This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/ifmzZKuWVPKu_Nuj_izpITXBP-4.roa File: ifmzZKuWVPKu_Nuj_izpITXBP-4.roa (raw, json) Hash identifier: 5auoFa+anptN933uvgoIYgyxdrTKY/6tUwlXcm7iz/4= Subject key identifier: 89:F9:B3:64:AB:96:54:F2:AE:FC:DB:A3:FE:2C:E9:21:35:C1:3F:EE Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430 Certificate serial: 019B7FF19DA3CFDCCDC768D9CB18168B38B7 Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/ifmzZKuWVPKu_Nuj_izpITXBP-4.roa Signing time: Fri 02 Jan 2026 18:21:39 +0000 ROA not before: Fri 02 Jan 2026 18:21:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215850 IP address blocks: 212.16.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 23:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:9d:a3:cf:dc:cd:c7:68:d9:cb:18:16:8b:38:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430 Validity Not Before: Jan 2 18:21:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=89f9b364ab9654f2aefcdba3fe2ce92135c13fee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:02:76:a8:ff:6a:28:4a:31:1d:35:4b:3b:21: bd:ef:aa:43:bb:cf:c6:69:99:81:3d:55:9f:fd:07: f8:af:61:86:95:ca:05:1a:fc:4d:57:af:0b:ac:f2: d4:e1:1a:7d:c2:64:4a:97:16:c3:b7:20:e9:93:2e: ea:e6:47:b3:15:74:3e:00:03:ae:b9:83:bd:7a:5e: 2e:fe:08:63:54:b2:86:80:03:d6:04:dd:cf:f4:03: b1:cd:db:1b:7a:0d:7a:91:62:59:7b:0f:ff:7e:78: 9d:88:0d:d1:8a:57:9b:35:c6:5c:ca:47:2f:ea:9e: ac:a8:95:c5:80:1e:e7:b2:62:90:e2:f5:82:c7:58: d0:df:ba:38:aa:8c:cd:ef:a0:c2:1d:60:83:44:75: d4:b9:aa:e0:19:e1:5d:e9:ce:4b:31:dd:31:a9:2e: 8c:9e:d4:87:e8:44:ab:70:af:42:62:34:4a:d4:1e: 49:18:ba:1e:83:e0:e6:4a:18:42:69:c0:38:27:94: 86:ab:e8:92:30:93:8d:66:10:89:0a:54:0a:57:dd: 97:9f:93:c9:9d:97:01:cf:31:ef:9c:fb:3b:f7:dc: 1d:48:fb:d4:85:03:ca:cb:97:17:00:05:8a:82:27: 5b:96:f0:dc:dd:aa:fa:22:e5:4a:f0:85:20:69:b2: 05:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:F9:B3:64:AB:96:54:F2:AE:FC:DB:A3:FE:2C:E9:21:35:C1:3F:EE X509v3 Authority Key Identifier: keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/ifmzZKuWVPKu_Nuj_izpITXBP-4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.16.89.0/24 Signature Algorithm: sha256WithRSAEncryption 20:42:c7:ee:d0:2f:b8:87:db:b7:b4:6c:f0:66:a0:68:86:4e: 9c:b7:91:8f:32:13:b2:04:48:e7:68:f5:08:ff:91:81:ff:32: 93:35:ac:9e:bd:a8:4b:bb:f2:42:8c:88:f0:fb:2e:55:c4:0f: 71:cf:1c:28:5e:36:6c:a4:a5:c9:05:0b:ab:85:b9:97:5e:4b: f7:94:05:b2:30:c3:dc:f1:f0:ba:e7:1a:53:bb:84:02:02:17: 2d:90:c3:80:da:2f:59:46:be:4b:ad:b0:7c:92:f1:c5:15:ce: 30:6a:92:52:68:ea:cb:98:09:b8:98:00:f6:37:42:34:11:1e: 4e:ea:11:c3:fa:74:10:24:91:96:2f:81:36:29:9f:01:7d:d9: 83:f4:14:79:e8:ff:35:ae:53:7d:4a:0b:08:f9:95:78:c4:d5: 57:15:14:f5:a0:d7:2e:4e:76:73:a8:f9:c0:1f:89:40:35:96: 10:d1:03:05:fa:ce:12:24:b6:09:d4:1b:93:33:d0:f9:2b:78: 82:64:f3:3c:9f:ae:60:1e:fd:ef:e8:7c:6b:82:80:88:4d:a3: aa:ca:db:76:7f:dc:1d:94:74:22:ce:65:0b:74:bf:cd:a7:d3: 3d:8b:de:56:93:49:b7:33:eb:32:68:ad:be:34:d2:60:78:f7: b4:53:8c:e5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8Z2jz9zNx2jZyxgWizi3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj NWY0MzAwHhcNMjYwMTAyMTgyMTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OWY5YjM2NGFiOTY1NGYyYWVmY2RiYTNmZTJjZTkyMTM1YzEzZmVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwJ2qP9qKEoxHTVLOyG976pDu8/G aZmBPVWf/Qf4r2GGlcoFGvxNV68LrPLU4Rp9wmRKlxbDtyDpky7q5kezFXQ+AAOu uYO9el4u/ghjVLKGgAPWBN3P9AOxzdsbeg16kWJZew//fnidiA3RilebNcZcykcv 6p6sqJXFgB7nsmKQ4vWCx1jQ37o4qozN76DCHWCDRHXUuargGeFd6c5LMd0xqS6M ntSH6ESrcK9CYjRK1B5JGLoeg+DmShhCacA4J5SGq+iSMJONZhCJClQKV92Xn5PJ nZcBzzHvnPs799wdSPvUhQPKy5cXAAWKgidblvDc3ar6IuVK8IUgabIFowIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIn5s2SrllTyrvzbo/4s6SE1wT/uMB8GA1UdIwQY MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt MmEwOWNjNTNhODA1LzEvaWZtelpLdVdWUEt1X051al9penBJVFhCUC00LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1 LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1BBZMA0G CSqGSIb3DQEBCwUAA4IBAQAgQsfu0C+4h9u3tGzwZqBohk6ct5GPMhOyBEjnaPUI /5GB/zKTNayevahLu/JCjIjw+y5VxA9xzxwoXjZspKXJBQurhbmXXkv3lAWyMMPc 8fC65xpTu4QCAhctkMOA2i9ZRr5LrbB8kvHFFc4wapJSaOrLmAm4mAD2N0I0ER5O 6hHD+nQQJJGWL4E2KZ8BfdmD9BR56P81rlN9SgsI+ZV4xNVXFRT1oNcuTnZzqPnA H4lANZYQ0QMF+s4SJLYJ1BuTM9D5K3iCZPM8n65gHv3v6HxrgoCITaOqytt2f9wd lHQizmULdL/Np9M9i95Wk0m3M+syaK2+NNJgePe0U4zl -----END CERTIFICATE-----Generated at Wed Jan 21 04:04:08 2026 by rpki-client