This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/ktjIcji8JZjmvPNVbyNsDh1AaNI.roa File: ktjIcji8JZjmvPNVbyNsDh1AaNI.roa (raw, json) Hash identifier: OhINTejQ3OUauCVxjnxjYQBZeRf8l4Bc1ZHLwTdPGVQ= Subject key identifier: 92:D8:C8:72:38:BC:25:98:E6:BC:F3:55:6F:23:6C:0E:1D:40:68:D2 Certificate issuer: /CN=ca290db2f72905f0db626b005bacf08878d17bac Certificate serial: 019B7834B6AA6A38507D1290932CA976492A Authority key identifier: CA:29:0D:B2:F7:29:05:F0:DB:62:6B:00:5B:AC:F0:88:78:D1:7B:AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yikNsvcpBfDbYmsAW6zwiHjRe6w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/ktjIcji8JZjmvPNVbyNsDh1AaNI.roa Signing time: Thu 01 Jan 2026 06:17:59 +0000 ROA not before: Thu 01 Jan 2026 06:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34549 IP address blocks: 89.37.101.0/24 maxlen: 24 89.47.58.0/24 maxlen: 24 185.131.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.crl rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.mft rsync://rpki.ripe.net/repository/DEFAULT/yikNsvcpBfDbYmsAW6zwiHjRe6w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 12:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:b6:aa:6a:38:50:7d:12:90:93:2c:a9:76:49:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca290db2f72905f0db626b005bacf08878d17bac Validity Not Before: Jan 1 06:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=92d8c87238bc2598e6bcf3556f236c0e1d4068d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:05:4c:ce:50:c4:cc:3e:21:dd:a0:d2:a8:24: 2e:20:de:92:e7:3e:80:ff:8e:76:f4:75:13:3b:87: f7:6d:32:dd:83:2a:8a:48:96:53:13:2e:a7:21:86: bf:c0:6d:79:b8:ef:76:12:d5:15:27:7e:cd:83:53: 9d:dc:8f:ab:63:a2:7b:3b:39:61:50:1d:60:17:b1: 5d:92:7f:aa:18:06:cf:b8:c3:fa:81:ea:fc:ab:8b: 79:78:4d:78:d8:71:40:04:20:b5:31:38:fb:1c:45: fa:83:10:0d:38:1a:6f:fc:f6:59:43:41:9d:2c:35: 38:0c:fe:83:e6:b7:b2:83:32:20:c8:df:68:46:6e: cb:14:92:6c:10:fe:f5:5e:59:cb:48:54:42:1f:5c: dd:89:ab:6d:81:0d:11:21:17:3c:1e:05:18:88:9d: 2e:69:ca:7f:42:25:ef:ad:68:da:68:d8:bc:87:d5: de:b4:b8:a6:ae:b0:01:f4:3c:21:80:f9:4e:55:ed: b8:bc:d7:05:8f:b0:96:f5:fb:07:a2:fa:b8:fe:8a: b1:45:2a:c2:6d:89:99:b6:99:82:a5:4d:98:40:fd: 98:0d:cc:a9:a4:cc:00:4c:0c:f5:9e:cf:fc:4e:38: d5:b6:6e:11:05:9a:14:de:d1:4c:20:db:16:54:d9: a8:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:D8:C8:72:38:BC:25:98:E6:BC:F3:55:6F:23:6C:0E:1D:40:68:D2 X509v3 Authority Key Identifier: keyid:CA:29:0D:B2:F7:29:05:F0:DB:62:6B:00:5B:AC:F0:88:78:D1:7B:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yikNsvcpBfDbYmsAW6zwiHjRe6w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/ktjIcji8JZjmvPNVbyNsDh1AaNI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/yikNsvcpBfDbYmsAW6zwiHjRe6w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.37.101.0/24 89.47.58.0/24 185.131.52.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:3c:1c:6c:43:81:99:a5:6a:5b:a2:93:55:61:94:4f:58:04: 23:f9:d8:e4:3d:09:1b:c1:0e:7b:ff:6a:44:07:13:cb:44:28: 96:17:37:1e:ff:34:de:9f:17:88:11:49:5e:67:3f:9b:04:c9: 73:59:ca:e2:92:de:98:9c:5a:15:cb:d9:aa:4a:7c:50:b1:14: ad:83:a4:da:23:0b:0f:3f:0e:94:aa:33:a8:b3:34:a4:61:11: be:48:5b:54:dc:3c:ce:28:f6:47:df:e3:55:03:50:d1:1c:fd: 32:8b:9c:64:3f:f0:68:d0:f8:09:da:0b:9b:2a:67:ad:e3:63: 40:b2:84:90:7b:dc:c4:03:ce:44:03:e6:0f:09:71:a2:12:2e: cc:5a:e7:9c:58:cd:8d:f2:b6:4b:eb:41:00:f9:e2:86:c6:6e: b0:83:68:cd:7d:bd:fd:bf:ff:fa:fb:8f:32:65:45:e9:f3:bf: 83:6a:1e:c7:c6:8f:d1:15:17:b8:d1:48:a5:62:31:ea:05:e0: 13:5f:97:ba:48:a1:a3:37:e2:5b:b3:2f:a1:95:71:01:a5:4d: a8:92:88:d2:e4:d3:3d:52:c4:2c:51:8f:67:ef:3d:37:e4:09: d3:9f:64:7c:d9:49:80:72:83:de:f3:56:71:0c:d8:60:76:8f: b9:6b:f7:79 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt4NLaqajhQfRKQkyypdkkqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhMjkwZGIyZjcyOTA1ZjBkYjYyNmIwMDViYWNmMDg4Nzhk MTdiYWMwHhcNMjYwMTAxMDYxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MmQ4Yzg3MjM4YmMyNTk4ZTZiY2YzNTU2ZjIzNmMwZTFkNDA2OGQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQVMzlDEzD4h3aDSqCQuIN6S5z6A /4529HUTO4f3bTLdgyqKSJZTEy6nIYa/wG15uO92EtUVJ37Ng1Od3I+rY6J7Ozlh UB1gF7Fdkn+qGAbPuMP6ger8q4t5eE142HFABCC1MTj7HEX6gxANOBpv/PZZQ0Gd LDU4DP6D5reygzIgyN9oRm7LFJJsEP71XlnLSFRCH1zdiattgQ0RIRc8HgUYiJ0u acp/QiXvrWjaaNi8h9XetLimrrAB9DwhgPlOVe24vNcFj7CW9fsHovq4/oqxRSrC bYmZtpmCpU2YQP2YDcyppMwATAz1ns/8TjjVtm4RBZoU3tFMINsWVNmo0QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJLYyHI4vCWY5rzzVW8jbA4dQGjSMB8GA1UdIwQY MBaAFMopDbL3KQXw22JrAFus8Ih40XusMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWlrTnN2Y3BCZkRiWW1zQVc2endpSGpSZTZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8yMTY5NzMtNTE2Zi00NTAxLTkxNjQt N2Y0MzViZjU1MDFjLzEva3RqSWNqaThKWmptdlBOVmJ5TnNEaDFBYU5JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8yMTY5NzMtNTE2Zi00NTAxLTkxNjQtN2Y0MzViZjU1MDFj LzEveWlrTnN2Y3BCZkRiWW1zQVc2endpSGpSZTZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAWSVlAwQA WS86AwQAuYM0MA0GCSqGSIb3DQEBCwUAA4IBAQCfPBxsQ4GZpWpbopNVYZRPWAQj +djkPQkbwQ57/2pEBxPLRCiWFzce/zTenxeIEUleZz+bBMlzWcrikt6YnFoVy9mq SnxQsRStg6TaIwsPPw6UqjOoszSkYRG+SFtU3DzOKPZH3+NVA1DRHP0yi5xkP/Bo 0PgJ2gubKmet42NAsoSQe9zEA85EA+YPCXGiEi7MWuecWM2N8rZL60EA+eKGxm6w g2jNfb39v//6+48yZUXp87+Dah7Hxo/RFRe40UilYjHqBeATX5e6SKGjN+Jbsy+h lXEBpU2okojS5NM9UsQsUY9n7z035AnTn2R82UmAcoPe81ZxDNhgdo+5a/d5 -----END CERTIFICATE-----Generated at Wed Jan 21 21:51:15 2026 by rpki-client