This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/T89jwcM0aDv58J1uGaX_TI1vK9A.roa File: T89jwcM0aDv58J1uGaX_TI1vK9A.roa (raw, json) Hash identifier: sG3D4TH7MLn7FU34onFGq465WOEDiHFkUuDacxXJOgg= Subject key identifier: 4F:CF:63:C1:C3:34:68:3B:F9:F0:9D:6E:19:A5:FF:4C:8D:6F:2B:D0 Certificate issuer: /CN=4d88eb730ab1a501ea36ea3482d764544e141111 Certificate serial: 019B797EE283742384051EE1F9CC10E01FE9 Authority key identifier: 4D:88:EB:73:0A:B1:A5:01:EA:36:EA:34:82:D7:64:54:4E:14:11:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/T89jwcM0aDv58J1uGaX_TI1vK9A.roa Signing time: Thu 01 Jan 2026 12:18:37 +0000 ROA not before: Thu 01 Jan 2026 12:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 185.56.84.0/24 maxlen: 24 185.56.85.0/24 maxlen: 24 185.56.86.0/24 maxlen: 24 185.56.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.mft rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 21:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:e2:83:74:23:84:05:1e:e1:f9:cc:10:e0:1f:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d88eb730ab1a501ea36ea3482d764544e141111 Validity Not Before: Jan 1 12:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4fcf63c1c334683bf9f09d6e19a5ff4c8d6f2bd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:cc:86:5d:03:34:3b:25:16:31:ea:c4:c5:57: 1a:4d:df:23:a7:ae:70:06:23:24:47:3f:bf:72:54: 9e:ed:45:f3:79:aa:ec:6b:e3:34:50:68:45:b8:2d: 4c:f1:6b:dd:0a:b2:05:fa:2c:1a:39:01:8b:3c:95: b6:c0:cb:70:ee:26:1a:ff:45:49:c2:2b:60:ad:ad: cc:19:ae:94:c1:f2:a4:20:67:94:00:3f:96:13:77: a4:42:0d:b4:c6:d6:97:4a:44:15:4b:1b:6b:d2:cb: 82:66:d9:32:46:ff:48:c9:9e:00:c1:29:6b:07:8a: 91:e2:22:d8:1a:04:41:db:97:65:cd:44:b5:b4:78: 4f:5c:05:72:c4:b8:58:ba:f7:64:f6:ed:e8:e2:7a: 14:e6:98:0f:52:0d:d2:cb:e0:c0:50:cd:19:22:1f: 11:0e:c7:c6:0b:d2:08:c3:e2:56:6a:29:73:67:a8: 5d:e7:b1:8b:21:07:a0:76:5b:fa:ba:56:50:0f:09: 63:56:b5:b5:6c:d8:1f:14:6e:8e:38:6b:8d:30:82: 8a:25:24:a0:08:30:eb:54:82:6a:76:08:f3:06:dd: 79:67:3b:a2:15:16:07:d3:94:bd:3e:c9:61:e1:9f: 41:fb:04:87:ca:b6:f7:d2:ff:a9:d7:2f:8b:76:bb: 73:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:CF:63:C1:C3:34:68:3B:F9:F0:9D:6E:19:A5:FF:4C:8D:6F:2B:D0 X509v3 Authority Key Identifier: keyid:4D:88:EB:73:0A:B1:A5:01:EA:36:EA:34:82:D7:64:54:4E:14:11:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/T89jwcM0aDv58J1uGaX_TI1vK9A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.56.84.0/22 Signature Algorithm: sha256WithRSAEncryption 71:2f:ba:c6:4f:6d:5e:34:8e:17:d4:80:01:d9:85:01:cd:77: 11:5b:96:2b:44:75:f8:1b:ed:ea:5f:5a:df:15:3c:85:07:20: a2:c4:d6:52:33:9f:fd:d6:43:0c:c6:71:b8:f9:28:fc:d9:33: bf:81:f3:08:19:5d:91:4e:66:b9:7e:c6:9a:fe:a1:09:53:0d: c3:f3:e3:a2:ed:5d:89:fe:b4:0a:a9:3e:ec:64:48:32:bc:97: 46:13:9e:2b:68:3b:cc:8d:4e:65:e3:a1:d8:18:16:9f:c9:4d: 3b:99:e0:91:79:49:e8:ef:8f:5d:2d:0c:b9:fc:8b:0e:95:44: d4:e6:28:fe:61:e4:d8:d5:cf:49:f6:9e:08:2b:b2:08:4c:78: 87:c5:ca:7e:e3:80:29:da:e6:2f:9e:ea:c5:94:ec:6f:74:e7: 7d:06:46:5f:d4:0e:17:0a:a3:97:cb:5f:04:55:c5:5f:09:62: d5:8b:5a:8a:39:b4:33:f2:25:f1:f9:c7:d6:4e:3e:42:0b:69: a6:0b:5d:a6:57:e8:e4:51:2a:91:60:cb:b6:98:a9:46:10:df: 74:f1:99:98:d9:43:48:ba:64:80:0f:12:8c:fd:d9:ea:b7:ec: 3b:75:33:62:93:73:a3:5a:3c:6a:b9:c0:f6:0f:8f:ee:80:75: 4d:b6:3e:65 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fuKDdCOEBR7h+cwQ4B/pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkODhlYjczMGFiMWE1MDFlYTM2ZWEzNDgyZDc2NDU0NGUx NDExMTEwHhcNMjYwMTAxMTIxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZmNmNjNjMWMzMzQ2ODNiZjlmMDlkNmUxOWE1ZmY0YzhkNmYyYmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8yGXQM0OyUWMerExVcaTd8jp65w BiMkRz+/clSe7UXzearsa+M0UGhFuC1M8WvdCrIF+iwaOQGLPJW2wMtw7iYa/0VJ witgra3MGa6UwfKkIGeUAD+WE3ekQg20xtaXSkQVSxtr0suCZtkyRv9IyZ4AwSlr B4qR4iLYGgRB25dlzUS1tHhPXAVyxLhYuvdk9u3o4noU5pgPUg3Sy+DAUM0ZIh8R DsfGC9IIw+JWailzZ6hd57GLIQegdlv6ulZQDwljVrW1bNgfFG6OOGuNMIKKJSSg CDDrVIJqdgjzBt15ZzuiFRYH05S9Pslh4Z9B+wSHyrb30v+p1y+LdrtzlQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE/PY8HDNGg7+fCdbhml/0yNbyvQMB8GA1UdIwQY MBaAFE2I63MKsaUB6jbqNILXZFROFBERMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFlqcmN3cXhwUUhxTnVvMGd0ZGtWRTRVRVJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9jNDkzZWUtZjY2ZS00MjA4LWEzMWQt NzI2ZjgzZDIzODkyLzEvVDg5andjTTBhRHY1OEoxdUdhWF9USTF2SzlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9jNDkzZWUtZjY2ZS00MjA4LWEzMWQtNzI2ZjgzZDIzODky LzEvVFlqcmN3cXhwUUhxTnVvMGd0ZGtWRTRVRVJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuThUMA0G CSqGSIb3DQEBCwUAA4IBAQBxL7rGT21eNI4X1IAB2YUBzXcRW5YrRHX4G+3qX1rf FTyFByCixNZSM5/91kMMxnG4+Sj82TO/gfMIGV2RTma5fsaa/qEJUw3D8+Oi7V2J /rQKqT7sZEgyvJdGE54raDvMjU5l46HYGBafyU07meCReUno749dLQy5/IsOlUTU 5ij+YeTY1c9J9p4IK7IITHiHxcp+44Ap2uYvnurFlOxvdOd9BkZf1A4XCqOXy18E VcVfCWLVi1qKObQz8iXx+cfWTj5CC2mmC12mV+jkUSqRYMu2mKlGEN908ZmY2UNI umSADxKM/dnqt+w7dTNik3OjWjxqucD2D4/ugHVNtj5l -----END CERTIFICATE-----Generated at Fri Jan 9 06:22:17 2026 by rpki-client