This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/drC40KnO-Q3QGsMmL9RWdW185bs.roa File: drC40KnO-Q3QGsMmL9RWdW185bs.roa (raw, json) Hash identifier: d2PupDhwKMyHBzQEL0ssgDbjTxECVuxkn5VzjJjVY9s= Subject key identifier: 76:B0:B8:D0:A9:CE:F9:0D:D0:1A:C3:26:2F:D4:56:75:6D:7C:E5:BB Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019B797DFE24E54AC5216A9999DBE937A010 Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/drC40KnO-Q3QGsMmL9RWdW185bs.roa Signing time: Thu 01 Jan 2026 12:17:38 +0000 ROA not before: Thu 01 Jan 2026 12:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212234 IP address blocks: 89.125.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:fe:24:e5:4a:c5:21:6a:99:99:db:e9:37:a0:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Jan 1 12:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=76b0b8d0a9cef90dd01ac3262fd456756d7ce5bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cd:b8:99:54:7f:8a:2b:0a:2a:af:78:47:66: d1:5e:8c:85:b2:10:8e:dd:59:e0:4d:67:1f:ab:b8: 95:f0:92:35:00:e7:da:46:a0:5c:82:17:87:ba:59: 72:07:c8:56:14:7c:c8:78:eb:ad:5d:bf:ea:34:03: 9c:c7:ff:da:90:f9:17:7d:47:a2:17:88:85:d0:89: 81:2b:74:ae:7e:db:c4:fd:22:d9:27:8a:71:e2:29: 37:f6:dd:4a:00:96:1b:fc:0a:2b:33:84:bb:32:bd: 9e:ee:d7:53:81:94:07:e8:fa:8f:d7:4b:cd:0c:be: f5:40:4d:78:d1:05:69:4c:bc:40:fb:89:fc:20:3b: 49:72:5a:19:23:13:83:46:68:c2:c8:65:9b:19:21: e9:d4:a4:e6:9a:0e:e5:f9:98:38:ab:54:04:31:1f: 2d:41:0f:90:56:64:aa:f3:e1:61:14:1e:05:03:63: ee:87:f4:a8:92:45:98:48:8e:c8:4e:84:e0:15:23: e4:02:ef:d9:29:1b:8d:f4:bb:b3:58:66:b2:4b:61: a0:b0:be:11:1b:a4:ad:87:ac:8d:a9:03:36:2d:0d: eb:08:3e:c1:2d:e7:f8:02:d7:6e:3c:4e:f1:94:bb: 0e:37:57:18:ca:fd:5a:99:82:4c:80:0e:d3:6e:3d: 0b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:B0:B8:D0:A9:CE:F9:0D:D0:1A:C3:26:2F:D4:56:75:6D:7C:E5:BB X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/drC40KnO-Q3QGsMmL9RWdW185bs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.125.188.0/24 Signature Algorithm: sha256WithRSAEncryption 54:1d:0f:b6:7d:29:05:9d:db:48:a0:fb:ff:5f:c6:55:30:97: cf:ae:29:24:b9:96:92:54:f5:78:b8:8e:71:46:35:f4:a0:e1: ea:f6:dd:74:35:b8:2b:80:85:79:91:ba:3a:61:c8:2e:ab:04: 8b:3b:81:b5:63:02:a7:c2:cb:1d:aa:84:1a:ce:f3:5f:fc:ba: f6:15:e5:28:f6:e5:1c:73:0a:d8:77:b8:32:50:8b:22:00:60: b8:ff:75:42:c7:5b:e0:84:26:31:4b:18:a9:cc:b0:67:15:74: b1:95:d3:b2:40:d6:11:41:92:91:6f:b5:4c:67:93:9b:10:b6: e2:f1:1c:91:73:31:c8:8e:c1:d1:94:97:fd:15:0f:2d:60:f6: 8e:3c:bd:13:a6:a8:a2:49:71:36:e6:2d:9b:b0:7a:09:36:b2: 4f:c4:cb:68:6c:49:01:8a:7f:bd:6a:52:f9:90:de:15:36:ac: 2b:13:5c:fe:f1:5e:77:06:45:e2:98:a6:a1:9d:3d:ac:55:f8: 79:dc:2c:e2:c7:7a:14:68:61:a0:9b:2b:81:c1:29:8b:30:bf: 25:c8:28:48:62:86:4f:cb:93:0f:6f:09:af:a3:ab:80:32:ec: 03:47:ae:45:09:07:0f:e1:8b:90:bd:1e:52:42:a7:89:33:1c: 35:2b:26:54 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ff4k5UrFIWqZmdvpN6AQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjYwMTAxMTIxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NmIwYjhkMGE5Y2VmOTBkZDAxYWMzMjYyZmQ0NTY3NTZkN2NlNWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuM24mVR/iisKKq94R2bRXoyFshCO 3VngTWcfq7iV8JI1AOfaRqBcgheHullyB8hWFHzIeOutXb/qNAOcx//akPkXfUei F4iF0ImBK3SuftvE/SLZJ4px4ik39t1KAJYb/AorM4S7Mr2e7tdTgZQH6PqP10vN DL71QE140QVpTLxA+4n8IDtJcloZIxODRmjCyGWbGSHp1KTmmg7l+Zg4q1QEMR8t QQ+QVmSq8+FhFB4FA2Puh/SokkWYSI7IToTgFSPkAu/ZKRuN9LuzWGayS2GgsL4R G6Sth6yNqQM2LQ3rCD7BLef4AtduPE7xlLsON1cYyv1amYJMgA7Tbj0LPQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHawuNCpzvkN0BrDJi/UVnVtfOW7MB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvZHJDNDBLbk8tUTNRR3NNbUw5UldkVzE4NWJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWX28MA0G CSqGSIb3DQEBCwUAA4IBAQBUHQ+2fSkFndtIoPv/X8ZVMJfPrikkuZaSVPV4uI5x RjX0oOHq9t10NbgrgIV5kbo6YcguqwSLO4G1YwKnwssdqoQazvNf/Lr2FeUo9uUc cwrYd7gyUIsiAGC4/3VCx1vghCYxSxipzLBnFXSxldOyQNYRQZKRb7VMZ5ObELbi 8RyRczHIjsHRlJf9FQ8tYPaOPL0TpqiiSXE25i2bsHoJNrJPxMtobEkBin+9alL5 kN4VNqwrE1z+8V53BkXimKahnT2sVfh53Czix3oUaGGgmyuBwSmLML8lyChIYoZP y5MPbwmvo6uAMuwDR65FCQcP4YuQvR5SQqeJMxw1KyZU -----END CERTIFICATE-----Generated at Mon Jan 19 14:37:20 2026 by rpki-client