This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/P7kPB37r9r72-mJgBxJftOWF64M.roa File: P7kPB37r9r72-mJgBxJftOWF64M.roa (raw, json) Hash identifier: 2/cBpl7XQw4f9+xbj+/dYArmRAIbH19CMO7EVq172A8= Subject key identifier: 3F:B9:0F:07:7E:EB:F6:BE:F6:FA:62:60:07:12:5F:B4:E5:85:EB:83 Certificate issuer: /CN=4c6319fe7859c342f7cd9f711306f56590828d60 Certificate serial: 019B797E88F33BE9A93873F3376C496E10AB Authority key identifier: 4C:63:19:FE:78:59:C3:42:F7:CD:9F:71:13:06:F5:65:90:82:8D:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/P7kPB37r9r72-mJgBxJftOWF64M.roa Signing time: Thu 01 Jan 2026 12:18:14 +0000 ROA not before: Thu 01 Jan 2026 12:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202666 IP address blocks: 89.40.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.crl rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.mft rsync://rpki.ripe.net/repository/DEFAULT/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:88:f3:3b:e9:a9:38:73:f3:37:6c:49:6e:10:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c6319fe7859c342f7cd9f711306f56590828d60 Validity Not Before: Jan 1 12:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3fb90f077eebf6bef6fa626007125fb4e585eb83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:25:41:3b:dd:f4:7a:a4:48:d7:fa:0c:79:dd: 1f:eb:ad:bd:5b:e4:c3:ea:41:44:a9:d2:a6:8a:1d: 69:06:20:67:1e:0d:ee:b1:79:3d:d2:d1:00:07:c0: 06:84:8b:99:9f:ea:e2:b4:be:c9:26:25:09:42:82: 35:1d:3e:b5:3b:20:59:6a:2b:71:9d:5b:43:18:95: 00:e0:03:6b:eb:66:bd:e9:d6:2f:b7:a8:31:74:af: b9:1b:cf:a5:b2:b3:23:82:28:5a:32:f4:5e:62:bd: 5a:c2:14:4e:da:b9:d1:60:2b:c0:24:d8:c9:b5:2a: 7c:fc:24:78:38:63:17:e9:5e:b4:a9:22:8c:2b:ea: ff:35:5f:ad:00:24:cb:ec:34:91:70:02:0a:ae:42: c3:5b:f5:60:a3:65:f4:93:55:a1:07:42:e0:19:f7: 8b:4a:05:33:ab:64:e5:6c:8a:a0:64:e6:0d:e1:4b: 63:0c:7a:d2:30:a7:d5:39:ba:96:a6:45:f7:69:da: 5c:51:bd:ae:81:b2:cd:78:bc:a5:09:c8:4e:81:1b: 5f:44:cb:fa:d0:5f:6b:6d:d0:27:eb:51:d0:63:76: fb:eb:cd:d1:d7:54:fe:d6:db:36:2f:9c:02:30:9b: df:a7:8e:b6:0c:33:61:b5:80:09:a2:4f:ee:4e:ce: e4:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:B9:0F:07:7E:EB:F6:BE:F6:FA:62:60:07:12:5F:B4:E5:85:EB:83 X509v3 Authority Key Identifier: keyid:4C:63:19:FE:78:59:C3:42:F7:CD:9F:71:13:06:F5:65:90:82:8D:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/P7kPB37r9r72-mJgBxJftOWF64M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.40.168.0/24 Signature Algorithm: sha256WithRSAEncryption 48:87:e3:82:d5:df:27:b5:b2:b7:a3:02:14:e9:02:e0:52:3c: fc:5d:b5:82:94:66:d8:f1:2d:74:46:84:7f:25:95:ed:bc:bd: 64:da:f3:a7:77:45:12:6a:8a:d5:c8:91:8f:2f:37:36:44:e7: 44:8a:f9:13:f9:91:35:34:fc:c9:be:58:94:44:3c:79:18:b0: 98:3f:8b:5a:49:89:65:97:ae:4b:8c:1a:7e:a0:92:e1:7a:f0: 8b:b6:07:7a:ae:f8:2f:31:6c:ba:b0:1e:b3:ab:22:6f:b9:5b: 26:e0:40:45:57:3b:4d:d5:32:73:5a:53:0c:7d:aa:39:0d:40: 74:45:5a:6d:a0:fc:7e:75:82:b5:b6:4a:28:11:76:4e:a0:2e: bf:f8:41:2a:3b:35:66:97:26:45:66:0a:52:5a:04:85:f1:8b: f7:6f:9a:cd:46:e6:46:7d:19:27:30:40:29:16:9e:4b:72:89: ba:29:79:80:a6:41:9e:ff:c5:d8:8d:3d:fd:e8:30:0e:79:28: 2a:9e:fc:f0:21:6b:12:d9:1a:c7:25:13:c6:78:47:bc:82:ef: 7f:2a:32:66:cb:6f:cf:b5:56:51:f1:48:3d:30:94:fd:ab:65: e9:df:27:42:eb:ed:1f:71:3b:22:40:ed:0f:90:4e:a9:1f:ef: 09:25:12:1f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fojzO+mpOHPzN2xJbhCrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjNjMxOWZlNzg1OWMzNDJmN2NkOWY3MTEzMDZmNTY1OTA4 MjhkNjAwHhcNMjYwMTAxMTIxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZmI5MGYwNzdlZWJmNmJlZjZmYTYyNjAwNzEyNWZiNGU1ODVlYjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiVBO930eqRI1/oMed0f6629W+TD 6kFEqdKmih1pBiBnHg3usXk90tEAB8AGhIuZn+ritL7JJiUJQoI1HT61OyBZaitx nVtDGJUA4ANr62a96dYvt6gxdK+5G8+lsrMjgihaMvReYr1awhRO2rnRYCvAJNjJ tSp8/CR4OGMX6V60qSKMK+r/NV+tACTL7DSRcAIKrkLDW/Vgo2X0k1WhB0LgGfeL SgUzq2TlbIqgZOYN4UtjDHrSMKfVObqWpkX3adpcUb2ugbLNeLylCchOgRtfRMv6 0F9rbdAn61HQY3b7683R11T+1ts2L5wCMJvfp462DDNhtYAJok/uTs7k8wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD+5Dwd+6/a+9vpiYAcSX7TlheuDMB8GA1UdIwQY MBaAFExjGf54WcNC982fcRMG9WWQgo1gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEdNWl9uaFp3MEwzelo5eEV3YjFaWkNDaldBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8wMWU3ZGYtMTQxMC00OTFmLWE3MWIt NTU4MzBmOWVkZGU0LzEvUDdrUEIzN3I5cjcyLW1KZ0J4SmZ0T1dGNjRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My8wMWU3ZGYtMTQxMC00OTFmLWE3MWItNTU4MzBmOWVkZGU0 LzEvVEdNWl9uaFp3MEwzelo5eEV3YjFaWkNDaldBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSioMA0G CSqGSIb3DQEBCwUAA4IBAQBIh+OC1d8ntbK3owIU6QLgUjz8XbWClGbY8S10RoR/ JZXtvL1k2vOnd0USaorVyJGPLzc2ROdEivkT+ZE1NPzJvliURDx5GLCYP4taSYll l65LjBp+oJLhevCLtgd6rvgvMWy6sB6zqyJvuVsm4EBFVztN1TJzWlMMfao5DUB0 RVptoPx+dYK1tkooEXZOoC6/+EEqOzVmlyZFZgpSWgSF8Yv3b5rNRuZGfRknMEAp Fp5Lcom6KXmApkGe/8XYjT396DAOeSgqnvzwIWsS2RrHJRPGeEe8gu9/KjJmy2/P tVZR8Ug9MJT9q2Xp3ydC6+0fcTsiQO0PkE6pH+8JJRIf -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:34 2026 by rpki-client