This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/1-zrwDBNkYG83yH2CJaT2Du8fZ8I.roa File: 1-zrwDBNkYG83yH2CJaT2Du8fZ8I.roa (raw, json) Hash identifier: QfDETDdyrGMEofip7eLNG/wG9Cw9CWy52dDFusOvdJQ= Subject key identifier: FB:3A:F0:0C:13:64:60:6F:37:C8:7D:82:25:A4:F6:0E:EF:1F:67:C2 Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019B7F14A40E15F817E8941A76A4DC364E9E Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/1-zrwDBNkYG83yH2CJaT2Du8fZ8I.roa Signing time: Fri 02 Jan 2026 14:20:17 +0000 ROA not before: Fri 02 Jan 2026 14:20:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13335 IP address blocks: 89.149.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:a4:0e:15:f8:17:e8:94:1a:76:a4:dc:36:4e:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Jan 2 14:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb3af00c1364606f37c87d8225a4f60eef1f67c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c3:4f:5f:33:ee:d6:ce:76:f7:c5:59:37:75: fd:31:bc:5c:51:47:e5:0e:59:d4:4d:a8:e9:da:16: c8:f2:cd:c5:64:5e:e6:b4:c1:6e:85:a2:84:36:d3: be:2d:44:59:23:53:b3:c4:fb:b4:91:94:4f:a8:05: 16:be:15:d3:53:9d:47:77:8e:00:41:11:36:9c:d2: ce:65:4f:3a:58:0a:ef:c2:c7:e1:6d:95:08:1d:a1: 19:0d:ab:4e:21:7a:97:6e:06:09:0d:c5:c7:cc:ec: e0:c2:c9:a1:d5:94:ca:c1:c9:c4:cf:fe:66:0e:08: 7c:19:9c:12:26:5b:3a:fb:08:73:9e:61:d3:a3:ca: 82:75:d4:7c:e7:a9:29:7f:25:cc:7b:9a:9a:54:9f: 6e:44:b4:2f:bd:47:0b:d5:f8:be:c0:bb:26:e1:a4: b7:06:d9:97:65:3a:8c:57:69:ba:78:be:b6:13:a2: f4:4c:9a:84:8d:09:b2:bd:08:d0:44:9f:ea:c5:4b: a4:52:a7:51:4a:64:c7:5f:fa:1c:fc:90:58:7e:c4: 13:8f:d4:08:76:bd:27:ea:9a:4f:83:d5:94:21:81: 49:7c:fc:df:46:5d:bf:d7:b0:02:23:0c:c3:c5:9b: dd:fc:1a:36:cb:7b:06:34:00:e5:ea:2b:9a:e2:b7: 9f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:3A:F0:0C:13:64:60:6F:37:C8:7D:82:25:A4:F6:0E:EF:1F:67:C2 X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/1-zrwDBNkYG83yH2CJaT2Du8fZ8I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.149.148.0/24 Signature Algorithm: sha256WithRSAEncryption 60:0f:fb:35:60:50:cb:45:47:ab:f4:e4:18:6a:b5:34:ad:75: d2:2e:52:91:66:3f:3e:c3:9f:b6:be:81:f4:75:b8:fd:da:10: d7:5a:1f:fc:b2:b4:06:c4:31:d3:f1:37:ff:64:99:fe:c4:a9: 05:70:1f:1b:e6:a9:a2:38:b3:c1:a4:b9:99:1f:7a:80:f7:fd: 98:46:c9:25:d1:14:34:0e:a8:b3:89:05:cd:f7:21:8b:63:c4: 56:f9:04:f4:a8:c8:67:2b:c5:b2:da:57:64:44:b1:eb:53:4e: c0:d6:37:fc:53:4d:b5:b4:4b:64:9d:8d:6d:a5:1a:8c:3a:d4: e5:ad:e0:50:60:7a:8f:7d:2c:fe:8b:7f:df:d8:4e:91:6f:24: c3:27:62:32:d6:08:ff:1a:33:7f:ef:01:90:fa:7d:2f:cf:db: 48:19:f0:c4:6b:0b:d3:ef:36:65:ce:d0:e2:28:ff:0a:b3:6e: 13:49:d4:5c:99:15:bc:7e:42:a9:b9:c4:d5:74:2f:3b:fb:ec: 96:49:7e:a3:af:42:c5:18:27:a1:6c:c3:d4:76:bc:ce:27:db: fc:0b:b4:b9:51:4a:db:35:01:81:f4:fe:5c:fa:26:5e:07:96: e3:a3:7a:19:c2:39:af:fc:59:31:10:bc:e1:b7:2e:72:90:8e: 6d:da:e4:ff -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/FKQOFfgX6JQadqTcNk6eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjYwMTAyMTQyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjNhZjAwYzEzNjQ2MDZmMzdjODdkODIyNWE0ZjYwZWVmMWY2N2MyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MNPXzPu1s5298VZN3X9MbxcUUfl DlnUTajp2hbI8s3FZF7mtMFuhaKENtO+LURZI1OzxPu0kZRPqAUWvhXTU51Hd44A QRE2nNLOZU86WArvwsfhbZUIHaEZDatOIXqXbgYJDcXHzOzgwsmh1ZTKwcnEz/5m Dgh8GZwSJls6+whznmHTo8qCddR856kpfyXMe5qaVJ9uRLQvvUcL1fi+wLsm4aS3 BtmXZTqMV2m6eL62E6L0TJqEjQmyvQjQRJ/qxUukUqdRSmTHX/oc/JBYfsQTj9QI dr0n6ppPg9WUIYFJfPzfRl2/17ACIwzDxZvd/Bo2y3sGNADl6iua4refdQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPs68AwTZGBvN8h9giWk9g7vH2fCMB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvMS16cndEQk5rWUc4M3lIMkNKYVQyRHU4Zlo4SS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMzUvOWQ1NGE1LTAxMzUtNGIxOC05NjFhLTBjZjEwOTNkNDU0 OC8xL0o1Ml8zMHdndmE2TllSaFdiczUyUkU1RzBYRS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFmVlDAN BgkqhkiG9w0BAQsFAAOCAQEAYA/7NWBQy0VHq/TkGGq1NK110i5SkWY/PsOftr6B 9HW4/doQ11of/LK0BsQx0/E3/2SZ/sSpBXAfG+apojizwaS5mR96gPf9mEbJJdEU NA6os4kFzfchi2PEVvkE9KjIZyvFstpXZESx61NOwNY3/FNNtbRLZJ2NbaUajDrU 5a3gUGB6j30s/ot/39hOkW8kwydiMtYI/xozf+8BkPp9L8/bSBnwxGsL0+82Zc7Q 4ij/CrNuE0nUXJkVvH5CqbnE1XQvO/vslkl+o69CxRgnoWzD1Ha8zifb/Au0uVFK 2zUBgfT+XPomXgeW46N6GcI5r/xZMRC84bcucpCObdrk/w== -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:33 2026 by rpki-client