This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/CyN3e9uCTyKmNNEcJQxgz4QFWf8.roa File: CyN3e9uCTyKmNNEcJQxgz4QFWf8.roa (raw, json) Hash identifier: ZouQIBD2mByt9kppy0cp+LKfN3vrroJApZnWbBw/XwI= Subject key identifier: 0B:23:77:7B:DB:82:4F:22:A6:34:D1:1C:25:0C:60:CF:84:05:59:FF Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019B797DE4269B5F7736C4C7ED343C0F0784 Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/CyN3e9uCTyKmNNEcJQxgz4QFWf8.roa Signing time: Thu 01 Jan 2026 12:17:32 +0000 ROA not before: Thu 01 Jan 2026 12:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16276 IP address blocks: 89.125.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:e4:26:9b:5f:77:36:c4:c7:ed:34:3c:0f:07:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Jan 1 12:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0b23777bdb824f22a634d11c250c60cf840559ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:41:1a:7d:e9:bd:d5:c4:6f:40:c1:d0:48:9e: d5:86:76:3f:0d:18:c8:45:43:ea:6a:54:47:48:f3: a7:ca:64:31:c1:f9:32:f4:b1:74:cd:c1:4a:4d:01: f0:5c:be:a3:2d:fc:a6:74:1b:da:39:2e:19:1c:6a: bc:fd:45:16:39:2d:98:27:b3:e5:b0:f6:9b:2f:75: a2:10:c4:b6:5f:12:4a:19:89:44:a5:53:52:bc:88: 94:4e:f3:9f:c6:cf:84:92:1c:60:7f:4f:18:83:92: 87:5f:01:ae:60:96:80:4f:6f:88:7a:a7:1c:2c:5f: b5:ac:df:c4:9f:fc:ad:d1:f0:28:07:56:d3:33:df: 8a:38:a2:28:c5:4c:1e:b2:4b:b6:5e:b4:0b:38:c8: a7:52:c6:7f:1f:11:06:0f:4b:ae:f4:6c:63:15:96: 99:e7:a1:08:a0:21:19:60:22:63:77:9f:ce:40:91: 2e:26:00:a1:ea:b3:8e:25:08:76:b6:2f:09:78:0b: 58:3e:7c:ac:40:de:49:65:89:b8:b9:92:de:49:ab: 3d:86:2d:b0:db:97:79:3a:76:a1:48:aa:8f:af:8e: 62:38:87:3e:f7:6f:4f:ef:ad:cc:04:51:90:a5:51: 1d:d4:b2:a8:91:05:0e:1b:33:6b:5b:12:8e:2c:da: c0:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:23:77:7B:DB:82:4F:22:A6:34:D1:1C:25:0C:60:CF:84:05:59:FF X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/CyN3e9uCTyKmNNEcJQxgz4QFWf8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.125.172.0/24 Signature Algorithm: sha256WithRSAEncryption 08:9b:bb:97:c2:b5:a6:90:7e:0a:5d:c3:33:50:08:78:ea:6d: e0:f6:82:72:21:aa:f4:98:de:b0:22:77:7b:7d:cc:e1:23:1f: 48:dd:33:57:10:a3:c2:4d:27:59:0a:5d:6b:ac:9b:4b:50:1f: 57:4e:3c:ed:61:4f:b0:f5:a5:7c:e0:c1:07:a8:f7:0a:7a:a5: 3f:a3:0e:53:e6:db:d8:eb:df:a0:c4:02:1f:bc:d1:0d:52:66: 87:6b:97:a1:41:d3:da:ee:f0:4f:88:2d:a1:1e:a3:61:07:f7: 0b:cf:5b:dc:1d:9f:a7:e7:dd:06:5c:56:fb:1c:11:7e:a7:95: c4:11:2a:0c:80:48:4e:9e:c1:93:38:2b:6f:b6:1c:cf:61:30: 52:a1:74:4e:e2:47:5e:69:17:34:87:e8:7d:b9:c5:9c:6d:6a: 3b:2b:54:f8:78:05:69:ad:b3:1a:a9:27:ca:9b:d9:3b:d3:25: 51:45:2f:0b:14:92:fd:af:d5:7b:87:a3:1a:d3:79:f7:c2:73: df:9d:34:8c:17:3a:96:9e:05:cb:49:39:6c:ab:15:e5:93:84: 2d:31:0b:33:c3:a1:e7:d2:32:55:72:70:f1:9d:fe:7f:31:b0: 4f:6b:4c:ba:4b:6f:1d:0f:05:db:06:c9:a4:18:a7:e2:24:70: 95:42:a5:cc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5feQmm193NsTH7TQ8DweEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjYwMTAxMTIxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjIzNzc3YmRiODI0ZjIyYTYzNGQxMWMyNTBjNjBjZjg0MDU1OWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUEafem91cRvQMHQSJ7VhnY/DRjI RUPqalRHSPOnymQxwfky9LF0zcFKTQHwXL6jLfymdBvaOS4ZHGq8/UUWOS2YJ7Pl sPabL3WiEMS2XxJKGYlEpVNSvIiUTvOfxs+Ekhxgf08Yg5KHXwGuYJaAT2+Ieqcc LF+1rN/En/yt0fAoB1bTM9+KOKIoxUwesku2XrQLOMinUsZ/HxEGD0uu9GxjFZaZ 56EIoCEZYCJjd5/OQJEuJgCh6rOOJQh2ti8JeAtYPnysQN5JZYm4uZLeSas9hi2w 25d5OnahSKqPr45iOIc+929P763MBFGQpVEd1LKokQUOGzNrWxKOLNrArQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAsjd3vbgk8ipjTRHCUMYM+EBVn/MB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvQ3lOM2U5dUNUeUttTk5FY0pReGd6NFFGV2Y4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWX2sMA0G CSqGSIb3DQEBCwUAA4IBAQAIm7uXwrWmkH4KXcMzUAh46m3g9oJyIar0mN6wInd7 fczhIx9I3TNXEKPCTSdZCl1rrJtLUB9XTjztYU+w9aV84MEHqPcKeqU/ow5T5tvY 69+gxAIfvNENUmaHa5ehQdPa7vBPiC2hHqNhB/cLz1vcHZ+n590GXFb7HBF+p5XE ESoMgEhOnsGTOCtvthzPYTBSoXRO4kdeaRc0h+h9ucWcbWo7K1T4eAVprbMaqSfK m9k70yVRRS8LFJL9r9V7h6Ma03n3wnPfnTSMFzqWngXLSTlsqxXlk4QtMQszw6Hn 0jJVcnDxnf5/MbBPa0y6S28dDwXbBsmkGKfiJHCVQqXM -----END CERTIFICATE-----Generated at Mon Jan 19 14:38:37 2026 by rpki-client