This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/k2Ju4abbP5m9FcP_TcONvNialGo.roa File: k2Ju4abbP5m9FcP_TcONvNialGo.roa (raw, json) Hash identifier: +xKSaZxzFTvFYXFzopdW+GeQg55zpXmLh6yFWO2T458= Subject key identifier: 93:62:6E:E1:A6:DB:3F:99:BD:15:C3:FF:4D:C3:8D:BC:D8:9A:94:6A Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d Certificate serial: 019B7AC82A4C8D3756F1A03864781B66599F Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/k2Ju4abbP5m9FcP_TcONvNialGo.roa Signing time: Thu 01 Jan 2026 18:18:16 +0000 ROA not before: Thu 01 Jan 2026 18:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47583 IP address blocks: 89.116.101.0/24 maxlen: 24 89.116.104.0/24 maxlen: 24 89.116.105.0/24 maxlen: 24 89.116.109.0/24 maxlen: 24 89.116.110.0/24 maxlen: 24 89.116.111.0/24 maxlen: 24 89.116.114.0/24 maxlen: 24 89.116.120.0/24 maxlen: 24 89.116.121.0/24 maxlen: 24 89.116.122.0/24 maxlen: 24 89.116.133.0/24 maxlen: 24 89.116.134.0/24 maxlen: 24 89.116.136.0/24 maxlen: 24 89.116.138.0/24 maxlen: 24 89.116.139.0/24 maxlen: 24 89.116.152.0/24 maxlen: 24 89.116.157.0/24 maxlen: 24 89.116.159.0/24 maxlen: 24 89.116.167.0/24 maxlen: 24 89.116.170.0/24 maxlen: 24 89.116.187.0/24 maxlen: 24 89.116.188.0/24 maxlen: 24 89.116.191.0/24 maxlen: 24 89.116.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:2a:4c:8d:37:56:f1:a0:38:64:78:1b:66:59:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d Validity Not Before: Jan 1 18:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=93626ee1a6db3f99bd15c3ff4dc38dbcd89a946a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:33:5f:9b:36:3b:b8:f6:d8:f0:a2:63:85:53: da:a0:6c:94:bb:12:19:d4:f4:fa:3b:3f:81:fb:56: 93:44:0b:4a:eb:21:50:57:44:f0:ce:d8:a1:ea:7d: ac:60:bb:52:fa:78:e7:27:88:f2:03:e9:cf:bf:d6: 06:01:43:6c:83:67:6e:23:ca:a9:db:b8:7e:e7:23: 46:88:cb:d5:cc:f9:d5:e6:06:05:d5:94:24:6f:ee: b0:7b:86:2c:55:5f:bf:93:e7:ad:e3:43:21:46:50: 2f:b4:44:1b:0c:65:1a:2c:6f:fe:71:10:fc:1d:7a: 20:70:51:03:91:b7:13:a9:a3:94:36:43:bd:55:0a: d1:42:42:72:78:6d:03:39:5d:ec:b3:bd:6f:1c:e8: 74:5b:59:3e:2b:f7:5b:86:12:96:f7:cd:74:81:ff: 95:a4:56:ee:42:c4:0c:dd:64:ea:3c:3f:5c:27:0f: a8:af:e4:8b:ee:5e:3e:ea:26:bd:a7:40:12:ea:4e: 96:5c:6c:f0:23:76:6b:e6:91:0f:68:50:3a:e9:32: f6:88:f6:9f:e0:e1:b4:f6:37:b9:f0:0d:13:52:65: 52:12:9f:54:c6:1e:c7:ec:2a:7e:6b:43:05:35:32: a6:f3:d4:33:30:31:a0:ae:c7:d2:a9:8a:e9:3c:f1: 0b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:62:6E:E1:A6:DB:3F:99:BD:15:C3:FF:4D:C3:8D:BC:D8:9A:94:6A X509v3 Authority Key Identifier: keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/k2Ju4abbP5m9FcP_TcONvNialGo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.116.101.0/24 89.116.104.0/23 89.116.109.0-89.116.111.255 89.116.114.0/24 89.116.120.0-89.116.122.255 89.116.133.0-89.116.134.255 89.116.136.0/24 89.116.138.0/23 89.116.152.0/24 89.116.157.0/24 89.116.159.0/24 89.116.167.0/24 89.116.170.0/24 89.116.187.0-89.116.188.255 89.116.191.0-89.116.192.255 Signature Algorithm: sha256WithRSAEncryption 5a:e0:cf:45:c8:b2:9f:e1:a4:a0:0e:6c:3d:44:9a:99:d6:6f: 99:58:c8:42:40:15:a3:54:45:26:90:7c:b7:56:16:a8:a9:bb: 27:4e:0d:9d:d5:36:33:33:0b:6e:69:c5:a4:2d:c8:4b:69:b8: 49:c1:dc:fb:6e:04:87:64:d4:bc:9d:e9:e1:6f:66:2f:91:83: a3:b7:10:a9:9c:d5:f2:d7:7e:4b:b7:ad:12:2b:26:37:a7:3c: 4a:9e:50:f4:1e:ae:a8:b6:2e:ac:0d:51:a7:26:f6:98:c7:08: 1b:a8:d1:6c:40:f7:3f:f1:37:48:35:e2:ac:6b:a0:54:e6:de: 69:be:ad:d7:7b:47:b5:00:ab:aa:7f:53:01:f5:18:3c:ac:97: 7c:cb:7b:4c:47:cb:5b:ec:56:a7:9e:dc:92:91:75:45:d3:c9: 0c:39:ab:70:ff:a0:62:bd:e0:50:25:74:f6:19:2c:1f:12:a1: 49:c9:b6:b8:50:7b:ab:e3:2d:53:6f:bc:7d:32:ac:03:27:64: 7b:e1:6c:ed:fa:54:7d:bd:de:5b:29:17:60:43:40:78:79:fa: d5:66:6d:44:36:1d:df:0e:bc:71:12:ed:89:37:eb:11:2b:23: 33:17:d8:f4:83:2c:ab:62:77:ad:cc:95:0e:a6:22:7a:f9:fd: 57:12:d7:a5 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgISAZt6yCpMjTdW8aA4ZHgbZlmfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZGQ4MWE4MzNkOWIwNDNjN2ZmZDYzNWE1OTg3ZjUzNjk3 MTE4MGQwHhcNMjYwMTAxMTgxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MzYyNmVlMWE2ZGIzZjk5YmQxNWMzZmY0ZGMzOGRiY2Q4OWE5NDZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4DNfmzY7uPbY8KJjhVPaoGyUuxIZ 1PT6Oz+B+1aTRAtK6yFQV0Twztih6n2sYLtS+njnJ4jyA+nPv9YGAUNsg2duI8qp 27h+5yNGiMvVzPnV5gYF1ZQkb+6we4YsVV+/k+et40MhRlAvtEQbDGUaLG/+cRD8 HXogcFEDkbcTqaOUNkO9VQrRQkJyeG0DOV3ss71vHOh0W1k+K/dbhhKW9810gf+V pFbuQsQM3WTqPD9cJw+or+SL7l4+6ia9p0AS6k6WXGzwI3Zr5pEPaFA66TL2iPaf 4OG09je58A0TUmVSEp9Uxh7H7Cp+a0MFNTKm89QzMDGgrsfSqYrpPPEL/QIDAQAB o4ICijCCAoYwHQYDVR0OBBYEFJNibuGm2z+ZvRXD/03DjbzYmpRqMB8GA1UdIwQY MBaAFPDdgagz2bBDx//WNaWYf1NpcRgNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUt MDQ2ODA0MjQ4NmRjLzEvazJKdTRhYmJQNW05RmNQX1RjT052TmlhbEdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUtMDQ2ODA0MjQ4NmRj LzEvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGfBggrBgEFBQcBBwEB/wSBjzCBjDCBiQQCAAEwgYIDBABZ dGUDBAFZdGgwDAMEAFl0bQMEBFl0YAMEAFl0cjAMAwQDWXR4AwQAWXR6MAwDBABZ dIUDBABZdIYDBABZdIgDBAFZdIoDBABZdJgDBABZdJ0DBABZdJ8DBABZdKcDBABZ dKowDAMEAFl0uwMEAFl0vDAMAwQAWXS/AwQAWXTAMA0GCSqGSIb3DQEBCwUAA4IB AQBa4M9FyLKf4aSgDmw9RJqZ1m+ZWMhCQBWjVEUmkHy3VhaoqbsnTg2d1TYzMwtu acWkLchLabhJwdz7bgSHZNS8nenhb2YvkYOjtxCpnNXy135Lt60SKyY3pzxKnlD0 Hq6oti6sDVGnJvaYxwgbqNFsQPc/8TdINeKsa6BU5t5pvq3Xe0e1AKuqf1MB9Rg8 rJd8y3tMR8tb7FanntySkXVF08kMOatw/6BiveBQJXT2GSwfEqFJyba4UHur4y1T b7x9MqwDJ2R74Wzt+lR9vd5bKRdgQ0B4efrVZm1ENh3fDrxxEu2JN+sRKyMzF9j0 gyyrYnetzJUOpiJ6+f1XEtel -----END CERTIFICATE-----Generated at Mon Jan 19 23:20:33 2026 by rpki-client