS1NoNVJuSUNBRk9WbTVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9lMzQ4ZjEtYmI3MC00YjM0LWJlMTItMjE5ZTc5ZDg0ZTQz LzEveE13Qy1QcDB6dzJvSG96aWxENm4tZTBxaGZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFWRZAMA0G CSqGSIb3DQEBCwUAA4IBAQBOaZ3YwvyYyIwED/rOOuWew8O1g25h8oTDz9j4qsUI sgRlo4JWPP0AzczGettmbAU93WLhT6n3z+pCr2EdxYvCO0GYQGwX87cysXg5eV3P bqw+RDEX2B2FEgK+PLaC0qCu/yiIykQCkC/oen7xdj1VHLbtmtpbl3Jz4E7LnvCi 6XnwxhwFSqQO2uCTy5TTe2Rw3RyH1SU2KYtBtGBu0a4yrp7xTL4jrkqUQPjOB9So 5wz16SDMceR7zX1C5i0JsUuyGqP5BDzhHCwbq5TKFntRjpUefVBTKWBFMLkqnOdu gFJD8+Xj+SOAXT8uM/invrUAwm2o9xJmrATcRWM7L0Vf -----END CERTIFICATE-----Generated at Mon Feb 9 22:32:09 2026 by rpki-client