This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/RBYeJvnG9BPaoKCf3GTmvizALJY.roa File: RBYeJvnG9BPaoKCf3GTmvizALJY.roa (raw, json) Hash identifier: kRi3zgBMSsciFNO/2eaRHyq4otB+Mdoc4y1HYeeA5rw= Subject key identifier: 44:16:1E:26:F9:C6:F4:13:DA:A0:A0:9F:DC:64:E6:BE:2C:C0:2C:96 Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Certificate serial: 019B7D5CC77C8AA56B1B3735509B5C4AAA8D Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/RBYeJvnG9BPaoKCf3GTmvizALJY.roa Signing time: Fri 02 Jan 2026 06:19:50 +0000 ROA not before: Fri 02 Jan 2026 06:19:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39238 IP address blocks: 89.23.114.0/24 maxlen: 24 2a12:a345::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:c7:7c:8a:a5:6b:1b:37:35:50:9b:5c:4a:aa:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Validity Not Before: Jan 2 06:19:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=44161e26f9c6f413daa0a09fdc64e6be2cc02c96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:20:f2:20:7b:30:8c:57:8e:24:ac:e3:8d:8b: 1c:b3:fc:df:74:5d:e8:27:3c:6a:57:ac:c2:b1:98: ee:39:2d:7b:99:67:68:10:f7:94:c0:e4:14:77:72: 62:40:8e:d7:ef:98:98:72:60:e9:7d:d0:db:1e:f2: 5e:b4:11:3b:cb:7a:ef:1a:56:8a:fc:9f:d4:55:1c: 2a:ca:aa:00:75:64:ab:bc:fb:02:2b:47:e8:b6:3d: 2d:a8:2e:22:d5:5f:f4:94:f9:d9:44:45:e5:5d:ea: 44:07:50:65:d2:2b:31:44:bf:76:36:eb:1e:e6:bf: 65:42:4e:04:75:60:be:ed:38:06:6f:f1:c9:be:c6: fd:b9:ce:c8:f5:59:e7:58:cb:64:ef:68:59:28:0b: ac:60:12:a6:5b:42:a8:3a:13:26:ea:57:0f:97:7f: 49:05:94:f2:49:3e:53:44:26:7d:ae:09:57:b9:be: 87:2e:cb:fe:30:66:6e:25:d9:2f:82:ca:be:ac:cc: 7e:1c:c0:2a:8c:60:3c:8d:a6:97:b1:04:25:5f:6a: 95:64:d6:83:06:88:30:b0:8a:cf:a0:c8:38:78:72: 32:e9:4d:d5:b9:a2:aa:bf:b0:18:34:6f:22:5b:b7: 18:76:7a:d8:5a:26:67:11:f2:ef:40:cf:5b:e9:1b: 87:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:16:1E:26:F9:C6:F4:13:DA:A0:A0:9F:DC:64:E6:BE:2C:C0:2C:96 X509v3 Authority Key Identifier: keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/RBYeJvnG9BPaoKCf3GTmvizALJY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.23.114.0/24 IPv6: 2a12:a345::/32 Signature Algorithm: sha256WithRSAEncryption 07:5e:ed:a0:91:94:83:ae:b8:1b:f8:9b:77:d5:45:ad:f3:73: 37:61:81:b7:a8:da:a8:ba:c5:49:f1:55:5c:01:a4:80:60:74: 51:9a:39:30:1f:b8:63:c3:f9:1c:19:32:03:f0:c6:4c:d8:de: 1f:23:91:a5:63:5b:d6:4a:30:79:c7:fb:1d:fd:a3:b5:df:bd: bf:e0:a7:cb:80:e4:22:81:c8:cf:90:78:52:25:de:9b:3f:db: b8:88:e9:fe:db:3c:5d:ba:07:ce:79:72:ff:66:57:f6:9a:02: 61:9b:8c:cb:62:3f:e4:e7:7e:1e:96:f0:5b:7b:8a:65:17:a3: 86:06:ee:0d:26:1b:a2:eb:94:da:d1:6e:19:60:c9:ae:1e:a3: 5c:21:c1:58:8a:65:9c:ec:be:22:86:1b:95:ad:fc:2a:dd:63: 48:47:f5:53:52:1b:ad:3a:94:4a:7f:b0:5c:3b:4c:b2:0c:cc: 4d:2d:5b:38:4e:09:8b:2d:a3:f3:56:f7:8b:09:c7:fd:9e:76: 99:01:53:72:72:01:2b:fd:0a:99:29:6e:60:09:ba:eb:e2:c9: 3d:3f:be:06:57:a1:d7:ab:a1:55:03:45:e1:d2:71:c1:b5:c1: 14:66:76:f8:e2:fd:6a:e5:4f:c9:96:59:89:61:5e:5b:a0:91: c6:b3:0e:bc -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9XMd8iqVrGzc1UJtcSqqNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MDg0NzVmZjBkOGVjOTYwMzM2MDE2ZTBlMDQyMjFhOThl NWVjZjIwHhcNMjYwMTAyMDYxOTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NDE2MWUyNmY5YzZmNDEzZGFhMGEwOWZkYzY0ZTZiZTJjYzAyYzk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySDyIHswjFeOJKzjjYscs/zfdF3o JzxqV6zCsZjuOS17mWdoEPeUwOQUd3JiQI7X75iYcmDpfdDbHvJetBE7y3rvGlaK /J/UVRwqyqoAdWSrvPsCK0fotj0tqC4i1V/0lPnZREXlXepEB1Bl0isxRL92Nuse 5r9lQk4EdWC+7TgGb/HJvsb9uc7I9VnnWMtk72hZKAusYBKmW0KoOhMm6lcPl39J BZTyST5TRCZ9rglXub6HLsv+MGZuJdkvgsq+rMx+HMAqjGA8jaaXsQQlX2qVZNaD BogwsIrPoMg4eHIy6U3VuaKqv7AYNG8iW7cYdnrYWiZnEfLvQM9b6RuHoQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFEQWHib5xvQT2qCgn9xk5r4swCyWMB8GA1UdIwQY MBaAFHUIR1/w2OyWAzYBbg4EIhqY5ezyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWIt MTcxYzM2N2JlNzgyLzEvUkJZZUp2bkc5QlBhb0tDZjNHVG12aXpBTEpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWItMTcxYzM2N2JlNzgy LzEvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAWRdyMA0E AgACMAcDBQAqEqNFMA0GCSqGSIb3DQEBCwUAA4IBAQAHXu2gkZSDrrgb+Jt31UWt 83M3YYG3qNqousVJ8VVcAaSAYHRRmjkwH7hjw/kcGTID8MZM2N4fI5GlY1vWSjB5 x/sd/aO1372/4KfLgOQigcjPkHhSJd6bP9u4iOn+2zxdugfOeXL/Zlf2mgJhm4zL Yj/k534elvBbe4plF6OGBu4NJhui65Ta0W4ZYMmuHqNcIcFYimWc7L4ihhuVrfwq 3WNIR/VTUhutOpRKf7BcO0yyDMxNLVs4TgmLLaPzVveLCcf9nnaZAVNycgEr/QqZ KW5gCbrr4sk9P74GV6HXq6FVA0Xh0nHBtcEUZnb44v1q5U/JllmJYV5boJHGsw68 -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:58 2026 by rpki-client