This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/m4jXKZzRC_F6jqPyZunca8WVKr4.roa File: m4jXKZzRC_F6jqPyZunca8WVKr4.roa (raw, json) Hash identifier: 0NEGOIwyyCNU93BpYFv57YwXyMVpszkEk+sl7xITOg4= Subject key identifier: 9B:88:D7:29:9C:D1:0B:F1:7A:8E:A3:F2:66:E9:DC:6B:C5:95:2A:BE Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA766D125D827FA2AE098065724767D Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/m4jXKZzRC_F6jqPyZunca8WVKr4.roa Signing time: Fri 02 Jan 2026 12:20:58 +0000 ROA not before: Fri 02 Jan 2026 12:20:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25531 IP address blocks: 89.17.32.0/24 maxlen: 24 89.17.34.0/24 maxlen: 24 89.17.36.0/22 maxlen: 22 89.17.40.0/22 maxlen: 22 89.17.44.0/24 maxlen: 24 89.17.47.0/24 maxlen: 24 89.17.50.0/24 maxlen: 24 217.15.48.0/22 maxlen: 22 217.15.52.0/24 maxlen: 24 217.15.54.0/23 maxlen: 23 217.15.58.0/23 maxlen: 23 217.15.60.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:66:d1:25:d8:27:fa:2a:e0:98:06:57:24:76:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:20:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b88d7299cd10bf17a8ea3f266e9dc6bc5952abe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:20:44:a0:4e:dc:1c:9a:6d:23:3b:19:c0:29: fa:18:fa:f6:e2:4f:39:43:52:2b:30:99:7d:37:0a: 98:88:02:18:b6:f2:15:11:b6:74:42:10:77:ae:1f: 52:c0:a0:7d:2a:10:90:47:5a:28:f1:8d:f2:2d:29: 3f:d2:c7:79:9f:22:e5:4c:16:52:74:25:cb:fa:43: b8:f3:65:0d:42:53:e5:e6:27:df:d6:b6:34:cd:c0: b2:bb:3e:7b:80:22:e3:f4:64:74:c6:64:b6:7d:33: e6:25:c0:a7:47:3c:c0:74:c0:17:e2:93:c0:6a:5d: 10:85:05:e6:4a:fd:8b:d9:d5:47:5b:7a:a7:93:f5: 99:7f:fd:b0:a6:8b:00:71:e1:4f:ab:85:f8:f3:ed: ca:f7:83:93:48:a7:a4:1c:05:ad:3c:ce:76:4b:d1: ed:55:d4:51:5c:99:84:38:73:e7:8d:25:4b:91:4e: 2d:66:c1:0e:7a:a9:70:a2:db:3f:37:70:c3:dd:34: fe:93:65:25:76:1f:74:8a:20:71:78:80:bc:9b:a8: 42:17:73:19:ec:df:76:be:54:cc:f1:b4:eb:48:09: 60:59:69:a5:71:80:8a:99:a1:99:a1:52:b0:fe:bf: 53:48:c2:7b:49:36:eb:38:a1:f0:0e:6a:c5:55:dc: 36:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:88:D7:29:9C:D1:0B:F1:7A:8E:A3:F2:66:E9:DC:6B:C5:95:2A:BE X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/m4jXKZzRC_F6jqPyZunca8WVKr4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.17.32.0/24 89.17.34.0/24 89.17.36.0-89.17.44.255 89.17.47.0/24 89.17.50.0/24 217.15.48.0-217.15.52.255 217.15.54.0/23 217.15.58.0-217.15.61.255 Signature Algorithm: sha256WithRSAEncryption 0c:eb:87:93:65:aa:f1:fa:55:e4:6d:5a:b9:6a:87:09:58:38: 4e:7a:b0:fb:be:df:6f:8c:ce:76:cd:19:1c:68:24:5e:6b:f6: d8:3a:56:4f:20:80:2d:79:a8:cd:ea:90:5d:ea:bd:b9:0e:d9: 39:d9:2a:bb:8d:43:37:b1:fb:fb:13:20:27:10:1f:ee:2a:90: ba:76:7a:c3:b6:46:f1:32:24:82:90:74:a4:8c:c4:70:69:21: 76:0a:1d:9c:de:24:80:10:55:3d:79:1e:d8:9d:0e:dc:b6:3a: 39:bd:7c:58:96:67:1d:ec:32:61:2b:cb:68:21:d6:4f:da:96: 3e:2d:e3:9c:f4:ae:66:41:dc:b2:6d:72:17:78:06:83:7b:ce: da:df:75:69:fe:ea:31:91:57:08:ed:c4:93:8c:ee:6f:85:71: ac:ec:30:f5:5e:e0:8a:5c:b5:46:86:3b:a4:0a:e6:a1:11:d3: 7c:b0:d1:a6:b0:51:3e:f4:4c:86:33:a1:fa:7d:84:89:0f:f7: 34:8d:f8:3c:63:6a:97:26:30:1f:e7:05:9f:d8:d3:ec:83:9f: c0:4d:1f:09:f5:8e:cf:3d:51:85:7f:ca:9e:24:fa:95:a5:db: f7:ce:d9:dd:4e:36:83:71:1e:5b:ca:8b:9a:14:da:62:70:6a: d0:b2:94:c2 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgISAZt+p2bRJdgn+irgmAZXJHZ9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMDU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Yjg4ZDcyOTljZDEwYmYxN2E4ZWEzZjI2NmU5ZGM2YmM1OTUyYWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCBEoE7cHJptIzsZwCn6GPr24k85 Q1IrMJl9NwqYiAIYtvIVEbZ0QhB3rh9SwKB9KhCQR1oo8Y3yLSk/0sd5nyLlTBZS dCXL+kO482UNQlPl5iff1rY0zcCyuz57gCLj9GR0xmS2fTPmJcCnRzzAdMAX4pPA al0QhQXmSv2L2dVHW3qnk/WZf/2wposAceFPq4X48+3K94OTSKekHAWtPM52S9Ht VdRRXJmEOHPnjSVLkU4tZsEOeqlwots/N3DD3TT+k2Uldh90iiBxeIC8m6hCF3MZ 7N92vlTM8bTrSAlgWWmlcYCKmaGZoVKw/r9TSMJ7STbrOKHwDmrFVdw2HQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFJuI1ymc0Qvxeo6j8mbp3GvFlSq+MB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvbTRqWEtaelJDX0Y2anFQeVp1bmNhOFdWS3I0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQAWREgAwQA WREiMAwDBAJZESQDBABZESwDBABZES8DBABZETIwDAMEBNkPMAMEANkPNAMEAdkP NjAMAwQB2Q86AwQB2Q88MA0GCSqGSIb3DQEBCwUAA4IBAQAM64eTZarx+lXkbVq5 aocJWDhOerD7vt9vjM52zRkcaCRea/bYOlZPIIAteajN6pBd6r25Dtk52Sq7jUM3 sfv7EyAnEB/uKpC6dnrDtkbxMiSCkHSkjMRwaSF2Ch2c3iSAEFU9eR7YnQ7ctjo5 vXxYlmcd7DJhK8toIdZP2pY+LeOc9K5mQdyybXIXeAaDe87a33Vp/uoxkVcI7cST jO5vhXGs7DD1XuCKXLVGhjukCuahEdN8sNGmsFE+9EyGM6H6fYSJD/c0jfg8Y2qX JjAf5wWf2NPsg5/ATR8J9Y7PPVGFf8qeJPqVpdv3ztndTjaDcR5byouaFNpicGrQ spTC -----END CERTIFICATE-----Generated at Mon Jan 26 10:13:44 2026 by rpki-client