This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/asuyLktKYq4NNc_2uebIjQGmRG4.roa File: asuyLktKYq4NNc_2uebIjQGmRG4.roa (raw, json) Hash identifier: NZW9P6QltbKs99Px6iLY6nMHem8ps5RIUgsWAHR4fr8= Subject key identifier: 6A:CB:B2:2E:4B:4A:62:AE:0D:35:CF:F6:B9:E6:C8:8D:01:A6:44:6E Certificate issuer: /CN=464952bc165441ec6e2e2010c933dc830f361731 Certificate serial: 019B7C135B1584C7EFC5995FAEF5DD38C131 Authority key identifier: 46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/asuyLktKYq4NNc_2uebIjQGmRG4.roa Signing time: Fri 02 Jan 2026 00:20:01 +0000 ROA not before: Fri 02 Jan 2026 00:20:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9050 IP address blocks: 89.42.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:5b:15:84:c7:ef:c5:99:5f:ae:f5:dd:38:c1:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=464952bc165441ec6e2e2010c933dc830f361731 Validity Not Before: Jan 2 00:20:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6acbb22e4b4a62ae0d35cff6b9e6c88d01a6446e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e5:df:d6:2d:ae:59:09:43:31:55:55:73:14: b6:95:e6:e0:ad:3b:63:5b:5e:40:df:2d:6b:01:7c: 92:84:53:d1:42:b0:b6:0e:52:3b:17:8e:28:90:3d: ae:0a:18:64:5f:55:32:01:b4:f1:12:09:27:42:50: dc:71:b7:5d:63:89:4d:6c:a7:ee:bd:6b:de:e8:8f: 08:ec:b7:3e:b3:a8:78:eb:27:4e:3f:97:3e:81:9d: 7b:bc:67:3c:95:f2:16:44:6d:e4:34:e9:19:ed:1e: ef:e3:00:6c:fe:7b:9c:d9:92:cd:c4:02:1f:3b:0b: 94:f0:ea:ef:fb:b1:fc:94:a9:84:a3:03:e5:6c:d9: e6:0e:8b:4b:d1:2e:5f:2d:ed:2c:27:e9:9a:9c:0c: 24:51:af:2b:4b:e5:2c:8d:6b:f3:9e:bf:f0:97:ba: 7b:8d:78:98:a1:d1:c5:ac:84:f7:56:6e:58:9e:a2: d7:96:2b:d8:3a:ff:07:be:6e:5d:2b:5d:dd:44:c4: c8:93:c5:47:51:17:8f:cb:ad:ee:53:15:c0:b6:59: 39:38:46:77:f5:49:73:be:be:2f:7e:9c:e5:70:38: 2a:3f:94:87:f3:9e:3d:4c:2e:78:45:5b:ad:ef:65: f0:53:85:8b:8c:7f:51:dd:8f:fd:c4:d4:77:c6:6d: 81:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:CB:B2:2E:4B:4A:62:AE:0D:35:CF:F6:B9:E6:C8:8D:01:A6:44:6E X509v3 Authority Key Identifier: keyid:46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/asuyLktKYq4NNc_2uebIjQGmRG4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.42.30.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:e9:61:30:bd:91:aa:4b:a6:3b:ca:e6:e7:04:ec:58:87:a6: 99:27:ef:f0:13:db:06:35:6c:63:a7:73:7d:17:d9:0f:cb:c5: 2f:ed:66:c4:67:41:96:89:62:86:cd:0a:a4:e5:d6:c8:15:3e: 99:e2:3e:ac:69:1f:64:fc:20:75:92:12:c3:d0:32:7d:3d:c3: 4b:a2:3c:76:ca:f8:f3:2a:c9:2e:81:00:8b:ae:2c:a1:5c:8c: aa:e3:c4:0d:37:d7:ff:cc:7e:62:f9:a0:36:3f:e2:2b:83:f0: 9e:47:63:62:45:2e:29:24:44:23:c2:05:1d:75:17:55:01:39: 1a:e1:45:bf:98:bc:98:22:0d:df:26:c0:b2:48:f4:e6:61:26: dd:43:6c:cf:95:f2:0e:e3:a8:8e:4f:0c:91:d6:a4:a8:ca:56: 0c:84:6a:f8:3a:1c:b7:b8:36:05:23:18:e1:51:fc:73:f2:59: 0a:34:a9:e1:ab:16:5b:99:f4:49:d7:a3:6f:7f:d3:4b:86:62: ce:8c:69:70:12:ad:01:2f:c0:88:74:27:59:65:f6:e3:29:56: 24:69:eb:08:fe:0c:88:fc:56:ae:17:8d:cd:c0:a8:51:8d:bf: d9:e0:bf:82:87:d5:53:bc:69:8e:88:5a:27:b9:3e:ba:7f:44: 7a:1a:27:db -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E1sVhMfvxZlfrvXdOMExMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NDk1MmJjMTY1NDQxZWM2ZTJlMjAxMGM5MzNkYzgzMGYz NjE3MzEwHhcNMjYwMTAyMDAyMDAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YWNiYjIyZTRiNGE2MmFlMGQzNWNmZjZiOWU2Yzg4ZDAxYTY0NDZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueXf1i2uWQlDMVVVcxS2lebgrTtj W15A3y1rAXyShFPRQrC2DlI7F44okD2uChhkX1UyAbTxEgknQlDccbddY4lNbKfu vWve6I8I7Lc+s6h46ydOP5c+gZ17vGc8lfIWRG3kNOkZ7R7v4wBs/nuc2ZLNxAIf OwuU8Orv+7H8lKmEowPlbNnmDotL0S5fLe0sJ+manAwkUa8rS+UsjWvznr/wl7p7 jXiYodHFrIT3Vm5YnqLXlivYOv8Hvm5dK13dRMTIk8VHURePy63uUxXAtlk5OEZ3 9Ulzvr4vfpzlcDgqP5SH8549TC54RVut72XwU4WLjH9R3Y/9xNR3xm2BvwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGrLsi5LSmKuDTXP9rnmyI0BpkRuMB8GA1UdIwQY MBaAFEZJUrwWVEHsbi4gEMkz3IMPNhcxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQt ODQyODU4MTIyYmJjLzEvYXN1eUxrdEtZcTROTmNfMnVlYklqUUdtUkc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQtODQyODU4MTIyYmJj LzEvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSoeMA0G CSqGSIb3DQEBCwUAA4IBAQBv6WEwvZGqS6Y7yubnBOxYh6aZJ+/wE9sGNWxjp3N9 F9kPy8Uv7WbEZ0GWiWKGzQqk5dbIFT6Z4j6saR9k/CB1khLD0DJ9PcNLojx2yvjz KskugQCLriyhXIyq48QNN9f/zH5i+aA2P+Irg/CeR2NiRS4pJEQjwgUddRdVATka 4UW/mLyYIg3fJsCySPTmYSbdQ2zPlfIO46iOTwyR1qSoylYMhGr4Ohy3uDYFIxjh Ufxz8lkKNKnhqxZbmfRJ16Nvf9NLhmLOjGlwEq0BL8CIdCdZZfbjKVYkaesI/gyI /FauF43NwKhRjb/Z4L+Ch9VTvGmOiFonuT66f0R6Gifb -----END CERTIFICATE-----Generated at Wed Jan 7 22:30:27 2026 by rpki-client