This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/2j7-RLv71N-e9SR0zoXN9DM2Zng.roa File: 2j7-RLv71N-e9SR0zoXN9DM2Zng.roa (raw, json) Hash identifier: zjZGA16acPWDxug7/5DC9VlarOdlEjKK5jwVvLNa7k8= Subject key identifier: DA:3E:FE:44:BB:FB:D4:DF:9E:F5:24:74:CE:85:CD:F4:33:36:66:78 Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Certificate serial: 019B7D5B052C461C2BFD8C7B4FAD3E6930E5 Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/2j7-RLv71N-e9SR0zoXN9DM2Zng.roa Signing time: Fri 02 Jan 2026 06:17:55 +0000 ROA not before: Fri 02 Jan 2026 06:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202736 IP address blocks: 89.37.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:05:2c:46:1c:2b:fd:8c:7b:4f:ad:3e:69:30:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Validity Not Before: Jan 2 06:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=da3efe44bbfbd4df9ef52474ce85cdf433366678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:81:51:1e:90:15:4e:e5:9a:1b:06:8a:e6:0b: ff:91:57:2e:f0:71:48:cb:20:b0:4f:ac:6d:d7:25: 0b:32:d1:77:37:15:3f:ea:67:33:15:e6:3a:7e:fd: be:57:c6:60:60:19:03:0a:a5:cd:03:53:98:eb:fe: 15:3a:8f:97:2b:47:4b:42:f9:5b:a8:e2:77:ff:53: 1a:6b:d3:de:70:f7:28:bc:24:97:a7:0d:ab:a3:ac: ef:c6:8a:c5:73:2f:10:08:f2:2a:9d:02:0c:19:df: 7e:3b:04:e3:ca:fd:b3:54:74:89:d7:44:af:df:c8: c6:37:53:45:ee:69:bc:4a:5e:30:16:ce:47:a1:70: ea:f1:5c:8a:0c:a6:88:47:02:22:b8:21:ca:82:14: 9f:d1:68:d6:44:05:47:a8:e2:53:f2:79:4f:26:49: b3:4f:d8:67:e4:c1:15:83:52:6c:19:9b:29:fb:43: 2e:24:9b:d9:9e:e0:2d:24:6d:dd:9b:ec:62:2c:a9: 7e:05:65:f3:51:d0:78:83:80:d6:a3:da:9c:7c:7c: c6:cb:7c:20:e8:58:9d:84:73:45:a3:42:3d:a8:89: b1:0b:a8:d5:14:66:38:01:7a:80:e7:6c:88:e5:62: 46:2d:5b:57:c2:78:6b:dd:ea:15:88:d1:f3:27:5d: 11:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:3E:FE:44:BB:FB:D4:DF:9E:F5:24:74:CE:85:CD:F4:33:36:66:78 X509v3 Authority Key Identifier: keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/2j7-RLv71N-e9SR0zoXN9DM2Zng.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.37.118.0/24 Signature Algorithm: sha256WithRSAEncryption 33:71:ad:10:a5:55:bb:3d:f3:9b:6a:bb:fe:14:ba:3a:8e:da: 9b:bd:29:38:07:38:20:66:12:44:fe:0d:ae:16:83:65:e5:fb: 02:99:1c:d0:7b:4b:1c:e5:18:83:1d:2e:cb:13:b4:5e:eb:e8: 7e:3c:74:12:03:d0:d0:e3:0a:ba:05:f9:03:47:e0:69:27:e5: 13:21:a3:56:c1:a8:9e:30:2a:f8:72:78:32:77:fd:cb:1f:99: 5d:d2:ea:f2:a3:a2:0d:d8:d0:29:b1:05:57:4a:43:06:82:37: 28:34:69:d3:c6:88:a4:c6:47:5a:1b:36:20:4d:71:b4:08:1c: c5:cb:bf:ad:c6:dd:3e:39:b9:1c:1a:14:bb:5e:ef:31:09:9f: aa:55:01:37:69:b5:1d:5d:9e:1c:37:4e:ef:a6:60:01:a1:5f: 7e:b2:84:8a:01:55:dc:4d:18:4e:ab:69:53:4f:a8:7b:30:d0: c8:f0:1c:f7:5f:46:04:b5:89:0e:7b:1c:e3:fd:fd:b8:9f:74: 0c:5c:cd:d3:fa:fe:40:a1:57:eb:86:50:e8:a8:87:e2:de:1d: ae:15:c7:1a:8c:a7:63:16:08:2d:ef:bf:a4:c4:aa:e0:aa:12: c0:90:2d:38:81:6d:75:32:f9:9d:f5:a8:1c:41:7c:df:2b:12: 50:2d:e4:54 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9WwUsRhwr/Yx7T60+aTDlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm MDFjMWQwHhcNMjYwMTAyMDYxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTNlZmU0NGJiZmJkNGRmOWVmNTI0NzRjZTg1Y2RmNDMzMzY2Njc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3IFRHpAVTuWaGwaK5gv/kVcu8HFI yyCwT6xt1yULMtF3NxU/6mczFeY6fv2+V8ZgYBkDCqXNA1OY6/4VOo+XK0dLQvlb qOJ3/1Maa9PecPcovCSXpw2ro6zvxorFcy8QCPIqnQIMGd9+OwTjyv2zVHSJ10Sv 38jGN1NF7mm8Sl4wFs5HoXDq8VyKDKaIRwIiuCHKghSf0WjWRAVHqOJT8nlPJkmz T9hn5MEVg1JsGZsp+0MuJJvZnuAtJG3dm+xiLKl+BWXzUdB4g4DWo9qcfHzGy3wg 6FidhHNFo0I9qImxC6jVFGY4AXqA52yI5WJGLVtXwnhr3eoViNHzJ10RKQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNo+/kS7+9TfnvUkdM6FzfQzNmZ4MB8GA1UdIwQY MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt YjQyZjIzZDgyOGMzLzEvMmo3LVJMdjcxTi1lOVNSMHpvWE45RE0yWm5nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSV2MA0G CSqGSIb3DQEBCwUAA4IBAQAzca0QpVW7PfObarv+FLo6jtqbvSk4BzggZhJE/g2u FoNl5fsCmRzQe0sc5RiDHS7LE7Re6+h+PHQSA9DQ4wq6BfkDR+BpJ+UTIaNWwaie MCr4cngyd/3LH5ld0uryo6IN2NApsQVXSkMGgjcoNGnTxoikxkdaGzYgTXG0CBzF y7+txt0+ObkcGhS7Xu8xCZ+qVQE3abUdXZ4cN07vpmABoV9+soSKAVXcTRhOq2lT T6h7MNDI8Bz3X0YEtYkOexzj/f24n3QMXM3T+v5AoVfrhlDoqIfi3h2uFccajKdj Fggt77+kxKrgqhLAkC04gW11Mvmd9agcQXzfKxJQLeRU -----END CERTIFICATE-----Generated at Sun Jan 11 07:31:17 2026 by rpki-client