This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/NoaqM1r-voUvMtXV6c0v9imMsKQ.roa File: NoaqM1r-voUvMtXV6c0v9imMsKQ.roa (raw, json) Hash identifier: tA7iKs3kzLEd7cgCrqMemYC62LPi9vTpaH4xuxgWkP4= Subject key identifier: 36:86:AA:33:5A:FE:BE:85:2F:32:D5:D5:E9:CD:2F:F6:29:8C:B0:A4 Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Certificate serial: 019B7D5CD051B1C8B6D7BC7EBBD40EB19F4D Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/NoaqM1r-voUvMtXV6c0v9imMsKQ.roa Signing time: Fri 02 Jan 2026 06:19:53 +0000 ROA not before: Fri 02 Jan 2026 06:19:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61223 IP address blocks: 89.23.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:d0:51:b1:c8:b6:d7:bc:7e:bb:d4:0e:b1:9f:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Validity Not Before: Jan 2 06:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3686aa335afebe852f32d5d5e9cd2ff6298cb0a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:be:35:25:aa:84:ba:4c:99:97:3d:9a:8c:21: 02:39:66:02:f0:58:b0:c7:43:e8:d1:0b:37:1b:b6: 71:83:cc:02:40:d6:a4:a9:1a:db:55:85:4f:d7:e7: b1:97:96:0b:74:27:0e:cd:e4:23:54:34:a9:38:88: c0:46:4f:ec:6e:51:c7:87:d4:bb:91:7e:ea:f5:eb: 7a:32:26:c1:d4:fd:cd:86:9e:dc:9c:1f:75:86:69: b5:c9:6e:f9:95:3d:10:db:50:78:a9:a7:b9:e9:82: 40:43:0f:b0:3e:f1:7f:d2:08:76:be:0d:ed:bc:e0: ce:ff:2a:3e:d6:b6:c0:c9:18:39:74:26:30:5d:d1: 08:a2:de:ef:b7:cb:48:0b:fa:0f:12:18:7f:e1:f9: 7c:98:42:b3:cb:24:8b:4a:d6:96:41:ae:1f:8b:53: 3d:63:73:fc:8f:64:1f:56:65:07:0d:f1:f0:11:33: f0:82:1e:52:a6:f3:d1:61:84:71:b0:87:3a:cd:41: 4d:51:6f:ba:75:b9:e4:93:72:0c:b3:54:46:30:67: 33:00:92:5d:04:8e:1b:c1:67:c0:31:ac:d1:45:a0: e4:7b:9c:2c:06:6c:a0:0b:8e:c7:35:06:4e:ca:ad: 0a:43:0a:ae:e6:f0:9d:ba:62:b4:8f:b1:fc:f0:b6: e1:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:86:AA:33:5A:FE:BE:85:2F:32:D5:D5:E9:CD:2F:F6:29:8C:B0:A4 X509v3 Authority Key Identifier: keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/NoaqM1r-voUvMtXV6c0v9imMsKQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.23.104.0/24 Signature Algorithm: sha256WithRSAEncryption 31:c8:62:60:62:2c:98:b7:1a:0c:b8:d7:c9:29:b4:ae:d9:c1: 6c:53:bb:04:2c:a5:33:3c:21:70:20:2f:61:0f:5d:57:7d:7c: da:f0:0c:57:3e:11:51:2e:a4:ce:c2:51:7b:5d:5c:78:5c:98: ab:94:ed:57:cd:4e:4c:7d:70:95:d9:98:3d:4f:90:0d:72:8f: c6:d4:db:af:bd:4f:ce:85:7b:df:d3:e5:6b:79:c6:cf:ba:5b: 9a:5d:e4:49:b7:ed:2a:bb:30:65:b8:d3:f6:3c:5c:3a:58:c0: 11:4f:ec:7c:1d:7b:79:16:02:55:5c:a9:40:3c:20:a1:c1:55: 7a:16:fd:b8:3f:9c:35:ee:91:1a:09:c5:3c:66:01:cf:9a:1e: b6:9b:f2:88:a7:6c:70:81:df:42:37:4a:40:f8:ab:88:ae:f3: c7:ff:5a:38:17:bf:a0:dd:f4:c1:1f:fe:df:62:86:e7:db:5e: 13:11:3c:b7:fb:92:0e:f2:2c:af:ca:06:0a:ba:90:7b:46:10: 35:9c:98:4e:42:b0:c1:f4:93:46:17:f3:e6:c3:f6:61:2a:5c: 70:99:0d:38:4d:a2:65:c2:4b:3a:11:61:9c:8b:3c:bf:1a:5b: 25:5a:2b:df:11:84:ca:b6:98:b4:13:40:01:db:e9:eb:f6:9f: ef:b4:6f:db -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XNBRsci217x+u9QOsZ9NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MDg0NzVmZjBkOGVjOTYwMzM2MDE2ZTBlMDQyMjFhOThl NWVjZjIwHhcNMjYwMTAyMDYxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjg2YWEzMzVhZmViZTg1MmYzMmQ1ZDVlOWNkMmZmNjI5OGNiMGE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwr41JaqEukyZlz2ajCECOWYC8Fiw x0Po0Qs3G7Zxg8wCQNakqRrbVYVP1+exl5YLdCcOzeQjVDSpOIjARk/sblHHh9S7 kX7q9et6MibB1P3Nhp7cnB91hmm1yW75lT0Q21B4qae56YJAQw+wPvF/0gh2vg3t vODO/yo+1rbAyRg5dCYwXdEIot7vt8tIC/oPEhh/4fl8mEKzyySLStaWQa4fi1M9 Y3P8j2QfVmUHDfHwETPwgh5SpvPRYYRxsIc6zUFNUW+6dbnkk3IMs1RGMGczAJJd BI4bwWfAMazRRaDke5wsBmygC47HNQZOyq0KQwqu5vCdumK0j7H88LbhEQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDaGqjNa/r6FLzLV1enNL/YpjLCkMB8GA1UdIwQY MBaAFHUIR1/w2OyWAzYBbg4EIhqY5ezyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWIt MTcxYzM2N2JlNzgyLzEvTm9hcU0xci12b1V2TXRYVjZjMHY5aW1Nc0tRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWItMTcxYzM2N2JlNzgy LzEvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWRdoMA0G CSqGSIb3DQEBCwUAA4IBAQAxyGJgYiyYtxoMuNfJKbSu2cFsU7sELKUzPCFwIC9h D11XfXza8AxXPhFRLqTOwlF7XVx4XJirlO1XzU5MfXCV2Zg9T5ANco/G1NuvvU/O hXvf0+VrecbPuluaXeRJt+0quzBluNP2PFw6WMART+x8HXt5FgJVXKlAPCChwVV6 Fv24P5w17pEaCcU8ZgHPmh62m/KIp2xwgd9CN0pA+KuIrvPH/1o4F7+g3fTBH/7f Yobn214TETy3+5IO8iyvygYKupB7RhA1nJhOQrDB9JNGF/Pmw/ZhKlxwmQ04TaJl wks6EWGcizy/GlslWivfEYTKtpi0E0AB2+nr9p/vtG/b -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:45 2026 by rpki-client