This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/0OaaKkS63755SpYhx6kJMGc7jsk.roa File: 0OaaKkS63755SpYhx6kJMGc7jsk.roa (raw, json) Hash identifier: yp83fzMHWtdzvYdJOYBhZdlBYbmjJSMrdOBnbSCBBV0= Subject key identifier: D0:E6:9A:2A:44:BA:DF:BE:79:4A:96:21:C7:A9:09:30:67:3B:8E:C9 Certificate issuer: /CN=e92c415d1775ae9993e900a7536b46ab144a9aa2 Certificate serial: 019B7F1584131F3FC43946EFCCAB3CA4DEE2 Authority key identifier: E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/0OaaKkS63755SpYhx6kJMGc7jsk.roa Signing time: Fri 02 Jan 2026 14:21:15 +0000 ROA not before: Fri 02 Jan 2026 14:21:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60711 IP address blocks: 89.29.190.0/23 maxlen: 23 89.29.247.0/24 maxlen: 24 185.250.197.0/24 maxlen: 24 213.181.92.0/23 maxlen: 23 213.181.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.mft rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:84:13:1f:3f:c4:39:46:ef:cc:ab:3c:a4:de:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e92c415d1775ae9993e900a7536b46ab144a9aa2 Validity Not Before: Jan 2 14:21:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d0e69a2a44badfbe794a9621c7a90930673b8ec9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ae:99:87:e8:eb:da:8e:d7:1e:27:28:c1:31: 49:b9:21:e7:6b:ee:5e:30:3d:71:b0:9c:bf:a7:20: ca:6f:72:21:05:2b:53:5f:0c:f6:ef:66:bd:fe:ce: 1f:7c:9a:f8:33:d3:07:48:d9:73:e8:58:7f:21:30: 60:34:3a:28:e3:0c:e4:6b:69:7d:64:bc:89:2d:61: 9b:93:c6:a4:b4:fb:12:ef:9a:e1:fa:58:03:77:69: c4:ee:55:37:92:37:6d:fd:48:24:a9:81:79:b0:d2: 0a:15:ac:d5:2b:fd:16:79:c8:62:ef:ac:2f:66:39: b7:1e:b8:d8:f1:6c:52:83:35:94:af:36:7c:04:78: c5:f3:2d:ad:ef:d6:10:b5:84:6d:c1:34:c0:5b:36: fd:f2:02:2d:4b:a4:6b:a4:eb:c5:ef:fe:e8:3b:71: b8:03:41:b8:d2:9e:99:17:b0:f5:3c:ff:2d:ec:c5: 6d:58:54:5e:ca:3e:e6:41:ce:52:16:49:be:14:ea: 0b:e0:03:46:22:db:13:e2:af:64:a1:f7:e0:63:e7: f4:79:30:37:15:7d:2c:89:7d:18:92:95:d1:1b:03: 15:49:0f:f2:35:7e:c0:0f:61:0b:a7:33:ca:6d:85: 55:00:b7:f6:92:ac:9a:27:d2:e4:44:1e:b7:99:f9: e7:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:E6:9A:2A:44:BA:DF:BE:79:4A:96:21:C7:A9:09:30:67:3B:8E:C9 X509v3 Authority Key Identifier: keyid:E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/0OaaKkS63755SpYhx6kJMGc7jsk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.29.190.0/23 89.29.247.0/24 185.250.197.0/24 213.181.92.0-213.181.94.255 Signature Algorithm: sha256WithRSAEncryption 64:e4:dc:98:6f:4d:2c:a5:20:91:b2:6f:84:00:82:0b:96:d6: c5:97:e4:09:5d:0e:d7:98:f8:34:d7:51:b2:44:03:48:3b:6a: 76:ec:ab:f6:49:99:7a:d2:2c:ed:5e:dc:a6:3e:75:00:4c:a4: 42:83:b3:4a:6e:c9:00:cf:98:be:58:df:e4:ed:e4:22:97:2b: 4e:26:63:d7:c3:e7:9e:b3:07:84:2c:7d:ed:40:91:3f:38:65: 97:e2:21:18:3a:b4:8c:a6:a2:56:1f:bc:46:6d:af:34:23:c1: 79:94:13:c2:fa:d6:39:c2:1f:80:1d:a3:b0:18:f5:b4:b3:84: a3:e6:14:29:23:f6:9b:9e:de:b8:3e:ea:67:c2:6f:24:a1:89: 70:16:6a:63:a9:6a:b5:16:3a:da:42:f3:89:60:c3:50:03:b8: 40:c8:75:ff:f7:c9:4d:08:73:fe:c6:d6:8e:96:ba:17:33:92: 95:9f:7e:2b:ab:e0:0b:c2:16:81:fc:6e:56:b8:83:17:c4:ee: f7:49:0b:48:95:e9:9c:2b:8c:0f:1a:33:4c:77:1b:a1:33:5b: 48:b4:e5:f4:a3:c4:85:69:95:de:22:ff:94:47:4e:bd:48:21: b4:ca:30:c3:15:c2:5a:0c:f0:87:f1:9d:b9:34:43:e5:c4:1a: 4c:d4:3c:94 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt/FYQTHz/EOUbvzKs8pN7iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5MmM0MTVkMTc3NWFlOTk5M2U5MDBhNzUzNmI0NmFiMTQ0 YTlhYTIwHhcNMjYwMTAyMTQyMTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMGU2OWEyYTQ0YmFkZmJlNzk0YTk2MjFjN2E5MDkzMDY3M2I4ZWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAia6Zh+jr2o7XHicowTFJuSHna+5e MD1xsJy/pyDKb3IhBStTXwz272a9/s4ffJr4M9MHSNlz6Fh/ITBgNDoo4wzka2l9 ZLyJLWGbk8aktPsS75rh+lgDd2nE7lU3kjdt/UgkqYF5sNIKFazVK/0Wechi76wv Zjm3HrjY8WxSgzWUrzZ8BHjF8y2t79YQtYRtwTTAWzb98gItS6RrpOvF7/7oO3G4 A0G40p6ZF7D1PP8t7MVtWFReyj7mQc5SFkm+FOoL4ANGItsT4q9koffgY+f0eTA3 FX0siX0YkpXRGwMVSQ/yNX7AD2ELpzPKbYVVALf2kqyaJ9LkRB63mfnn9QIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFNDmmipEut++eUqWIcepCTBnO47JMB8GA1UdIwQY MBaAFOksQV0Xda6Zk+kAp1NrRqsUSpqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlN4QlhSZDFycG1UNlFDblUydEdxeFJLbXFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wODk4YmUtYjAzNy00MjlmLWI1MDQt MWQ5MzRhMDQ4NDc0LzEvME9hYUtrUzYzNzU1U3BZaHg2a0pNR2M3anNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8wODk4YmUtYjAzNy00MjlmLWI1MDQtMWQ5MzRhMDQ4NDc0 LzEvNlN4QlhSZDFycG1UNlFDblUydEdxeFJLbXFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQBWR2+AwQA WR33AwQAufrFMAwDBALVtVwDBADVtV4wDQYJKoZIhvcNAQELBQADggEBAGTk3Jhv TSylIJGyb4QAgguW1sWX5AldDteY+DTXUbJEA0g7anbsq/ZJmXrSLO1e3KY+dQBM pEKDs0puyQDPmL5Y3+Tt5CKXK04mY9fD556zB4Qsfe1AkT84ZZfiIRg6tIymolYf vEZtrzQjwXmUE8L61jnCH4Ado7AY9bSzhKPmFCkj9pue3rg+6mfCbyShiXAWamOp arUWOtpC84lgw1ADuEDIdf/3yU0Ic/7G1o6WuhczkpWffiur4AvCFoH8bla4gxfE 7vdJC0iV6ZwrjA8aM0x3G6EzW0i05fSjxIVpld4i/5RHTr1IIbTKMMMVwloM8Ifx nbk0Q+XEGkzUPJQ= -----END CERTIFICATE-----Generated at Sat Jan 3 06:27:58 2026 by rpki-client