This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/cHg7aBuqWRBHGyjgLUvz_x7fmKU.roa File: cHg7aBuqWRBHGyjgLUvz_x7fmKU.roa (raw, json) Hash identifier: C49PgeT/JLVMAXMoZTAwnDLdQC/24IQFKGkMPm9+JDM= Subject key identifier: 70:78:3B:68:1B:AA:59:10:47:1B:28:E0:2D:4B:F3:FF:1E:DF:98:A5 Certificate issuer: /CN=e92c415d1775ae9993e900a7536b46ab144a9aa2 Certificate serial: 019B7F1584CB955B1FCFF618F886471181AA Authority key identifier: E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/cHg7aBuqWRBHGyjgLUvz_x7fmKU.roa Signing time: Fri 02 Jan 2026 14:21:15 +0000 ROA not before: Fri 02 Jan 2026 14:21:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197740 IP address blocks: 89.29.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.mft rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:84:cb:95:5b:1f:cf:f6:18:f8:86:47:11:81:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e92c415d1775ae9993e900a7536b46ab144a9aa2 Validity Not Before: Jan 2 14:21:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70783b681baa5910471b28e02d4bf3ff1edf98a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a2:51:3c:29:f0:e9:8b:e1:43:ef:94:18:c4: 62:0c:52:49:a4:72:4b:f9:12:04:bd:d9:00:00:12: ce:e7:7b:9f:cc:4b:b3:c5:4f:cb:9c:d2:58:04:f5: ce:08:49:a7:4e:99:62:9a:34:e3:ad:0b:1a:5e:93: 28:76:d0:8e:1d:11:0a:30:76:1e:0f:8d:fc:10:32: 5f:22:92:bb:4e:a1:f9:fc:79:72:9b:2b:f4:ce:17: 3c:36:f9:f9:b6:f9:12:0d:c2:1f:80:7d:60:dc:f3: 4c:f1:99:3d:e3:30:01:9a:25:6e:b4:c7:45:6a:46: 13:6c:62:92:82:6e:f4:cf:0c:82:df:5b:f1:bd:f9: 69:11:6e:ea:1a:f9:5b:15:83:65:ce:28:b7:d7:7f: bc:70:cd:b8:3c:57:77:9d:fb:b2:e4:25:c4:d1:83: b6:41:28:3e:49:a3:56:2d:a5:4e:d3:51:59:7f:42: 58:39:2f:da:c4:bd:32:53:40:e1:15:ec:14:02:41: 3f:d6:c6:6d:ec:7e:da:32:34:5a:1d:f0:42:55:69: 86:c6:77:7d:4f:85:e7:57:4b:55:d9:2d:01:a7:9e: a7:99:cc:d4:fa:a7:0f:44:6a:8f:21:d4:b8:49:87: 69:61:ee:3b:10:3f:85:d9:60:97:97:5d:b8:e9:27: 81:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:78:3B:68:1B:AA:59:10:47:1B:28:E0:2D:4B:F3:FF:1E:DF:98:A5 X509v3 Authority Key Identifier: keyid:E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/cHg7aBuqWRBHGyjgLUvz_x7fmKU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.29.252.0/24 Signature Algorithm: sha256WithRSAEncryption 84:18:f8:51:03:80:2d:56:85:14:0d:ce:ff:c5:e7:f6:6a:84: 91:72:c8:29:ae:be:01:83:38:73:56:72:2a:28:6d:26:18:68: 96:53:f3:b2:a9:2c:4a:f7:be:50:e4:e8:40:cb:cf:8e:8e:c9: 23:a0:2a:c3:a0:d8:30:01:bb:d9:3c:66:4f:67:52:ec:28:17: 6e:a7:e3:98:39:a5:14:eb:0f:1d:58:5f:73:41:b8:54:a1:1e: f7:5b:0b:7f:a6:e9:e7:ef:a3:1e:39:aa:25:41:89:f9:40:56: 5a:e0:a1:ec:7b:1b:63:04:1d:8d:bb:f4:02:c2:07:91:a5:d0: 2d:be:43:5a:7c:77:30:ee:77:88:38:e8:a3:3c:fc:d9:b4:7e: 6f:a4:51:33:9f:7b:c0:ce:cc:f7:4b:fc:8c:f4:ff:87:34:1a: 16:68:60:d2:fd:d1:76:a1:9a:da:45:d5:28:8a:95:fa:e9:eb: e0:9b:53:5a:f2:b8:0c:d8:c8:b7:9c:7f:de:d0:0e:b9:42:6c: f4:12:1a:d2:ba:d4:d9:99:9a:ef:27:e0:15:c6:e1:34:34:fe: 09:f0:80:ad:c3:83:94:2e:0f:b1:aa:4c:c6:1e:ac:c6:0c:2e: 92:18:16:47:15:42:30:4b:a4:4a:23:ae:56:5f:22:10:ef:ce: 96:07:e8:32 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FYTLlVsfz/YY+IZHEYGqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5MmM0MTVkMTc3NWFlOTk5M2U5MDBhNzUzNmI0NmFiMTQ0 YTlhYTIwHhcNMjYwMTAyMTQyMTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDc4M2I2ODFiYWE1OTEwNDcxYjI4ZTAyZDRiZjNmZjFlZGY5OGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqJRPCnw6YvhQ++UGMRiDFJJpHJL +RIEvdkAABLO53ufzEuzxU/LnNJYBPXOCEmnTplimjTjrQsaXpModtCOHREKMHYe D438EDJfIpK7TqH5/Hlymyv0zhc8Nvn5tvkSDcIfgH1g3PNM8Zk94zABmiVutMdF akYTbGKSgm70zwyC31vxvflpEW7qGvlbFYNlzii313+8cM24PFd3nfuy5CXE0YO2 QSg+SaNWLaVO01FZf0JYOS/axL0yU0DhFewUAkE/1sZt7H7aMjRaHfBCVWmGxnd9 T4XnV0tV2S0Bp56nmczU+qcPRGqPIdS4SYdpYe47ED+F2WCXl1246SeBBwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHB4O2gbqlkQRxso4C1L8/8e35ilMB8GA1UdIwQY MBaAFOksQV0Xda6Zk+kAp1NrRqsUSpqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlN4QlhSZDFycG1UNlFDblUydEdxeFJLbXFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wODk4YmUtYjAzNy00MjlmLWI1MDQt MWQ5MzRhMDQ4NDc0LzEvY0hnN2FCdXFXUkJIR3lqZ0xVdnpfeDdmbUtVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8wODk4YmUtYjAzNy00MjlmLWI1MDQtMWQ5MzRhMDQ4NDc0 LzEvNlN4QlhSZDFycG1UNlFDblUydEdxeFJLbXFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWR38MA0G CSqGSIb3DQEBCwUAA4IBAQCEGPhRA4AtVoUUDc7/xef2aoSRcsgprr4BgzhzVnIq KG0mGGiWU/OyqSxK975Q5OhAy8+OjskjoCrDoNgwAbvZPGZPZ1LsKBdup+OYOaUU 6w8dWF9zQbhUoR73Wwt/punn76MeOaolQYn5QFZa4KHsextjBB2Nu/QCwgeRpdAt vkNafHcw7neIOOijPPzZtH5vpFEzn3vAzsz3S/yM9P+HNBoWaGDS/dF2oZraRdUo ipX66evgm1Na8rgM2Mi3nH/e0A65Qmz0EhrSutTZmZrvJ+AVxuE0NP4J8ICtw4OU Lg+xqkzGHqzGDC6SGBZHFUIwS6RKI65WXyIQ786WB+gy -----END CERTIFICATE-----Generated at Sat Jan 3 06:27:41 2026 by rpki-client