This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/1-yv-6eIOkuvaKHPNt7fAIwb_gGU.roa File: 1-yv-6eIOkuvaKHPNt7fAIwb_gGU.roa (raw, json) Hash identifier: DhgC5Afzo4Vl1umH6r09n4D6un152witGMBi0YzD7MM= Subject key identifier: FB:2B:FE:E9:E2:0E:92:EB:DA:28:73:CD:B7:B7:C0:23:06:FF:80:65 Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Certificate serial: 019B7F854A54E5476B606E261884727E2257 Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/1-yv-6eIOkuvaKHPNt7fAIwb_gGU.roa Signing time: Fri 02 Jan 2026 16:23:20 +0000 ROA not before: Fri 02 Jan 2026 16:23:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209375 IP address blocks: 89.33.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:4a:54:e5:47:6b:60:6e:26:18:84:72:7e:22:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Validity Not Before: Jan 2 16:23:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb2bfee9e20e92ebda2873cdb7b7c02306ff8065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:db:da:75:53:19:3e:58:dd:64:da:cc:a8:09: 61:cf:10:0f:2c:71:91:f3:55:49:16:b0:52:ed:49: b6:fe:e3:fa:49:28:84:71:ba:02:92:42:8c:b4:ce: 1b:00:6e:51:ef:8c:dc:33:e2:19:5f:55:31:90:e1: 79:f4:7b:bd:f2:25:9a:88:6f:2a:5d:cd:74:34:9b: 43:e7:4a:3d:3d:a3:a6:02:9c:25:46:ad:dc:22:fb: c3:db:04:42:02:e4:fb:52:fe:4c:81:eb:6b:ba:5a: 4e:94:dc:75:d7:51:95:52:95:67:97:f8:49:4a:43: 7e:68:fa:61:52:dd:58:38:20:fa:cc:72:2d:79:cb: b1:e2:57:20:3a:b3:b4:90:fb:58:0a:7a:2e:e0:3b: 40:89:b7:c8:4e:ea:4a:c8:3f:e9:9d:0a:6e:bb:ef: 68:d3:26:1a:d8:c1:f8:55:da:b7:12:01:71:6d:ee: 00:85:0b:40:cd:18:2c:ad:9c:e8:25:00:05:28:b3: 9d:06:f7:c7:7e:76:62:55:87:45:af:00:c4:ab:77: 61:8e:2b:ae:4d:b4:47:72:07:6a:6f:f2:95:6d:77: 31:11:9f:21:8f:d1:53:15:4a:38:22:0c:3c:f5:41: 1d:d8:36:26:3a:84:a8:fe:86:c4:27:62:8a:9a:b0: 55:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:2B:FE:E9:E2:0E:92:EB:DA:28:73:CD:B7:B7:C0:23:06:FF:80:65 X509v3 Authority Key Identifier: keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/1-yv-6eIOkuvaKHPNt7fAIwb_gGU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.33.135.0/24 Signature Algorithm: sha256WithRSAEncryption 57:d4:da:14:99:06:a1:66:ce:be:ec:da:64:85:b7:84:ad:1b: 4a:9a:69:a9:5b:a7:74:5f:5c:61:09:f2:37:b8:64:b8:c4:25: f7:c6:af:d6:10:a6:f7:3d:05:bf:67:d6:5b:ce:01:d3:6e:8b: c3:d0:f6:f1:85:71:93:b7:cf:d2:61:c7:07:81:1e:42:34:a2: 62:52:64:18:44:5c:f6:62:20:20:f5:0a:37:b6:fb:09:99:fd: a5:07:51:ee:9d:9d:e4:a4:b1:32:59:d2:3a:ea:51:38:fb:5d: 73:41:49:ab:c1:67:a0:4e:81:91:3a:f5:dc:3c:ff:73:b7:4e: 34:7f:e8:cc:c2:fa:6d:b3:44:54:b2:2b:b7:54:f7:f4:be:0b: f1:2e:a7:a7:c4:92:9c:f2:25:5a:3d:9d:c2:c5:2a:5b:2a:37: eb:29:19:01:1e:28:34:43:19:0b:f1:61:59:ee:59:ef:e8:f1: e8:02:41:a3:de:28:6f:ba:04:3b:24:06:9c:b2:ed:ed:a0:8a: 80:26:d8:76:9d:43:10:82:c2:80:3c:13:fb:76:d3:0e:70:54: bc:5e:d5:2e:05:20:f3:a1:e2:21:f3:cb:bf:f6:14:17:04:1a: 2f:54:6d:d6:31:65:da:b1:c2:09:72:20:2c:c4:dd:2f:42:f3: a2:43:53:98 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/hUpU5UdrYG4mGIRyfiJXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3 MWE5YTgwHhcNMjYwMTAyMTYyMzIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjJiZmVlOWUyMGU5MmViZGEyODczY2RiN2I3YzAyMzA2ZmY4MDY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9vadVMZPljdZNrMqAlhzxAPLHGR 81VJFrBS7Um2/uP6SSiEcboCkkKMtM4bAG5R74zcM+IZX1UxkOF59Hu98iWaiG8q Xc10NJtD50o9PaOmApwlRq3cIvvD2wRCAuT7Uv5MgetrulpOlNx111GVUpVnl/hJ SkN+aPphUt1YOCD6zHItecux4lcgOrO0kPtYCnou4DtAibfITupKyD/pnQpuu+9o 0yYa2MH4Vdq3EgFxbe4AhQtAzRgsrZzoJQAFKLOdBvfHfnZiVYdFrwDEq3dhjiuu TbRHcgdqb/KVbXcxEZ8hj9FTFUo4Igw89UEd2DYmOoSo/obEJ2KKmrBViwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPsr/uniDpLr2ihzzbe3wCMG/4BlMB8GA1UdIwQY MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt M2FjOWU1NmMzMDg5LzEvMS15di02ZUlPa3V2YUtIUE50N2ZBSXdiX2dHVS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMmIvODFmZDFhLTQ3YTctNDVkOC1iZTc0LTNhYzllNTZjMzA4 OS8xL2k2c3dhRGhaN0g0Q0J2NlNaVFktampseHFhZy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFkhhzAN BgkqhkiG9w0BAQsFAAOCAQEAV9TaFJkGoWbOvuzaZIW3hK0bSpppqVundF9cYQny N7hkuMQl98av1hCm9z0Fv2fWW84B026Lw9D28YVxk7fP0mHHB4EeQjSiYlJkGERc 9mIgIPUKN7b7CZn9pQdR7p2d5KSxMlnSOupROPtdc0FJq8FnoE6BkTr13Dz/c7dO NH/ozML6bbNEVLIrt1T39L4L8S6np8SSnPIlWj2dwsUqWyo36ykZAR4oNEMZC/Fh We5Z7+jx6AJBo94ob7oEOyQGnLLt7aCKgCbYdp1DEILCgDwT+3bTDnBUvF7VLgUg 86HiIfPLv/YUFwQaL1Rt1jFl2rHCCXIgLMTdL0LzokNTmA== -----END CERTIFICATE-----Generated at Sun Jan 25 22:50:49 2026 by rpki-client