This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/PV6yxtYeyOgeAtdCuyx-Wp2snBc.roa File: PV6yxtYeyOgeAtdCuyx-Wp2snBc.roa (raw, json) Hash identifier: N4MZJRHi0fr7ViMCQpFC5R5kvKtxpG034IO9Kg1NAg8= Subject key identifier: 3D:5E:B2:C6:D6:1E:C8:E8:1E:02:D7:42:BB:2C:7E:5A:9D:AC:9C:17 Certificate issuer: /CN=c38ca1d418c218e26f795181a9e3bb7b79d4443f Certificate serial: 019B7F85160A0C604310E29E94CE5749AB44 Authority key identifier: C3:8C:A1:D4:18:C2:18:E2:6F:79:51:81:A9:E3:BB:7B:79:D4:44:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4yh1BjCGOJveVGBqeO7e3nURD8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/PV6yxtYeyOgeAtdCuyx-Wp2snBc.roa Signing time: Fri 02 Jan 2026 16:23:06 +0000 ROA not before: Fri 02 Jan 2026 16:23:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41203 IP address blocks: 89.207.48.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.crl rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.mft rsync://rpki.ripe.net/repository/DEFAULT/w4yh1BjCGOJveVGBqeO7e3nURD8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:16:0a:0c:60:43:10:e2:9e:94:ce:57:49:ab:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c38ca1d418c218e26f795181a9e3bb7b79d4443f Validity Not Before: Jan 2 16:23:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d5eb2c6d61ec8e81e02d742bb2c7e5a9dac9c17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d4:d9:86:b3:67:64:e9:68:67:8b:17:c6:f4: 83:f5:0d:27:b8:0a:a4:d6:57:65:49:db:e8:be:94: ec:d9:a4:2a:48:4a:83:9e:11:42:59:72:50:01:7f: 44:97:ce:a5:81:a0:1c:6c:e8:39:55:a3:37:e8:98: e5:f3:6a:43:99:0d:93:27:ac:de:52:7c:23:e4:79: d8:a5:ba:2a:16:f3:d6:88:de:67:8c:24:fc:e7:27: 22:54:c9:f7:d8:5c:27:89:84:69:09:c6:c0:3c:d9: 0d:0c:15:0d:88:f8:d5:f5:4e:5b:ab:d0:b4:03:36: 17:2a:2e:44:87:4c:c8:f8:a4:d7:b5:62:ce:c1:ae: da:b6:2f:9b:6a:e0:91:45:4e:f4:29:5f:1e:2b:53: 46:80:19:0c:8e:1d:19:3c:bc:dd:40:39:64:6e:a5: db:75:53:6b:d3:45:5d:c2:d2:00:85:a7:96:93:cd: ab:f6:3e:ff:e1:17:c3:5a:de:09:61:13:94:92:b2: 93:c3:45:d0:bf:3f:fa:ac:1d:d9:16:98:1a:0a:09: 13:3b:0a:ec:dd:30:55:b4:51:70:36:42:76:24:73: 2a:c2:4f:39:5e:7e:75:c3:05:03:89:4a:cb:b5:2c: 25:d6:70:35:00:80:dd:d0:38:7f:3a:da:92:8c:88: 26:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:5E:B2:C6:D6:1E:C8:E8:1E:02:D7:42:BB:2C:7E:5A:9D:AC:9C:17 X509v3 Authority Key Identifier: keyid:C3:8C:A1:D4:18:C2:18:E2:6F:79:51:81:A9:E3:BB:7B:79:D4:44:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4yh1BjCGOJveVGBqeO7e3nURD8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/PV6yxtYeyOgeAtdCuyx-Wp2snBc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/6fcba8-adb8-411f-9e46-2ef27a1916bd/1/w4yh1BjCGOJveVGBqeO7e3nURD8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.207.48.0/21 Signature Algorithm: sha256WithRSAEncryption 23:0f:e2:c9:d7:a6:b0:40:3f:e0:0c:42:7b:90:77:14:f0:c5: ea:95:63:c5:8c:9f:08:4f:c9:be:31:87:d1:e3:48:79:07:43: 4a:45:df:db:eb:74:8b:dd:18:11:0a:be:ea:4a:6a:48:65:76: 5d:4b:55:15:a7:de:d1:2e:e4:c4:70:9a:4e:30:06:7e:43:9f: e7:7d:64:36:72:89:d0:f1:4a:b0:4e:86:8b:29:58:aa:e2:ef: 41:56:f7:5f:cd:14:99:38:07:28:8e:f2:ff:34:96:b1:b5:6e: 56:a6:4a:d0:6a:e0:95:26:3f:4b:7e:af:9d:b3:1b:d3:d3:41: 3f:97:27:25:3a:03:17:5c:af:c5:33:74:b6:91:f1:b1:36:d1: 92:7b:b8:05:4c:c9:11:77:c2:01:43:4a:c2:61:cc:83:d2:bc: c7:ca:9d:3a:01:53:49:c0:ee:a8:b6:60:3b:72:e6:02:c9:62: 0b:41:81:b7:36:93:75:b3:24:23:de:1b:96:a3:74:36:fe:05: fe:f6:b8:a0:fd:c7:7b:e8:5e:5e:cb:e3:0b:e6:ea:91:7b:7d: bf:e7:94:0a:df:05:e5:61:35:f4:0d:2d:32:08:a9:cf:42:a7: 1f:9f:71:bb:c3:03:35:89:8d:64:9d:c8:dc:e4:85:50:8f:10: c4:8a:93:3c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hRYKDGBDEOKelM5XSatEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzOGNhMWQ0MThjMjE4ZTI2Zjc5NTE4MWE5ZTNiYjdiNzlk NDQ0M2YwHhcNMjYwMTAyMTYyMzA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDVlYjJjNmQ2MWVjOGU4MWUwMmQ3NDJiYjJjN2U1YTlkYWM5YzE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9TZhrNnZOloZ4sXxvSD9Q0nuAqk 1ldlSdvovpTs2aQqSEqDnhFCWXJQAX9El86lgaAcbOg5VaM36Jjl82pDmQ2TJ6ze Unwj5HnYpboqFvPWiN5njCT85yciVMn32FwniYRpCcbAPNkNDBUNiPjV9U5bq9C0 AzYXKi5Eh0zI+KTXtWLOwa7ati+bauCRRU70KV8eK1NGgBkMjh0ZPLzdQDlkbqXb dVNr00VdwtIAhaeWk82r9j7/4RfDWt4JYROUkrKTw0XQvz/6rB3ZFpgaCgkTOwrs 3TBVtFFwNkJ2JHMqwk85Xn51wwUDiUrLtSwl1nA1AIDd0Dh/OtqSjIgmywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD1essbWHsjoHgLXQrssflqdrJwXMB8GA1UdIwQY MBaAFMOModQYwhjib3lRganju3t51EQ/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzR5aDFCakNHT0p2ZVZHQnFlTzdlM25VUkQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS82ZmNiYTgtYWRiOC00MTFmLTllNDYt MmVmMjdhMTkxNmJkLzEvUFY2eXh0WWV5T2dlQXRkQ3V5eC1XcDJzbkJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS82ZmNiYTgtYWRiOC00MTFmLTllNDYtMmVmMjdhMTkxNmJk LzEvdzR5aDFCakNHT0p2ZVZHQnFlTzdlM25VUkQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDWc8wMA0G CSqGSIb3DQEBCwUAA4IBAQAjD+LJ16awQD/gDEJ7kHcU8MXqlWPFjJ8IT8m+MYfR 40h5B0NKRd/b63SL3RgRCr7qSmpIZXZdS1UVp97RLuTEcJpOMAZ+Q5/nfWQ2conQ 8UqwToaLKViq4u9BVvdfzRSZOAcojvL/NJaxtW5WpkrQauCVJj9Lfq+dsxvT00E/ lyclOgMXXK/FM3S2kfGxNtGSe7gFTMkRd8IBQ0rCYcyD0rzHyp06AVNJwO6otmA7 cuYCyWILQYG3NpN1syQj3huWo3Q2/gX+9rig/cd76F5ey+ML5uqRe32/55QK3wXl YTX0DS0yCKnPQqcfn3G7wwM1iY1kncjc5IVQjxDEipM8 -----END CERTIFICATE-----Generated at Tue Feb 10 00:28:43 2026 by rpki-client