This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/UBQ8zfC20r_1Hjj9fNuDe5ogG20.roa File: UBQ8zfC20r_1Hjj9fNuDe5ogG20.roa (raw, json) Hash identifier: za1VWR+weOkWEMkwhY4ssUY7GhfmkDp3hVHMzqeZ7EY= Subject key identifier: 50:14:3C:CD:F0:B6:D2:BF:F5:1E:38:FD:7C:DB:83:7B:9A:20:1B:6D Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019B797DE2E1C5547DC75D0F1E6A9AA8DD89 Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/UBQ8zfC20r_1Hjj9fNuDe5ogG20.roa Signing time: Thu 01 Jan 2026 12:17:31 +0000 ROA not before: Thu 01 Jan 2026 12:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13213 IP address blocks: 89.125.8.0/22 maxlen: 22 89.125.20.0/22 maxlen: 22 89.125.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:e2:e1:c5:54:7d:c7:5d:0f:1e:6a:9a:a8:dd:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Jan 1 12:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=50143ccdf0b6d2bff51e38fd7cdb837b9a201b6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:61:69:21:13:15:84:75:a6:2e:89:d9:eb:1e: 51:c2:c1:09:62:c4:10:01:3a:8c:92:ea:7b:47:aa: 48:fe:db:cd:0c:23:c9:e8:64:ce:cb:5a:53:78:18: be:2d:a1:ed:b6:5d:20:e0:c5:a4:0c:97:f8:f1:5b: 31:50:93:3d:37:c3:c8:08:f9:e3:b9:94:43:01:b3: a4:ce:c9:25:03:58:f6:43:67:c7:2f:b2:54:2e:9e: db:93:1a:66:3f:5a:96:ac:4f:e2:9d:37:37:25:79: 4a:7a:f4:87:19:8b:6b:f6:8a:b6:36:e9:e7:d2:6c: 69:b0:e9:14:1d:46:ef:81:ee:45:0c:64:da:1f:67: 0f:82:dc:1e:6a:4a:18:a9:d4:e3:21:62:96:8f:6f: a5:9d:22:44:a7:8c:74:48:ac:a4:e6:d7:1b:9a:4c: cf:79:2a:7e:4a:22:29:59:ef:bd:b2:7b:17:03:a1: d4:2a:5e:ea:ca:46:f5:78:78:73:18:21:c1:5c:45: 14:a9:0e:1e:8c:22:c1:02:1b:70:4b:fe:03:2d:7c: 32:d0:30:82:19:fb:3c:04:ab:59:48:51:b5:dd:c0: 2a:70:f4:43:71:e6:ef:e5:a4:e8:8e:18:93:18:a6: 19:05:e8:68:20:16:5d:5f:b9:b5:ab:fa:47:38:b0: 1d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:14:3C:CD:F0:B6:D2:BF:F5:1E:38:FD:7C:DB:83:7B:9A:20:1B:6D X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/UBQ8zfC20r_1Hjj9fNuDe5ogG20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.125.8.0/22 89.125.20.0/22 89.125.32.0/22 Signature Algorithm: sha256WithRSAEncryption 66:0e:c7:3b:ee:a2:5e:7f:d8:1b:f8:ad:09:a9:88:90:87:39: 63:d0:7c:1f:25:22:e0:c4:e9:a8:18:0f:41:b9:5b:f4:ef:b8: 18:5c:a4:9b:dc:ab:08:ba:35:8b:63:4b:da:d7:58:8a:cf:56: 59:32:98:47:10:92:1f:8a:c7:3f:fa:29:26:5d:a6:f2:e9:a8: 2b:83:14:60:5e:b1:47:52:cf:d6:f6:fe:88:d7:f5:eb:92:41: 1e:e7:81:99:ac:fe:a4:db:10:b9:25:b8:cd:b4:88:f0:1d:04: 1f:d8:28:a1:84:7c:38:b7:ca:b6:eb:8b:72:98:f6:dd:2a:cb: e0:ee:63:84:94:22:75:3b:ab:7b:40:3c:13:e2:3f:2b:95:ef: 32:14:bf:c4:85:51:d6:d7:3c:d5:ce:7b:1f:9d:57:91:ce:23: 9e:5d:ff:41:42:8d:60:9c:16:8e:70:ed:42:f5:76:57:6f:2b: 1c:b5:c2:54:da:b2:f0:fd:4d:94:50:7f:b1:08:43:95:a8:26: 96:3a:ec:9b:d9:69:af:67:a2:5f:d5:99:95:26:c1:5b:32:8b: ce:38:90:7a:00:90:10:e5:fe:84:69:26:ae:a7:3d:03:43:eb: 91:3d:0f:39:57:f3:9d:85:c9:bd:22:2f:c2:17:dd:fd:a6:53: cf:62:64:f6 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5feLhxVR9x10PHmqaqN2JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjYwMTAxMTIxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MDE0M2NjZGYwYjZkMmJmZjUxZTM4ZmQ3Y2RiODM3YjlhMjAxYjZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGFpIRMVhHWmLonZ6x5RwsEJYsQQ ATqMkup7R6pI/tvNDCPJ6GTOy1pTeBi+LaHttl0g4MWkDJf48VsxUJM9N8PICPnj uZRDAbOkzsklA1j2Q2fHL7JULp7bkxpmP1qWrE/inTc3JXlKevSHGYtr9oq2Nunn 0mxpsOkUHUbvge5FDGTaH2cPgtweakoYqdTjIWKWj2+lnSJEp4x0SKyk5tcbmkzP eSp+SiIpWe+9snsXA6HUKl7qykb1eHhzGCHBXEUUqQ4ejCLBAhtwS/4DLXwy0DCC Gfs8BKtZSFG13cAqcPRDcebv5aTojhiTGKYZBehoIBZdX7m1q/pHOLAdzwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFFAUPM3wttK/9R44/Xzbg3uaIBttMB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvVUJROHpmQzIwcl8xSGpqOWZOdURlNW9nRzIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCWX0IAwQC WX0UAwQCWX0gMA0GCSqGSIb3DQEBCwUAA4IBAQBmDsc77qJef9gb+K0JqYiQhzlj 0HwfJSLgxOmoGA9BuVv077gYXKSb3KsIujWLY0va11iKz1ZZMphHEJIfisc/+ikm Xaby6agrgxRgXrFHUs/W9v6I1/XrkkEe54GZrP6k2xC5JbjNtIjwHQQf2CihhHw4 t8q264tymPbdKsvg7mOElCJ1O6t7QDwT4j8rle8yFL/EhVHW1zzVznsfnVeRziOe Xf9BQo1gnBaOcO1C9XZXbysctcJU2rLw/U2UUH+xCEOVqCaWOuyb2WmvZ6Jf1ZmV JsFbMovOOJB6AJAQ5f6EaSaupz0DQ+uRPQ85V/Odhcm9Ii/CF939plPPYmT2 -----END CERTIFICATE-----Generated at Mon Jan 19 14:43:30 2026 by rpki-client