This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/IQ5bkMn7w4mdfQTVCpKxTeAJY2A.roa File: IQ5bkMn7w4mdfQTVCpKxTeAJY2A.roa (raw, json) Hash identifier: BUMsO+3Md3GuCd0Sja0LiQrCDsbttYlIXUYoBXpu1Ks= Subject key identifier: 21:0E:5B:90:C9:FB:C3:89:9D:7D:04:D5:0A:92:B1:4D:E0:09:63:60 Certificate issuer: /CN=aa6d889041cb29aed1fe1ac380c794af7a42c7d1 Certificate serial: 019BD62F09E9F802D52E4DF7EA49D7875D92 Authority key identifier: AA:6D:88:90:41:CB:29:AE:D1:FE:1A:C3:80:C7:94:AF:7A:42:C7:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/IQ5bkMn7w4mdfQTVCpKxTeAJY2A.roa Signing time: Mon 19 Jan 2026 12:16:05 +0000 ROA not before: Mon 19 Jan 2026 12:16:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212418 IP address blocks: 89.34.218.0/24 maxlen: 24 89.38.56.0/24 maxlen: 24 89.40.68.0/24 maxlen: 24 185.209.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d6:2f:09:e9:f8:02:d5:2e:4d:f7:ea:49:d7:87:5d:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa6d889041cb29aed1fe1ac380c794af7a42c7d1 Validity Not Before: Jan 19 12:16:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=210e5b90c9fbc3899d7d04d50a92b14de0096360 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:a8:ec:de:f3:10:1b:33:7f:02:9a:0a:d2:d1: 0a:ed:44:4e:a0:51:c0:56:2b:32:45:bf:cc:bb:1d: 50:85:44:1c:16:25:82:eb:2f:bd:60:23:c2:6d:49: 55:b6:d9:5d:fe:37:ea:f3:d7:24:91:c6:2e:6e:b5: a8:63:d9:83:1e:18:ec:17:e4:06:d9:6a:44:93:1e: f6:dc:46:2c:1f:b6:ef:45:fe:91:26:5a:6d:01:04: 64:23:70:c8:ad:6d:61:b3:20:be:2f:d0:ae:08:74: 1d:06:7d:52:1a:61:e9:51:41:07:6e:88:e4:8b:5c: 7f:27:cf:de:6b:41:90:fa:95:0a:9a:04:b2:2d:6e: d8:f4:1c:bc:dd:c1:4a:1c:35:ae:ee:53:e5:cb:c9: 63:7a:8a:69:f0:50:85:db:41:8a:2f:8f:0b:21:e1: 1e:bc:04:4a:00:4b:76:6b:f6:4f:1d:1e:d2:f9:01: 0c:d6:09:ad:05:ff:2a:be:15:48:95:15:72:92:04: ac:c4:d6:f7:0b:c5:e9:75:98:ce:f4:af:09:63:09: d0:99:bf:85:50:56:3e:a7:40:83:89:19:2a:38:2f: c1:f2:6a:34:38:04:d2:5e:b6:83:c7:8a:86:6e:9e: a5:88:eb:a3:1d:ca:1f:03:71:5e:23:35:6c:f7:35: 75:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:0E:5B:90:C9:FB:C3:89:9D:7D:04:D5:0A:92:B1:4D:E0:09:63:60 X509v3 Authority Key Identifier: keyid:AA:6D:88:90:41:CB:29:AE:D1:FE:1A:C3:80:C7:94:AF:7A:42:C7:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/IQ5bkMn7w4mdfQTVCpKxTeAJY2A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.34.218.0/24 89.38.56.0/24 89.40.68.0/24 185.209.13.0/24 Signature Algorithm: sha256WithRSAEncryption 58:cd:9f:fc:50:dc:b1:c6:f5:33:b7:58:32:9b:c3:dd:0a:27: 9a:fd:21:6a:af:a3:6e:f7:cf:be:7c:ad:cb:00:7c:74:4a:5d: 30:09:54:ba:50:90:9e:ac:cd:a0:09:49:3f:13:1e:29:02:f3: 55:87:48:97:7b:b1:a1:60:3a:c0:79:d0:5f:bc:14:61:8a:d4: 69:e0:f6:0c:a4:00:02:28:4d:1a:e8:03:a0:fd:73:f6:31:30: 9b:05:04:21:d1:04:9a:9e:71:42:2a:a9:51:1f:cf:ec:a2:6b: 7c:1d:66:e6:57:1a:c0:2d:a4:92:fb:be:29:e8:1e:af:6d:69: de:b9:6d:30:ef:83:5b:9a:35:da:fc:5c:0e:72:96:17:dd:bf: a7:80:27:8a:70:0f:09:b7:0a:f4:6a:73:f4:61:85:f8:61:5a: e6:91:5f:73:3d:20:a9:45:60:94:7f:ac:7b:c5:f7:32:f8:ed: bd:27:84:83:d1:34:38:ff:41:0d:f9:fe:c0:af:12:0e:2f:bf: f2:a2:c6:a4:9f:63:37:9b:dc:dc:f0:f7:a2:38:50:f6:ed:07: d7:e5:c6:05:60:c9:62:e4:1c:3c:a0:d6:f1:31:38:5a:d5:76: 22:b1:cc:5f:9e:f3:18:c4:a5:c3:44:e6:78:c0:f0:1f:2f:4f: 73:22:dc:a4 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZvWLwnp+ALVLk336knXh12SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhNmQ4ODkwNDFjYjI5YWVkMWZlMWFjMzgwYzc5NGFmN2E0 MmM3ZDEwHhcNMjYwMTE5MTIxNjA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTBlNWI5MGM5ZmJjMzg5OWQ3ZDA0ZDUwYTkyYjE0ZGUwMDk2MzYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36js3vMQGzN/ApoK0tEK7UROoFHA VisyRb/Mux1QhUQcFiWC6y+9YCPCbUlVttld/jfq89ckkcYubrWoY9mDHhjsF+QG 2WpEkx723EYsH7bvRf6RJlptAQRkI3DIrW1hsyC+L9CuCHQdBn1SGmHpUUEHbojk i1x/J8/ea0GQ+pUKmgSyLW7Y9By83cFKHDWu7lPly8ljeopp8FCF20GKL48LIeEe vARKAEt2a/ZPHR7S+QEM1gmtBf8qvhVIlRVykgSsxNb3C8XpdZjO9K8JYwnQmb+F UFY+p0CDiRkqOC/B8mo0OATSXraDx4qGbp6liOujHcofA3FeIzVs9zV1FwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFCEOW5DJ+8OJnX0E1QqSsU3gCWNgMB8GA1UdIwQY MBaAFKptiJBByymu0f4aw4DHlK96QsfRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcW0ySWtFSExLYTdSX2hyRGdNZVVyM3BDeDlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi85MDUwNzktOWQ3Zi00OGM4LWEzMDYt ZTEzZDY5YTAwNDVlLzEvSVE1YmtNbjd3NG1kZlFUVkNwS3hUZUFKWTJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi85MDUwNzktOWQ3Zi00OGM4LWEzMDYtZTEzZDY5YTAwNDVl LzEvcW0ySWtFSExLYTdSX2hyRGdNZVVyM3BDeDlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAWSLaAwQA WSY4AwQAWShEAwQAudENMA0GCSqGSIb3DQEBCwUAA4IBAQBYzZ/8UNyxxvUzt1gy m8PdCiea/SFqr6Nu98++fK3LAHx0Sl0wCVS6UJCerM2gCUk/Ex4pAvNVh0iXe7Gh YDrAedBfvBRhitRp4PYMpAACKE0a6AOg/XP2MTCbBQQh0QSannFCKqlRH8/somt8 HWbmVxrALaSS+74p6B6vbWneuW0w74NbmjXa/FwOcpYX3b+ngCeKcA8Jtwr0anP0 YYX4YVrmkV9zPSCpRWCUf6x7xfcy+O29J4SD0TQ4/0EN+f7ArxIOL7/yosakn2M3 m9zc8PeiOFD27QfX5cYFYMli5Bw8oNbxMTha1XYiscxfnvMYxKXDROZ4wPAfL09z Ityk -----END CERTIFICATE-----Generated at Wed Jan 21 17:30:12 2026 by rpki-client