This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/11UuMfiOl5z-aj9ksjypBD8HxIo.roa File: 11UuMfiOl5z-aj9ksjypBD8HxIo.roa (raw, json) Hash identifier: bEpANSmx9WdnIqLzMsQwC61cdrWNRrnGAuVcV+SytpQ= Subject key identifier: D7:55:2E:31:F8:8E:97:9C:FE:6A:3F:64:B2:3C:A9:04:3F:07:C4:8A Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Certificate serial: 019B7D5AFC4142165795B3DDA88601F4A7A0 Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/11UuMfiOl5z-aj9ksjypBD8HxIo.roa Signing time: Fri 02 Jan 2026 06:17:53 +0000 ROA not before: Fri 02 Jan 2026 06:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42689 IP address blocks: 89.33.195.0/24 maxlen: 24 89.42.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:fc:41:42:16:57:95:b3:dd:a8:86:01:f4:a7:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Validity Not Before: Jan 2 06:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d7552e31f88e979cfe6a3f64b23ca9043f07c48a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:58:17:52:b8:f3:dd:c5:c0:97:74:61:7e:44: 88:68:73:76:6e:ce:16:c7:b4:57:35:33:85:6c:26: 08:bf:fc:f1:3f:9e:fb:a8:21:4a:8c:03:5f:d5:93: 49:f1:87:a3:0b:8c:7c:e7:b6:91:99:8a:18:18:7e: 3e:0a:46:43:04:b8:ae:aa:e3:c7:c4:37:05:3e:16: 1f:58:df:0a:dc:cf:e5:62:6a:e3:63:94:ac:ae:23: 76:39:78:02:4d:33:1f:67:8e:3f:04:32:ac:aa:6b: 75:f7:eb:ac:02:81:49:20:04:26:d8:cd:2a:64:71: ce:e1:19:0f:78:2e:5e:2e:71:47:a2:8e:1f:28:9f: 2d:d3:1f:f9:dd:5f:35:d4:8c:e3:95:40:33:f6:37: fb:d9:76:7c:d4:2e:8d:9e:87:9c:8e:78:09:ac:bf: 3f:e4:73:9f:9f:4b:58:66:3a:0a:8d:c4:d6:78:64: a1:03:6d:07:49:10:88:0c:85:4e:28:70:c1:8b:0b: b8:d8:0f:ba:f7:b2:05:05:9b:91:e0:82:59:a6:68: be:6b:56:dc:b5:f4:35:3d:7d:47:2e:4d:f4:58:93: 8c:44:67:bf:a5:e4:4e:b7:c9:0e:5f:ec:04:5b:a8: 0c:bd:c5:72:dd:df:a2:0c:a7:5a:83:76:e0:71:3c: 27:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:55:2E:31:F8:8E:97:9C:FE:6A:3F:64:B2:3C:A9:04:3F:07:C4:8A X509v3 Authority Key Identifier: keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/11UuMfiOl5z-aj9ksjypBD8HxIo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.33.195.0/24 89.42.83.0/24 Signature Algorithm: sha256WithRSAEncryption 04:29:65:4e:2c:50:12:12:97:59:a8:fc:4e:78:d7:11:17:ca: 90:aa:f7:c7:92:70:d4:d3:80:fb:9c:3b:6d:3e:2c:4f:a9:9b: 49:48:44:fd:b9:4a:fc:75:4f:59:93:79:60:88:53:12:e0:9d: ab:a1:8f:07:d5:7c:28:46:31:07:e7:f0:a0:c0:19:da:92:a1: fc:ac:89:86:8a:80:c6:00:8d:4c:23:a2:84:f1:42:16:00:30: 68:58:fa:ab:d9:a2:a8:b5:6f:7f:3d:20:32:0a:aa:9c:4e:5f: e1:e9:98:12:f7:e2:a7:13:70:66:8d:e8:dc:94:01:c4:df:15: a9:4c:6a:fe:e3:a3:cd:6c:57:f9:77:8b:6e:00:5d:69:bc:bb: b2:26:c2:6a:78:93:c6:d9:fc:66:cd:03:ac:10:49:b4:1c:32: d8:23:c5:92:44:e7:11:96:06:30:73:51:f3:12:5e:28:4e:5c: 9c:5f:6d:b3:ec:30:a7:16:e1:6e:8e:fa:7e:ee:46:40:ce:21: f5:e3:63:8a:db:6e:5d:2f:9d:de:bd:59:cc:5f:dc:82:68:cb: 06:5f:91:69:cf:bc:ef:a1:7f:d8:33:58:a5:d9:96:09:86:67: 9a:b7:0f:fe:95:48:44:15:85:7f:20:9b:e8:3e:fe:fc:c4:2e: ee:9e:ee:99 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9WvxBQhZXlbPdqIYB9KegMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm MDFjMWQwHhcNMjYwMTAyMDYxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzU1MmUzMWY4OGU5NzljZmU2YTNmNjRiMjNjYTkwNDNmMDdjNDhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6FgXUrjz3cXAl3RhfkSIaHN2bs4W x7RXNTOFbCYIv/zxP577qCFKjANf1ZNJ8YejC4x857aRmYoYGH4+CkZDBLiuquPH xDcFPhYfWN8K3M/lYmrjY5SsriN2OXgCTTMfZ44/BDKsqmt19+usAoFJIAQm2M0q ZHHO4RkPeC5eLnFHoo4fKJ8t0x/53V811IzjlUAz9jf72XZ81C6NnoecjngJrL8/ 5HOfn0tYZjoKjcTWeGShA20HSRCIDIVOKHDBiwu42A+697IFBZuR4IJZpmi+a1bc tfQ1PX1HLk30WJOMRGe/peROt8kOX+wEW6gMvcVy3d+iDKdag3bgcTwnyQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNdVLjH4jpec/mo/ZLI8qQQ/B8SKMB8GA1UdIwQY MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt YjQyZjIzZDgyOGMzLzEvMTFVdU1maU9sNXotYWo5a3NqeXBCRDhIeElvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWSHDAwQA WSpTMA0GCSqGSIb3DQEBCwUAA4IBAQAEKWVOLFASEpdZqPxOeNcRF8qQqvfHknDU 04D7nDttPixPqZtJSET9uUr8dU9Zk3lgiFMS4J2roY8H1XwoRjEH5/CgwBnakqH8 rImGioDGAI1MI6KE8UIWADBoWPqr2aKotW9/PSAyCqqcTl/h6ZgS9+KnE3Bmjejc lAHE3xWpTGr+46PNbFf5d4tuAF1pvLuyJsJqeJPG2fxmzQOsEEm0HDLYI8WSROcR lgYwc1HzEl4oTlycX22z7DCnFuFujvp+7kZAziH142OK225dL53evVnMX9yCaMsG X5Fpz7zvoX/YM1il2ZYJhmeatw/+lUhEFYV/IJvoPv78xC7unu6Z -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:51 2026 by rpki-client