This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/2x30_KdRDMWLmVnV70mb2DVGuiU.roa File: 2x30_KdRDMWLmVnV70mb2DVGuiU.roa (raw, json) Hash identifier: 7le9J83NevHt98DAqy66u6pByTjnktNZwsmUd8nH/lk= Subject key identifier: DB:1D:F4:FC:A7:51:0C:C5:8B:99:59:D5:EF:49:9B:D8:35:46:BA:25 Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Certificate serial: 019B7D5B03D0F507A1BBDF14C844AABBA8DB Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/2x30_KdRDMWLmVnV70mb2DVGuiU.roa Signing time: Fri 02 Jan 2026 06:17:55 +0000 ROA not before: Fri 02 Jan 2026 06:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198883 IP address blocks: 89.33.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 00:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:03:d0:f5:07:a1:bb:df:14:c8:44:aa:bb:a8:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Validity Not Before: Jan 2 06:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=db1df4fca7510cc58b9959d5ef499bd83546ba25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:3d:be:14:d3:0d:39:ef:5c:4a:20:bb:7e:ad: 0c:aa:ed:3a:c0:f0:d5:54:6f:54:df:8a:5e:b4:eb: df:25:b6:1c:5f:6e:db:74:ad:9e:d3:2e:7a:41:c2: 32:fd:9c:45:88:99:24:05:ad:19:43:40:c7:d1:8d: 19:17:a6:5b:eb:2a:58:2f:e3:89:b7:8f:07:5d:58: 8c:09:f7:1a:02:fc:ba:87:3e:bf:f8:5d:c1:5b:58: 32:48:6d:e0:63:de:14:53:ce:ad:9c:be:c1:0c:67: 59:33:3c:d4:1f:26:26:dd:f6:f9:6e:fd:cd:71:a1: 41:c5:97:a9:48:30:b7:2f:59:cd:81:40:1f:9d:b9: aa:2d:0e:ee:37:8e:2e:6f:a6:5d:c5:1d:cc:8a:49: c7:64:7c:72:07:b9:7a:7d:41:64:bc:ed:e5:e0:21: 1f:7b:f9:56:1c:76:63:1d:49:10:99:ef:ca:a8:20: d4:db:2a:50:2d:24:a7:dc:a8:bb:1d:5d:fa:74:40: 75:35:27:85:ce:73:a3:ab:bc:ef:f3:c8:59:44:42: ba:61:b7:61:eb:02:57:33:9b:29:1f:2e:d7:f4:37: 72:82:2a:98:bf:ed:45:c8:b2:1b:ec:cd:0a:da:6e: bb:84:96:3f:a3:c4:6a:86:0c:b5:78:e3:39:7b:7e: ce:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:1D:F4:FC:A7:51:0C:C5:8B:99:59:D5:EF:49:9B:D8:35:46:BA:25 X509v3 Authority Key Identifier: keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/2x30_KdRDMWLmVnV70mb2DVGuiU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.33.194.0/24 Signature Algorithm: sha256WithRSAEncryption 46:3e:34:8d:06:72:f1:a4:13:4c:29:66:3a:63:e4:39:55:39: 71:23:8b:f4:6d:2d:b0:60:db:66:05:87:fa:36:19:54:ac:90: 6b:55:8e:0d:55:88:c2:88:17:cb:20:de:8b:c5:7d:2c:fa:2c: 16:43:fd:67:1a:dc:87:2e:d0:1f:7c:b4:e3:3a:bd:39:f4:a6: f2:33:15:a8:b7:d3:8c:09:9a:09:34:d4:a5:e8:7f:f2:25:2c: 31:9e:63:c4:c2:a7:15:53:55:ea:a7:5e:eb:dd:28:d9:d5:2a: 5e:21:29:c6:93:a0:30:35:5d:97:a9:3e:7c:e3:d8:50:86:f7: 0f:cf:80:01:85:a3:47:e5:01:64:0a:90:9b:0a:f4:f9:70:ab: 37:58:0f:0b:64:34:59:25:ac:72:6b:96:c9:bc:17:06:4a:ca: c9:a6:2e:bb:e6:2e:0b:85:75:cd:65:eb:eb:10:8d:19:46:e5: d0:ae:59:fd:f9:f7:d7:8c:fb:e3:23:ba:e6:9a:c4:77:48:66: ea:3f:03:a0:67:a9:8e:4c:68:49:cd:34:b2:2d:a8:b6:9e:11: 57:6e:ff:91:ab:73:7a:f8:4a:20:74:e3:00:3b:70:87:50:f3: 80:2d:2a:6e:6f:0a:19:3e:a0:e0:62:0f:c1:4b:8b:1d:4a:e2: 98:62:87:29 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9WwPQ9Qehu98UyESqu6jbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm MDFjMWQwHhcNMjYwMTAyMDYxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYjFkZjRmY2E3NTEwY2M1OGI5OTU5ZDVlZjQ5OWJkODM1NDZiYTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0T2+FNMNOe9cSiC7fq0Mqu06wPDV VG9U34petOvfJbYcX27bdK2e0y56QcIy/ZxFiJkkBa0ZQ0DH0Y0ZF6Zb6ypYL+OJ t48HXViMCfcaAvy6hz6/+F3BW1gySG3gY94UU86tnL7BDGdZMzzUHyYm3fb5bv3N caFBxZepSDC3L1nNgUAfnbmqLQ7uN44ub6ZdxR3MiknHZHxyB7l6fUFkvO3l4CEf e/lWHHZjHUkQme/KqCDU2ypQLSSn3Ki7HV36dEB1NSeFznOjq7zv88hZREK6Ybdh 6wJXM5spHy7X9DdygiqYv+1FyLIb7M0K2m67hJY/o8Rqhgy1eOM5e37OFQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNsd9PynUQzFi5lZ1e9Jm9g1RrolMB8GA1UdIwQY MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt YjQyZjIzZDgyOGMzLzEvMngzMF9LZFJETVdMbVZuVjcwbWIyRFZHdWlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSHCMA0G CSqGSIb3DQEBCwUAA4IBAQBGPjSNBnLxpBNMKWY6Y+Q5VTlxI4v0bS2wYNtmBYf6 NhlUrJBrVY4NVYjCiBfLIN6LxX0s+iwWQ/1nGtyHLtAffLTjOr059KbyMxWot9OM CZoJNNSl6H/yJSwxnmPEwqcVU1Xqp17r3SjZ1SpeISnGk6AwNV2XqT5849hQhvcP z4ABhaNH5QFkCpCbCvT5cKs3WA8LZDRZJaxya5bJvBcGSsrJpi675i4LhXXNZevr EI0ZRuXQrln9+ffXjPvjI7rmmsR3SGbqPwOgZ6mOTGhJzTSyLai2nhFXbv+Rq3N6 +EogdOMAO3CHUPOALSpubwoZPqDgYg/BS4sdSuKYYocp -----END CERTIFICATE-----Generated at Fri Jan 9 10:39:20 2026 by rpki-client