This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/gAidUOyTKtWsqogbz8Z7j-XZYdU.roa File: gAidUOyTKtWsqogbz8Z7j-XZYdU.roa (raw, json) Hash identifier: lrMZ/6KYodQFNtZQsABnSoAbHRdnZBb25oeXCjN3StI= Subject key identifier: 80:08:9D:50:EC:93:2A:D5:AC:AA:88:1B:CF:C6:7B:8F:E5:D9:61:D5 Certificate issuer: /CN=3eb903284a1d15dc158ad7182ea0bce786ceb2ad Certificate serial: 019B7C7EE9550C5D60853AFF37414E6AE8FF Authority key identifier: 3E:B9:03:28:4A:1D:15:DC:15:8A:D7:18:2E:A0:BC:E7:86:CE:B2:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrkDKEodFdwVitcYLqC854bOsq0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/gAidUOyTKtWsqogbz8Z7j-XZYdU.roa Signing time: Fri 02 Jan 2026 02:17:30 +0000 ROA not before: Fri 02 Jan 2026 02:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208404 IP address blocks: 89.31.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.crl rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.mft rsync://rpki.ripe.net/repository/DEFAULT/PrkDKEodFdwVitcYLqC854bOsq0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7e:e9:55:0c:5d:60:85:3a:ff:37:41:4e:6a:e8:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3eb903284a1d15dc158ad7182ea0bce786ceb2ad Validity Not Before: Jan 2 02:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=80089d50ec932ad5acaa881bcfc67b8fe5d961d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:28:2a:11:08:e8:ec:40:57:ec:82:50:57:e1: 52:79:ad:2f:9f:44:0c:c6:84:87:c9:41:4e:08:c2: 05:22:24:87:65:d0:9a:93:34:0d:c6:14:0e:3d:c5: 3a:36:9f:1e:c8:83:e9:b3:3b:00:32:96:aa:c8:7e: 2a:40:1d:a4:7e:0c:5a:d3:a6:dd:df:11:66:5b:1f: 97:0b:f4:ad:49:b8:72:d7:06:b0:19:90:fc:ce:9e: 0e:15:80:52:72:92:ff:a1:a1:6f:15:4b:12:e1:26: ab:23:a6:3c:fd:d4:23:25:de:cb:7e:b7:10:90:23: 46:dc:53:23:37:61:40:8d:9f:9c:6f:3d:36:e1:36: 03:71:3d:de:bd:d4:81:55:09:a5:67:75:dc:a2:88: db:54:6a:1b:2a:39:c2:e4:77:7e:99:f9:ad:41:16: d9:51:29:46:7e:05:51:5e:64:4a:c5:4f:4d:3a:2c: 86:f7:6b:64:ab:97:c6:f6:ca:73:de:70:68:f6:a7: 4e:65:f1:d7:f3:7b:90:6d:ba:65:31:eb:14:b5:15: 48:4e:bb:c5:69:d4:13:ad:ad:4f:8d:64:fa:e3:ab: 7a:7d:7d:68:43:06:6c:4e:f4:25:2e:af:3b:0f:ee: 5a:f5:14:b8:f1:f7:f1:24:6a:2f:ef:fc:d1:b8:84: 9c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:08:9D:50:EC:93:2A:D5:AC:AA:88:1B:CF:C6:7B:8F:E5:D9:61:D5 X509v3 Authority Key Identifier: keyid:3E:B9:03:28:4A:1D:15:DC:15:8A:D7:18:2E:A0:BC:E7:86:CE:B2:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrkDKEodFdwVitcYLqC854bOsq0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/gAidUOyTKtWsqogbz8Z7j-XZYdU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.31.66.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:87:76:59:52:3e:14:f4:cf:c9:b1:4b:e1:7f:e0:ec:99:fc: c3:ef:57:a0:a3:19:03:7b:02:e7:2d:a5:e8:1e:be:93:6a:0c: bd:a1:73:19:ff:f5:e5:1d:44:09:94:cc:45:55:76:74:a5:76: 10:3f:73:2f:7b:6a:64:d9:2e:86:4e:1b:1d:76:15:19:63:e5: 04:00:ce:10:d2:6b:28:ca:24:ec:2f:dd:36:2e:f0:6b:59:c3: 2e:ea:89:0b:40:2b:a3:af:ce:ae:91:80:c7:d9:7b:2d:41:36: 5f:b3:f7:3a:3e:be:a5:c8:c8:9d:bf:eb:22:83:c6:7c:8b:49: c9:aa:14:a2:ff:9a:d0:72:a9:80:ab:f8:66:fd:55:30:98:62: 9c:08:74:c6:a2:78:20:ad:ca:8a:f5:c9:49:06:8e:29:f2:d9: de:cb:6c:fb:0e:8e:2b:1c:01:bb:d5:16:eb:ac:c5:49:cb:36: 61:63:58:bc:55:41:03:3e:08:09:cf:bb:d3:60:bf:03:e3:18: 7f:be:87:cc:bc:c0:03:48:e2:d1:b1:03:cd:1e:0a:a6:51:49: 6c:7b:5e:7e:0f:b8:5f:89:2d:a3:51:a4:83:03:36:1e:f6:71: 19:a6:1b:9f:72:e0:b7:fa:69:0b:e9:61:26:49:12:dc:d9:58: 6d:40:a5:9c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8fulVDF1ghTr/N0FOauj/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlYjkwMzI4NGExZDE1ZGMxNThhZDcxODJlYTBiY2U3ODZj ZWIyYWQwHhcNMjYwMTAyMDIxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MDA4OWQ1MGVjOTMyYWQ1YWNhYTg4MWJjZmM2N2I4ZmU1ZDk2MWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtygqEQjo7EBX7IJQV+FSea0vn0QM xoSHyUFOCMIFIiSHZdCakzQNxhQOPcU6Np8eyIPpszsAMpaqyH4qQB2kfgxa06bd 3xFmWx+XC/StSbhy1wawGZD8zp4OFYBScpL/oaFvFUsS4SarI6Y8/dQjJd7LfrcQ kCNG3FMjN2FAjZ+cbz024TYDcT3evdSBVQmlZ3XcoojbVGobKjnC5Hd+mfmtQRbZ USlGfgVRXmRKxU9NOiyG92tkq5fG9spz3nBo9qdOZfHX83uQbbplMesUtRVITrvF adQTra1PjWT646t6fX1oQwZsTvQlLq87D+5a9RS48ffxJGov7/zRuISceQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIAInVDskyrVrKqIG8/Ge4/l2WHVMB8GA1UdIwQY MBaAFD65AyhKHRXcFYrXGC6gvOeGzrKtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHJrREtFb2RGZHdWaXRjWUxxQzg1NGJPc3EwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi85MmVhOWYtYjEyZS00ZGQ1LTliZDMt Yjc3ZGM4ZGMxYzdlLzEvZ0FpZFVPeVRLdFdzcW9nYno4WjdqLVhaWWRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi85MmVhOWYtYjEyZS00ZGQ1LTliZDMtYjc3ZGM4ZGMxYzdl LzEvUHJrREtFb2RGZHdWaXRjWUxxQzg1NGJPc3EwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWR9CMA0G CSqGSIb3DQEBCwUAA4IBAQBKh3ZZUj4U9M/JsUvhf+DsmfzD71egoxkDewLnLaXo Hr6Tagy9oXMZ//XlHUQJlMxFVXZ0pXYQP3Mve2pk2S6GThsddhUZY+UEAM4Q0mso yiTsL902LvBrWcMu6okLQCujr86ukYDH2XstQTZfs/c6Pr6lyMidv+sig8Z8i0nJ qhSi/5rQcqmAq/hm/VUwmGKcCHTGonggrcqK9clJBo4p8tney2z7Do4rHAG71Rbr rMVJyzZhY1i8VUEDPggJz7vTYL8D4xh/vofMvMADSOLRsQPNHgqmUUlse15+D7hf iS2jUaSDAzYe9nEZphufcuC3+mkL6WEmSRLc2VhtQKWc -----END CERTIFICATE-----Generated at Mon Feb 9 23:44:47 2026 by rpki-client