This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/cOxS0E2XjVzTbopS5QPfLKjjtnk.roa File: cOxS0E2XjVzTbopS5QPfLKjjtnk.roa (raw, json) Hash identifier: mNaGGlEdJbAJ+qyD+c0RDVAtGl4B6iWrOcUapyB/UK4= Subject key identifier: 70:EC:52:D0:4D:97:8D:5C:D3:6E:8A:52:E5:03:DF:2C:A8:E3:B6:79 Certificate issuer: /CN=d66738a8dadac2d0d3aeddb934f820066b9f5feb Certificate serial: 019B7BA4F1DA38356DFE14CDB800C4BD82BC Authority key identifier: D6:67:38:A8:DA:DA:C2:D0:D3:AE:DD:B9:34:F8:20:06:6B:9F:5F:EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1mc4qNrawtDTrt25NPggBmufX-s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/cOxS0E2XjVzTbopS5QPfLKjjtnk.roa Signing time: Thu 01 Jan 2026 22:19:25 +0000 ROA not before: Thu 01 Jan 2026 22:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209046 IP address blocks: 89.232.4.0/22 maxlen: 22 89.232.4.0/24 maxlen: 24 89.232.5.0/24 maxlen: 24 89.232.6.0/24 maxlen: 24 89.232.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.mft rsync://rpki.ripe.net/repository/DEFAULT/1mc4qNrawtDTrt25NPggBmufX-s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 15:31:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:f1:da:38:35:6d:fe:14:cd:b8:00:c4:bd:82:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d66738a8dadac2d0d3aeddb934f820066b9f5feb Validity Not Before: Jan 1 22:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70ec52d04d978d5cd36e8a52e503df2ca8e3b679 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:28:05:90:4c:e7:73:77:73:40:66:18:0b:55: a4:8d:2c:30:8d:b2:29:1a:1a:d2:b2:0a:d6:7e:ad: 90:c2:9d:78:e9:6d:c3:b7:29:9c:c7:3c:18:cc:e3: 7c:2a:ed:98:43:70:c1:fb:a1:c2:dd:10:8d:ac:ab: 1a:0c:4d:ec:16:72:52:b2:00:9d:40:2a:00:eb:a1: 93:39:91:f1:c4:a3:b9:55:4a:e1:09:8f:3c:fc:db: e2:82:62:e8:37:0a:e2:b9:bf:4e:2f:7e:81:79:ba: 95:43:75:62:6d:2c:40:16:1d:82:5b:09:35:4b:d3: ff:55:d7:87:6a:14:b9:48:7f:43:b8:5b:46:a9:ed: 41:52:8a:77:9f:0e:02:12:cb:ec:97:29:0e:e2:56: b1:88:3e:e3:15:1a:05:77:67:71:78:bd:dc:91:55: 51:0a:a7:0b:c4:13:6c:ae:ca:ca:ce:4c:84:20:e7: 4c:f4:91:e4:98:ef:11:85:ed:88:33:c7:99:dd:f0: f5:4e:05:f6:9b:68:4c:c1:03:83:7e:0c:a0:20:d4: 92:e3:ef:97:2d:1e:aa:f8:d6:3e:7a:a8:23:92:04: 44:b8:39:a0:e4:c0:63:d3:5a:55:83:71:08:91:db: bf:7f:73:93:ee:14:68:fe:07:23:6f:5c:86:ae:fe: 3a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:EC:52:D0:4D:97:8D:5C:D3:6E:8A:52:E5:03:DF:2C:A8:E3:B6:79 X509v3 Authority Key Identifier: keyid:D6:67:38:A8:DA:DA:C2:D0:D3:AE:DD:B9:34:F8:20:06:6B:9F:5F:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1mc4qNrawtDTrt25NPggBmufX-s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/cOxS0E2XjVzTbopS5QPfLKjjtnk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.232.4.0/22 Signature Algorithm: sha256WithRSAEncryption 1e:77:b0:3b:0c:d4:89:a8:40:52:e0:ad:2d:b2:06:2b:ad:6f: 4b:e1:c4:fa:65:dd:51:5a:89:44:e5:1e:f5:b9:5d:61:18:4a: 1a:aa:5a:4a:5a:cd:61:97:75:45:66:16:c3:21:6a:9a:b4:20: a6:28:34:93:f1:d7:32:a5:ac:4a:bb:e2:ab:5b:e7:66:cd:e5: db:8e:55:2d:0c:d9:f4:aa:d5:50:b6:ac:e3:f6:03:55:ed:af: ef:09:08:26:15:50:be:a3:da:d5:c0:81:32:8f:42:c2:79:07: 65:7f:45:ca:5d:4a:81:7b:8c:cc:e7:dd:cd:f8:4f:cb:81:a2: 67:06:73:41:f8:b3:83:32:32:58:d3:d1:28:ad:77:5d:4c:b4: 79:f2:3f:01:0d:dc:76:03:16:81:8e:4c:ff:08:a2:b9:9b:e9: 2d:e0:c7:94:15:e8:27:23:f8:d0:33:3b:88:c9:a8:e7:4a:5c: 12:e1:20:47:28:e0:57:c8:02:cc:e0:5a:61:96:13:ef:ce:ae: ec:e7:d4:0e:3f:a4:af:19:db:ae:82:73:e3:50:30:98:85:ff: 10:15:07:8b:fb:86:95:9b:bc:89:ee:88:e7:f0:ee:1b:5f:3e: 85:b4:d9:25:17:27:06:34:40:2b:75:6a:2c:ed:08:c2:64:02: 43:91:5e:6e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pPHaODVt/hTNuADEvYK8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2NjczOGE4ZGFkYWMyZDBkM2FlZGRiOTM0ZjgyMDA2NmI5 ZjVmZWIwHhcNMjYwMTAxMjIxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MGVjNTJkMDRkOTc4ZDVjZDM2ZThhNTJlNTAzZGYyY2E4ZTNiNjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjygFkEznc3dzQGYYC1WkjSwwjbIp GhrSsgrWfq2Qwp146W3DtymcxzwYzON8Ku2YQ3DB+6HC3RCNrKsaDE3sFnJSsgCd QCoA66GTOZHxxKO5VUrhCY88/NvigmLoNwriub9OL36BebqVQ3VibSxAFh2CWwk1 S9P/VdeHahS5SH9DuFtGqe1BUop3nw4CEsvslykO4laxiD7jFRoFd2dxeL3ckVVR CqcLxBNsrsrKzkyEIOdM9JHkmO8Rhe2IM8eZ3fD1TgX2m2hMwQODfgygINSS4++X LR6q+NY+eqgjkgREuDmg5MBj01pVg3EIkdu/f3OT7hRo/gcjb1yGrv466QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHDsUtBNl41c026KUuUD3yyo47Z5MB8GA1UdIwQY MBaAFNZnOKja2sLQ067duTT4IAZrn1/rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMW1jNHFOcmF3dERUcnQyNU5QZ2dCbXVmWC1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jNTc3MjctOTM5Ni00YmY4LWIyNWQt NmExZTBlYzcxZGE4LzEvY094UzBFMlhqVnpUYm9wUzVRUGZMS2pqdG5rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9jNTc3MjctOTM5Ni00YmY4LWIyNWQtNmExZTBlYzcxZGE4 LzEvMW1jNHFOcmF3dERUcnQyNU5QZ2dCbXVmWC1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCWegEMA0G CSqGSIb3DQEBCwUAA4IBAQAed7A7DNSJqEBS4K0tsgYrrW9L4cT6Zd1RWolE5R71 uV1hGEoaqlpKWs1hl3VFZhbDIWqatCCmKDST8dcypaxKu+KrW+dmzeXbjlUtDNn0 qtVQtqzj9gNV7a/vCQgmFVC+o9rVwIEyj0LCeQdlf0XKXUqBe4zM593N+E/LgaJn BnNB+LODMjJY09EorXddTLR58j8BDdx2AxaBjkz/CKK5m+kt4MeUFegnI/jQMzuI yajnSlwS4SBHKOBXyALM4FphlhPvzq7s59QOP6SvGduugnPjUDCYhf8QFQeL+4aV m7yJ7ojn8O4bXz6FtNklFycGNEArdWos7QjCZAJDkV5u -----END CERTIFICATE-----Generated at Thu Jan 15 21:36:34 2026 by rpki-client