This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/1tT6-zSUf6pEClW_lKEL7VHiKiE.roa File: 1tT6-zSUf6pEClW_lKEL7VHiKiE.roa (raw, json) Hash identifier: X43xYghLS0syhIw7JXoh8hzfwP6Xl71o8J3+Q4661gM= Subject key identifier: D6:D4:FA:FB:34:94:7F:AA:44:0A:55:BF:94:A1:0B:ED:51:E2:2A:21 Certificate issuer: /CN=07a32999c47eb31d5fbf16ecc3872eaefd43bad7 Certificate serial: 019B7F15ABEE7FD3B7A7BE947F78A0FC7E00 Authority key identifier: 07:A3:29:99:C4:7E:B3:1D:5F:BF:16:EC:C3:87:2E:AE:FD:43:BA:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6MpmcR-sx1fvxbsw4curv1Dutc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/1tT6-zSUf6pEClW_lKEL7VHiKiE.roa Signing time: Fri 02 Jan 2026 14:21:25 +0000 ROA not before: Fri 02 Jan 2026 14:21:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29033 IP address blocks: 89.222.0.0/20 maxlen: 24 89.222.32.0/20 maxlen: 24 89.222.34.0/23 maxlen: 23 89.222.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.mft rsync://rpki.ripe.net/repository/DEFAULT/B6MpmcR-sx1fvxbsw4curv1Dutc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 11:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:ab:ee:7f:d3:b7:a7:be:94:7f:78:a0:fc:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07a32999c47eb31d5fbf16ecc3872eaefd43bad7 Validity Not Before: Jan 2 14:21:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d6d4fafb34947faa440a55bf94a10bed51e22a21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:88:de:f6:6e:49:c4:e9:7a:a7:fc:e8:14:1c: 0c:10:e3:76:64:6a:d4:fb:b4:36:0e:4a:a3:3b:67: ad:5a:ff:7b:c6:cd:bd:2b:02:22:b1:1c:6d:a0:53: 5f:d0:e4:e4:69:af:5a:27:30:5a:0d:02:94:14:2e: eb:22:e2:4e:2f:a6:c6:de:c8:52:d8:08:43:4b:1b: f2:38:da:4d:0c:b5:3c:0b:77:a8:61:05:1d:ff:88: 33:90:48:f6:b5:67:e3:9b:93:2d:2a:26:21:1a:8f: 98:27:88:c2:73:b6:1a:21:bc:65:88:de:6d:fb:28: 58:c0:f6:38:bc:da:f3:fe:1a:95:9c:96:f7:e9:60: 8d:85:1d:95:34:2f:ae:60:12:bb:f6:a3:2e:56:06: b6:e0:a3:92:ed:c7:93:c6:00:c3:7e:03:e5:97:5a: 26:e8:d9:38:c1:d1:8e:68:f9:fb:9c:ef:35:96:9e: 2d:d6:e3:51:30:fd:93:c1:82:2b:2e:68:d4:5b:26: e8:b7:8e:06:51:66:b4:1e:52:d2:91:e9:a6:22:12: 3c:7c:ad:ef:7e:c2:1d:c3:63:39:18:39:33:b3:00: a8:34:b6:c4:31:5c:4e:59:51:ed:97:c7:87:03:77: 3e:b1:2f:65:4a:06:9a:18:75:5d:e4:9a:6e:40:e7: 47:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:D4:FA:FB:34:94:7F:AA:44:0A:55:BF:94:A1:0B:ED:51:E2:2A:21 X509v3 Authority Key Identifier: keyid:07:A3:29:99:C4:7E:B3:1D:5F:BF:16:EC:C3:87:2E:AE:FD:43:BA:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6MpmcR-sx1fvxbsw4curv1Dutc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/1tT6-zSUf6pEClW_lKEL7VHiKiE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.222.0.0/20 89.222.32.0/19 Signature Algorithm: sha256WithRSAEncryption 51:18:7a:d8:35:6e:2b:9d:cc:b7:68:db:cf:47:fa:72:0c:6a: 9d:42:86:6e:b3:09:f0:1c:d3:3a:b1:39:84:5d:8d:2d:e4:12: 5e:7c:ee:cd:d4:27:42:1b:13:21:6f:09:fd:8d:42:26:df:b3: 7f:e5:5f:25:8b:83:ea:6a:89:21:db:61:4d:ce:c5:1e:30:62: 7e:e4:f5:aa:32:de:53:f1:26:b6:90:ae:55:e0:ab:a5:60:84: 6d:8b:dd:b3:98:bf:7f:db:13:f3:2c:05:fb:8a:d0:b7:1c:c4: 49:4b:7e:60:2a:68:98:9c:76:0c:b7:3d:9b:24:ea:b3:1e:2a: d0:99:94:9e:19:72:78:8c:f9:8a:45:f6:ef:72:c3:17:05:9b: ba:09:4d:a4:21:76:a1:31:b0:eb:ce:ce:e9:6a:39:1f:7b:8f: 9f:56:60:2d:db:5e:28:6b:ac:03:fb:40:ec:c0:c7:7c:6e:11: 7e:97:9e:ec:be:4f:c2:d7:69:40:17:c1:85:2a:39:e7:ff:cf: 41:5c:f9:6a:9b:20:0f:cd:cc:d8:0a:8f:7b:cd:02:68:2f:a1: 2b:94:e7:cb:85:a9:13:dc:4a:0b:23:78:9f:81:36:5a:34:c3: 98:7d:ce:7c:09:4d:04:22:6b:94:b7:76:75:14:5c:0f:8a:10: cd:07:1c:5d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/Favuf9O3p76Uf3ig/H4AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3YTMyOTk5YzQ3ZWIzMWQ1ZmJmMTZlY2MzODcyZWFlZmQ0 M2JhZDcwHhcNMjYwMTAyMTQyMTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNmQ0ZmFmYjM0OTQ3ZmFhNDQwYTU1YmY5NGExMGJlZDUxZTIyYTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYje9m5JxOl6p/zoFBwMEON2ZGrU +7Q2DkqjO2etWv97xs29KwIisRxtoFNf0OTkaa9aJzBaDQKUFC7rIuJOL6bG3shS 2AhDSxvyONpNDLU8C3eoYQUd/4gzkEj2tWfjm5MtKiYhGo+YJ4jCc7YaIbxliN5t +yhYwPY4vNrz/hqVnJb36WCNhR2VNC+uYBK79qMuVga24KOS7ceTxgDDfgPll1om 6Nk4wdGOaPn7nO81lp4t1uNRMP2TwYIrLmjUWybot44GUWa0HlLSkemmIhI8fK3v fsIdw2M5GDkzswCoNLbEMVxOWVHtl8eHA3c+sS9lSgaaGHVd5JpuQOdH4QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNbU+vs0lH+qRApVv5ShC+1R4iohMB8GA1UdIwQY MBaAFAejKZnEfrMdX78W7MOHLq79Q7rXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjZNcG1jUi1zeDFmdnhic3c0Y3VydjFEdXRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83MzgxNzktY2Y2Ny00MTk5LWI1MzIt MmZiMjk1OGFiOGJiLzEvMXRUNi16U1VmNnBFQ2xXX2xLRUw3VkhpS2lFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83MzgxNzktY2Y2Ny00MTk5LWI1MzItMmZiMjk1OGFiOGJi LzEvQjZNcG1jUi1zeDFmdnhic3c0Y3VydjFEdXRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEWd4AAwQF Wd4gMA0GCSqGSIb3DQEBCwUAA4IBAQBRGHrYNW4rncy3aNvPR/pyDGqdQoZuswnw HNM6sTmEXY0t5BJefO7N1CdCGxMhbwn9jUIm37N/5V8li4Pqaokh22FNzsUeMGJ+ 5PWqMt5T8Sa2kK5V4KulYIRti92zmL9/2xPzLAX7itC3HMRJS35gKmiYnHYMtz2b JOqzHirQmZSeGXJ4jPmKRfbvcsMXBZu6CU2kIXahMbDrzs7pajkfe4+fVmAt214o a6wD+0DswMd8bhF+l57svk/C12lAF8GFKjnn/89BXPlqmyAPzczYCo97zQJoL6Er lOfLhakT3EoLI3ifgTZaNMOYfc58CU0EImuUt3Z1FFwPihDNBxxd -----END CERTIFICATE-----Generated at Sat Jan 10 20:49:44 2026 by rpki-client