This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/vuYx__ePQYmBnErIjuxPmyS72UE.roa File: vuYx__ePQYmBnErIjuxPmyS72UE.roa (raw, json) Hash identifier: RG1Iph+v2YrWVe+WGtDI4g5ptYW+7Uz8lQw8iy5rb4g= Subject key identifier: BE:E6:31:FF:F7:8F:41:89:81:9C:4A:C8:8E:EC:4F:9B:24:BB:D9:41 Certificate issuer: /CN=c1b050211219d18e996e086cb7f6309178804860 Certificate serial: 019B7E3741E8E857848930AAC1E2D7C58D65 Authority key identifier: C1:B0:50:21:12:19:D1:8E:99:6E:08:6C:B7:F6:30:91:78:80:48:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wbBQIRIZ0Y6Zbghst_YwkXiASGA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/vuYx__ePQYmBnErIjuxPmyS72UE.roa Signing time: Fri 02 Jan 2026 10:18:29 +0000 ROA not before: Fri 02 Jan 2026 10:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202772 IP address blocks: 89.108.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft rsync://rpki.ripe.net/repository/DEFAULT/wbBQIRIZ0Y6Zbghst_YwkXiASGA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 13:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:41:e8:e8:57:84:89:30:aa:c1:e2:d7:c5:8d:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1b050211219d18e996e086cb7f6309178804860 Validity Not Before: Jan 2 10:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bee631fff78f4189819c4ac88eec4f9b24bbd941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ce:03:72:27:79:3e:3d:4a:51:83:67:7b:fb: 66:c9:56:93:37:a8:9c:3a:5e:e8:6e:3c:3b:c7:58: 63:03:4a:5e:19:d7:6f:be:74:79:26:a7:66:68:f4: 48:9e:5e:7c:7c:e2:1d:6b:73:65:a5:3c:57:55:ce: bb:06:39:aa:ad:5e:c6:a9:87:a8:a1:9b:93:69:c3: 23:53:5d:fc:6b:06:ae:0e:ac:40:2b:4f:38:a1:e7: 18:86:81:cf:e4:9c:41:d9:e0:6f:77:1b:5c:a4:26: ee:6e:bd:d9:e1:66:d3:0b:b6:e2:72:c6:43:81:e7: 5b:f8:62:c2:d6:ad:b3:7f:d4:26:f6:87:24:1a:50: 95:d1:9e:5d:6e:f5:ea:b2:65:bd:0e:7b:3e:2e:25: ed:a9:fd:57:ed:e8:81:df:12:8a:d7:36:bc:02:37: 31:96:cd:9e:57:59:25:15:f3:90:25:bd:ba:c5:c0: 12:54:0c:9f:da:a3:28:2e:99:0f:27:1b:11:1f:6e: 28:3b:84:e0:86:36:5b:e4:46:67:08:09:6f:a3:ff: c6:63:3b:1f:d1:57:ad:6b:e7:5e:a8:80:7e:63:0e: 7b:43:e5:ba:45:33:be:29:1a:9d:c1:fb:fd:4b:7f: ab:5a:08:06:87:09:d5:62:65:12:f2:3a:d5:03:53: b7:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:E6:31:FF:F7:8F:41:89:81:9C:4A:C8:8E:EC:4F:9B:24:BB:D9:41 X509v3 Authority Key Identifier: keyid:C1:B0:50:21:12:19:D1:8E:99:6E:08:6C:B7:F6:30:91:78:80:48:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wbBQIRIZ0Y6Zbghst_YwkXiASGA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/vuYx__ePQYmBnErIjuxPmyS72UE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.108.132.0/24 Signature Algorithm: sha256WithRSAEncryption 65:47:f8:a4:ee:58:27:45:fc:64:ce:c1:4d:67:b2:ef:de:e2: cd:a1:5c:28:19:fd:c3:94:5e:44:a8:45:c5:40:87:96:45:7b: 31:24:a9:52:af:2c:0e:39:d4:68:c1:2f:23:68:12:80:a5:69: fe:12:43:65:81:ff:03:fb:a8:aa:39:31:24:ce:1a:d6:97:af: be:cf:1c:6f:66:e6:b6:a1:10:ea:16:1f:de:d4:3d:1b:06:6c: 6f:25:18:ba:32:40:3f:8c:30:41:82:af:70:fa:7f:67:30:d5: d1:2f:4b:95:a0:0a:39:ad:b9:68:92:72:2b:57:d9:32:27:ce: 9b:42:d4:f0:84:29:1e:8b:67:e6:b9:ae:82:05:92:b1:eb:27: 97:5e:26:69:3d:49:2c:99:21:c8:71:17:08:f7:d8:8e:f9:50: 6e:1e:1a:22:5a:2a:a0:33:6a:73:c7:50:54:0c:92:81:60:d1: 0d:14:df:44:0c:7e:d6:f0:f5:ec:73:5f:40:7d:d6:ed:74:f2: 30:7d:9d:c5:1d:a6:33:4a:94:ee:8e:31:e1:a9:a9:21:b8:ee: ff:23:2a:88:e6:66:a6:46:06:d5:bf:07:39:2b:5d:d9:31:8f: 88:45:7b:d1:69:78:82:cf:fd:b3:34:5c:49:ea:df:fa:9f:9e: e3:85:2f:01 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N0Ho6FeEiTCqweLXxY1lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxYjA1MDIxMTIxOWQxOGU5OTZlMDg2Y2I3ZjYzMDkxNzg4 MDQ4NjAwHhcNMjYwMTAyMTAxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZWU2MzFmZmY3OGY0MTg5ODE5YzRhYzg4ZWVjNGY5YjI0YmJkOTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAps4Dcid5Pj1KUYNne/tmyVaTN6ic Ol7objw7x1hjA0peGddvvnR5JqdmaPRInl58fOIda3NlpTxXVc67BjmqrV7GqYeo oZuTacMjU138awauDqxAK084oecYhoHP5JxB2eBvdxtcpCbubr3Z4WbTC7bicsZD gedb+GLC1q2zf9Qm9ockGlCV0Z5dbvXqsmW9Dns+LiXtqf1X7eiB3xKK1za8Ajcx ls2eV1klFfOQJb26xcASVAyf2qMoLpkPJxsRH24oO4TghjZb5EZnCAlvo//GYzsf 0Veta+deqIB+Yw57Q+W6RTO+KRqdwfv9S3+rWggGhwnVYmUS8jrVA1O3gwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL7mMf/3j0GJgZxKyI7sT5sku9lBMB8GA1UdIwQY MBaAFMGwUCESGdGOmW4IbLf2MJF4gEhgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2JCUUlSSVowWTZaYmdoc3RfWXdrWGlBU0dBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8yOGE4ZjMtODg5ZS00NTQ5LWE0NGUt Y2UyMjUxODdmYzM4LzEvdnVZeF9fZVBRWW1CbkVySWp1eFBteVM3MlVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC8yOGE4ZjMtODg5ZS00NTQ5LWE0NGUtY2UyMjUxODdmYzM4 LzEvd2JCUUlSSVowWTZaYmdoc3RfWXdrWGlBU0dBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWWyEMA0G CSqGSIb3DQEBCwUAA4IBAQBlR/ik7lgnRfxkzsFNZ7Lv3uLNoVwoGf3DlF5EqEXF QIeWRXsxJKlSrywOOdRowS8jaBKApWn+EkNlgf8D+6iqOTEkzhrWl6++zxxvZua2 oRDqFh/e1D0bBmxvJRi6MkA/jDBBgq9w+n9nMNXRL0uVoAo5rbloknIrV9kyJ86b QtTwhCkei2fmua6CBZKx6yeXXiZpPUksmSHIcRcI99iO+VBuHhoiWiqgM2pzx1BU DJKBYNENFN9EDH7W8PXsc19AfdbtdPIwfZ3FHaYzSpTujjHhqakhuO7/IyqI5mam RgbVvwc5K13ZMY+IRXvRaXiCz/2zNFxJ6t/6n57jhS8B -----END CERTIFICATE-----Generated at Wed Jan 21 18:43:54 2026 by rpki-client