This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/v89NCrFwQeDvFifuIbe7lcr1Vdg.roa File: v89NCrFwQeDvFifuIbe7lcr1Vdg.roa (raw, json) Hash identifier: 8lNS9jprfqrQ4KnCohT8hKELj4DY0q7OpHWa2tkRvdY= Subject key identifier: BF:CF:4D:0A:B1:70:41:E0:EF:16:27:EE:21:B7:BB:95:CA:F5:55:D8 Certificate issuer: /CN=0ac1565a5f6c4e54ca2f19d364759b6a0ed61840 Certificate serial: 019B79114EBC41E9A52BB224B556D92F4EEB Authority key identifier: 0A:C1:56:5A:5F:6C:4E:54:CA:2F:19:D3:64:75:9B:6A:0E:D6:18:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CsFWWl9sTlTKLxnTZHWbag7WGEA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/v89NCrFwQeDvFifuIbe7lcr1Vdg.roa Signing time: Thu 01 Jan 2026 10:18:56 +0000 ROA not before: Thu 01 Jan 2026 10:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198288 IP address blocks: 5.34.248.0/21 maxlen: 22 185.44.156.0/22 maxlen: 22 2a00:f8c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.mft rsync://rpki.ripe.net/repository/DEFAULT/CsFWWl9sTlTKLxnTZHWbag7WGEA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:4e:bc:41:e9:a5:2b:b2:24:b5:56:d9:2f:4e:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ac1565a5f6c4e54ca2f19d364759b6a0ed61840 Validity Not Before: Jan 1 10:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bfcf4d0ab17041e0ef1627ee21b7bb95caf555d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:26:5e:0a:b0:5f:13:e4:9f:3c:9f:68:a1:0d: b4:ee:9b:79:53:53:f3:b6:68:38:38:f8:92:52:7c: f7:b5:2f:73:fe:d8:b1:bf:b4:9f:1e:79:66:fc:24: 47:c5:ac:37:86:ad:a6:68:16:9e:05:dd:57:b6:75: 88:88:d8:b9:23:28:5a:5c:a2:8d:51:63:40:d1:9d: cb:6b:29:1c:e3:0f:84:47:e9:81:98:bc:6e:3e:82: 23:5d:67:f2:69:94:3a:c6:bf:5a:f8:52:95:ae:53: f6:44:15:78:3e:4b:e0:05:5d:79:24:ce:d6:b6:15: 08:78:97:a6:86:07:82:6e:bd:03:f4:a2:15:10:b5: 4b:10:85:86:b3:1d:67:cf:10:c5:a1:bd:65:73:37: c1:a8:ea:18:9a:e8:40:aa:ef:b0:e9:6e:4f:28:b1: 13:64:d7:e0:e5:22:ba:80:c2:6e:91:ba:09:0e:00: 2e:f7:5a:d0:dd:5e:8e:09:58:2b:bb:43:f0:af:d2: 58:0d:1e:64:09:bb:27:3a:66:c1:6e:d8:f4:32:8f: 4d:b2:ff:80:81:9c:33:90:17:a3:8f:7a:70:8f:5b: ee:8c:8b:04:a0:c8:e3:c6:45:95:42:27:3a:f0:d7: 54:26:6b:e6:ec:9d:4f:0d:32:bc:23:79:e2:ff:85: df:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:CF:4D:0A:B1:70:41:E0:EF:16:27:EE:21:B7:BB:95:CA:F5:55:D8 X509v3 Authority Key Identifier: keyid:0A:C1:56:5A:5F:6C:4E:54:CA:2F:19:D3:64:75:9B:6A:0E:D6:18:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CsFWWl9sTlTKLxnTZHWbag7WGEA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/v89NCrFwQeDvFifuIbe7lcr1Vdg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7edb22-ff47-465f-9068-5c4a0eb2017f/1/CsFWWl9sTlTKLxnTZHWbag7WGEA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.34.248.0/21 185.44.156.0/22 IPv6: 2a00:f8c0::/32 Signature Algorithm: sha256WithRSAEncryption 0a:e0:e3:69:39:70:40:f4:a6:69:34:c8:9a:ed:3f:ad:85:76: fb:c6:e9:0e:a7:a6:85:72:70:1d:57:ed:91:25:60:01:42:1c: d2:8f:79:90:f4:d8:4f:6f:4b:54:02:db:52:5a:36:82:f7:62: bb:a1:6f:3c:09:16:1f:6d:95:e8:7a:5c:5e:ad:66:0a:0f:00: 89:27:76:c4:2f:f9:13:c2:e7:05:26:63:89:b2:3f:c2:1a:14: fb:55:20:39:8f:24:15:fb:a5:e6:74:3e:bd:2e:ef:f8:6c:ce: f0:4e:38:8b:2c:35:5c:6e:97:89:dd:93:54:e6:99:8f:41:eb: 3f:25:95:cd:51:3c:4d:04:c8:ea:40:4f:61:30:93:90:b8:94: 1a:8f:30:8f:0d:50:ec:87:10:b8:da:8e:f7:1f:29:c7:b4:82: ff:40:9b:72:27:0a:c4:28:24:6e:ad:98:33:c1:c4:6e:6a:64: 25:9d:51:16:cf:6e:b0:75:76:9a:d7:1b:a0:55:9a:a3:21:f9: 0e:63:8c:8a:ef:42:c3:eb:b0:4c:57:89:31:a7:cb:23:8f:19: 67:57:6e:35:49:cc:1f:f9:a1:7f:12:ba:61:4d:d4:5e:a9:5a: dc:2e:3d:2b:e7:ea:96:49:a8:d6:f8:6c:50:28:1f:13:4d:55: a5:34:02:f9 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt5EU68QemlK7IktVbZL07rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhYzE1NjVhNWY2YzRlNTRjYTJmMTlkMzY0NzU5YjZhMGVk NjE4NDAwHhcNMjYwMTAxMTAxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZmNmNGQwYWIxNzA0MWUwZWYxNjI3ZWUyMWI3YmI5NWNhZjU1NWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSZeCrBfE+SfPJ9ooQ207pt5U1Pz tmg4OPiSUnz3tS9z/tixv7SfHnlm/CRHxaw3hq2maBaeBd1XtnWIiNi5IyhaXKKN UWNA0Z3Laykc4w+ER+mBmLxuPoIjXWfyaZQ6xr9a+FKVrlP2RBV4PkvgBV15JM7W thUIeJemhgeCbr0D9KIVELVLEIWGsx1nzxDFob1lczfBqOoYmuhAqu+w6W5PKLET ZNfg5SK6gMJukboJDgAu91rQ3V6OCVgru0Pwr9JYDR5kCbsnOmbBbtj0Mo9Nsv+A gZwzkBejj3pwj1vujIsEoMjjxkWVQic68NdUJmvm7J1PDTK8I3ni/4Xf7QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFL/PTQqxcEHg7xYn7iG3u5XK9VXYMB8GA1UdIwQY MBaAFArBVlpfbE5Uyi8Z02R1m2oO1hhAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3NGV1dsOXNUbFRLTHhuVFpIV2JhZzdXR0VBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi83ZWRiMjItZmY0Ny00NjVmLTkwNjgt NWM0YTBlYjIwMTdmLzEvdjg5TkNyRndRZUR2RmlmdUliZTdsY3IxVmRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi83ZWRiMjItZmY0Ny00NjVmLTkwNjgtNWM0YTBlYjIwMTdm LzEvQ3NGV1dsOXNUbFRLTHhuVFpIV2JhZzdXR0VBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDBSL4AwQC uSycMA0EAgACMAcDBQAqAPjAMA0GCSqGSIb3DQEBCwUAA4IBAQAK4ONpOXBA9KZp NMia7T+thXb7xukOp6aFcnAdV+2RJWABQhzSj3mQ9NhPb0tUAttSWjaC92K7oW88 CRYfbZXoelxerWYKDwCJJ3bEL/kTwucFJmOJsj/CGhT7VSA5jyQV+6XmdD69Lu/4 bM7wTjiLLDVcbpeJ3ZNU5pmPQes/JZXNUTxNBMjqQE9hMJOQuJQajzCPDVDshxC4 2o73HynHtIL/QJtyJwrEKCRurZgzwcRuamQlnVEWz26wdXaa1xugVZqjIfkOY4yK 70LD67BMV4kxp8sjjxlnV241Scwf+aF/ErphTdReqVrcLj0r5+qWSajW+GxQKB8T TVWlNAL5 -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:01 2026 by rpki-client