This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/Cd254sJdJwuu6H9I9E0srrpdoBA.roa File: Cd254sJdJwuu6H9I9E0srrpdoBA.roa (raw, json) Hash identifier: pL8Cyr7W2nS2mcEsGc+8rfoSe9scnFA9gs7/69wjtfU= Subject key identifier: 09:DD:B9:E2:C2:5D:27:0B:AE:E8:7F:48:F4:4D:2C:AE:BA:5D:A0:10 Certificate issuer: /CN=13440366007eb56f10e9f99e95204d330508b9b0 Certificate serial: 019B78A371E7ADEAE73DDF2D0674063CA332 Authority key identifier: 13:44:03:66:00:7E:B5:6F:10:E9:F9:9E:95:20:4D:33:05:08:B9:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E0QDZgB-tW8Q6fmelSBNMwUIubA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/Cd254sJdJwuu6H9I9E0srrpdoBA.roa Signing time: Thu 01 Jan 2026 08:18:56 +0000 ROA not before: Thu 01 Jan 2026 08:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 4755 IP address blocks: 89.31.192.0/21 maxlen: 21 89.31.192.0/24 maxlen: 24 89.31.193.0/24 maxlen: 24 89.31.194.0/24 maxlen: 24 89.31.195.0/24 maxlen: 24 89.31.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.mft rsync://rpki.ripe.net/repository/DEFAULT/E0QDZgB-tW8Q6fmelSBNMwUIubA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:71:e7:ad:ea:e7:3d:df:2d:06:74:06:3c:a3:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13440366007eb56f10e9f99e95204d330508b9b0 Validity Not Before: Jan 1 08:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=09ddb9e2c25d270baee87f48f44d2caeba5da010 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e6:68:c2:03:29:5d:e8:d0:a1:01:f0:00:31: e8:36:51:48:88:02:ff:ff:cc:d4:02:6d:c6:85:a4: 4e:7f:0c:51:0e:58:82:9c:fb:41:93:6b:24:94:83: a7:cf:bf:40:54:de:e8:15:bb:58:8f:67:d0:4d:e8: 0a:fc:1c:06:5b:75:ee:90:33:60:56:73:9b:e9:cd: 30:81:5e:81:46:7e:54:c1:bd:7a:26:bf:8c:11:1a: 4e:90:75:b8:52:36:51:a1:1d:94:cf:66:3b:b4:1d: 1c:db:78:88:27:dc:e3:6a:f8:61:62:92:64:98:a9: d7:e8:c2:bf:07:6a:0c:8d:46:be:ae:66:a8:3b:11: 81:85:32:0f:9b:80:62:15:2b:45:b2:1a:6d:e4:86: 59:58:05:bf:58:68:dc:5f:bf:8a:67:cb:50:a4:7e: cb:fd:d9:9c:72:62:93:d4:ff:65:b2:c9:ba:29:ab: bc:19:0b:5c:aa:65:28:9a:b2:88:84:25:0b:ca:4e: 1a:ec:e3:84:89:2d:b6:9a:62:f9:61:f0:f6:0b:c4: c2:7d:62:09:49:aa:85:fb:00:e3:fa:20:ec:97:04: 22:87:90:a7:ea:79:ff:b2:05:f7:0f:84:aa:ab:0b: 94:fc:5a:ab:2e:ba:62:cf:fd:f9:51:0c:f7:bb:97: d6:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:DD:B9:E2:C2:5D:27:0B:AE:E8:7F:48:F4:4D:2C:AE:BA:5D:A0:10 X509v3 Authority Key Identifier: keyid:13:44:03:66:00:7E:B5:6F:10:E9:F9:9E:95:20:4D:33:05:08:B9:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0QDZgB-tW8Q6fmelSBNMwUIubA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/Cd254sJdJwuu6H9I9E0srrpdoBA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.31.192.0/21 Signature Algorithm: sha256WithRSAEncryption 56:ed:86:a8:1d:b4:84:24:98:cd:fd:f8:86:0b:83:5f:92:06: d5:5a:65:6c:d5:61:75:03:07:d8:dc:5e:b2:b2:75:55:7b:0b: eb:b9:d1:4c:d6:86:30:cd:65:fe:08:91:0a:29:8a:d4:7d:c4: e6:08:fa:63:90:23:2e:13:35:d1:a6:29:79:c6:67:22:41:99: 14:3f:89:69:bd:f4:dd:c4:3f:a9:b5:d0:7e:45:5d:4f:c4:3b: 8c:ea:9c:64:4b:50:68:52:9b:73:0b:33:ad:13:0a:e6:f7:65: e1:6d:64:0b:cf:1f:91:42:4f:74:2f:e5:f1:b3:ae:49:97:8a: 1d:1a:b6:d3:c2:58:fc:61:4e:f7:a9:13:39:90:fe:25:7d:66: 4b:22:d3:29:a9:b1:b9:2b:04:d4:99:5f:a3:28:5b:77:bd:67: fa:1e:b0:ef:6f:4f:a6:67:5b:f4:41:0b:9a:dc:0f:27:51:2c: dc:5f:d7:02:7f:09:d7:38:08:e9:9b:9d:b2:01:b5:e3:e7:bf: 7b:75:d1:94:f5:45:2a:2a:79:65:30:16:44:b8:7b:0a:c2:af: 64:72:4b:c1:a4:3a:c1:a2:11:96:d5:d2:f4:53:0b:0f:8e:44: 59:b2:0a:d0:69:ce:d8:cc:23:01:1b:1b:68:41:d9:62:3a:35: 93:1f:51:dd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o3HnrernPd8tBnQGPKMyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzNDQwMzY2MDA3ZWI1NmYxMGU5Zjk5ZTk1MjA0ZDMzMDUw OGI5YjAwHhcNMjYwMTAxMDgxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOWRkYjllMmMyNWQyNzBiYWVlODdmNDhmNDRkMmNhZWJhNWRhMDEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyeZowgMpXejQoQHwADHoNlFIiAL/ /8zUAm3GhaROfwxRDliCnPtBk2sklIOnz79AVN7oFbtYj2fQTegK/BwGW3XukDNg VnOb6c0wgV6BRn5Uwb16Jr+MERpOkHW4UjZRoR2Uz2Y7tB0c23iIJ9zjavhhYpJk mKnX6MK/B2oMjUa+rmaoOxGBhTIPm4BiFStFshpt5IZZWAW/WGjcX7+KZ8tQpH7L /dmccmKT1P9lssm6Kau8GQtcqmUomrKIhCULyk4a7OOEiS22mmL5YfD2C8TCfWIJ SaqF+wDj+iDslwQih5Cn6nn/sgX3D4SqqwuU/FqrLrpiz/35UQz3u5fWMwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAndueLCXScLruh/SPRNLK66XaAQMB8GA1UdIwQY MBaAFBNEA2YAfrVvEOn5npUgTTMFCLmwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTBRRFpnQi10VzhRNmZtZWxTQk5Nd1VJdWJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8wYjAyODAtOTYyMy00NGJhLThkZGYt NDRjMWE0ZWI5NjljLzEvQ2QyNTRzSmRKd3V1Nkg5STlFMHNycnBkb0JBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS8wYjAyODAtOTYyMy00NGJhLThkZGYtNDRjMWE0ZWI5Njlj LzEvRTBRRFpnQi10VzhRNmZtZWxTQk5Nd1VJdWJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDWR/AMA0G CSqGSIb3DQEBCwUAA4IBAQBW7YaoHbSEJJjN/fiGC4NfkgbVWmVs1WF1AwfY3F6y snVVewvrudFM1oYwzWX+CJEKKYrUfcTmCPpjkCMuEzXRpil5xmciQZkUP4lpvfTd xD+ptdB+RV1PxDuM6pxkS1BoUptzCzOtEwrm92XhbWQLzx+RQk90L+Xxs65Jl4od GrbTwlj8YU73qRM5kP4lfWZLItMpqbG5KwTUmV+jKFt3vWf6HrDvb0+mZ1v0QQua 3A8nUSzcX9cCfwnXOAjpm52yAbXj5797ddGU9UUqKnllMBZEuHsKwq9kckvBpDrB ohGW1dL0UwsPjkRZsgrQac7YzCMBGxtoQdliOjWTH1Hd -----END CERTIFICATE-----Generated at Tue Jan 20 02:56:34 2026 by rpki-client