This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/4gWtwmeLwLMwYrpzD4np2IA_BOw.roa File: 4gWtwmeLwLMwYrpzD4np2IA_BOw.roa (raw, json) Hash identifier: qXdb1+/VjIyf7pImm4I21uLy/otpwoTpaHS4f6/yYqM= Subject key identifier: E2:05:AD:C2:67:8B:C0:B3:30:62:BA:73:0F:89:E9:D8:80:3F:04:EC Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Certificate serial: 019B7D5AFB93A7700038ECD0AD029B7990E0 Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/4gWtwmeLwLMwYrpzD4np2IA_BOw.roa Signing time: Fri 02 Jan 2026 06:17:53 +0000 ROA not before: Fri 02 Jan 2026 06:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41763 IP address blocks: 89.42.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:fb:93:a7:70:00:38:ec:d0:ad:02:9b:79:90:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Validity Not Before: Jan 2 06:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e205adc2678bc0b33062ba730f89e9d8803f04ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6f:16:1d:50:c8:7b:15:94:a0:37:a8:95:6c: 4a:f3:34:06:e6:8a:ae:ab:b6:77:73:c0:6f:ea:09: 50:58:91:e6:a1:30:47:21:62:6e:fe:91:d4:49:81: 61:7c:31:29:fb:96:45:f6:61:3a:a5:21:d6:15:ff: 5c:b1:02:dd:45:fb:e9:88:cf:a8:c3:1f:20:3c:ea: a4:a7:15:71:b4:5f:56:cf:ba:33:8a:4b:47:44:47: f9:41:46:a3:1c:48:d5:b2:f0:21:ea:d1:bc:f9:82: 09:67:50:e7:38:fc:03:62:a9:43:33:0b:08:70:96: 11:2d:bb:ce:50:57:c5:01:40:07:f7:3b:ea:3a:07: ed:cc:1a:66:b9:46:c0:22:8e:01:4c:db:02:6a:92: 60:59:50:6f:22:62:08:36:bd:2b:07:c5:93:a1:aa: 47:3e:d8:08:f8:bc:0b:1c:e6:b1:36:35:d4:f7:3b: 37:25:9d:6e:de:a9:2d:3d:8c:78:12:a3:1d:dd:f7: 20:04:bd:68:7d:68:12:f2:2a:79:3d:99:f3:11:cd: 02:7e:24:c9:c5:ef:1f:af:2e:91:f4:59:3a:93:c5: 58:56:6c:33:1c:93:3f:6e:45:97:fe:c9:0a:03:09: ef:04:9b:63:1e:38:ec:a9:0a:ea:95:69:ca:e3:55: 7d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:05:AD:C2:67:8B:C0:B3:30:62:BA:73:0F:89:E9:D8:80:3F:04:EC X509v3 Authority Key Identifier: keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/4gWtwmeLwLMwYrpzD4np2IA_BOw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.42.192.0/22 Signature Algorithm: sha256WithRSAEncryption 70:72:70:ab:3f:c9:e8:86:74:ce:bc:00:6a:e2:fc:dd:c8:fa: 84:93:12:fe:44:e0:7b:37:c0:1e:c5:65:16:d6:5b:00:ed:64: 8b:11:60:4a:92:aa:53:39:61:5b:93:76:14:f3:6e:e0:4d:07: 05:4b:99:70:0f:d4:e8:5b:26:3c:3a:ee:96:3e:92:f6:07:bc: 65:30:d1:64:0a:31:74:b4:a8:77:7f:b9:0d:9b:1a:9c:8c:9a: 62:e9:6d:e6:db:8e:a3:4b:7c:c8:16:78:23:b1:4f:f5:79:05: b7:be:fc:30:47:ef:62:5f:4a:6e:90:f2:1f:ef:dc:f0:1a:8d: 95:ce:5c:c0:fd:f8:83:5d:cb:64:36:5e:ed:f9:6e:f6:e4:a1: 5e:23:f0:16:15:0a:1d:44:58:ed:c8:3a:e1:03:2c:72:83:c5: fd:5c:73:dd:86:85:79:32:0b:89:1a:36:7f:bc:9f:a4:ff:0d: cd:5c:8d:20:04:6b:a6:72:64:c1:76:78:08:f5:39:b7:75:4b: 2a:17:11:20:af:e0:42:f2:d8:2d:c0:fb:f3:08:c2:2f:e1:b1: 68:de:84:9b:2a:5e:38:71:6b:c0:f9:f6:00:af:a9:43:12:db: 1b:ce:35:ee:df:82:46:17:6e:0c:54:60:d6:a0:a8:93:99:69: 12:9b:42:7c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9WvuTp3AAOOzQrQKbeZDgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm MDFjMWQwHhcNMjYwMTAyMDYxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjA1YWRjMjY3OGJjMGIzMzA2MmJhNzMwZjg5ZTlkODgwM2YwNGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr28WHVDIexWUoDeolWxK8zQG5oqu q7Z3c8Bv6glQWJHmoTBHIWJu/pHUSYFhfDEp+5ZF9mE6pSHWFf9csQLdRfvpiM+o wx8gPOqkpxVxtF9Wz7oziktHREf5QUajHEjVsvAh6tG8+YIJZ1DnOPwDYqlDMwsI cJYRLbvOUFfFAUAH9zvqOgftzBpmuUbAIo4BTNsCapJgWVBvImIINr0rB8WToapH PtgI+LwLHOaxNjXU9zs3JZ1u3qktPYx4EqMd3fcgBL1ofWgS8ip5PZnzEc0CfiTJ xe8fry6R9Fk6k8VYVmwzHJM/bkWX/skKAwnvBJtjHjjsqQrqlWnK41V9CQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOIFrcJni8CzMGK6cw+J6diAPwTsMB8GA1UdIwQY MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt YjQyZjIzZDgyOGMzLzEvNGdXdHdtZUx3TE13WXJwekQ0bnAySUFfQk93LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCWSrAMA0G CSqGSIb3DQEBCwUAA4IBAQBwcnCrP8nohnTOvABq4vzdyPqEkxL+ROB7N8AexWUW 1lsA7WSLEWBKkqpTOWFbk3YU827gTQcFS5lwD9ToWyY8Ou6WPpL2B7xlMNFkCjF0 tKh3f7kNmxqcjJpi6W3m246jS3zIFngjsU/1eQW3vvwwR+9iX0pukPIf79zwGo2V zlzA/fiDXctkNl7t+W725KFeI/AWFQodRFjtyDrhAyxyg8X9XHPdhoV5MguJGjZ/ vJ+k/w3NXI0gBGumcmTBdngI9Tm3dUsqFxEgr+BC8tgtwPvzCMIv4bFo3oSbKl44 cWvA+fYAr6lDEtsbzjXu34JGF24MVGDWoKiTmWkSm0J8 -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:14 2026 by rpki-client