This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/StTmr8X0Ztg2Fzom2DO1s4HRJ5k.roa File: StTmr8X0Ztg2Fzom2DO1s4HRJ5k.roa (raw, json) Hash identifier: ByVhRdCqJLu1JdsaujozowtcN3r+tlHqhV772GdmWjU= Subject key identifier: 4A:D4:E6:AF:C5:F4:66:D8:36:17:3A:26:D8:33:B5:B3:81:D1:27:99 Certificate issuer: /CN=71051b0e2ce9a4c9e6121e983d165feab87ec354 Certificate serial: 019B7FF1D9EA89FA761468DC40D3B56D68BA Authority key identifier: 71:05:1B:0E:2C:E9:A4:C9:E6:12:1E:98:3D:16:5F:EA:B8:7E:C3:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/StTmr8X0Ztg2Fzom2DO1s4HRJ5k.roa Signing time: Fri 02 Jan 2026 18:21:54 +0000 ROA not before: Fri 02 Jan 2026 18:21:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209510 IP address blocks: 152.89.172.0/23 maxlen: 23 152.89.174.0/23 maxlen: 23 2a09:35c0:100::/40 maxlen: 40 2a09:35c0:200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 12:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:d9:ea:89:fa:76:14:68:dc:40:d3:b5:6d:68:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71051b0e2ce9a4c9e6121e983d165feab87ec354 Validity Not Before: Jan 2 18:21:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4ad4e6afc5f466d836173a26d833b5b381d12799 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:55:04:01:24:3c:03:d3:0c:3d:64:aa:b1:46: ea:07:9a:5a:2d:a2:9c:0f:fd:8b:b3:29:f1:ed:2b: 72:17:9a:df:ce:37:69:49:9b:89:22:cc:5d:3c:af: 5b:05:2b:fc:81:a5:33:4f:42:1f:a5:f1:8e:d2:da: 21:66:cd:a9:2b:8a:58:e6:a6:ba:6e:2e:86:e7:12: 8f:58:fd:a8:cf:e0:27:0a:e0:2c:88:ed:1a:84:9f: ff:e1:42:0e:42:64:e9:37:d1:1d:cf:2a:98:e9:81: 9e:5f:02:37:a0:20:b0:60:79:f2:b9:a2:45:46:41: 45:bb:3b:0f:2b:aa:38:db:e8:b2:aa:f3:2a:df:02: 36:ff:57:cc:56:6e:c6:99:cf:ff:4d:ce:62:b4:ba: 09:8b:fc:a5:9a:9f:a8:cf:5d:ed:4c:4e:fd:b7:d0: 7f:ec:c3:c8:d4:0c:5b:fe:15:f1:e0:9b:20:51:b4: 67:e1:ca:f3:9c:d7:2d:81:64:ab:66:90:28:c4:ea: 14:03:c7:36:0d:3d:6b:bd:31:4e:bf:0a:e5:1d:f6: 01:95:e6:6a:f3:b7:ee:48:8e:6a:8d:1b:3e:30:6f: 13:2f:81:f9:13:6c:15:4c:18:22:1f:62:6e:30:3d: 38:51:75:e8:2b:ba:55:9e:50:c6:a9:1e:80:ae:d8: 7b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:D4:E6:AF:C5:F4:66:D8:36:17:3A:26:D8:33:B5:B3:81:D1:27:99 X509v3 Authority Key Identifier: keyid:71:05:1B:0E:2C:E9:A4:C9:E6:12:1E:98:3D:16:5F:EA:B8:7E:C3:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/StTmr8X0Ztg2Fzom2DO1s4HRJ5k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.89.172.0/22 IPv6: 2a09:35c0:100::-2a09:35c0:2ff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 56:ce:7f:2a:8a:ab:ff:51:03:7e:bd:b4:a3:da:79:01:62:a0: e6:bf:ad:f5:ab:88:e8:23:ed:e4:86:7e:fa:df:41:a5:4d:ef: d6:8e:50:bc:f6:8c:91:07:54:f4:2b:8a:ae:ad:68:58:41:df: 30:16:27:fd:e9:92:47:16:0f:8c:b7:41:8c:bf:14:16:f8:db: 43:5e:19:85:0e:95:62:6d:3f:e9:c4:43:9d:b8:30:0e:58:de: a3:cd:f8:64:5c:e8:0b:99:be:5d:07:65:89:ca:0b:9d:fc:39: c2:e7:f8:03:82:df:27:f8:72:bb:22:2e:ea:c3:b7:3d:1c:33: 0f:7c:63:42:85:03:f3:f9:65:7e:be:f6:ef:66:0f:19:b1:82: c3:93:a4:6d:72:ab:72:b7:e6:20:28:f3:4f:1b:ec:57:ab:8b: c5:44:f0:7e:74:ca:6d:5b:41:20:51:9e:73:ba:1f:a5:fa:42: 95:82:d1:e3:73:d2:65:ed:3e:86:9d:6b:18:27:0a:d5:cf:4c: 0e:47:12:b2:e9:8b:43:aa:20:2d:a4:01:b6:e1:e5:92:3b:d1: e8:7c:49:03:8b:41:26:5e:c1:44:e1:f4:0f:12:02:27:8b:e0: f6:82:4f:c8:89:55:01:84:e7:c5:9f:dc:e6:41:57:d3:38:a6: b7:cd:32:80 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt/8dnqifp2FGjcQNO1bWi6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxMDUxYjBlMmNlOWE0YzllNjEyMWU5ODNkMTY1ZmVhYjg3 ZWMzNTQwHhcNMjYwMTAyMTgyMTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YWQ0ZTZhZmM1ZjQ2NmQ4MzYxNzNhMjZkODMzYjViMzgxZDEyNzk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFUEASQ8A9MMPWSqsUbqB5paLaKc D/2Lsynx7StyF5rfzjdpSZuJIsxdPK9bBSv8gaUzT0IfpfGO0tohZs2pK4pY5qa6 bi6G5xKPWP2oz+AnCuAsiO0ahJ//4UIOQmTpN9EdzyqY6YGeXwI3oCCwYHnyuaJF RkFFuzsPK6o42+iyqvMq3wI2/1fMVm7Gmc//Tc5itLoJi/ylmp+oz13tTE79t9B/ 7MPI1Axb/hXx4JsgUbRn4crznNctgWSrZpAoxOoUA8c2DT1rvTFOvwrlHfYBleZq 87fuSI5qjRs+MG8TL4H5E2wVTBgiH2JuMD04UXXoK7pVnlDGqR6Arth7FQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFErU5q/F9GbYNhc6JtgztbOB0SeZMB8GA1UdIwQY MBaAFHEFGw4s6aTJ5hIemD0WX+q4fsNUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1FVYkRpenBwTW5tRWg2WVBSWmY2cmgtdzFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9lNTE1ODMtZjU1Yy00OTNiLWI5NTAt NzM2YWI4MzQ5NGFjLzEvU3RUbXI4WDBadGcyRnpvbTJETzFzNEhSSjVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9lNTE1ODMtZjU1Yy00OTNiLWI5NTAtNzM2YWI4MzQ5NGFj LzEvY1FVYkRpenBwTW5tRWg2WVBSWmY2cmgtdzFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQCmFmsMBgE AgACMBIwEAMGACoJNcABAwYAKgk1wAIwDQYJKoZIhvcNAQELBQADggEBAFbOfyqK q/9RA369tKPaeQFioOa/rfWriOgj7eSGfvrfQaVN79aOULz2jJEHVPQriq6taFhB 3zAWJ/3pkkcWD4y3QYy/FBb420NeGYUOlWJtP+nEQ524MA5Y3qPN+GRc6AuZvl0H ZYnKC538OcLn+AOC3yf4crsiLurDtz0cMw98Y0KFA/P5ZX6+9u9mDxmxgsOTpG1y q3K35iAo808b7Feri8VE8H50ym1bQSBRnnO6H6X6QpWC0eNz0mXtPoadaxgnCtXP TA5HErLpi0OqIC2kAbbh5ZI70eh8SQOLQSZewUTh9A8SAieL4PaCT8iJVQGE58Wf 3OZBV9M4prfNMoA= -----END CERTIFICATE-----Generated at Thu Feb 5 19:45:12 2026 by rpki-client