This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/I0pwg9CZMHqLfBbOSZRcrUCAXac.roa File: I0pwg9CZMHqLfBbOSZRcrUCAXac.roa (raw, json) Hash identifier: ez3uTbsX5XWKgBxDLIribBBe6QXM1/Sf5/DyeWPZIME= Subject key identifier: 23:4A:70:83:D0:99:30:7A:8B:7C:16:CE:49:94:5C:AD:40:80:5D:A7 Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9 Certificate serial: 019B797EF9B5A53A10DD34A493D8EB822702 Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/I0pwg9CZMHqLfBbOSZRcrUCAXac.roa Signing time: Thu 01 Jan 2026 12:18:43 +0000 ROA not before: Thu 01 Jan 2026 12:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396356 IP address blocks: 89.249.197.0/24 maxlen: 24 89.249.198.0/24 maxlen: 24 212.42.201.0/24 maxlen: 24 212.42.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:f9:b5:a5:3a:10:dd:34:a4:93:d8:eb:82:27:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9 Validity Not Before: Jan 1 12:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=234a7083d099307a8b7c16ce49945cad40805da7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a9:69:d5:8a:56:ca:54:3b:4c:3c:b1:cd:a0: b3:55:82:ef:0a:88:00:f7:d6:dd:6d:18:42:49:d6: 08:bf:df:52:6c:12:4d:0a:17:8a:50:89:33:d6:75: f1:ad:10:95:59:96:35:32:80:3e:9f:04:fe:66:df: c2:d6:8d:76:00:ad:6d:7b:57:51:62:60:99:34:f3: b4:29:14:0a:48:6f:e5:14:e3:9f:9e:10:e8:a1:d4: 11:ef:44:b6:69:2d:40:0a:41:93:49:4d:3f:a7:25: 64:b1:7a:b2:87:2c:52:89:e2:ea:1a:b1:80:dc:59: a4:ef:cb:81:4a:e2:3e:48:1c:26:35:c2:50:51:68: 7f:18:7e:de:2d:6a:8c:b9:c9:4b:60:8c:be:90:5b: f0:f4:6f:33:c6:20:ca:09:53:53:1e:60:59:a7:63: 7e:ea:20:35:11:20:4e:a0:f0:7d:51:fb:7a:a5:ae: ee:89:21:b6:19:d2:1f:6d:1c:6e:c4:0a:97:86:a3: 1b:df:9d:7d:22:4f:e8:3e:4c:34:86:ce:fd:03:72: 0b:ce:ff:99:2b:c2:fc:8b:60:39:24:43:03:42:1c: ce:ad:24:b1:9b:46:28:44:a3:1a:e4:e2:f1:a4:97: a6:94:80:5e:75:d5:56:f4:0d:96:09:e4:c0:08:6a: d1:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:4A:70:83:D0:99:30:7A:8B:7C:16:CE:49:94:5C:AD:40:80:5D:A7 X509v3 Authority Key Identifier: keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/I0pwg9CZMHqLfBbOSZRcrUCAXac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.249.197.0-89.249.198.255 212.42.201.0/24 212.42.204.0/24 Signature Algorithm: sha256WithRSAEncryption 22:3f:f5:b9:4c:a2:98:a9:07:56:bb:ac:99:be:24:83:e1:61: bf:1c:d6:0c:e1:14:97:3e:a0:29:c8:22:5a:3f:86:8b:45:76: f9:26:04:ec:0d:e0:8b:c6:8f:6d:bc:a5:e0:d2:cd:d1:1a:85: c3:3e:c2:4d:07:da:6d:3a:f4:67:d1:18:e5:ce:b0:38:17:01: 05:73:b2:e5:d4:85:63:c8:66:62:88:64:69:38:17:13:8c:99: 1f:5f:2d:5b:9f:c1:78:69:d6:aa:31:60:75:3b:bd:a5:56:2a: 49:00:20:60:e1:52:ae:50:15:bf:e4:4e:98:77:fb:bd:a6:c4: 61:57:35:65:f0:8a:44:55:aa:6d:33:92:c4:64:f3:8a:b0:38: 07:0b:01:77:ae:ef:2c:5e:e8:ee:b6:0a:7b:97:0f:08:22:a6: 60:3b:9e:78:0d:5f:1c:79:74:eb:c1:6a:77:da:ee:bf:6c:0b: 14:22:89:12:d6:5a:ba:b1:d8:6f:70:36:cd:f4:4f:cc:2e:7b: d3:35:84:74:ab:cb:37:c2:5b:41:e3:38:7b:dd:33:9a:41:0b: 60:8b:8e:f3:eb:4a:a2:3a:47:08:89:79:22:d7:9e:d8:45:1d: e6:0a:dd:35:62:e8:49:a6:6b:be:a3:00:a7:c0:a1:11:57:cb: 36:53:08:1d -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt5fvm1pToQ3TSkk9jrgicCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzIyZTQ1MTNhMzk2NzhkOGFiMjNiMmQ2NDk3NzUzNDA1 MThjYjkwHhcNMjYwMTAxMTIxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzRhNzA4M2QwOTkzMDdhOGI3YzE2Y2U0OTk0NWNhZDQwODA1ZGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Klp1YpWylQ7TDyxzaCzVYLvCogA 99bdbRhCSdYIv99SbBJNCheKUIkz1nXxrRCVWZY1MoA+nwT+Zt/C1o12AK1te1dR YmCZNPO0KRQKSG/lFOOfnhDoodQR70S2aS1ACkGTSU0/pyVksXqyhyxSieLqGrGA 3Fmk78uBSuI+SBwmNcJQUWh/GH7eLWqMuclLYIy+kFvw9G8zxiDKCVNTHmBZp2N+ 6iA1ESBOoPB9Uft6pa7uiSG2GdIfbRxuxAqXhqMb3519Ik/oPkw0hs79A3ILzv+Z K8L8i2A5JEMDQhzOrSSxm0YoRKMa5OLxpJemlIBeddVW9A2WCeTACGrRJwIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFCNKcIPQmTB6i3wWzkmUXK1AgF2nMB8GA1UdIwQY MBaAFA1yLkUTo5Z42KsjstZJd1NAUYy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDIt MzQyNWIxMjVlYWE3LzEvSTBwd2c5Q1pNSHFMZkJiT1NaUmNyVUNBWGFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDItMzQyNWIxMjVlYWE3 LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBABZ+cUD BABZ+cYDBADUKskDBADUKswwDQYJKoZIhvcNAQELBQADggEBACI/9blMopipB1a7 rJm+JIPhYb8c1gzhFJc+oCnIIlo/hotFdvkmBOwN4IvGj228peDSzdEahcM+wk0H 2m069GfRGOXOsDgXAQVzsuXUhWPIZmKIZGk4FxOMmR9fLVufwXhp1qoxYHU7vaVW KkkAIGDhUq5QFb/kTph3+72mxGFXNWXwikRVqm0zksRk84qwOAcLAXeu7yxe6O62 CnuXDwgipmA7nngNXxx5dOvBanfa7r9sCxQiiRLWWrqx2G9wNs30T8wue9M1hHSr yzfCW0HjOHvdM5pBC2CLjvPrSqI6RwiJeSLXnthFHeYK3TVi6Emma76jAKfAoRFX yzZTCB0= -----END CERTIFICATE-----Generated at Sat Jan 10 21:05:55 2026 by rpki-client