This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/mOLu5yy1hfuAdimwt8EIDKecKDQ.roa File: mOLu5yy1hfuAdimwt8EIDKecKDQ.roa (raw, json) Hash identifier: 5YCmlSPstxquYrl1BiHwoJ0FV26JerY9NJHkI5lqyeU= Subject key identifier: 98:E2:EE:E7:2C:B5:85:FB:80:76:29:B0:B7:C1:08:0C:A7:9C:28:34 Certificate issuer: /CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d Certificate serial: 019B7C1314FC62A44E59FFBED783ABEAFCBC Authority key identifier: EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/mOLu5yy1hfuAdimwt8EIDKecKDQ.roa Signing time: Fri 02 Jan 2026 00:19:43 +0000 ROA not before: Fri 02 Jan 2026 00:19:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49418 IP address blocks: 89.185.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:14:fc:62:a4:4e:59:ff:be:d7:83:ab:ea:fc:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d Validity Not Before: Jan 2 00:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=98e2eee72cb585fb807629b0b7c1080ca79c2834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fd:5b:49:22:09:5c:0a:7b:96:1c:e9:aa:20: bb:c6:d6:86:3b:0d:d2:3d:55:74:33:e4:24:2a:04: 18:e0:20:51:27:d2:57:e7:08:61:4e:90:be:e1:92: f3:bb:96:8b:24:65:20:4a:78:c4:ac:da:36:0a:a7: 9f:1a:9b:ca:0e:d1:a8:a6:90:5b:51:65:32:c0:53: 0a:cc:f7:de:33:85:b3:f1:52:33:e5:4a:c3:1f:1e: 68:c2:8e:2d:00:d3:ff:a8:4b:de:07:66:b0:f7:b4: 11:3f:a8:16:44:b4:83:25:4b:12:e5:c5:60:bb:2d: 6c:59:b9:0d:b1:3c:fe:87:3d:e9:8f:2f:31:e7:75: 35:ab:35:02:90:b3:ba:68:5a:5c:68:72:75:85:d8: f3:63:d6:db:d6:bd:a9:51:73:a4:54:29:0b:81:18: 8b:14:a9:4e:72:81:68:92:bc:8a:09:3e:06:8a:f6: fb:22:4c:f8:73:d3:d0:7a:39:b2:06:fb:0d:22:f7: 0b:9a:c6:3c:04:4f:46:b7:b0:b8:99:c7:4f:b3:73: f7:30:28:c4:45:ab:4a:24:32:26:96:f3:48:f7:7a: e5:cd:b9:dc:91:96:1e:55:77:be:8c:68:85:7b:6f: 2f:db:b0:cf:81:41:41:b8:f9:c3:11:93:00:03:27: 73:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:E2:EE:E7:2C:B5:85:FB:80:76:29:B0:B7:C1:08:0C:A7:9C:28:34 X509v3 Authority Key Identifier: keyid:EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/mOLu5yy1hfuAdimwt8EIDKecKDQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.185.83.0/24 Signature Algorithm: sha256WithRSAEncryption 70:27:2e:4a:c9:01:69:05:bf:f7:80:d3:84:71:5c:05:74:cf: 8f:d4:9d:f3:0d:78:09:a8:ff:a0:49:be:04:78:6d:b5:67:96: 03:bf:3c:3e:9b:47:ac:2b:cb:e5:a3:d3:6a:cf:db:24:a5:2b: b4:d1:88:4e:9d:8b:96:5f:45:f9:d3:ca:56:ec:53:29:21:e7: 4d:cf:e4:ec:2a:fb:7d:ea:e0:82:f4:e9:ec:d3:c8:29:d6:22: 71:a5:e9:68:3f:1b:c8:46:b4:ca:68:89:a7:31:38:28:17:89: 8f:32:cb:48:57:c8:be:1b:ca:e9:6f:1c:b7:59:42:07:31:68: c1:90:ef:51:a6:6e:c4:eb:d3:fc:89:42:9e:6f:d7:26:5d:3f: 41:87:f5:5a:46:17:41:3d:65:b4:a1:7c:f3:24:37:5b:84:4f: 6d:ef:ff:ad:c5:e2:b7:e5:79:ce:2b:3b:0c:6f:39:25:84:19: f6:ee:ed:b2:71:b2:e9:a8:4d:1c:c5:56:0c:94:56:c6:71:5b: a0:92:34:5f:9c:61:7a:d4:87:ad:64:12:d1:4e:9c:de:5a:19: 12:3c:cb:9f:d7:bd:4f:3a:3b:d6:e5:91:a9:f9:be:4b:91:91: 39:1f:5d:f5:94:d1:ac:db:95:7b:db:79:d2:66:47:07:fc:6c: b3:f1:ca:f3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8ExT8YqROWf++14Or6vy8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNTdjMmQ5ZDkzYWM3Y2Y5YjJmMTdjYWE3ODU5YjY5ODVi MzliOWQwHhcNMjYwMTAyMDAxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OGUyZWVlNzJjYjU4NWZiODA3NjI5YjBiN2MxMDgwY2E3OWMyODM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvP1bSSIJXAp7lhzpqiC7xtaGOw3S PVV0M+QkKgQY4CBRJ9JX5whhTpC+4ZLzu5aLJGUgSnjErNo2CqefGpvKDtGoppBb UWUywFMKzPfeM4Wz8VIz5UrDHx5owo4tANP/qEveB2aw97QRP6gWRLSDJUsS5cVg uy1sWbkNsTz+hz3pjy8x53U1qzUCkLO6aFpcaHJ1hdjzY9bb1r2pUXOkVCkLgRiL FKlOcoFokryKCT4Givb7Ikz4c9PQejmyBvsNIvcLmsY8BE9Gt7C4mcdPs3P3MCjE RatKJDImlvNI93rlzbnckZYeVXe+jGiFe28v27DPgUFBuPnDEZMAAydzZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJji7ucstYX7gHYpsLfBCAynnCg0MB8GA1UdIwQY MBaAFO9XwtnZOsfPmy8XyqeFm2mFs5udMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2Njct OGU2Zjg3OGRiNWY0LzEvbU9MdTV5eTFoZnVBZGltd3Q4RUlES2VjS0RRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2NjctOGU2Zjg3OGRiNWY0 LzEvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWblTMA0G CSqGSIb3DQEBCwUAA4IBAQBwJy5KyQFpBb/3gNOEcVwFdM+P1J3zDXgJqP+gSb4E eG21Z5YDvzw+m0esK8vlo9Nqz9skpSu00YhOnYuWX0X508pW7FMpIedNz+TsKvt9 6uCC9Ons08gp1iJxpeloPxvIRrTKaImnMTgoF4mPMstIV8i+G8rpbxy3WUIHMWjB kO9Rpm7E69P8iUKeb9cmXT9Bh/VaRhdBPWW0oXzzJDdbhE9t7/+txeK35XnOKzsM bzklhBn27u2ycbLpqE0cxVYMlFbGcVugkjRfnGF61IetZBLRTpzeWhkSPMuf171P OjvW5ZGp+b5LkZE5H131lNGs25V723nSZkcH/Gyz8crz -----END CERTIFICATE-----Generated at Tue Jan 20 04:46:11 2026 by rpki-client