This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/voN8vwWvhtrarGbETBOSasXNWSI.roa File: voN8vwWvhtrarGbETBOSasXNWSI.roa (raw, json) Hash identifier: ceFvyVvNqry/EnDK9LeHP842A/ozch+GOGZX3poJEIE= Subject key identifier: BE:83:7C:BF:05:AF:86:DA:DA:AC:66:C4:4C:13:92:6A:C5:CD:59:22 Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Certificate serial: 019B7D5CC8CBFCFB69FA5FEF64098CAE25B6 Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/voN8vwWvhtrarGbETBOSasXNWSI.roa Signing time: Fri 02 Jan 2026 06:19:51 +0000 ROA not before: Fri 02 Jan 2026 06:19:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44477 IP address blocks: 89.23.105.0/24 maxlen: 24 89.23.106.0/24 maxlen: 24 89.23.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:c8:cb:fc:fb:69:fa:5f:ef:64:09:8c:ae:25:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Validity Not Before: Jan 2 06:19:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=be837cbf05af86dadaac66c44c13926ac5cd5922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e3:db:f2:e6:95:fa:86:3f:4a:2d:90:d2:f8: ae:2e:cf:0a:e3:6d:56:58:e9:04:23:7b:91:79:a8: 3b:df:10:6b:a6:66:1e:bc:ae:6a:d7:08:4f:ea:8a: 8d:a6:77:a8:03:d7:28:57:eb:40:94:eb:21:4d:d3: d0:a1:47:56:35:15:58:11:d3:c9:c5:d7:26:21:b7: c4:c8:e5:cd:2c:3a:28:ed:32:15:d9:30:85:08:4c: 14:84:bf:5c:46:cc:0b:8b:3b:95:58:4c:71:99:20: cf:a7:a9:c5:aa:ba:32:11:60:81:8c:2f:01:1f:ad: 93:08:cd:9a:6e:db:d8:e7:07:56:15:66:62:cb:33: 30:29:76:a5:a5:7d:db:43:ab:55:0a:31:58:c4:ca: 1f:99:d2:28:1c:12:7a:ff:93:08:bb:d5:f8:0c:12: c2:24:a8:92:13:9e:c8:d9:f1:05:0b:c5:77:43:29: 57:6b:d5:6a:97:8c:55:ee:89:9e:96:82:ad:ea:84: 5e:1e:b3:bb:c0:f5:8a:43:0a:42:99:99:8f:f2:f5: 34:0b:23:bb:6a:89:03:2c:d0:b0:09:f9:a3:d4:71: a6:ed:bb:6c:24:4e:13:4b:cc:38:99:c6:b6:ce:eb: c4:36:85:f9:a7:cf:88:d7:8d:b1:a5:a0:fd:64:ee: dd:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:83:7C:BF:05:AF:86:DA:DA:AC:66:C4:4C:13:92:6A:C5:CD:59:22 X509v3 Authority Key Identifier: keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/voN8vwWvhtrarGbETBOSasXNWSI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.23.105.0-89.23.106.255 89.23.110.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:52:e6:94:60:cb:79:05:e7:c8:9a:bd:d1:dd:7e:39:98:12: dc:02:dc:3a:3d:4c:23:f1:0a:c3:59:55:53:d7:d1:d1:6a:34: 6e:a5:40:02:bd:92:81:d6:80:00:02:91:c0:86:6e:25:b3:38: 09:e0:ce:2f:07:81:4e:19:20:71:3e:2b:59:16:61:de:fb:e8: 7c:50:0b:0c:13:19:88:17:97:fc:c7:7d:c1:b5:aa:47:66:c7: b4:ff:16:b7:77:de:83:8c:f5:87:13:fe:6d:62:64:07:4e:4a: 9e:96:0d:fd:c4:48:1f:8c:4a:9c:71:4f:31:e0:0e:96:c1:95: 90:7e:b9:1a:e4:77:3a:81:17:15:5d:ed:75:fd:90:b3:7e:48: fe:a2:ec:28:6a:cf:b3:ea:d8:3d:a0:59:d2:a2:85:33:49:0f: b2:bc:c1:2a:a0:15:a9:c7:af:d8:f7:ed:2b:55:e3:81:56:c9: 83:d8:c1:ad:71:32:d3:87:e0:bf:fc:5e:15:26:2b:5b:fb:42: c1:53:9e:b8:41:a2:1d:b8:ee:db:4a:c5:f6:46:9b:bc:3f:5c: 7c:50:3b:59:8e:00:25:01:c5:34:81:cd:00:6f:c7:28:5b:81: 3f:96:60:fe:2c:82:1f:c4:71:96:ba:11:34:ba:b5:27:cc:4b: f9:62:b6:8d -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt9XMjL/Ptp+l/vZAmMriW2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MDg0NzVmZjBkOGVjOTYwMzM2MDE2ZTBlMDQyMjFhOThl NWVjZjIwHhcNMjYwMTAyMDYxOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTgzN2NiZjA1YWY4NmRhZGFhYzY2YzQ0YzEzOTI2YWM1Y2Q1OTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuPb8uaV+oY/Si2Q0viuLs8K421W WOkEI3uReag73xBrpmYevK5q1whP6oqNpneoA9coV+tAlOshTdPQoUdWNRVYEdPJ xdcmIbfEyOXNLDoo7TIV2TCFCEwUhL9cRswLizuVWExxmSDPp6nFqroyEWCBjC8B H62TCM2abtvY5wdWFWZiyzMwKXalpX3bQ6tVCjFYxMofmdIoHBJ6/5MIu9X4DBLC JKiSE57I2fEFC8V3QylXa9Vql4xV7omeloKt6oReHrO7wPWKQwpCmZmP8vU0CyO7 aokDLNCwCfmj1HGm7btsJE4TS8w4mca2zuvENoX5p8+I142xpaD9ZO7dkQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFL6DfL8Fr4ba2qxmxEwTkmrFzVkiMB8GA1UdIwQY MBaAFHUIR1/w2OyWAzYBbg4EIhqY5ezyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWIt MTcxYzM2N2JlNzgyLzEvdm9OOHZ3V3ZodHJhckdiRVRCT1Nhc1hOV1NJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWItMTcxYzM2N2JlNzgy LzEvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBABZF2kD BABZF2oDBABZF24wDQYJKoZIhvcNAQELBQADggEBAE1S5pRgy3kF58iavdHdfjmY EtwC3Do9TCPxCsNZVVPX0dFqNG6lQAK9koHWgAACkcCGbiWzOAngzi8HgU4ZIHE+ K1kWYd776HxQCwwTGYgXl/zHfcG1qkdmx7T/Frd33oOM9YcT/m1iZAdOSp6WDf3E SB+MSpxxTzHgDpbBlZB+uRrkdzqBFxVd7XX9kLN+SP6i7Chqz7Pq2D2gWdKihTNJ D7K8wSqgFanHr9j37StV44FWyYPYwa1xMtOH4L/8XhUmK1v7QsFTnrhBoh247ttK xfZGm7w/XHxQO1mOACUBxTSBzQBvxyhbgT+WYP4sgh/EcZa6ETS6tSfMS/lito0= -----END CERTIFICATE-----Generated at Fri Jan 9 12:06:15 2026 by rpki-client