This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/uBdDrrOh7lGlr8QcDfUoYU2av_k.roa File: uBdDrrOh7lGlr8QcDfUoYU2av_k.roa (raw, json) Hash identifier: Cw4sLfBdvB1lBMMzs14p2jJuylUh6bwsF0YFotyYbaY= Subject key identifier: B8:17:43:AE:B3:A1:EE:51:A5:AF:C4:1C:0D:F5:28:61:4D:9A:BF:F9 Certificate issuer: /CN=02c94804cfcc7ef258d46fc324c1676447603ef6 Certificate serial: 019B76EB5D3D9C339C0908D959C314688308 Authority key identifier: 02:C9:48:04:CF:CC:7E:F2:58:D4:6F:C3:24:C1:67:64:47:60:3E:F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AslIBM_MfvJY1G_DJMFnZEdgPvY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/uBdDrrOh7lGlr8QcDfUoYU2av_k.roa Signing time: Thu 01 Jan 2026 00:18:14 +0000 ROA not before: Thu 01 Jan 2026 00:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 4913 IP address blocks: 89.254.18.0/24 maxlen: 24 89.254.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.crl rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft rsync://rpki.ripe.net/repository/DEFAULT/AslIBM_MfvJY1G_DJMFnZEdgPvY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 12:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:5d:3d:9c:33:9c:09:08:d9:59:c3:14:68:83:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02c94804cfcc7ef258d46fc324c1676447603ef6 Validity Not Before: Jan 1 00:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b81743aeb3a1ee51a5afc41c0df528614d9abff9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1d:ee:9e:bb:7f:20:27:e2:4c:a7:8f:0d:b1: 53:75:8a:92:50:d9:f7:61:46:97:7c:4f:a5:aa:65: 83:ba:28:a8:ae:54:a3:90:42:17:ce:98:a7:06:bd: c5:99:b3:9f:c0:bc:09:3b:1b:56:65:10:f5:61:2d: b9:1c:38:1b:60:ab:e1:4b:62:bc:f4:2c:f8:34:bf: d5:73:78:bf:6d:cf:f4:d6:0d:e1:9e:31:c4:9b:ff: 8e:7f:86:77:9d:99:77:9c:5e:23:a3:dc:e8:9d:86: 65:2f:a9:58:28:f1:41:75:52:af:7e:2a:31:ac:35: 79:a5:76:38:f2:10:21:f4:6c:f8:51:87:f8:5c:9a: 33:c1:aa:4c:e6:cd:2f:2a:df:b9:96:c7:49:c1:26: 2f:12:eb:9f:c9:92:c3:e6:37:20:1f:c3:18:c6:b8: 67:6f:91:bc:0a:b8:a6:b6:03:d1:27:c5:bb:c9:cc: ca:32:3c:22:b2:02:3d:61:71:8a:0d:74:70:97:dc: 2b:4e:df:45:99:29:a9:da:0a:78:5c:ca:53:0c:a3: 48:bc:33:5b:b8:c8:0f:34:db:ba:0f:a4:c6:64:fe: 6d:78:2f:c2:c6:f4:f0:b1:13:8c:20:00:04:49:c3: 30:b2:70:06:f3:0b:48:19:7b:15:8e:ba:1e:46:74: 74:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:17:43:AE:B3:A1:EE:51:A5:AF:C4:1C:0D:F5:28:61:4D:9A:BF:F9 X509v3 Authority Key Identifier: keyid:02:C9:48:04:CF:CC:7E:F2:58:D4:6F:C3:24:C1:67:64:47:60:3E:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AslIBM_MfvJY1G_DJMFnZEdgPvY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/uBdDrrOh7lGlr8QcDfUoYU2av_k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.254.18.0/23 Signature Algorithm: sha256WithRSAEncryption 3f:73:1e:fc:f2:ae:25:fe:97:b1:83:6e:39:b4:6c:34:24:96: 82:3f:f1:d4:aa:3b:fe:07:85:ce:57:b4:26:ec:f2:a9:28:3b: f1:cd:83:83:45:16:93:58:af:18:8c:a9:c7:ae:69:c3:8d:06: 3c:e8:59:ff:28:f0:03:59:ed:4a:5b:71:5e:ea:00:8e:8d:9b: ba:b0:8f:51:6b:64:5f:2e:2d:67:2b:3a:a4:51:21:7e:86:d7: cd:95:6b:00:18:5a:32:d0:3b:23:07:97:cb:b1:d1:ae:29:9e: a8:5e:2f:51:1b:5c:a3:a0:89:bd:94:6a:3d:d4:01:d4:43:a0: 9e:71:f3:f0:f8:5d:5b:61:fb:4a:ad:9b:80:3e:79:fe:f0:c7: 74:aa:65:e6:4a:cf:7f:ba:09:5b:ad:7f:e1:ed:95:de:93:97: e2:16:85:5f:09:12:26:a0:78:7b:83:a8:eb:59:82:ba:73:b3: de:0f:9d:3a:d4:d8:04:d4:b8:e9:6a:15:12:a3:69:ab:d7:0c: 66:9e:fc:0f:d9:ee:d4:e7:cd:67:e6:10:2d:02:b3:2d:00:76: 1e:09:d7:50:a7:f0:42:12:ee:e8:e6:ec:63:5c:14:65:17:1d: 92:88:9d:fd:38:3a:fc:81:e6:1d:0e:80:7d:4b:e1:61:97:45: 14:75:81:04 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26109nDOcCQjZWcMUaIMIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyYzk0ODA0Y2ZjYzdlZjI1OGQ0NmZjMzI0YzE2NzY0NDc2 MDNlZjYwHhcNMjYwMTAxMDAxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODE3NDNhZWIzYTFlZTUxYTVhZmM0MWMwZGY1Mjg2MTRkOWFiZmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsB3unrt/ICfiTKePDbFTdYqSUNn3 YUaXfE+lqmWDuiiorlSjkEIXzpinBr3FmbOfwLwJOxtWZRD1YS25HDgbYKvhS2K8 9Cz4NL/Vc3i/bc/01g3hnjHEm/+Of4Z3nZl3nF4jo9zonYZlL6lYKPFBdVKvfiox rDV5pXY48hAh9Gz4UYf4XJozwapM5s0vKt+5lsdJwSYvEuufyZLD5jcgH8MYxrhn b5G8CrimtgPRJ8W7yczKMjwisgI9YXGKDXRwl9wrTt9FmSmp2gp4XMpTDKNIvDNb uMgPNNu6D6TGZP5teC/CxvTwsROMIAAEScMwsnAG8wtIGXsVjroeRnR0ZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLgXQ66zoe5Rpa/EHA31KGFNmr/5MB8GA1UdIwQY MBaAFALJSATPzH7yWNRvwyTBZ2RHYD72MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXNsSUJNX01mdkpZMUdfREpNRm5aRWRnUHZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84NWZmMGEtMjJhYi00MTkwLTliNzMt MjU5YmU5ZmJjMWYxLzEvdUJkRHJyT2g3bEdscjhRY0RmVW9ZVTJhdl9rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC84NWZmMGEtMjJhYi00MTkwLTliNzMtMjU5YmU5ZmJjMWYx LzEvQXNsSUJNX01mdkpZMUdfREpNRm5aRWRnUHZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBWf4SMA0G CSqGSIb3DQEBCwUAA4IBAQA/cx788q4l/pexg245tGw0JJaCP/HUqjv+B4XOV7Qm 7PKpKDvxzYODRRaTWK8YjKnHrmnDjQY86Fn/KPADWe1KW3Fe6gCOjZu6sI9Ra2Rf Li1nKzqkUSF+htfNlWsAGFoy0DsjB5fLsdGuKZ6oXi9RG1yjoIm9lGo91AHUQ6Ce cfPw+F1bYftKrZuAPnn+8Md0qmXmSs9/uglbrX/h7ZXek5fiFoVfCRImoHh7g6jr WYK6c7PeD5061NgE1LjpahUSo2mr1wxmnvwP2e7U581n5hAtArMtAHYeCddQp/BC Eu7o5uxjXBRlFx2SiJ39ODr8geYdDoB9S+Fhl0UUdYEE -----END CERTIFICATE-----Generated at Tue Jan 20 14:41:08 2026 by rpki-client