This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/T0iqjs9CkRPBgC6oTuTASwwLQBA.roa File: T0iqjs9CkRPBgC6oTuTASwwLQBA.roa (raw, json) Hash identifier: Q90Lq0syuhBK1/bm/BJJncCiwqmrsvZhqk9lxUir/3I= Subject key identifier: 4F:48:AA:8E:CF:42:91:13:C1:80:2E:A8:4E:E4:C0:4B:0C:0B:40:10 Certificate issuer: /CN=e92c415d1775ae9993e900a7536b46ab144a9aa2 Certificate serial: 019B7F1582D2B3BA9050FFB31B927D4C9F89 Authority key identifier: E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/T0iqjs9CkRPBgC6oTuTASwwLQBA.roa Signing time: Fri 02 Jan 2026 14:21:14 +0000 ROA not before: Fri 02 Jan 2026 14:21:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49000 IP address blocks: 89.29.255.0/24 maxlen: 24 176.57.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.mft rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:82:d2:b3:ba:90:50:ff:b3:1b:92:7d:4c:9f:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e92c415d1775ae9993e900a7536b46ab144a9aa2 Validity Not Before: Jan 2 14:21:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f48aa8ecf429113c1802ea84ee4c04b0c0b4010 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:5e:bd:52:37:10:45:b2:96:a5:61:c8:2b:c9: 90:f9:a8:0f:e3:7e:95:76:bd:a0:f3:e9:fd:92:ef: 61:46:8e:ac:09:30:31:eb:34:bc:11:57:f5:fd:51: 9e:28:b7:73:99:f6:2e:96:b1:5f:67:fa:09:57:85: 01:a6:1d:15:aa:e2:f7:b0:69:07:1f:5f:43:39:ed: ae:7d:96:58:b5:59:a6:5a:34:29:93:1a:2b:d5:8c: 83:82:a8:b5:75:a2:1d:50:2f:5d:9c:98:24:0d:36: e2:b0:7b:12:28:f9:e6:0c:a2:d6:16:58:56:56:3b: 84:26:4b:b1:3e:e4:ea:0e:17:62:30:27:b1:5c:af: 88:62:71:14:fd:34:49:27:40:00:fb:bd:03:be:bd: 7d:71:48:a3:98:45:0d:87:17:ba:31:5e:64:da:78: 4c:02:ca:86:69:21:b2:2e:fd:d2:99:9f:5e:16:cf: b6:92:71:b2:e2:81:6a:51:6e:ea:fc:ba:38:d7:ac: 8e:eb:2b:4d:51:bc:79:64:ec:05:ac:35:46:02:60: 45:63:a4:86:41:ff:f0:c6:de:c1:57:d3:0e:28:91: 17:64:0d:f3:82:8f:a3:e6:bc:e9:b5:8c:c0:bf:da: 61:55:42:be:a6:b4:36:b7:67:03:46:04:b7:86:ea: e9:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:48:AA:8E:CF:42:91:13:C1:80:2E:A8:4E:E4:C0:4B:0C:0B:40:10 X509v3 Authority Key Identifier: keyid:E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/T0iqjs9CkRPBgC6oTuTASwwLQBA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.29.255.0/24 176.57.96.0/24 Signature Algorithm: sha256WithRSAEncryption 29:57:74:39:12:f4:24:9a:1a:2e:1c:25:1b:17:66:85:54:a2: 11:32:7e:ff:13:d9:f0:29:63:a7:52:73:a2:e2:58:14:e5:f9: 58:b6:03:34:5e:b3:78:d3:1f:0a:8a:a7:6d:7d:ef:0b:41:a1: 67:dc:0c:b5:ba:00:73:ef:19:3c:30:45:e7:19:68:a9:0b:69: b1:b9:7a:06:90:46:ec:5b:09:d7:9c:31:42:bc:b2:ed:8a:81: 7c:f3:8d:a9:96:c4:ea:11:7f:ad:5a:98:d3:d5:e0:50:fc:b0: 55:b6:87:74:aa:9b:b8:75:4d:c7:c3:c9:d0:f2:08:a4:f0:01: 10:48:cb:04:a2:6b:e9:a7:4a:24:b0:58:22:ef:ed:02:4c:6e: 12:4d:18:0e:05:f4:c5:2c:62:bb:84:52:5d:10:bc:f8:14:ae: 08:c8:22:d7:5f:eb:1c:f8:3a:57:ab:1a:2f:ac:2d:88:67:60: 4b:09:f7:01:fc:86:43:9d:ed:8d:a0:a3:5c:79:3a:a0:e8:19: e5:ff:35:bf:e8:16:ea:9f:8e:19:b6:65:f9:81:23:a2:c0:01: 3d:41:86:c3:6f:9c:9f:6a:60:41:be:33:6a:01:bf:60:d8:61: 53:80:1d:b1:fe:87:86:ab:51:fc:0d:10:a0:ac:a9:57:54:7b: 73:e8:08:5a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FYLSs7qQUP+zG5J9TJ+JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5MmM0MTVkMTc3NWFlOTk5M2U5MDBhNzUzNmI0NmFiMTQ0 YTlhYTIwHhcNMjYwMTAyMTQyMTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjQ4YWE4ZWNmNDI5MTEzYzE4MDJlYTg0ZWU0YzA0YjBjMGI0MDEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+l69UjcQRbKWpWHIK8mQ+agP436V dr2g8+n9ku9hRo6sCTAx6zS8EVf1/VGeKLdzmfYulrFfZ/oJV4UBph0VquL3sGkH H19DOe2ufZZYtVmmWjQpkxor1YyDgqi1daIdUC9dnJgkDTbisHsSKPnmDKLWFlhW VjuEJkuxPuTqDhdiMCexXK+IYnEU/TRJJ0AA+70Dvr19cUijmEUNhxe6MV5k2nhM AsqGaSGyLv3SmZ9eFs+2knGy4oFqUW7q/Lo416yO6ytNUbx5ZOwFrDVGAmBFY6SG Qf/wxt7BV9MOKJEXZA3zgo+j5rzptYzAv9phVUK+prQ2t2cDRgS3hurpAQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFE9Iqo7PQpETwYAuqE7kwEsMC0AQMB8GA1UdIwQY MBaAFOksQV0Xda6Zk+kAp1NrRqsUSpqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlN4QlhSZDFycG1UNlFDblUydEdxeFJLbXFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wODk4YmUtYjAzNy00MjlmLWI1MDQt MWQ5MzRhMDQ4NDc0LzEvVDBpcWpzOUNrUlBCZ0M2b1R1VEFTd3dMUUJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8wODk4YmUtYjAzNy00MjlmLWI1MDQtMWQ5MzRhMDQ4NDc0 LzEvNlN4QlhSZDFycG1UNlFDblUydEdxeFJLbXFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWR3/AwQA sDlgMA0GCSqGSIb3DQEBCwUAA4IBAQApV3Q5EvQkmhouHCUbF2aFVKIRMn7/E9nw KWOnUnOi4lgU5flYtgM0XrN40x8Kiqdtfe8LQaFn3Ay1ugBz7xk8MEXnGWipC2mx uXoGkEbsWwnXnDFCvLLtioF8842plsTqEX+tWpjT1eBQ/LBVtod0qpu4dU3Hw8nQ 8gik8AEQSMsEomvpp0oksFgi7+0CTG4STRgOBfTFLGK7hFJdELz4FK4IyCLXX+sc +DpXqxovrC2IZ2BLCfcB/IZDne2NoKNceTqg6Bnl/zW/6Bbqn44ZtmX5gSOiwAE9 QYbDb5yfamBBvjNqAb9g2GFTgB2x/oeGq1H8DRCgrKlXVHtz6Aha -----END CERTIFICATE-----Generated at Sat Jan 3 06:26:28 2026 by rpki-client