This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/odglfsfLwrnYcI_0eGMBOEZd4WQ.roa File: odglfsfLwrnYcI_0eGMBOEZd4WQ.roa (raw, json) Hash identifier: MiecsuP7B5Szic75X7ZygfAyGGrD7r8o1AiJyMKK4vY= Subject key identifier: A1:D8:25:7E:C7:CB:C2:B9:D8:70:8F:F4:78:63:01:38:46:5D:E1:64 Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25 Certificate serial: 019C281C50D3284F1C96FE0F632992221836 Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/odglfsfLwrnYcI_0eGMBOEZd4WQ.roa Signing time: Wed 04 Feb 2026 10:04:30 +0000 ROA not before: Wed 04 Feb 2026 10:04:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 984 IP address blocks: 89.126.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:28:1c:50:d3:28:4f:1c:96:fe:0f:63:29:92:22:18:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25 Validity Not Before: Feb 4 10:04:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a1d8257ec7cbc2b9d8708ff478630138465de164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:76:2b:ff:69:db:e6:34:e9:f6:9e:9c:26:0c: ba:1d:73:a1:16:b6:f3:fe:11:fb:18:b3:5c:06:61: 97:cf:99:de:1d:18:37:b4:6d:d9:12:c0:a1:b0:86: ef:55:58:1e:c7:a3:3a:4a:93:14:13:1a:05:b1:a7: 69:6f:cb:21:59:6f:c8:8e:86:2b:45:73:e4:fe:30: c2:ba:8d:ff:b6:18:62:37:6e:7b:9b:e7:66:1f:a6: b6:9d:1a:8a:5b:d3:d9:0d:b0:e1:7e:c4:22:86:8c: 04:ca:71:38:79:bc:51:83:97:ee:1e:68:6f:29:8e: 6d:0f:38:b2:15:9f:88:e8:c4:eb:59:27:23:88:6a: fa:30:99:ab:4d:bf:8e:ed:6d:62:21:3a:58:85:41: ee:79:94:7f:da:0a:9b:42:77:bc:43:49:d5:28:bb: 61:04:9b:d5:fd:72:98:1c:a4:2e:51:21:56:c2:b3: 9f:5c:09:95:b6:93:ee:a5:7c:f0:df:59:77:39:3b: 8a:e8:cb:6a:b2:4f:86:30:8a:34:ed:e0:b2:57:43: 72:4e:78:54:85:4f:d9:f9:44:36:c1:29:09:f1:e6: f5:30:0a:83:c8:53:e3:04:36:cf:d3:41:3c:f5:24: 20:87:5c:47:23:45:81:8b:68:e2:c8:81:5e:5a:78: d2:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:D8:25:7E:C7:CB:C2:B9:D8:70:8F:F4:78:63:01:38:46:5D:E1:64 X509v3 Authority Key Identifier: keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/odglfsfLwrnYcI_0eGMBOEZd4WQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.126.224.0/24 Signature Algorithm: sha256WithRSAEncryption a0:1f:a9:60:48:c7:e2:2e:4a:ed:3d:92:8f:44:6d:07:8a:16: a6:14:e2:62:53:31:00:83:09:64:e9:28:73:0f:d8:83:02:3c: 3b:9f:b8:0c:55:9d:0a:c8:41:e4:ce:0d:e4:92:11:82:a1:7a: ff:4a:08:f4:ee:10:f9:04:6e:41:82:05:b5:7c:00:fd:29:83: 5f:b4:a2:21:10:59:65:47:74:ce:7e:ce:22:ac:e0:f4:81:4a: a4:f8:ce:d6:4d:6a:e7:96:54:31:d9:c2:94:68:34:03:ff:db: 63:9e:cc:be:b7:28:62:03:eb:41:ba:0b:6a:08:2d:b4:22:b4: 27:9f:2b:f1:1c:6d:72:87:0e:86:7e:62:88:09:b3:1c:a6:f0: 59:a2:65:b4:6c:ce:ac:b0:3b:31:9c:51:18:94:e0:ef:76:9e: a8:59:bd:93:74:b3:be:56:fa:31:29:47:e7:41:81:05:aa:f6: 28:28:08:05:cd:df:6f:99:c9:54:fa:cf:97:27:3b:fd:b2:1f: 9a:7c:27:ba:4a:fb:72:1e:79:d3:cd:76:b5:c9:cb:37:df:ae: f2:cd:d7:fd:36:e9:39:e6:30:1c:83:3e:27:0e:3e:b0:72:95: 36:3a:da:35:79:6a:bf:33:f7:7b:59:f3:e5:14:8a:7b:7f:0e: b9:fc:8f:60 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwoHFDTKE8clv4PYymSIhg2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmZTUzYzBiZmMzYzhmYjU2YjgxMTkxMzE3MTQ0NDQzZTBl MjlkMjUwHhcNMjYwMjA0MTAwNDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMWQ4MjU3ZWM3Y2JjMmI5ZDg3MDhmZjQ3ODYzMDEzODQ2NWRlMTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3Yr/2nb5jTp9p6cJgy6HXOhFrbz /hH7GLNcBmGXz5neHRg3tG3ZEsChsIbvVVgex6M6SpMUExoFsadpb8shWW/IjoYr RXPk/jDCuo3/thhiN257m+dmH6a2nRqKW9PZDbDhfsQihowEynE4ebxRg5fuHmhv KY5tDziyFZ+I6MTrWScjiGr6MJmrTb+O7W1iITpYhUHueZR/2gqbQne8Q0nVKLth BJvV/XKYHKQuUSFWwrOfXAmVtpPupXzw31l3OTuK6Mtqsk+GMIo07eCyV0NyTnhU hU/Z+UQ2wSkJ8eb1MAqDyFPjBDbP00E89SQgh1xHI0WBi2jiyIFeWnjSHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKHYJX7Hy8K52HCP9HhjAThGXeFkMB8GA1UdIwQY MBaAFF/lPAv8PI+1a4EZExcUREPg4p0lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWC1VOENfdzhqN1ZyZ1JrVEZ4UkVRLURpblNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9iYzYwODktM2Q5MC00NTI5LWJiNDct NWNmNTZlZTQzNWIzLzEvb2RnbGZzZkx3cm5ZY0lfMGVHTUJPRVpkNFdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9iYzYwODktM2Q5MC00NTI5LWJiNDctNWNmNTZlZTQzNWIz LzEvWC1VOENfdzhqN1ZyZ1JrVEZ4UkVRLURpblNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWX7gMA0G CSqGSIb3DQEBCwUAA4IBAQCgH6lgSMfiLkrtPZKPRG0HihamFOJiUzEAgwlk6Shz D9iDAjw7n7gMVZ0KyEHkzg3kkhGCoXr/Sgj07hD5BG5BggW1fAD9KYNftKIhEFll R3TOfs4irOD0gUqk+M7WTWrnllQx2cKUaDQD/9tjnsy+tyhiA+tBugtqCC20IrQn nyvxHG1yhw6GfmKICbMcpvBZomW0bM6ssDsxnFEYlODvdp6oWb2TdLO+VvoxKUfn QYEFqvYoKAgFzd9vmclU+s+XJzv9sh+afCe6SvtyHnnTzXa1ycs3367yzdf9Nuk5 5jAcgz4nDj6wcpU2Oto1eWq/M/d7WfPlFIp7fw65/I9g -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:19 2026 by rpki-client