This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/V_N2zZpFUh_jU5hVB-9KfNEepdA.roa File: V_N2zZpFUh_jU5hVB-9KfNEepdA.roa (raw, json) Hash identifier: F0gzOL4EyLJL5B+JsRxqs5zs7pl4bKpVfJSp9poZP8g= Subject key identifier: 57:F3:76:CD:9A:45:52:1F:E3:53:98:55:07:EF:4A:7C:D1:1E:A5:D0 Certificate issuer: /CN=e92c415d1775ae9993e900a7536b46ab144a9aa2 Certificate serial: 019B7F1585076335F70A2981CF8ACD8A8E09 Authority key identifier: E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/V_N2zZpFUh_jU5hVB-9KfNEepdA.roa Signing time: Fri 02 Jan 2026 14:21:15 +0000 ROA not before: Fri 02 Jan 2026 14:21:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200845 IP address blocks: 89.29.255.0/24 maxlen: 24 176.57.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.mft rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:85:07:63:35:f7:0a:29:81:cf:8a:cd:8a:8e:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e92c415d1775ae9993e900a7536b46ab144a9aa2 Validity Not Before: Jan 2 14:21:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=57f376cd9a45521fe353985507ef4a7cd11ea5d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:85:48:60:07:9f:db:86:7f:68:b7:d3:a8:2c: b2:e3:24:37:7a:21:aa:88:4c:37:10:51:ba:d8:ed: ae:70:72:6d:b8:82:73:26:8b:25:42:48:68:6d:fd: 0b:3f:99:9f:d3:de:63:2d:f2:21:ec:31:bc:29:1c: 5e:c9:c7:da:46:4d:c7:2d:46:36:97:00:39:11:a3: 1a:4c:bf:7a:8f:31:08:80:d1:f5:d3:31:e9:75:88: 91:f8:49:6d:6c:5c:9a:86:35:74:fd:78:ca:76:db: 31:f6:ff:51:08:a1:68:03:48:41:ed:dd:ad:c1:af: 86:7c:48:9d:17:75:73:26:48:62:8d:6e:66:2a:b9: e6:12:40:ff:91:c0:ea:53:09:b9:dc:45:65:fb:1f: cb:b7:a6:90:c0:6b:a9:19:47:7a:9e:82:b7:b5:c7: 7d:cf:70:08:8f:7a:9c:29:e1:b7:f5:d6:44:aa:ef: c4:4b:b7:99:bc:ec:c9:c1:10:b5:77:72:e0:4f:c5: 07:cf:05:f9:2d:0c:b0:91:63:2e:c6:a8:8f:a2:8a: 73:bc:8e:66:67:ea:2c:ef:21:ee:c8:cb:bd:58:3d: 22:33:2d:7e:2e:1f:48:e1:82:28:c6:36:a3:d4:9b: 0c:bd:16:80:71:97:ce:d1:ee:83:14:7d:16:fa:20: b7:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:F3:76:CD:9A:45:52:1F:E3:53:98:55:07:EF:4A:7C:D1:1E:A5:D0 X509v3 Authority Key Identifier: keyid:E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/V_N2zZpFUh_jU5hVB-9KfNEepdA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.29.255.0/24 176.57.96.0/24 Signature Algorithm: sha256WithRSAEncryption a2:da:49:de:fe:45:bb:94:1c:a7:c9:8e:39:ec:58:cb:5c:ed: 15:cb:9a:1a:48:f1:81:64:04:35:54:ed:ce:6d:ba:95:c1:45: 17:eb:33:f3:ff:f7:a7:44:e9:48:d6:e4:80:ce:90:6f:3e:60: c0:10:77:98:51:11:9b:fe:6c:a2:97:17:f3:22:3d:1e:33:90: 67:ed:66:7d:50:31:80:f7:54:2b:ab:ee:20:79:64:48:82:fc: a8:74:5f:0a:f0:fb:e5:ac:65:47:19:70:bf:47:b9:5f:72:7d: cd:57:cd:d6:51:bb:1e:5f:df:61:4b:fb:7b:05:54:70:56:2f: eb:40:ae:25:67:0e:50:bf:d5:08:1c:c2:80:ee:b0:4a:37:9d: 04:a3:ce:9e:7a:7a:4f:3e:8a:1d:7b:ab:14:68:68:02:31:eb: c9:e7:ec:76:f1:17:60:0b:a8:9c:72:d7:ab:b6:0f:62:90:9a: ce:b6:4d:df:75:f9:ae:13:e7:a2:ce:33:3d:af:93:09:5e:5e: 7b:7c:eb:f2:0b:b7:b4:73:dd:69:8a:10:8c:18:c0:ae:72:ce: 5a:54:21:e8:1e:c7:ac:fe:4d:bc:b2:55:de:c0:88:e7:fd:d9: 22:b5:4b:2a:01:74:f2:ce:00:09:60:4f:2a:44:6a:0a:63:d8: ee:d3:dd:1b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FYUHYzX3CimBz4rNio4JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5MmM0MTVkMTc3NWFlOTk5M2U5MDBhNzUzNmI0NmFiMTQ0 YTlhYTIwHhcNMjYwMTAyMTQyMTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1N2YzNzZjZDlhNDU1MjFmZTM1Mzk4NTUwN2VmNGE3Y2QxMWVhNWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIVIYAef24Z/aLfTqCyy4yQ3eiGq iEw3EFG62O2ucHJtuIJzJoslQkhobf0LP5mf095jLfIh7DG8KRxeycfaRk3HLUY2 lwA5EaMaTL96jzEIgNH10zHpdYiR+EltbFyahjV0/XjKdtsx9v9RCKFoA0hB7d2t wa+GfEidF3VzJkhijW5mKrnmEkD/kcDqUwm53EVl+x/Lt6aQwGupGUd6noK3tcd9 z3AIj3qcKeG39dZEqu/ES7eZvOzJwRC1d3LgT8UHzwX5LQywkWMuxqiPoopzvI5m Z+os7yHuyMu9WD0iMy1+Lh9I4YIoxjaj1JsMvRaAcZfO0e6DFH0W+iC3ywIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFfzds2aRVIf41OYVQfvSnzRHqXQMB8GA1UdIwQY MBaAFOksQV0Xda6Zk+kAp1NrRqsUSpqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlN4QlhSZDFycG1UNlFDblUydEdxeFJLbXFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wODk4YmUtYjAzNy00MjlmLWI1MDQt MWQ5MzRhMDQ4NDc0LzEvVl9OMnpacEZVaF9qVTVoVkItOUtmTkVlcGRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8wODk4YmUtYjAzNy00MjlmLWI1MDQtMWQ5MzRhMDQ4NDc0 LzEvNlN4QlhSZDFycG1UNlFDblUydEdxeFJLbXFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWR3/AwQA sDlgMA0GCSqGSIb3DQEBCwUAA4IBAQCi2kne/kW7lBynyY457FjLXO0Vy5oaSPGB ZAQ1VO3ObbqVwUUX6zPz//enROlI1uSAzpBvPmDAEHeYURGb/myilxfzIj0eM5Bn 7WZ9UDGA91Qrq+4geWRIgvyodF8K8PvlrGVHGXC/R7lfcn3NV83WUbseX99hS/t7 BVRwVi/rQK4lZw5Qv9UIHMKA7rBKN50Eo86eenpPPoode6sUaGgCMevJ5+x28Rdg C6icctertg9ikJrOtk3fdfmuE+eizjM9r5MJXl57fOvyC7e0c91pihCMGMCucs5a VCHoHses/k28slXewIjn/dkitUsqAXTyzgAJYE8qRGoKY9ju090b -----END CERTIFICATE-----Generated at Sat Jan 3 06:26:28 2026 by rpki-client