This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/rJ1qNlWDYbi69BE2ZEKvQVltAts.roa File: rJ1qNlWDYbi69BE2ZEKvQVltAts.roa (raw, json) Hash identifier: 9qgzkGC4YfmPbthdBZ7B/utLfGFA/3aVgJMfSvBGTpc= Subject key identifier: AC:9D:6A:36:55:83:61:B8:BA:F4:11:36:64:42:AF:41:59:6D:02:DB Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9 Certificate serial: 019C0A376D5D64E3AE5E708BF12364F0FEDE Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/rJ1qNlWDYbi69BE2ZEKvQVltAts.roa Signing time: Thu 29 Jan 2026 14:45:30 +0000 ROA not before: Thu 29 Jan 2026 14:45:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29802 IP address blocks: 89.249.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0a:37:6d:5d:64:e3:ae:5e:70:8b:f1:23:64:f0:fe:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9 Validity Not Before: Jan 29 14:45:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ac9d6a36558361b8baf411366442af41596d02db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:bb:21:2a:9e:95:04:8b:46:22:36:3e:d1:31: a6:16:f6:c6:37:c0:2e:33:40:6a:e4:27:3d:06:58: 3a:68:ee:19:b3:b2:97:d9:75:fa:07:85:01:f5:92: d6:f9:e1:ba:13:3e:62:8e:dd:2b:ee:64:1b:d6:f5: e7:3d:90:13:52:a3:92:e3:af:c7:aa:43:8f:de:b6: ae:bd:e8:57:cf:f2:ab:f6:00:e8:82:f1:30:34:7d: 16:a3:3f:43:33:4c:65:75:f8:77:63:df:a0:22:72: 4e:95:1b:69:d6:15:b6:2b:fb:ac:80:7f:21:38:86: 5d:9e:9b:6c:f8:43:c8:85:f9:05:df:58:75:67:cd: ae:99:c0:a9:26:57:52:42:86:f6:d7:de:c3:a8:2e: b7:df:12:33:c1:cf:92:f3:42:80:5d:26:9d:b5:67: 2f:7b:a2:7b:f3:e1:0f:52:6d:77:1d:8d:b4:75:08: b9:1c:a4:85:e1:85:85:2b:a0:8b:f3:a7:5d:80:bc: e0:d9:90:fb:ea:5f:14:dd:36:98:73:9b:d2:ed:65: b4:be:0f:4d:ce:50:b7:75:84:b1:cc:fc:e4:de:6f: b8:8f:86:d3:8a:3f:3e:e3:f6:23:7a:7c:33:25:e1: 76:3d:29:99:91:1e:86:10:69:3b:15:54:e2:f3:95: b5:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:9D:6A:36:55:83:61:B8:BA:F4:11:36:64:42:AF:41:59:6D:02:DB X509v3 Authority Key Identifier: keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/rJ1qNlWDYbi69BE2ZEKvQVltAts.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.249.201.0/24 Signature Algorithm: sha256WithRSAEncryption 20:9f:96:ca:b1:2e:92:93:1e:ae:0f:cf:48:bb:06:56:21:24: 99:cb:9f:f7:f6:72:e6:0d:43:b4:78:b8:e3:be:9c:7f:0c:bc: 60:bf:66:7a:a5:7c:74:fb:50:76:da:57:86:61:d5:7c:49:09: 26:dc:d6:04:bc:a8:ad:54:4d:f9:32:96:76:bd:bc:02:7d:0c: a4:1e:8c:f8:3d:c3:26:26:71:e4:66:7a:d7:34:2d:0c:08:33: 58:b7:cd:ce:58:67:6a:0b:79:c0:0a:90:21:93:77:f7:2a:38: 4a:c9:4d:bf:08:87:7a:c3:b5:93:82:f5:09:2d:ec:b9:cf:9b: 6b:cd:2d:2a:b0:16:f8:ae:bd:cc:06:0f:04:13:1c:73:2d:66: be:a0:be:9c:69:ea:24:8c:bb:9c:44:65:53:d7:53:25:25:a4: b8:28:f7:8a:5f:d3:da:27:6c:2c:a6:b5:ba:df:88:23:2f:2f: 91:66:4b:0f:e4:01:cd:8f:37:bb:40:65:36:0e:40:c6:df:6a: 93:22:c6:b2:72:d0:78:3f:d0:1c:d1:31:62:77:59:a3:0b:f8: c3:9a:c1:37:31:bf:0e:a2:4c:ac:15:48:6f:57:d6:73:41:a7: 8b:23:45:9b:b0:11:3f:93:11:82:01:27:6b:4f:ba:3c:69:8f: 83:55:6e:4f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwKN21dZOOuXnCL8SNk8P7eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzIyZTQ1MTNhMzk2NzhkOGFiMjNiMmQ2NDk3NzUzNDA1 MThjYjkwHhcNMjYwMTI5MTQ0NTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzlkNmEzNjU1ODM2MWI4YmFmNDExMzY2NDQyYWY0MTU5NmQwMmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7shKp6VBItGIjY+0TGmFvbGN8Au M0Bq5Cc9Blg6aO4Zs7KX2XX6B4UB9ZLW+eG6Ez5ijt0r7mQb1vXnPZATUqOS46/H qkOP3rauvehXz/Kr9gDogvEwNH0Woz9DM0xldfh3Y9+gInJOlRtp1hW2K/usgH8h OIZdnpts+EPIhfkF31h1Z82umcCpJldSQob2197DqC633xIzwc+S80KAXSadtWcv e6J78+EPUm13HY20dQi5HKSF4YWFK6CL86ddgLzg2ZD76l8U3TaYc5vS7WW0vg9N zlC3dYSxzPzk3m+4j4bTij8+4/YjenwzJeF2PSmZkR6GEGk7FVTi85W1jwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKydajZVg2G4uvQRNmRCr0FZbQLbMB8GA1UdIwQY MBaAFA1yLkUTo5Z42KsjstZJd1NAUYy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDIt MzQyNWIxMjVlYWE3LzEvckoxcU5sV0RZYmk2OUJFMlpFS3ZRVmx0QXRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDItMzQyNWIxMjVlYWE3 LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWfnJMA0G CSqGSIb3DQEBCwUAA4IBAQAgn5bKsS6Skx6uD89IuwZWISSZy5/39nLmDUO0eLjj vpx/DLxgv2Z6pXx0+1B22leGYdV8SQkm3NYEvKitVE35MpZ2vbwCfQykHoz4PcMm JnHkZnrXNC0MCDNYt83OWGdqC3nACpAhk3f3KjhKyU2/CId6w7WTgvUJLey5z5tr zS0qsBb4rr3MBg8EExxzLWa+oL6caeokjLucRGVT11MlJaS4KPeKX9PaJ2wsprW6 34gjLy+RZksP5AHNjze7QGU2DkDG32qTIsayctB4P9Ac0TFid1mjC/jDmsE3Mb8O okysFUhvV9ZzQaeLI0WbsBE/kxGCASdrT7o8aY+DVW5P -----END CERTIFICATE-----Generated at Fri Jan 30 12:19:57 2026 by rpki-client