This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/k2NOkCSTdVhsNv-yRXDz4IjyaP8.roa File: k2NOkCSTdVhsNv-yRXDz4IjyaP8.roa (raw, json) Hash identifier: mFXBGS6DaTNeb9V9IYIi7IizihWo5PDlGr82oMDsEnk= Subject key identifier: 93:63:4E:90:24:93:75:58:6C:36:FF:B2:45:70:F3:E0:88:F2:68:FF Certificate issuer: /CN=c1b050211219d18e996e086cb7f6309178804860 Certificate serial: 019B7E3740D86F1BCE155B83E9B78F7A8FBB Authority key identifier: C1:B0:50:21:12:19:D1:8E:99:6E:08:6C:B7:F6:30:91:78:80:48:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wbBQIRIZ0Y6Zbghst_YwkXiASGA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/k2NOkCSTdVhsNv-yRXDz4IjyaP8.roa Signing time: Fri 02 Jan 2026 10:18:28 +0000 ROA not before: Fri 02 Jan 2026 10:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62144 IP address blocks: 89.108.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft rsync://rpki.ripe.net/repository/DEFAULT/wbBQIRIZ0Y6Zbghst_YwkXiASGA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 13:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:40:d8:6f:1b:ce:15:5b:83:e9:b7:8f:7a:8f:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1b050211219d18e996e086cb7f6309178804860 Validity Not Before: Jan 2 10:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=93634e90249375586c36ffb24570f3e088f268ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:65:90:e6:54:8e:57:2b:e2:6e:04:ba:e0:e6: 54:d5:26:d3:9c:85:74:85:18:75:1f:eb:78:e8:6f: f3:80:44:a2:b5:60:d2:13:70:77:97:64:c3:5e:08: e9:87:63:33:28:e3:d6:bc:56:26:b5:ce:0d:c1:a6: 39:4f:d1:2a:07:84:ee:84:b5:44:57:b7:db:36:b3: ba:e9:b6:b0:c2:58:8f:a1:d8:bb:b2:f6:45:83:08: 0f:ff:2f:79:49:80:b6:60:57:a6:2a:c7:69:4f:57: d6:7e:82:37:b4:ba:e2:a4:11:15:53:b5:09:40:ea: 3c:a8:aa:10:0c:8b:41:3d:af:c8:e3:c8:ba:59:ad: a1:95:bd:db:c3:fa:c8:1a:ae:3a:e0:e9:72:11:fa: e4:cc:ef:90:fa:79:18:af:88:d5:32:45:1d:69:f0: b4:7a:50:15:d3:04:c0:cb:54:49:3d:59:f7:43:18: a5:98:a1:98:48:6a:36:87:19:b5:ec:2b:e0:d0:da: 41:c3:53:22:be:f6:cc:39:dd:0a:28:5d:6e:d2:35: cf:10:cb:62:e6:d2:e8:80:db:6a:bc:6f:83:a1:87: df:44:80:c5:c1:3a:48:ad:5e:8b:8b:28:3e:23:26: 86:f1:5a:1c:5d:dd:b6:6e:2c:8a:b6:ca:99:a0:a2: da:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:63:4E:90:24:93:75:58:6C:36:FF:B2:45:70:F3:E0:88:F2:68:FF X509v3 Authority Key Identifier: keyid:C1:B0:50:21:12:19:D1:8E:99:6E:08:6C:B7:F6:30:91:78:80:48:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wbBQIRIZ0Y6Zbghst_YwkXiASGA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/k2NOkCSTdVhsNv-yRXDz4IjyaP8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.108.136.0/24 Signature Algorithm: sha256WithRSAEncryption ad:c3:d2:87:22:5b:4b:d1:b3:65:4c:ee:12:07:a4:52:f3:1b: 02:03:26:aa:a3:aa:ef:cb:93:1f:90:8f:d9:2a:f8:ad:12:ff: 60:ca:c6:fb:f8:31:79:f3:c7:57:a7:7b:69:b3:08:61:cd:f1: 58:d6:33:ae:e7:9f:e1:03:4b:61:0f:5b:81:76:c5:88:58:84: 73:7a:92:e8:f0:28:cc:77:e9:e6:a7:57:c2:57:ea:aa:5c:46: 3a:ba:7c:62:90:4f:52:e3:57:59:20:9e:a1:92:a8:c4:1a:0d: b4:07:a5:94:79:06:a4:8a:fa:3d:bd:ae:bd:03:02:aa:94:aa: 8c:84:52:9c:e0:18:e2:27:98:73:af:c5:0c:ff:01:73:57:cf: 5f:d7:65:ef:9d:75:08:3d:1b:9f:88:44:35:ff:fa:89:a3:ba: 32:98:6b:15:ca:11:94:21:50:59:66:40:5d:ca:02:a0:41:7d: 39:ce:4c:27:c6:9c:f6:64:89:8c:5d:5c:17:17:73:45:f1:f3: 31:2c:17:a1:ec:4a:a7:09:7a:d4:9a:43:58:b3:f6:50:28:20: b9:e6:a6:33:3a:0c:e5:32:bd:50:11:ce:1c:35:ff:2b:c3:81: 25:9b:3b:4e:15:a2:9e:cb:d3:ae:3d:d7:74:9d:7c:07:ca:7a: 2a:e5:fa:53 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N0DYbxvOFVuD6bePeo+7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxYjA1MDIxMTIxOWQxOGU5OTZlMDg2Y2I3ZjYzMDkxNzg4 MDQ4NjAwHhcNMjYwMTAyMTAxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MzYzNGU5MDI0OTM3NTU4NmMzNmZmYjI0NTcwZjNlMDg4ZjI2OGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmWQ5lSOVyvibgS64OZU1SbTnIV0 hRh1H+t46G/zgESitWDSE3B3l2TDXgjph2MzKOPWvFYmtc4NwaY5T9EqB4TuhLVE V7fbNrO66bawwliPodi7svZFgwgP/y95SYC2YFemKsdpT1fWfoI3tLripBEVU7UJ QOo8qKoQDItBPa/I48i6Wa2hlb3bw/rIGq464OlyEfrkzO+Q+nkYr4jVMkUdafC0 elAV0wTAy1RJPVn3QxilmKGYSGo2hxm17Cvg0NpBw1MivvbMOd0KKF1u0jXPEMti 5tLogNtqvG+DoYffRIDFwTpIrV6Liyg+IyaG8VocXd22biyKtsqZoKLa1QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJNjTpAkk3VYbDb/skVw8+CI8mj/MB8GA1UdIwQY MBaAFMGwUCESGdGOmW4IbLf2MJF4gEhgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2JCUUlSSVowWTZaYmdoc3RfWXdrWGlBU0dBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8yOGE4ZjMtODg5ZS00NTQ5LWE0NGUt Y2UyMjUxODdmYzM4LzEvazJOT2tDU1RkVmhzTnYteVJYRHo0SWp5YVA4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC8yOGE4ZjMtODg5ZS00NTQ5LWE0NGUtY2UyMjUxODdmYzM4 LzEvd2JCUUlSSVowWTZaYmdoc3RfWXdrWGlBU0dBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWWyIMA0G CSqGSIb3DQEBCwUAA4IBAQCtw9KHIltL0bNlTO4SB6RS8xsCAyaqo6rvy5MfkI/Z KvitEv9gysb7+DF588dXp3tpswhhzfFY1jOu55/hA0thD1uBdsWIWIRzepLo8CjM d+nmp1fCV+qqXEY6unxikE9S41dZIJ6hkqjEGg20B6WUeQakivo9va69AwKqlKqM hFKc4BjiJ5hzr8UM/wFzV89f12XvnXUIPRufiEQ1//qJo7oymGsVyhGUIVBZZkBd ygKgQX05zkwnxpz2ZImMXVwXF3NF8fMxLBeh7EqnCXrUmkNYs/ZQKCC55qYzOgzl Mr1QEc4cNf8rw4ElmztOFaKey9OuPdd0nXwHynoq5fpT -----END CERTIFICATE-----Generated at Wed Jan 21 18:43:37 2026 by rpki-client