This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/r9cYcGeOnLNmX14zzAg9yoFId3k.roa File: r9cYcGeOnLNmX14zzAg9yoFId3k.roa (raw, json) Hash identifier: Md+cAlSH8Rk9Zc6HL1vxKS/2XFn4eHAbG0USyiSJzfk= Subject key identifier: AF:D7:18:70:67:8E:9C:B3:66:5F:5E:33:CC:08:3D:CA:81:48:77:79 Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019B797E035F04B9FF73B999371C473DF62D Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/r9cYcGeOnLNmX14zzAg9yoFId3k.roa Signing time: Thu 01 Jan 2026 12:17:39 +0000 ROA not before: Thu 01 Jan 2026 12:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213702 IP address blocks: 89.125.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:03:5f:04:b9:ff:73:b9:99:37:1c:47:3d:f6:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Jan 1 12:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=afd71870678e9cb3665f5e33cc083dca81487779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e3:2a:a3:57:69:85:60:1b:56:40:90:d7:fe: 25:62:08:37:46:6b:da:c5:d5:57:4f:9c:1c:8d:dc: b2:78:d7:23:1e:c8:c8:a8:bd:e6:3a:17:37:b0:56: 73:89:ef:ac:ff:f7:26:93:ee:69:63:88:75:f4:27: 67:33:27:53:95:9a:40:88:c1:cc:46:e8:51:e0:fe: c7:47:8b:ce:71:24:fb:ab:77:c0:21:9d:26:f3:03: 7f:ae:bf:c4:7e:60:b2:9d:b4:23:e4:8e:84:74:c8: 02:23:e8:5a:24:05:9d:5f:a9:72:a9:43:60:e8:ba: e4:64:f5:67:fc:c2:15:ba:c7:1c:b0:e4:99:a1:73: a4:7b:e8:15:b0:81:aa:00:82:e5:94:b5:51:59:20: 31:9d:db:bd:36:8d:c6:1d:cd:73:0a:c0:9d:09:f7: cc:b8:6e:34:dc:db:35:3f:61:77:7c:02:f7:71:eb: 19:e0:aa:92:05:d8:b9:84:16:63:7c:52:00:d8:96: 3a:67:59:f4:7b:c7:6c:84:a8:33:a5:e4:59:6b:1e: a7:21:c8:24:b9:3f:27:4e:6f:0c:ff:88:40:11:74: e7:99:67:ee:a7:a0:97:ac:94:4f:bc:77:ca:55:d0: c6:85:16:52:72:fb:d9:bf:b6:b0:0b:e9:d8:6e:a6: 6f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:D7:18:70:67:8E:9C:B3:66:5F:5E:33:CC:08:3D:CA:81:48:77:79 X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/r9cYcGeOnLNmX14zzAg9yoFId3k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.125.48.0/24 Signature Algorithm: sha256WithRSAEncryption 88:5e:5d:75:88:88:20:29:d9:b3:58:8c:ea:3a:59:8f:2c:ec: f3:ec:95:0e:66:9a:87:5e:58:ce:91:69:6c:b9:cb:72:1f:14: ad:fd:2a:1b:07:b6:1c:f7:e8:fc:ae:ca:cc:b2:50:e9:f5:6b: e7:f4:5f:14:35:4b:89:48:8d:7c:1e:29:32:c2:28:48:44:88: 58:19:41:4c:ea:03:e0:14:46:c1:06:21:9f:51:70:15:67:df: ea:7a:58:4b:5e:e2:bf:52:60:27:6d:6a:6f:dc:d9:52:0e:a8: 7d:84:64:3d:25:1b:d1:93:8a:28:41:f1:e5:52:de:50:28:47: 22:0e:b3:5d:2a:75:0e:e5:a1:94:d7:ef:12:80:c8:95:61:eb: 96:f1:f2:59:c7:39:ff:bf:05:0a:eb:c8:d9:e4:e5:ff:db:01: ae:22:5e:5c:09:9e:1b:74:9e:19:4f:35:2a:cf:7a:b8:d5:e3: 32:3a:b0:28:7c:44:a1:33:fb:e6:20:36:7f:f4:55:fd:d8:04: ba:e2:b3:2d:7c:5d:96:09:b9:cd:96:c5:93:02:ec:f0:14:14: fe:29:a9:26:60:74:91:ba:39:5e:98:54:18:b8:f0:20:2e:00: 4c:87:26:ad:12:fb:00:76:c3:21:f7:02:5d:e2:3b:e9:08:7b: 28:0a:43:9c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fgNfBLn/c7mZNxxHPfYtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjYwMTAxMTIxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZmQ3MTg3MDY3OGU5Y2IzNjY1ZjVlMzNjYzA4M2RjYTgxNDg3Nzc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4OMqo1dphWAbVkCQ1/4lYgg3Rmva xdVXT5wcjdyyeNcjHsjIqL3mOhc3sFZzie+s//cmk+5pY4h19CdnMydTlZpAiMHM RuhR4P7HR4vOcST7q3fAIZ0m8wN/rr/EfmCynbQj5I6EdMgCI+haJAWdX6lyqUNg 6LrkZPVn/MIVusccsOSZoXOke+gVsIGqAILllLVRWSAxndu9No3GHc1zCsCdCffM uG403Ns1P2F3fAL3cesZ4KqSBdi5hBZjfFIA2JY6Z1n0e8dshKgzpeRZax6nIcgk uT8nTm8M/4hAEXTnmWfup6CXrJRPvHfKVdDGhRZScvvZv7awC+nYbqZvsQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK/XGHBnjpyzZl9eM8wIPcqBSHd5MB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvcjljWWNHZU9uTE5tWDE0enpBZzl5b0ZJZDNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWX0wMA0G CSqGSIb3DQEBCwUAA4IBAQCIXl11iIggKdmzWIzqOlmPLOzz7JUOZpqHXljOkWls uctyHxSt/SobB7Yc9+j8rsrMslDp9Wvn9F8UNUuJSI18HikywihIRIhYGUFM6gPg FEbBBiGfUXAVZ9/qelhLXuK/UmAnbWpv3NlSDqh9hGQ9JRvRk4ooQfHlUt5QKEci DrNdKnUO5aGU1+8SgMiVYeuW8fJZxzn/vwUK68jZ5OX/2wGuIl5cCZ4bdJ4ZTzUq z3q41eMyOrAofEShM/vmIDZ/9FX92AS64rMtfF2WCbnNlsWTAuzwFBT+KakmYHSR ujlemFQYuPAgLgBMhyatEvsAdsMh9wJd4jvpCHsoCkOc -----END CERTIFICATE-----Generated at Mon Jan 19 14:37:25 2026 by rpki-client