This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/a1S1suJaHdPCl45301we2Pu1jH8.roa File: a1S1suJaHdPCl45301we2Pu1jH8.roa (raw, json) Hash identifier: BIRZf42b5oeVxZWy4oHrmE7iSfNExU+6/qkYRUSCK2s= Subject key identifier: 6B:54:B5:B2:E2:5A:1D:D3:C2:97:8E:77:D3:5C:1E:D8:FB:B5:8C:7F Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9 Certificate serial: 019B7C809E634A487142BF7FBE3089E9CE65 Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/a1S1suJaHdPCl45301we2Pu1jH8.roa Signing time: Fri 02 Jan 2026 02:19:22 +0000 ROA not before: Fri 02 Jan 2026 02:19:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61330 IP address blocks: 89.39.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 04:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:9e:63:4a:48:71:42:bf:7f:be:30:89:e9:ce:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9 Validity Not Before: Jan 2 02:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b54b5b2e25a1dd3c2978e77d35c1ed8fbb58c7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:7e:8f:b7:3b:a3:8d:ea:79:7a:04:1f:4f:5c: 82:7e:2d:30:c4:91:35:ed:6b:a6:48:11:0a:d8:21: df:47:b6:e2:ff:b3:00:86:be:8a:63:5f:fd:a4:49: 07:0b:0a:c1:d0:14:53:55:6b:30:04:56:09:0e:f1: 30:66:f5:7a:50:a3:e3:49:51:03:34:45:f5:a2:f7: 7a:a6:09:ac:12:bc:7e:3b:b6:06:5f:1f:59:8b:84: bd:3a:1f:2e:8c:42:58:f6:8d:21:96:00:9e:76:9b: 79:cc:ea:a6:cb:68:c6:de:d0:c0:6e:a0:59:ad:ce: 44:66:69:e1:8c:a3:d6:b3:86:b9:f7:69:03:64:f1: 92:ef:0c:d4:91:95:28:13:55:10:c8:11:c1:ca:2e: 81:c5:af:90:9b:70:48:af:bb:5b:7e:33:d3:65:0f: 74:71:7b:aa:d2:1a:57:9c:4c:15:a9:ae:85:0f:13: 9b:ea:2c:2a:e0:c4:5b:8d:26:d9:04:5b:9e:6b:8b: 0d:70:26:e1:a5:f3:dc:08:6c:84:f7:85:b6:21:08: 16:c6:b7:ef:4a:76:36:fc:5f:9e:95:6a:b5:ae:f1: a6:67:0c:6b:bf:24:fa:c0:ed:a2:07:13:44:8a:45: 4e:d3:03:42:13:0f:0e:84:97:f6:3f:0f:44:0a:c7: c2:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:54:B5:B2:E2:5A:1D:D3:C2:97:8E:77:D3:5C:1E:D8:FB:B5:8C:7F X509v3 Authority Key Identifier: keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/a1S1suJaHdPCl45301we2Pu1jH8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.39.252.0/24 Signature Algorithm: sha256WithRSAEncryption 87:91:fe:c6:00:b6:c4:ea:06:30:83:6a:38:77:d1:86:f1:cd: 61:5f:f6:9c:e2:ad:86:25:bf:63:0d:51:ed:2e:82:be:69:c4: e6:2e:61:d3:8c:50:51:dd:8d:af:81:8f:09:d2:f6:f2:70:ab: e8:4c:80:89:45:65:6e:d2:9f:1b:33:1d:f0:ce:78:00:44:68: 56:e6:6f:e4:37:36:d1:6a:94:6c:e8:a9:44:f6:e3:2a:70:c8: 68:a6:88:e5:0a:69:29:e1:cc:07:3b:6d:b8:bf:01:48:81:9e: 55:91:f3:54:34:a2:8d:56:33:87:d0:ff:3a:7b:87:75:12:30: cf:27:5f:cf:40:00:2e:a8:b6:f4:86:c4:df:d4:32:5f:af:60: 08:86:bf:b6:0c:30:1e:4b:d0:39:f4:99:fd:50:47:83:2a:80: c4:00:c0:22:dd:2c:85:03:d5:d3:21:d2:76:3a:4b:a0:f6:11: c0:90:81:0c:cd:07:34:0c:3d:f0:e8:d0:12:f3:49:5c:27:59: 61:9e:21:17:12:28:b5:16:9f:fd:20:56:0a:0b:be:eb:31:3b: ba:b9:8a:5f:2e:16:5c:16:95:9d:ec:57:7b:4d:69:c3:81:f5: 21:c6:69:6f:89:30:04:74:96:31:b4:23:89:8b:1c:26:20:2c: 8b:3a:d1:71 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gJ5jSkhxQr9/vjCJ6c5lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlNTg5NTJkMzkzOTM1ZjBkM2JjZTgxNGZkOTE3OGQwNDY5 M2FlYjkwHhcNMjYwMTAyMDIxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjU0YjViMmUyNWExZGQzYzI5NzhlNzdkMzVjMWVkOGZiYjU4YzdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1n6Ptzujjep5egQfT1yCfi0wxJE1 7WumSBEK2CHfR7bi/7MAhr6KY1/9pEkHCwrB0BRTVWswBFYJDvEwZvV6UKPjSVED NEX1ovd6pgmsErx+O7YGXx9Zi4S9Oh8ujEJY9o0hlgCedpt5zOqmy2jG3tDAbqBZ rc5EZmnhjKPWs4a592kDZPGS7wzUkZUoE1UQyBHByi6Bxa+Qm3BIr7tbfjPTZQ90 cXuq0hpXnEwVqa6FDxOb6iwq4MRbjSbZBFuea4sNcCbhpfPcCGyE94W2IQgWxrfv SnY2/F+elWq1rvGmZwxrvyT6wO2iBxNEikVO0wNCEw8OhJf2Pw9ECsfCyQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGtUtbLiWh3TwpeOd9NcHtj7tYx/MB8GA1UdIwQY MBaAFP5YlS05OTXw07zoFP2ReNBGk665MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUt NWQ0OGI2NWNlNTczLzEvYTFTMXN1SmFIZFBDbDQ1MzAxd2UyUHUxakg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUtNWQ0OGI2NWNlNTcz LzEvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSf8MA0G CSqGSIb3DQEBCwUAA4IBAQCHkf7GALbE6gYwg2o4d9GG8c1hX/ac4q2GJb9jDVHt LoK+acTmLmHTjFBR3Y2vgY8J0vbycKvoTICJRWVu0p8bMx3wzngARGhW5m/kNzbR apRs6KlE9uMqcMhopojlCmkp4cwHO224vwFIgZ5VkfNUNKKNVjOH0P86e4d1EjDP J1/PQAAuqLb0hsTf1DJfr2AIhr+2DDAeS9A59Jn9UEeDKoDEAMAi3SyFA9XTIdJ2 Okug9hHAkIEMzQc0DD3w6NAS80lcJ1lhniEXEii1Fp/9IFYKC77rMTu6uYpfLhZc FpWd7Fd7TWnDgfUhxmlviTAEdJYxtCOJixwmICyLOtFx -----END CERTIFICATE-----Generated at Wed Jan 21 10:46:56 2026 by rpki-client