This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/1-M7Bzu8Xke_uwFMh5JyMErpTGhY.roa File: 1-M7Bzu8Xke_uwFMh5JyMErpTGhY.roa (raw, json) Hash identifier: td5UFn18Srw5PKd6ao3vfJIz+g0PKbq7GuiKBphr9Xk= Subject key identifier: F8:CE:C1:CE:EF:17:91:EF:EE:C0:53:21:E4:9C:8C:12:BA:53:1A:16 Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Certificate serial: 019B7F8545161FC558562FC83BE3E6A81F94 Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/1-M7Bzu8Xke_uwFMh5JyMErpTGhY.roa Signing time: Fri 02 Jan 2026 16:23:19 +0000 ROA not before: Fri 02 Jan 2026 16:23:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206068 IP address blocks: 89.32.126.0/24 maxlen: 24 94.231.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:45:16:1f:c5:58:56:2f:c8:3b:e3:e6:a8:1f:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Validity Not Before: Jan 2 16:23:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f8cec1ceef1791efeec05321e49c8c12ba531a16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fc:4b:8c:ef:4b:4d:b5:ed:71:f6:60:29:b1: ae:94:a0:52:aa:ef:d0:c7:23:f2:1b:4b:51:69:91: 23:b8:ff:56:8f:c1:fe:bb:d6:d0:c4:5a:06:9e:15: 44:50:e3:4c:31:01:59:be:39:b1:ca:8f:05:57:81: 93:10:4d:60:46:66:7a:00:04:3f:e2:2d:eb:ce:00: 30:71:46:90:2a:0e:de:a3:f6:8b:34:3b:41:18:e7: 02:52:2d:cd:b8:26:41:bb:5f:da:77:b1:f8:a0:93: 62:11:12:cc:ce:2c:8f:6b:e3:9b:e5:96:a5:7d:1f: bf:5e:11:1b:f4:4c:96:a5:2d:f0:91:ee:05:f7:67: 9f:9b:fb:ae:75:21:f5:7a:d9:8b:b0:93:07:7b:97: d9:52:50:a3:c4:3f:6a:1b:1d:15:ab:9a:9e:d7:cb: e9:40:c1:b6:a6:85:0e:75:bf:48:d8:24:c7:09:f7: a4:b8:74:ac:cd:a4:c5:da:96:c7:20:94:88:44:dc: 6d:91:b7:50:00:6b:39:a0:e4:4f:73:19:b4:30:2a: 78:ad:db:6a:a1:7f:71:ab:8c:59:a1:5b:14:70:28: b1:a4:54:03:ba:61:26:f4:83:ee:4e:e4:7f:86:7e: 6c:d3:43:2d:db:b7:5b:64:a2:8f:24:2d:fb:f5:96: 94:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:CE:C1:CE:EF:17:91:EF:EE:C0:53:21:E4:9C:8C:12:BA:53:1A:16 X509v3 Authority Key Identifier: keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/1-M7Bzu8Xke_uwFMh5JyMErpTGhY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.32.126.0/24 94.231.198.0/24 Signature Algorithm: sha256WithRSAEncryption 33:a7:05:cf:6f:4f:31:21:6b:4b:57:8d:5c:ad:52:de:14:75: 85:0a:ef:a5:7f:b0:b7:93:b3:c0:41:d2:ba:6e:70:e6:22:82: 40:01:d7:ed:99:33:bd:4e:99:6e:01:1b:a5:12:e0:07:e6:2f: 25:41:1c:14:1e:81:cb:b7:50:74:9a:73:7a:bc:29:f9:4a:e2: e4:b8:9c:fb:a4:ae:c0:3b:d0:8b:8a:15:c5:5b:48:09:ee:79: 57:9b:fa:19:ad:c3:04:f8:a5:f8:5c:60:7d:ec:23:16:b4:77: 52:ea:1e:ff:18:e2:65:20:dc:c8:7e:3c:45:19:48:9b:d7:39: d4:c5:42:a7:ec:7a:b5:a0:a9:69:6d:0b:6c:7c:3a:f7:9a:6c: 38:07:a3:2d:76:48:45:55:aa:ba:94:b0:be:f2:ed:f3:8a:2e: b7:3f:4f:a4:99:46:80:91:e5:c4:38:b8:92:ba:c0:0b:fa:cb: 85:8a:70:c6:fe:f8:3e:43:1f:45:37:46:61:59:61:6b:4c:a4: e8:7f:a2:0f:69:80:57:a9:4b:d9:b3:9a:8b:41:a5:38:01:9b: 07:d4:c3:af:99:9a:08:c2:6f:27:e2:24:88:73:f3:8c:4b:9d: 39:b3:8c:af:26:39:5b:c0:e3:77:ad:d2:68:57:76:f2:a4:f7: 63:71:c1:dc -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgISAZt/hUUWH8VYVi/IO+PmqB+UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3 MWE5YTgwHhcNMjYwMTAyMTYyMzE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOGNlYzFjZWVmMTc5MWVmZWVjMDUzMjFlNDljOGMxMmJhNTMxYTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvxLjO9LTbXtcfZgKbGulKBSqu/Q xyPyG0tRaZEjuP9Wj8H+u9bQxFoGnhVEUONMMQFZvjmxyo8FV4GTEE1gRmZ6AAQ/ 4i3rzgAwcUaQKg7eo/aLNDtBGOcCUi3NuCZBu1/ad7H4oJNiERLMziyPa+Ob5Zal fR+/XhEb9EyWpS3wke4F92efm/uudSH1etmLsJMHe5fZUlCjxD9qGx0Vq5qe18vp QMG2poUOdb9I2CTHCfekuHSszaTF2pbHIJSIRNxtkbdQAGs5oORPcxm0MCp4rdtq oX9xq4xZoVsUcCixpFQDumEm9IPuTuR/hn5s00Mt27dbZKKPJC379ZaUPwIDAQAB o4ICEDCCAgwwHQYDVR0OBBYEFPjOwc7vF5Hv7sBTIeScjBK6UxoWMB8GA1UdIwQY MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt M2FjOWU1NmMzMDg5LzEvMS1NN0J6dThYa2VfdXdGTWg1SnlNRXJwVEdoWS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMmIvODFmZDFhLTQ3YTctNDVkOC1iZTc0LTNhYzllNTZjMzA4 OS8xL2k2c3dhRGhaN0g0Q0J2NlNaVFktampseHFhZy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAFkgfgME AF7nxjANBgkqhkiG9w0BAQsFAAOCAQEAM6cFz29PMSFrS1eNXK1S3hR1hQrvpX+w t5OzwEHSum5w5iKCQAHX7ZkzvU6ZbgEbpRLgB+YvJUEcFB6By7dQdJpzerwp+Uri 5Lic+6SuwDvQi4oVxVtICe55V5v6Ga3DBPil+FxgfewjFrR3Uuoe/xjiZSDcyH48 RRlIm9c51MVCp+x6taCpaW0LbHw695psOAejLXZIRVWqupSwvvLt84outz9PpJlG gJHlxDi4krrAC/rLhYpwxv74PkMfRTdGYVlha0yk6H+iD2mAV6lL2bOai0GlOAGb B9TDr5maCMJvJ+IkiHPzjEudObOMryY5W8Djd63SaFd28qT3Y3HB3A== -----END CERTIFICATE-----Generated at Sun Jan 25 21:27:20 2026 by rpki-client