This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/89IKKfReaYc3wLbg1HM54Q7Zvf0.roa File: 89IKKfReaYc3wLbg1HM54Q7Zvf0.roa (raw, json) Hash identifier: AkvWQKn0MJOmkvtr+wfVAWEVa5+ZjT0MJ5t/vpL6sMg= Subject key identifier: F3:D2:0A:29:F4:5E:69:87:37:C0:B6:E0:D4:73:39:E1:0E:D9:BD:FD Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430 Certificate serial: 019B7FF196F710AD65E5CDFA9C7B8F2A5CF4 Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/89IKKfReaYc3wLbg1HM54Q7Zvf0.roa Signing time: Fri 02 Jan 2026 18:21:37 +0000 ROA not before: Fri 02 Jan 2026 18:21:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204687 IP address blocks: 2a00:7d80:12::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 23:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:96:f7:10:ad:65:e5:cd:fa:9c:7b:8f:2a:5c:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430 Validity Not Before: Jan 2 18:21:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f3d20a29f45e698737c0b6e0d47339e10ed9bdfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:96:8a:65:61:d5:73:6a:23:31:63:d2:88:42: 5e:ab:84:99:6f:71:d2:66:1e:4d:d4:0b:45:03:7e: 8c:54:b2:b3:65:d3:d8:e7:26:2f:6f:6c:f7:dd:73: 93:31:36:fa:46:85:59:60:06:9b:0d:58:30:41:2d: 7b:c3:79:6c:28:ee:09:55:fb:5f:9e:04:71:4a:57: 94:68:6c:9c:70:72:57:ba:df:46:d9:36:fe:2c:5e: 01:51:eb:5a:0e:75:7c:b8:29:5f:ee:36:d3:17:30: bd:ea:70:7f:81:7d:52:24:c6:4e:09:1c:04:d7:a1: 84:34:e2:ce:ce:94:3b:85:48:25:ad:7a:4c:c8:ec: ca:0f:83:72:b7:92:3f:6d:7d:fe:cc:a0:94:09:7a: d4:df:cc:4d:fe:41:f9:07:37:37:e2:62:65:0a:cd: be:75:e4:d5:0a:14:aa:bb:1e:17:40:18:67:05:21: d3:a7:fd:0d:aa:e3:04:2a:bd:be:22:c1:9a:ce:57: b8:48:1f:7b:63:3c:55:1e:9c:4a:71:8d:45:a4:dc: ef:e9:14:a7:37:c6:c2:70:cf:46:a8:62:06:b3:7e: fc:47:b1:13:87:49:44:aa:0d:a5:7e:c6:1d:9f:5d: ae:29:27:9d:29:c7:6d:48:79:c1:b5:e2:b6:48:b9: c2:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:D2:0A:29:F4:5E:69:87:37:C0:B6:E0:D4:73:39:E1:0E:D9:BD:FD X509v3 Authority Key Identifier: keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/89IKKfReaYc3wLbg1HM54Q7Zvf0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:7d80:12::/48 Signature Algorithm: sha256WithRSAEncryption 1b:2e:7f:6b:29:b0:b7:e9:23:68:fc:50:74:15:e1:87:5c:2b: 4a:35:08:d0:90:dd:4d:31:77:4c:7b:65:cf:c4:00:06:dd:c2: 7a:f1:df:6f:08:a9:65:e7:2c:ae:26:62:a6:7a:2b:d5:aa:01: 2f:bb:46:95:56:17:42:fb:3b:76:ac:3c:2f:4d:e0:50:4b:77: f7:39:f8:31:41:4f:97:02:b5:3e:64:3f:57:73:b2:cc:bd:60: 42:58:23:25:da:7f:bc:cd:ad:45:e9:a5:8e:b6:ef:5c:9f:27: 6e:4b:13:3e:b4:d7:4b:34:91:7a:6a:e5:1e:53:02:fc:e3:3a: 99:cd:65:3e:dd:ff:ab:d2:7f:cf:16:cc:c1:95:d8:ec:a2:5f: 16:3a:2b:e3:ac:01:60:06:02:a5:73:f3:3e:34:03:ab:91:7c: cc:86:4b:04:ab:e5:ff:98:0b:be:06:20:6f:27:0c:aa:3b:79: 02:12:aa:ff:85:59:a0:0d:57:51:d1:dc:31:67:e3:8c:df:cc: 8a:5a:9f:a6:0c:21:a7:73:89:13:40:25:3f:56:a7:b0:7f:cb: 09:0d:d6:d1:5e:fd:d7:75:e0:7e:7d:34:2b:8e:a3:7d:b2:8c: 10:fa:f3:f5:22:8a:66:77:28:6e:f2:e8:ad:41:45:c5:cd:05: a7:8f:84:e2 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/8Zb3EK1l5c36nHuPKlz0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj NWY0MzAwHhcNMjYwMTAyMTgyMTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmM2QyMGEyOWY0NWU2OTg3MzdjMGI2ZTBkNDczMzllMTBlZDliZGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZaKZWHVc2ojMWPSiEJeq4SZb3HS Zh5N1AtFA36MVLKzZdPY5yYvb2z33XOTMTb6RoVZYAabDVgwQS17w3lsKO4JVftf ngRxSleUaGyccHJXut9G2Tb+LF4BUetaDnV8uClf7jbTFzC96nB/gX1SJMZOCRwE 16GENOLOzpQ7hUglrXpMyOzKD4Nyt5I/bX3+zKCUCXrU38xN/kH5Bzc34mJlCs2+ deTVChSqux4XQBhnBSHTp/0NquMEKr2+IsGazle4SB97YzxVHpxKcY1FpNzv6RSn N8bCcM9GqGIGs378R7ETh0lEqg2lfsYdn12uKSedKcdtSHnBteK2SLnCyQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPPSCin0XmmHN8C24NRzOeEO2b39MB8GA1UdIwQY MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt MmEwOWNjNTNhODA1LzEvODlJS0tmUmVhWWMzd0xiZzFITTU0UTdadmYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1 LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgB9gAAS MA0GCSqGSIb3DQEBCwUAA4IBAQAbLn9rKbC36SNo/FB0FeGHXCtKNQjQkN1NMXdM e2XPxAAG3cJ68d9vCKll5yyuJmKmeivVqgEvu0aVVhdC+zt2rDwvTeBQS3f3Ofgx QU+XArU+ZD9Xc7LMvWBCWCMl2n+8za1F6aWOtu9cnyduSxM+tNdLNJF6auUeUwL8 4zqZzWU+3f+r0n/PFszBldjsol8WOivjrAFgBgKlc/M+NAOrkXzMhksEq+X/mAu+ BiBvJwyqO3kCEqr/hVmgDVdR0dwxZ+OM38yKWp+mDCGnc4kTQCU/Vqewf8sJDdbR Xv3XdeB+fTQrjqN9sowQ+vP1Iopmdyhu8uitQUXFzQWnj4Ti -----END CERTIFICATE-----Generated at Wed Jan 21 04:03:08 2026 by rpki-client