This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/PSaX76hLXCC3HwZfR6n8D2sk5yo.roa File: PSaX76hLXCC3HwZfR6n8D2sk5yo.roa (raw, json) Hash identifier: /hW3Ol8jGkzLopkuNwrc+rk1t6CwIFcpRCLkUh52Nz0= Subject key identifier: 3D:26:97:EF:A8:4B:5C:20:B7:1F:06:5F:47:A9:FC:0F:6B:24:E7:2A Certificate issuer: /CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3 Certificate serial: 019B7C11362847DB19ED0A82169C918E0540 Authority key identifier: B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/PSaX76hLXCC3HwZfR6n8D2sk5yo.roa Signing time: Fri 02 Jan 2026 00:17:41 +0000 ROA not before: Fri 02 Jan 2026 00:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61033 IP address blocks: 89.46.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:36:28:47:db:19:ed:0a:82:16:9c:91:8e:05:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3 Validity Not Before: Jan 2 00:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d2697efa84b5c20b71f065f47a9fc0f6b24e72a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1e:62:be:be:8d:8d:7f:65:b5:ed:d5:d4:43: 2a:b5:de:1f:52:d9:87:3f:35:9a:b9:ca:23:4e:b6: 49:ed:b3:dc:03:7c:20:bf:72:90:9a:00:ad:0f:04: 77:69:71:82:eb:e5:20:e2:ab:13:28:70:5e:c9:3f: 3d:49:3e:9b:4d:7f:d2:43:4f:0c:8b:a9:8a:82:c0: 1e:2c:ab:71:d1:b0:56:4d:7d:d9:27:df:73:34:73: b8:35:9e:04:ce:d3:ea:68:42:11:81:c6:da:c5:c8: fa:54:1e:f1:aa:92:fd:e0:98:b8:09:80:3c:1d:22: ff:f9:6a:93:9b:11:74:c2:ab:a3:ce:5a:ff:7c:e8: c9:04:cf:2e:b5:ab:17:bb:3c:65:58:a0:57:11:32: a3:6d:07:87:87:a2:b4:c9:8a:76:45:52:8f:6a:5f: 7d:e6:08:11:fa:fa:fa:d0:60:51:69:14:32:8e:58: 55:8f:9c:a7:e6:62:6e:6f:24:d7:98:4c:64:52:36: 68:fc:9d:d0:87:88:d0:b1:98:01:a6:20:3f:98:ec: 0d:47:cb:8b:74:83:54:64:d3:0b:b6:65:3b:a4:bb: fa:42:b4:37:a2:49:d8:87:73:75:84:93:38:ec:9c: f4:dc:a5:4f:a8:b7:06:57:db:d1:14:f5:98:9b:99: 2b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:26:97:EF:A8:4B:5C:20:B7:1F:06:5F:47:A9:FC:0F:6B:24:E7:2A X509v3 Authority Key Identifier: keyid:B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/PSaX76hLXCC3HwZfR6n8D2sk5yo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.46.120.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:1e:f4:6b:c9:b2:31:2c:eb:31:56:21:c2:ef:c2:a4:b8:88: 9c:4f:b9:6c:ab:71:b9:7f:43:2b:79:9d:fe:77:e2:66:93:b2: e7:56:14:97:40:96:2e:97:83:df:f5:71:83:01:65:9a:66:ee: b1:db:a1:5a:91:fd:ff:95:ef:4b:85:94:9f:ff:65:42:e1:a8: 60:e5:2e:94:9b:8a:63:e8:99:8d:4c:a1:3b:98:d6:da:32:92: 50:fb:2c:88:8b:55:d8:ab:b5:18:c9:ce:83:1d:c3:94:54:90: 9f:31:1f:f0:d8:5a:1f:e3:d9:6c:89:2f:80:99:f9:46:52:71: 87:3c:5e:48:5d:6b:10:b3:3e:5f:3e:a8:f2:74:a1:29:a0:3f: d9:0e:77:24:89:60:d4:f2:11:ed:e9:e7:59:6e:e9:73:15:ce: 8b:ce:e4:ce:2b:e4:71:6c:b6:ac:69:80:d3:9a:30:9b:fb:c0: 9a:b4:62:d8:f4:04:5a:e2:76:8e:98:29:b6:18:13:b5:e9:8b: 51:8f:80:cf:6f:68:0e:97:53:8c:0d:27:45:d9:ee:c9:2e:68: 57:c0:5c:dd:49:c6:f7:92:8c:64:e8:4a:b5:50:1a:76:eb:e5: 56:07:35:47:2a:e7:c2:20:14:9c:dd:33:54:f3:63:14:96:a2: 33:ec:5d:b7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8ETYoR9sZ7QqCFpyRjgVAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYzIwYWUxZGFjY2EzMTgxNWIyNzQ3MDI5MjdjMWE1YTlk YmM3YjMwHhcNMjYwMTAyMDAxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDI2OTdlZmE4NGI1YzIwYjcxZjA2NWY0N2E5ZmMwZjZiMjRlNzJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApR5ivr6NjX9lte3V1EMqtd4fUtmH PzWaucojTrZJ7bPcA3wgv3KQmgCtDwR3aXGC6+Ug4qsTKHBeyT89ST6bTX/SQ08M i6mKgsAeLKtx0bBWTX3ZJ99zNHO4NZ4EztPqaEIRgcbaxcj6VB7xqpL94Ji4CYA8 HSL/+WqTmxF0wqujzlr/fOjJBM8utasXuzxlWKBXETKjbQeHh6K0yYp2RVKPal99 5ggR+vr60GBRaRQyjlhVj5yn5mJubyTXmExkUjZo/J3Qh4jQsZgBpiA/mOwNR8uL dINUZNMLtmU7pLv6QrQ3oknYh3N1hJM47Jz03KVPqLcGV9vRFPWYm5krKwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD0ml++oS1wgtx8GX0ep/A9rJOcqMB8GA1UdIwQY MBaAFLDCCuHazKMYFbJ0cCknwaWp28ezMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc01JSzRkck1veGdWc25Sd0tTZkJwYW5ieDdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ODg4NjktN2E2NS00MTViLWI2OGYt NTQ4NDQwMmNlYjdhLzEvUFNhWDc2aExYQ0MzSHdaZlI2bjhEMnNrNXlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS84ODg4NjktN2E2NS00MTViLWI2OGYtNTQ4NDQwMmNlYjdh LzEvc01JSzRkck1veGdWc25Sd0tTZkJwYW5ieDdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWS54MA0G CSqGSIb3DQEBCwUAA4IBAQBtHvRrybIxLOsxViHC78KkuIicT7lsq3G5f0MreZ3+ d+Jmk7LnVhSXQJYul4Pf9XGDAWWaZu6x26Fakf3/le9LhZSf/2VC4ahg5S6Um4pj 6JmNTKE7mNbaMpJQ+yyIi1XYq7UYyc6DHcOUVJCfMR/w2Fof49lsiS+AmflGUnGH PF5IXWsQsz5fPqjydKEpoD/ZDnckiWDU8hHt6edZbulzFc6LzuTOK+RxbLasaYDT mjCb+8CatGLY9ARa4naOmCm2GBO16YtRj4DPb2gOl1OMDSdF2e7JLmhXwFzdScb3 koxk6Eq1UBp26+VWBzVHKufCIBSc3TNU82MUlqIz7F23 -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:09 2026 by rpki-client