This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/67f42e-7062-4112-ad42-9349f10a2649/1/89HEOa6jkIVR84SQ_SfHSDMCm_Y.roa File: 89HEOa6jkIVR84SQ_SfHSDMCm_Y.roa (raw, json) Hash identifier: 4Z/+j/JxQpFvM/6/dlI2bie1b9Zo7VTSL7uqqczNQRw= Subject key identifier: F3:D1:C4:39:AE:A3:90:85:51:F3:84:90:FD:27:C7:48:33:02:9B:F6 Certificate issuer: /CN=728c2bfd6bb503a01d018602bda152d734ed56f0 Certificate serial: 019B7A5B91C760F6A4C10BB1F795D2D08D13 Authority key identifier: 72:8C:2B:FD:6B:B5:03:A0:1D:01:86:02:BD:A1:52:D7:34:ED:56:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cowr_Wu1A6AdAYYCvaFS1zTtVvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/67f42e-7062-4112-ad42-9349f10a2649/1/89HEOa6jkIVR84SQ_SfHSDMCm_Y.roa Signing time: Thu 01 Jan 2026 16:19:39 +0000 ROA not before: Thu 01 Jan 2026 16:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207357 IP address blocks: 5.182.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/67f42e-7062-4112-ad42-9349f10a2649/1/cowr_Wu1A6AdAYYCvaFS1zTtVvA.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/67f42e-7062-4112-ad42-9349f10a2649/1/cowr_Wu1A6AdAYYCvaFS1zTtVvA.mft rsync://rpki.ripe.net/repository/DEFAULT/cowr_Wu1A6AdAYYCvaFS1zTtVvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:91:c7:60:f6:a4:c1:0b:b1:f7:95:d2:d0:8d:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=728c2bfd6bb503a01d018602bda152d734ed56f0 Validity Not Before: Jan 1 16:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f3d1c439aea3908551f38490fd27c74833029bf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:97:5b:5f:d6:4f:c9:b6:6e:3f:96:41:3f:0c: c5:b6:05:a3:0f:2d:70:9b:b1:40:b4:1c:cd:4d:19: c0:5d:57:8e:6e:ca:82:66:26:c2:68:f9:dd:04:0b: 61:34:16:31:07:50:ec:95:32:b3:5f:80:31:51:1f: 92:e3:eb:87:9a:d1:25:a6:05:f2:a8:04:3a:d1:d3: a3:3a:8c:b9:2c:f6:5d:ce:7d:d6:5c:bd:ce:98:46: cd:98:4f:a9:4d:41:76:40:22:82:27:6a:c5:33:db: 3a:bc:7c:39:42:33:a0:28:c1:e9:a2:fe:0d:c9:40: b9:fc:27:3d:24:f5:d8:c5:a0:f1:bb:92:95:22:39: 80:79:07:33:c6:c3:e8:e0:19:cf:61:19:b8:fd:9c: fc:65:64:69:c3:e3:e0:52:95:7e:57:cf:ea:98:55: fd:44:24:76:77:59:56:c5:8b:19:33:0c:38:ff:b2: 21:39:b4:1c:6c:c4:f7:85:da:75:40:7b:00:6a:e9: ce:82:39:bb:2c:3c:d3:32:54:d7:55:22:82:21:d6: 3a:e0:1d:fc:6c:cd:44:f7:ea:20:89:bc:53:c8:ba: 5c:8e:69:92:4c:c0:73:32:22:ad:de:d4:98:6c:2f: 0f:1e:09:9b:1c:1a:10:7a:02:db:b9:53:4e:da:d8: 34:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:D1:C4:39:AE:A3:90:85:51:F3:84:90:FD:27:C7:48:33:02:9B:F6 X509v3 Authority Key Identifier: keyid:72:8C:2B:FD:6B:B5:03:A0:1D:01:86:02:BD:A1:52:D7:34:ED:56:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cowr_Wu1A6AdAYYCvaFS1zTtVvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/67f42e-7062-4112-ad42-9349f10a2649/1/89HEOa6jkIVR84SQ_SfHSDMCm_Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/67f42e-7062-4112-ad42-9349f10a2649/1/cowr_Wu1A6AdAYYCvaFS1zTtVvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.189.0/24 Signature Algorithm: sha256WithRSAEncryption ab:66:07:f0:3f:d6:9d:45:88:6f:b2:b3:cb:ef:ef:98:23:40: 42:96:73:db:63:b8:aa:54:c8:59:3d:a8:99:fe:c3:4c:00:21: 47:8e:88:f4:be:a8:a3:ac:01:b2:22:e5:c1:48:2f:a6:3e:3f: 17:17:3a:67:4c:61:d4:03:d4:bd:20:32:ea:6e:29:79:29:1a: 21:b9:7b:69:30:cd:d8:cf:c5:37:4e:a2:25:1b:57:60:53:d1: f4:de:03:ea:e0:a5:b5:64:19:d9:17:48:50:d3:f0:ef:36:83: 01:89:08:eb:ae:9d:6c:2d:e6:48:3d:4a:29:2b:97:ef:a7:df: 53:68:29:a0:57:47:d4:91:3a:35:ff:2f:a2:54:5c:46:64:f3: 75:a3:d5:ab:5a:99:97:42:68:d9:fe:ab:7c:15:d1:f0:46:bf: cc:3b:ca:aa:e4:16:27:e2:ce:b8:9a:f1:66:70:88:ee:98:d0: 9a:43:e6:7b:a1:26:b6:c0:9a:3a:b8:d2:f8:76:09:8b:7e:f0: 33:de:af:7a:11:80:96:8b:4e:fc:90:b3:aa:7e:fe:61:20:71: e0:f2:16:c0:c7:ac:ba:95:29:69:d6:16:13:70:d5:b1:98:6c: 3d:f2:35:46:c6:4b:63:44:1b:f0:66:c1:bc:c1:a8:78:10:7a: 96:78:fb:65 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W5HHYPakwQux95XS0I0TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyOGMyYmZkNmJiNTAzYTAxZDAxODYwMmJkYTE1MmQ3MzRl ZDU2ZjAwHhcNMjYwMTAxMTYxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmM2QxYzQzOWFlYTM5MDg1NTFmMzg0OTBmZDI3Yzc0ODMzMDI5YmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpdbX9ZPybZuP5ZBPwzFtgWjDy1w m7FAtBzNTRnAXVeObsqCZibCaPndBAthNBYxB1DslTKzX4AxUR+S4+uHmtElpgXy qAQ60dOjOoy5LPZdzn3WXL3OmEbNmE+pTUF2QCKCJ2rFM9s6vHw5QjOgKMHpov4N yUC5/Cc9JPXYxaDxu5KVIjmAeQczxsPo4BnPYRm4/Zz8ZWRpw+PgUpV+V8/qmFX9 RCR2d1lWxYsZMww4/7IhObQcbMT3hdp1QHsAaunOgjm7LDzTMlTXVSKCIdY64B38 bM1E9+ogibxTyLpcjmmSTMBzMiKt3tSYbC8PHgmbHBoQegLbuVNO2tg0CQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPPRxDmuo5CFUfOEkP0nx0gzApv2MB8GA1UdIwQY MBaAFHKMK/1rtQOgHQGGAr2hUtc07VbwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY293cl9XdTFBNkFkQVlZQ3ZhRlMxelR0VnZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS82N2Y0MmUtNzA2Mi00MTEyLWFkNDIt OTM0OWYxMGEyNjQ5LzEvODlIRU9hNmprSVZSODRTUV9TZkhTRE1DbV9ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS82N2Y0MmUtNzA2Mi00MTEyLWFkNDItOTM0OWYxMGEyNjQ5 LzEvY293cl9XdTFBNkFkQVlZQ3ZhRlMxelR0VnZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABba9MA0G CSqGSIb3DQEBCwUAA4IBAQCrZgfwP9adRYhvsrPL7++YI0BClnPbY7iqVMhZPaiZ /sNMACFHjoj0vqijrAGyIuXBSC+mPj8XFzpnTGHUA9S9IDLqbil5KRohuXtpMM3Y z8U3TqIlG1dgU9H03gPq4KW1ZBnZF0hQ0/DvNoMBiQjrrp1sLeZIPUopK5fvp99T aCmgV0fUkTo1/y+iVFxGZPN1o9WrWpmXQmjZ/qt8FdHwRr/MO8qq5BYn4s64mvFm cIjumNCaQ+Z7oSa2wJo6uNL4dgmLfvAz3q96EYCWi078kLOqfv5hIHHg8hbAx6y6 lSlp1hYTcNWxmGw98jVGxktjRBvwZsG8wah4EHqWePtl -----END CERTIFICATE-----Generated at Mon Feb 9 23:42:04 2026 by rpki-client