This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/89g7xKjcRoLf08YN30kAkWgPW80.roa File: 89g7xKjcRoLf08YN30kAkWgPW80.roa (raw, json) Hash identifier: P8X4WuWL6NisJbBQ/NNr4p37Mppw9OurR9kU3npYcKM= Subject key identifier: F3:D8:3B:C4:A8:DC:46:82:DF:D3:C6:0D:DF:49:00:91:68:0F:5B:CD Certificate issuer: /CN=ce4caf6aecc8c3107b4b71174eb29974e0fd855b Certificate serial: 019B7EA75DB5DA3A27B22B88040093639804 Authority key identifier: CE:4C:AF:6A:EC:C8:C3:10:7B:4B:71:17:4E:B2:99:74:E0:FD:85:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkyvauzIwxB7S3EXTrKZdOD9hVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/89g7xKjcRoLf08YN30kAkWgPW80.roa Signing time: Fri 02 Jan 2026 12:20:56 +0000 ROA not before: Fri 02 Jan 2026 12:20:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203851 IP address blocks: 185.87.212.0/24 maxlen: 24 185.87.213.0/24 maxlen: 24 185.87.214.0/24 maxlen: 24 185.87.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.mft rsync://rpki.ripe.net/repository/DEFAULT/zkyvauzIwxB7S3EXTrKZdOD9hVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:5d:b5:da:3a:27:b2:2b:88:04:00:93:63:98:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce4caf6aecc8c3107b4b71174eb29974e0fd855b Validity Not Before: Jan 2 12:20:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f3d83bc4a8dc4682dfd3c60ddf490091680f5bcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d9:f3:2d:c5:80:d7:da:66:f2:ad:3d:07:9d: 9b:06:f4:54:b6:d4:23:30:ff:29:a3:41:6b:60:a2: c4:74:0e:e2:47:d1:b9:19:d5:28:17:b9:4a:fb:83: 24:d7:5d:6f:d5:11:19:41:2a:b3:99:06:03:ae:07: 58:58:bc:94:af:bd:f4:9c:16:1c:e3:58:3c:ab:6b: 3d:a6:76:34:ab:13:bd:80:f8:97:e2:81:22:eb:da: f4:a7:d4:50:58:21:70:bc:a2:61:cc:c1:d4:67:89: 9a:24:d2:0c:30:87:9e:e6:68:56:19:32:3f:b3:bd: f4:88:12:94:36:e6:17:09:e3:a0:f4:6a:9c:b9:9f: 10:15:d9:a5:e8:02:e6:63:94:cc:18:27:19:59:11: 47:78:c3:b5:95:0d:10:6f:53:cf:28:0b:a9:d5:94: 05:ff:ea:d8:36:84:74:f3:e5:a7:a2:54:50:86:14: 58:84:99:1b:8e:4b:fb:8f:51:5a:d9:5c:37:ac:4a: 2c:4c:20:c1:16:bb:42:86:95:9e:35:34:a0:01:98: 82:d8:1f:07:97:c7:73:36:37:0c:ac:7a:dd:8a:0b: 0e:8c:c6:80:2f:3d:d7:ab:e9:bc:2d:2f:f8:10:24: ad:9a:48:a4:f5:1d:b1:8c:44:d6:39:b7:41:27:6c: f6:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:D8:3B:C4:A8:DC:46:82:DF:D3:C6:0D:DF:49:00:91:68:0F:5B:CD X509v3 Authority Key Identifier: keyid:CE:4C:AF:6A:EC:C8:C3:10:7B:4B:71:17:4E:B2:99:74:E0:FD:85:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkyvauzIwxB7S3EXTrKZdOD9hVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/89g7xKjcRoLf08YN30kAkWgPW80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e55ff5-a3ce-4d87-aba0-781ada6be3a0/1/zkyvauzIwxB7S3EXTrKZdOD9hVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.87.212.0/22 Signature Algorithm: sha256WithRSAEncryption 89:7a:a3:c1:b4:76:46:16:69:ca:ef:14:95:75:30:aa:93:45: 9d:30:f2:c5:3f:e8:de:32:20:b4:dd:6c:c0:94:f7:cf:cc:19: 5a:d8:fb:d6:de:6c:e1:02:59:05:26:ea:b3:3a:85:33:9e:34: 3a:aa:59:49:d8:70:27:5e:be:72:d8:ae:19:cb:49:0b:aa:d0: 08:07:a8:47:15:65:ba:17:0b:b3:db:76:10:3b:c6:e3:76:33: a4:52:2b:1f:15:aa:bf:0f:7d:bf:da:ab:ec:fe:dc:5f:d6:da: d2:a7:0f:90:88:8b:84:ec:5d:f6:a5:d0:f9:83:fe:e4:b1:e1: 70:79:70:e5:ca:0e:2a:a2:a8:10:a9:43:1f:ed:a9:db:e9:0e: e5:61:f8:b6:6e:60:43:a7:e1:b0:75:7e:92:8e:b2:5e:14:83: 45:70:60:a8:fa:64:94:62:9e:c6:c0:99:0d:81:71:73:df:a5: 29:fd:6a:65:f5:57:5e:d3:c4:75:3f:23:1b:99:7e:d8:4c:c8: fe:f3:ac:87:b7:c2:d3:b3:9a:32:ed:48:4c:f3:3d:a2:ca:e0: 76:ce:39:1a:48:c1:8e:06:9f:d3:68:e3:d7:0f:5e:2e:e5:59: d5:94:f0:68:91:a0:58:b8:de:d7:16:33:76:35:e9:c6:ab:2b: 57:20:43:de -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+p1212jonsiuIBACTY5gEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlNGNhZjZhZWNjOGMzMTA3YjRiNzExNzRlYjI5OTc0ZTBm ZDg1NWIwHhcNMjYwMTAyMTIyMDU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmM2Q4M2JjNGE4ZGM0NjgyZGZkM2M2MGRkZjQ5MDA5MTY4MGY1YmNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNnzLcWA19pm8q09B52bBvRUttQj MP8po0FrYKLEdA7iR9G5GdUoF7lK+4Mk111v1REZQSqzmQYDrgdYWLyUr730nBYc 41g8q2s9pnY0qxO9gPiX4oEi69r0p9RQWCFwvKJhzMHUZ4maJNIMMIee5mhWGTI/ s730iBKUNuYXCeOg9GqcuZ8QFdml6ALmY5TMGCcZWRFHeMO1lQ0Qb1PPKAup1ZQF /+rYNoR08+WnolRQhhRYhJkbjkv7j1Fa2Vw3rEosTCDBFrtChpWeNTSgAZiC2B8H l8dzNjcMrHrdigsOjMaALz3Xq+m8LS/4ECStmkik9R2xjETWObdBJ2z27wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPPYO8So3EaC39PGDd9JAJFoD1vNMB8GA1UdIwQY MBaAFM5Mr2rsyMMQe0txF06ymXTg/YVbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemt5dmF1ekl3eEI3UzNFWFRyS1pkT0Q5aFZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9lNTVmZjUtYTNjZS00ZDg3LWFiYTAt NzgxYWRhNmJlM2EwLzEvODlnN3hLamNSb0xmMDhZTjMwa0FrV2dQVzgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9lNTVmZjUtYTNjZS00ZDg3LWFiYTAtNzgxYWRhNmJlM2Ew LzEvemt5dmF1ekl3eEI3UzNFWFRyS1pkT0Q5aFZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuVfUMA0G CSqGSIb3DQEBCwUAA4IBAQCJeqPBtHZGFmnK7xSVdTCqk0WdMPLFP+jeMiC03WzA lPfPzBla2PvW3mzhAlkFJuqzOoUznjQ6qllJ2HAnXr5y2K4Zy0kLqtAIB6hHFWW6 Fwuz23YQO8bjdjOkUisfFaq/D32/2qvs/txf1trSpw+QiIuE7F32pdD5g/7kseFw eXDlyg4qoqgQqUMf7anb6Q7lYfi2bmBDp+GwdX6SjrJeFINFcGCo+mSUYp7GwJkN gXFz36Up/Wpl9Vde08R1PyMbmX7YTMj+86yHt8LTs5oy7UhM8z2iyuB2zjkaSMGO Bp/TaOPXD14u5VnVlPBokaBYuN7XFjN2NenGqytXIEPe -----END CERTIFICATE-----Generated at Tue Feb 10 04:49:00 2026 by rpki-client