This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/xwNwvn3pmRym-lKjL7cDbgOMKSM.roa File: xwNwvn3pmRym-lKjL7cDbgOMKSM.roa (raw, json) Hash identifier: osARPS1YdUG0wnyr4pTEyWzxtHT+Yc9Ug45OCObpzmo= Subject key identifier: C7:03:70:BE:7D:E9:99:1C:A6:FA:52:A3:2F:B7:03:6E:03:8C:29:23 Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d Certificate serial: 019BA1E984D704633B7EA86BE079319E9513 Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/xwNwvn3pmRym-lKjL7cDbgOMKSM.roa Signing time: Fri 09 Jan 2026 08:39:54 +0000 ROA not before: Fri 09 Jan 2026 08:39:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 402044 IP address blocks: 89.117.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a1:e9:84:d7:04:63:3b:7e:a8:6b:e0:79:31:9e:95:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d Validity Not Before: Jan 9 08:39:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c70370be7de9991ca6fa52a32fb7036e038c2923 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:64:c9:ef:a3:36:09:c6:82:48:62:01:aa:eb: 6e:32:d5:31:20:9c:f0:4f:11:09:90:8b:8b:2f:18: 4a:61:f6:a0:36:86:72:84:f2:84:05:6f:dd:a4:b7: 74:c8:5c:ef:68:47:14:05:bf:cd:01:ba:7b:05:53: 5c:5e:e9:9f:31:12:ed:14:bb:10:2e:db:2c:5c:f2: a3:d8:84:58:4d:56:32:16:0c:12:a4:d2:ad:79:83: c1:1e:6a:f9:93:39:1a:76:3f:c8:e1:c4:4e:7d:87: fd:00:7c:e6:31:17:e4:72:ff:c4:d7:db:ef:18:16: 9e:3b:4b:29:33:2e:65:4f:c0:3d:86:b1:2f:35:73: 6a:af:34:aa:79:19:52:69:2c:ab:ce:9e:cf:f9:88: 4d:b4:f1:2f:8a:69:f9:e3:82:0d:eb:d4:60:14:c0: 61:b2:c7:f4:b0:b0:07:76:b2:47:28:49:ce:b3:2e: 17:25:ce:28:08:ec:6c:50:82:50:2f:30:c1:13:d7: 2e:a1:0d:86:3b:00:89:73:58:bf:76:7e:aa:b0:9a: 72:75:c9:e7:4a:df:38:59:3a:db:c3:16:7b:07:d4: 78:69:73:ec:cb:31:cd:f7:f4:64:11:83:6e:66:a4: 34:5e:d5:cc:ca:2f:29:9d:e1:40:0e:38:c0:a5:21: a8:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:03:70:BE:7D:E9:99:1C:A6:FA:52:A3:2F:B7:03:6E:03:8C:29:23 X509v3 Authority Key Identifier: keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/xwNwvn3pmRym-lKjL7cDbgOMKSM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.117.252.0/24 Signature Algorithm: sha256WithRSAEncryption 30:d4:62:28:f8:6d:47:36:0a:28:93:ac:5a:bf:94:55:a9:ae: 65:7d:02:31:4b:5f:9c:b7:01:80:cc:11:70:f0:4a:6c:0e:44: 3c:d5:3c:be:5b:8f:41:f1:dd:b2:90:af:13:9f:1e:96:85:2b: 6a:04:a3:8a:09:fa:6d:06:53:9a:8b:4e:92:08:09:37:d6:58: a7:4b:87:f3:d3:6a:59:9d:b8:19:ad:33:fe:d7:1b:6a:0c:42: 03:2c:6f:c7:72:38:c8:3e:11:6c:9f:7e:f5:12:f2:6e:75:62: eb:ac:12:60:b8:48:28:2c:3d:62:c8:83:94:e9:47:db:6b:6e: 0e:09:9b:66:f7:83:46:c2:9b:b3:f9:4e:94:58:6c:f5:b0:84: 15:10:89:40:3a:83:b5:2b:41:bc:4b:cf:1b:f5:ff:a9:df:ae: 73:82:56:04:e3:71:3c:50:fc:65:d3:d8:36:6e:ae:13:88:a7: 3c:4f:cf:42:54:66:e2:45:6d:65:36:c2:8a:e0:df:97:79:ee: 0d:cf:1d:64:71:9d:8a:bf:62:32:38:1e:7d:0c:e0:ab:d1:a9: b7:c0:79:e7:d9:93:32:af:54:cf:d7:47:24:28:fb:ba:1a:03: a6:db:65:65:bc:d6:7b:19:7a:60:82:04:e9:f6:42:8a:82:bc: c4:19:a4:48 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuh6YTXBGM7fqhr4HkxnpUTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZGQ4MWE4MzNkOWIwNDNjN2ZmZDYzNWE1OTg3ZjUzNjk3 MTE4MGQwHhcNMjYwMTA5MDgzOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzAzNzBiZTdkZTk5OTFjYTZmYTUyYTMyZmI3MDM2ZTAzOGMyOTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2TJ76M2CcaCSGIBqutuMtUxIJzw TxEJkIuLLxhKYfagNoZyhPKEBW/dpLd0yFzvaEcUBb/NAbp7BVNcXumfMRLtFLsQ LtssXPKj2IRYTVYyFgwSpNKteYPBHmr5kzkadj/I4cROfYf9AHzmMRfkcv/E19vv GBaeO0spMy5lT8A9hrEvNXNqrzSqeRlSaSyrzp7P+YhNtPEvimn544IN69RgFMBh ssf0sLAHdrJHKEnOsy4XJc4oCOxsUIJQLzDBE9cuoQ2GOwCJc1i/dn6qsJpydcnn St84WTrbwxZ7B9R4aXPsyzHN9/RkEYNuZqQ0XtXMyi8pneFADjjApSGoHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMcDcL596ZkcpvpSoy+3A24DjCkjMB8GA1UdIwQY MBaAFPDdgagz2bBDx//WNaWYf1NpcRgNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUt MDQ2ODA0MjQ4NmRjLzEveHdOd3ZuM3BtUnltLWxLakw3Y0RiZ09NS1NNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUtMDQ2ODA0MjQ4NmRj LzEvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWXX8MA0G CSqGSIb3DQEBCwUAA4IBAQAw1GIo+G1HNgook6xav5RVqa5lfQIxS1+ctwGAzBFw 8EpsDkQ81Ty+W49B8d2ykK8Tnx6WhStqBKOKCfptBlOai06SCAk31linS4fz02pZ nbgZrTP+1xtqDEIDLG/HcjjIPhFsn371EvJudWLrrBJguEgoLD1iyIOU6Ufba24O CZtm94NGwpuz+U6UWGz1sIQVEIlAOoO1K0G8S88b9f+p365zglYE43E8UPxl09g2 bq4TiKc8T89CVGbiRW1lNsKK4N+Xee4Nzx1kcZ2Kv2IyOB59DOCr0am3wHnn2ZMy r1TP10ckKPu6GgOm22VlvNZ7GXpgggTp9kKKgrzEGaRI -----END CERTIFICATE-----Generated at Mon Jan 12 01:22:00 2026 by rpki-client