This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/sCJxKM5JVsRAzO-99cuhJnlis-M.roa File: sCJxKM5JVsRAzO-99cuhJnlis-M.roa (raw, json) Hash identifier: GbbbYVn9hdqho7aCoddaLij3Hl3ONgVgTqQXELautrU= Subject key identifier: B0:22:71:28:CE:49:56:C4:40:CC:EF:BD:F5:CB:A1:26:79:62:B3:E3 Certificate issuer: /CN=bb79847a3fe8e5c78844027ccaf0bd6e9da4624a Certificate serial: 019B79EC37CCEF885BA542588FFD13CD1C43 Authority key identifier: BB:79:84:7A:3F:E8:E5:C7:88:44:02:7C:CA:F0:BD:6E:9D:A4:62:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/sCJxKM5JVsRAzO-99cuhJnlis-M.roa Signing time: Thu 01 Jan 2026 14:18:02 +0000 ROA not before: Thu 01 Jan 2026 14:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198545 IP address blocks: 89.207.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.crl rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.mft rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:37:cc:ef:88:5b:a5:42:58:8f:fd:13:cd:1c:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb79847a3fe8e5c78844027ccaf0bd6e9da4624a Validity Not Before: Jan 1 14:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b0227128ce4956c440ccefbdf5cba1267962b3e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:6a:7a:95:a5:64:f8:69:28:04:da:96:a4:68: 24:43:ec:62:6d:bc:1d:26:7a:61:c1:58:c9:31:aa: 3a:2f:10:96:b4:47:b3:5e:9f:8e:15:fd:ac:1a:c3: d5:2d:25:a5:33:ca:6d:cc:71:6f:1a:f9:f4:5e:72: 91:dc:cf:24:e0:3c:78:9c:18:a3:21:4d:ab:4d:21: fa:c1:38:c2:73:18:b4:3e:f7:eb:4f:6e:4e:f2:c6: 44:f4:6e:dc:a4:27:50:9d:fe:bf:ce:05:9e:66:59: c2:5f:3c:ed:86:ae:3a:12:49:fe:1a:5f:d8:7d:e0: 07:95:7f:14:1c:2d:9b:6a:45:b0:c4:29:76:36:41: 9c:a0:84:e8:73:74:c4:35:93:e4:d3:5a:74:f8:f9: 4c:46:10:e3:ca:cd:31:16:e0:e2:a3:9d:2a:ff:01: 11:50:8b:22:15:c3:9e:9a:76:50:08:8d:68:46:60: 1d:02:00:a1:1a:2a:2a:ee:4b:7f:2d:4a:02:25:1b: 6c:33:ee:9f:0c:64:ea:b2:f2:6e:2b:50:6a:1d:fb: df:db:2a:ae:76:32:9b:00:b2:ca:34:25:2e:16:eb: 1b:23:74:f3:9b:62:b9:32:be:a3:94:b9:05:29:e6: 3d:45:39:35:f4:70:28:3c:90:5b:b4:cd:1a:de:b4: b6:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:22:71:28:CE:49:56:C4:40:CC:EF:BD:F5:CB:A1:26:79:62:B3:E3 X509v3 Authority Key Identifier: keyid:BB:79:84:7A:3F:E8:E5:C7:88:44:02:7C:CA:F0:BD:6E:9D:A4:62:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3mEej_o5ceIRAJ8yvC9bp2kYko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/sCJxKM5JVsRAzO-99cuhJnlis-M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/45cc9f-6432-41c7-b62d-10e40c586498/1/u3mEej_o5ceIRAJ8yvC9bp2kYko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.207.157.0/24 Signature Algorithm: sha256WithRSAEncryption 32:64:b7:35:eb:06:55:b2:e2:af:dd:14:24:5c:14:85:14:d6: d3:ff:19:e0:7a:74:cb:6c:df:dd:10:0d:30:e6:05:be:e6:d3: ee:c9:8e:e3:8f:db:8d:3d:06:41:56:10:b7:b1:96:36:7d:68: 03:af:92:61:73:c2:10:64:65:4f:b5:f5:34:1d:21:19:ac:77: 9b:ad:97:95:37:ea:a3:53:2b:be:3a:8f:ca:d2:35:35:82:cf: 77:d4:40:79:94:e5:2f:59:75:ef:2f:75:3d:45:0e:92:f6:56: 64:d7:1b:bf:5e:53:35:9b:c9:49:f8:b2:70:e0:21:5a:76:62: 9f:ce:51:14:0c:f4:ea:21:61:dd:e9:79:16:3c:78:5e:bb:92: be:d1:7c:6f:e4:2f:31:81:31:6b:58:2d:b2:34:65:07:86:6e: 07:3c:c5:85:c7:4f:ea:26:fd:f2:3b:6c:63:a1:cc:18:f8:b7: d7:1b:8f:9a:b0:44:cb:57:a3:0e:96:92:a4:c9:59:16:23:c8: 53:fe:20:d3:74:36:6e:f7:80:e8:9e:9c:19:fe:a3:65:16:5f: 3c:51:e5:3a:59:e3:77:2e:5b:6a:90:81:57:10:f8:aa:10:a7: da:c3:5d:4c:a7:92:ca:d9:e8:31:9b:a9:3a:12:cb:14:ac:ef: 34:aa:fe:36 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57DfM74hbpUJYj/0TzRxDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiNzk4NDdhM2ZlOGU1Yzc4ODQ0MDI3Y2NhZjBiZDZlOWRh NDYyNGEwHhcNMjYwMTAxMTQxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDIyNzEyOGNlNDk1NmM0NDBjY2VmYmRmNWNiYTEyNjc5NjJiM2UzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2p6laVk+GkoBNqWpGgkQ+xibbwd JnphwVjJMao6LxCWtEezXp+OFf2sGsPVLSWlM8ptzHFvGvn0XnKR3M8k4Dx4nBij IU2rTSH6wTjCcxi0PvfrT25O8sZE9G7cpCdQnf6/zgWeZlnCXzzthq46Ekn+Gl/Y feAHlX8UHC2bakWwxCl2NkGcoIToc3TENZPk01p0+PlMRhDjys0xFuDio50q/wER UIsiFcOemnZQCI1oRmAdAgChGioq7kt/LUoCJRtsM+6fDGTqsvJuK1BqHfvf2yqu djKbALLKNCUuFusbI3Tzm2K5Mr6jlLkFKeY9RTk19HAoPJBbtM0a3rS2SwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLAicSjOSVbEQMzvvfXLoSZ5YrPjMB8GA1UdIwQY MBaAFLt5hHo/6OXHiEQCfMrwvW6dpGJKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTNtRWVqX281Y2VJUkFKOHl2QzlicDJrWWtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My80NWNjOWYtNjQzMi00MWM3LWI2MmQt MTBlNDBjNTg2NDk4LzEvc0NKeEtNNUpWc1JBek8tOTljdWhKbmxpcy1NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My80NWNjOWYtNjQzMi00MWM3LWI2MmQtMTBlNDBjNTg2NDk4 LzEvdTNtRWVqX281Y2VJUkFKOHl2QzlicDJrWWtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWc+dMA0G CSqGSIb3DQEBCwUAA4IBAQAyZLc16wZVsuKv3RQkXBSFFNbT/xngenTLbN/dEA0w 5gW+5tPuyY7jj9uNPQZBVhC3sZY2fWgDr5Jhc8IQZGVPtfU0HSEZrHebrZeVN+qj Uyu+Oo/K0jU1gs931EB5lOUvWXXvL3U9RQ6S9lZk1xu/XlM1m8lJ+LJw4CFadmKf zlEUDPTqIWHd6XkWPHheu5K+0Xxv5C8xgTFrWC2yNGUHhm4HPMWFx0/qJv3yO2xj ocwY+LfXG4+asETLV6MOlpKkyVkWI8hT/iDTdDZu94DonpwZ/qNlFl88UeU6WeN3 LltqkIFXEPiqEKfaw11Mp5LK2egxm6k6EssUrO80qv42 -----END CERTIFICATE-----Generated at Tue Feb 10 02:22:40 2026 by rpki-client