This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/vk5mOixWgk4lkNf5dEAcoySrs5U.roa File: vk5mOixWgk4lkNf5dEAcoySrs5U.roa (raw, json) Hash identifier: yHhOU03i2cDznLkc0GxkuY12yBLmP3iRjtMPjktURX4= Subject key identifier: BE:4E:66:3A:2C:56:82:4E:25:90:D7:F9:74:40:1C:A3:24:AB:B3:95 Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019B797DEDB75CF4824BE9711761F6EF7A2E Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/vk5mOixWgk4lkNf5dEAcoySrs5U.roa Signing time: Thu 01 Jan 2026 12:17:34 +0000 ROA not before: Thu 01 Jan 2026 12:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48314 IP address blocks: 89.34.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:ed:b7:5c:f4:82:4b:e9:71:17:61:f6:ef:7a:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Jan 1 12:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=be4e663a2c56824e2590d7f974401ca324abb395 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a3:bb:ca:b5:27:b0:79:0b:0f:79:4f:b2:86: 27:12:a3:2e:52:4a:54:ad:86:f2:1c:34:e0:0c:25: bf:c3:6e:36:e1:d6:4d:e7:dc:10:76:83:25:af:87: 00:8e:b2:bc:19:3d:4d:90:f3:cf:ad:79:96:12:91: c9:b3:d9:0f:61:a2:3d:d8:b6:81:b2:61:82:ca:b8: 02:fe:d5:e1:30:0d:b7:38:d8:1f:84:5d:fd:fb:cb: 6a:73:62:0e:eb:c6:ac:02:2d:1d:9d:e9:5c:d7:1a: 91:ab:9e:5a:98:33:a0:29:ab:42:33:90:8c:72:08: 9d:47:66:24:da:bf:8c:8c:04:75:fd:c3:df:cc:4a: 18:ab:d0:ff:1f:41:4d:14:f5:f2:c7:5b:ee:5a:22: b6:81:7a:8b:c4:c5:c2:b3:25:0b:63:3d:9d:c5:42: f5:d9:69:08:38:3a:a1:9b:65:d9:53:10:68:40:84: 60:1c:b8:c3:c2:cf:02:7d:69:2f:dd:23:8a:fd:e4: 48:e8:b5:9e:7a:f7:89:c0:49:32:6b:71:91:34:ac: de:b7:e3:44:91:a5:bd:60:9b:b8:39:78:1d:00:4c: 91:31:0d:1b:5f:80:4d:1a:d3:66:4b:eb:6d:a5:10: f5:3e:61:f7:e1:ab:05:d7:2b:9d:7f:1c:3b:f7:6a: 88:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:4E:66:3A:2C:56:82:4E:25:90:D7:F9:74:40:1C:A3:24:AB:B3:95 X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/vk5mOixWgk4lkNf5dEAcoySrs5U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.34.202.0/24 Signature Algorithm: sha256WithRSAEncryption 96:4e:28:8d:c9:82:03:9b:b4:23:03:e6:dd:40:9f:48:1f:12: cf:89:8b:5c:b1:b4:9f:2a:32:94:67:62:1d:12:a5:fc:2f:09: 75:8b:7e:d2:23:b0:d2:22:fa:74:01:a3:60:5a:58:81:30:85: ec:66:71:8a:a8:ae:22:3b:d1:fa:dd:46:3f:9c:a1:1a:e4:e2: 97:02:7f:49:8d:ab:5a:6f:b5:c8:1e:13:4f:89:c9:7f:e4:21: 88:9c:93:58:0e:ca:a4:46:3b:bc:e1:e7:e9:b0:97:42:f4:9e: e1:8a:3c:9b:d7:8d:b9:59:47:f9:1c:b8:1f:ff:3d:6c:74:a8: d9:7a:06:a2:0c:62:6b:00:45:9a:36:df:03:02:79:0e:02:1c: 3b:bc:f3:d5:76:45:18:2a:84:07:7b:2d:c3:50:9e:df:fb:e1: f8:c2:a4:fa:9b:ea:d4:54:dd:9a:53:3e:1b:ce:00:d7:31:d0: a8:dd:ff:e4:2c:15:77:f5:aa:cf:54:f5:09:df:42:7d:a8:75: d7:bf:25:55:b2:66:3e:ff:b9:67:40:9d:9a:31:61:ff:93:ca: 00:8b:17:57:27:75:1d:64:8f:9e:2c:06:38:b1:a0:de:f7:b0: fd:38:62:a2:86:0c:85:d6:5f:de:32:b0:2c:aa:d6:9f:20:24: 91:bb:e9:08 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fe23XPSCS+lxF2H273ouMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjYwMTAxMTIxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTRlNjYzYTJjNTY4MjRlMjU5MGQ3Zjk3NDQwMWNhMzI0YWJiMzk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6O7yrUnsHkLD3lPsoYnEqMuUkpU rYbyHDTgDCW/w2424dZN59wQdoMlr4cAjrK8GT1NkPPPrXmWEpHJs9kPYaI92LaB smGCyrgC/tXhMA23ONgfhF39+8tqc2IO68asAi0dnelc1xqRq55amDOgKatCM5CM cgidR2Yk2r+MjAR1/cPfzEoYq9D/H0FNFPXyx1vuWiK2gXqLxMXCsyULYz2dxUL1 2WkIODqhm2XZUxBoQIRgHLjDws8CfWkv3SOK/eRI6LWeeveJwEkya3GRNKzet+NE kaW9YJu4OXgdAEyRMQ0bX4BNGtNmS+ttpRD1PmH34asF1yudfxw792qInQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL5OZjosVoJOJZDX+XRAHKMkq7OVMB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvdms1bU9peFdnazRsa05mNWRFQWNveVNyczVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSLKMA0G CSqGSIb3DQEBCwUAA4IBAQCWTiiNyYIDm7QjA+bdQJ9IHxLPiYtcsbSfKjKUZ2Id EqX8Lwl1i37SI7DSIvp0AaNgWliBMIXsZnGKqK4iO9H63UY/nKEa5OKXAn9Jjata b7XIHhNPicl/5CGInJNYDsqkRju84efpsJdC9J7hijyb1425WUf5HLgf/z1sdKjZ egaiDGJrAEWaNt8DAnkOAhw7vPPVdkUYKoQHey3DUJ7f++H4wqT6m+rUVN2aUz4b zgDXMdCo3f/kLBV39arPVPUJ30J9qHXXvyVVsmY+/7lnQJ2aMWH/k8oAixdXJ3Ud ZI+eLAY4saDe97D9OGKihgyF1l/eMrAsqtafICSRu+kI -----END CERTIFICATE-----Generated at Mon Jan 19 14:38:35 2026 by rpki-client