This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/RuMQUL9WOmEJvLWt-qr_BF1Gb5Q.roa File: RuMQUL9WOmEJvLWt-qr_BF1Gb5Q.roa (raw, json) Hash identifier: 43NWQzsz8KlfwddLNubmNg8ArqPU7FB+g1mEx1VSbLQ= Subject key identifier: 46:E3:10:50:BF:56:3A:61:09:BC:B5:AD:FA:AA:FF:04:5D:46:6F:94 Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055 Certificate serial: 019B77C75AFA976E307E1FBDD68717A8D944 Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/RuMQUL9WOmEJvLWt-qr_BF1Gb5Q.roa Signing time: Thu 01 Jan 2026 04:18:32 +0000 ROA not before: Thu 01 Jan 2026 04:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34927 IP address blocks: 89.187.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:5a:fa:97:6e:30:7e:1f:bd:d6:87:17:a8:d9:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055 Validity Not Before: Jan 1 04:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=46e31050bf563a6109bcb5adfaaaff045d466f94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:6a:23:d2:b6:bb:1a:22:76:90:4a:27:e0:9e: 79:70:4e:3b:18:01:d1:b3:f3:50:3d:14:4b:19:19: 69:ac:c9:41:4f:54:1f:bb:3b:22:a5:77:61:be:67: b4:20:c8:b1:af:c4:de:bb:53:0e:75:ee:05:11:6b: 0f:44:aa:33:a4:a9:96:99:60:a4:fa:6b:94:f2:86: f5:4c:ba:d2:a5:bc:c7:98:61:43:2f:04:2b:09:3f: 86:43:6e:7c:57:61:5e:f7:28:33:5a:5e:8b:26:44: f1:ec:26:af:f6:d7:1f:8d:b9:64:44:40:27:1d:61: 00:bf:58:eb:bd:5a:a8:ba:0c:3a:39:1f:ef:ca:d8: 5c:28:e8:c5:bc:28:10:05:33:c6:c2:a3:83:f3:98: bd:8e:70:26:d2:dc:08:05:d4:54:b7:ff:8d:f3:fe: 95:b0:98:ef:a9:4e:a8:bc:9d:f0:bf:19:54:35:ce: 5c:64:9d:50:b6:d2:78:8b:f9:62:41:b8:fb:0e:bb: da:b0:31:e5:1d:04:4a:e9:be:8b:be:32:2a:35:1e: f0:72:d8:89:7b:bd:ac:69:b0:44:46:32:2a:d2:96: 4f:26:ca:b6:d1:f8:bc:5f:53:e8:f7:ce:98:cf:25: fd:46:df:ea:53:20:7a:5d:7c:8a:70:ca:22:6d:59: 03:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:E3:10:50:BF:56:3A:61:09:BC:B5:AD:FA:AA:FF:04:5D:46:6F:94 X509v3 Authority Key Identifier: keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/RuMQUL9WOmEJvLWt-qr_BF1Gb5Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.187.21.0/24 Signature Algorithm: sha256WithRSAEncryption 00:ae:5a:ac:c1:9b:1c:de:71:9f:9b:f2:c5:d1:ed:e9:dc:6c: 58:13:3d:34:9e:9a:86:f6:85:bc:00:db:4b:43:77:17:6a:60: 29:cf:a2:65:5f:11:2c:1a:ab:37:41:b0:9e:2b:41:3b:77:b1: ce:17:13:f9:37:19:b1:45:0d:22:82:79:77:56:3b:67:3d:5c: 68:9f:45:4e:ef:f0:55:ea:ec:91:24:42:cf:b1:b6:58:12:78: 1f:8e:85:35:f3:0c:4d:fc:eb:89:96:00:e0:9d:c0:b8:bd:f1: 4f:e0:ed:df:29:ea:6c:29:67:ab:1f:78:6d:51:78:40:75:87: 3c:3c:4d:d3:af:01:73:15:a2:ed:38:5b:20:91:87:12:74:07: 39:a7:91:f4:20:06:cd:1e:f1:fc:f3:97:e4:2c:d6:98:7c:2e: 5b:0e:fe:c1:9e:bd:19:1d:65:60:47:d8:2a:c9:2f:9d:cf:f2: 18:92:74:0d:a4:8c:dd:a4:4f:35:75:38:e7:e2:5e:f4:3a:31: 0b:9c:cb:63:dd:32:90:42:50:04:c1:80:40:80:1c:54:40:c6: da:65:ee:8a:f4:08:0a:44:10:fc:57:f6:1d:8c:61:a7:88:8c: 27:19:8d:fa:8f:e3:74:6a:27:f0:2f:40:27:f0:d7:86:c5:92: 5d:4f:43:7f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x1r6l24wfh+91ocXqNlEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MWVjN2NjZjBmYTc2MWVkOTliYzVhN2E5ZWMwZDBlZWIw YmYwNTUwHhcNMjYwMTAxMDQxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NmUzMTA1MGJmNTYzYTYxMDliY2I1YWRmYWFhZmYwNDVkNDY2Zjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA82oj0ra7GiJ2kEon4J55cE47GAHR s/NQPRRLGRlprMlBT1QfuzsipXdhvme0IMixr8Teu1MOde4FEWsPRKozpKmWmWCk +muU8ob1TLrSpbzHmGFDLwQrCT+GQ258V2Fe9ygzWl6LJkTx7Cav9tcfjblkREAn HWEAv1jrvVqougw6OR/vythcKOjFvCgQBTPGwqOD85i9jnAm0twIBdRUt/+N8/6V sJjvqU6ovJ3wvxlUNc5cZJ1QttJ4i/liQbj7DrvasDHlHQRK6b6LvjIqNR7wctiJ e72sabBERjIq0pZPJsq20fi8X1Po986YzyX9Rt/qUyB6XXyKcMoibVkD9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEbjEFC/VjphCby1rfqq/wRdRm+UMB8GA1UdIwQY MBaAFAkex8zw+nYe2ZvFp6nsDQ7rC/BVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQt NDVjZmM4NTdkZGRkLzEvUnVNUVVMOVdPbUVKdkxXdC1xcl9CRjFHYjVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQtNDVjZmM4NTdkZGRk LzEvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWbsVMA0G CSqGSIb3DQEBCwUAA4IBAQAArlqswZsc3nGfm/LF0e3p3GxYEz00npqG9oW8ANtL Q3cXamApz6JlXxEsGqs3QbCeK0E7d7HOFxP5NxmxRQ0ignl3VjtnPVxon0VO7/BV 6uyRJELPsbZYEngfjoU18wxN/OuJlgDgncC4vfFP4O3fKepsKWerH3htUXhAdYc8 PE3TrwFzFaLtOFsgkYcSdAc5p5H0IAbNHvH885fkLNaYfC5bDv7Bnr0ZHWVgR9gq yS+dz/IYknQNpIzdpE81dTjn4l70OjELnMtj3TKQQlAEwYBAgBxUQMbaZe6K9AgK RBD8V/YdjGGniIwnGY36j+N0aifwL0An8NeGxZJdT0N/ -----END CERTIFICATE-----Generated at Tue Jan 20 12:11:11 2026 by rpki-client