This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/AsyGHzJQOw4zd3LuS6lMWQpXeT8.roa File: AsyGHzJQOw4zd3LuS6lMWQpXeT8.roa (raw, json) Hash identifier: oVI2PzLOsYAyibwXVjxt435nxj933iort+Vnz7eE9/I= Subject key identifier: 02:CC:86:1F:32:50:3B:0E:33:77:72:EE:4B:A9:4C:59:0A:57:79:3F Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Certificate serial: 019B7D5B0373A206AAA61671149472CA8B30 Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/AsyGHzJQOw4zd3LuS6lMWQpXeT8.roa Signing time: Fri 02 Jan 2026 06:17:55 +0000 ROA not before: Fri 02 Jan 2026 06:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 147293 IP address blocks: 89.43.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:03:73:a2:06:aa:a6:16:71:14:94:72:ca:8b:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Validity Not Before: Jan 2 06:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=02cc861f32503b0e337772ee4ba94c590a57793f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:0d:95:fd:f9:2c:22:16:8e:71:ed:1e:ec:5c: a0:04:f2:ba:b1:59:65:78:7c:dc:4e:b4:e9:3b:d5: a9:52:a8:61:34:f3:5e:28:38:21:4e:c7:98:ed:fe: f8:2d:8f:5c:3e:61:1b:36:af:33:7a:74:56:ea:79: ad:64:dd:dc:69:31:8f:dc:94:8a:05:84:51:2d:7e: 29:0e:81:67:3b:9d:16:9d:dc:b2:51:59:90:c4:8f: 3c:8a:22:45:36:87:9c:48:0f:90:6d:c4:8e:78:16: e8:2f:c7:a9:fa:3a:09:52:fd:1d:99:de:db:f2:54: 71:61:de:f5:5c:d7:79:fd:1d:9a:48:ac:2e:97:cd: 4b:54:8b:aa:7c:21:7d:f7:bf:01:74:31:2a:34:44: 07:39:34:89:49:2b:94:a1:9d:15:30:f0:70:fe:3f: c6:cd:ec:40:d7:d0:87:32:c6:57:7d:89:83:ce:c4: 4f:a7:cf:c8:84:42:21:cb:dc:a5:9d:11:d1:fe:92: d2:94:3f:d6:f8:58:08:5d:48:57:f5:a8:61:55:8d: 07:2c:0d:b0:ee:a4:b2:82:17:3e:63:88:4b:3e:06: c2:2d:32:ee:d7:8d:4e:2a:0a:f6:c3:5a:5c:93:33: 34:87:d7:2c:db:ae:89:b2:cb:61:1e:d5:30:8d:58: 7b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:CC:86:1F:32:50:3B:0E:33:77:72:EE:4B:A9:4C:59:0A:57:79:3F X509v3 Authority Key Identifier: keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/AsyGHzJQOw4zd3LuS6lMWQpXeT8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.43.141.0/24 Signature Algorithm: sha256WithRSAEncryption 12:a2:97:b0:10:d1:61:6f:91:b1:35:8f:38:e0:6a:5d:4c:bd: 50:ae:f3:22:61:32:0d:7e:e1:bf:71:25:92:3c:03:2a:3b:2f: 08:52:87:fb:71:b5:a4:e1:f2:08:e4:c0:3b:3c:df:2e:aa:87: f1:04:6b:82:e9:1b:b6:ef:9d:a3:37:6b:03:ea:e3:55:72:7f: a6:91:92:5b:c6:78:d7:5b:66:de:31:9d:2b:2a:76:8d:6d:06: 61:c4:4b:98:fa:5f:68:a6:a7:b2:2b:a6:e5:15:94:02:a2:7c: ee:e3:c9:35:46:40:06:a4:3c:c0:3b:76:92:10:aa:01:10:3e: bc:f2:ad:58:f7:6c:39:c0:44:ca:0c:e0:dd:b9:37:a7:f6:cd: 32:f2:34:e4:79:86:62:68:0c:46:d7:35:24:73:01:51:13:ff: 95:58:20:be:aa:a2:15:3c:de:65:ee:f4:97:f9:b4:1a:2e:24: 44:4c:9a:ab:fc:6f:4a:64:93:48:67:72:d1:68:d0:46:5e:5f: 0e:4e:f7:ba:eb:19:2c:c2:34:4b:64:e3:ea:6f:f0:7d:17:85: 76:7d:81:b9:48:d3:91:cf:b9:0c:c8:16:75:01:4c:af:7c:1f: 43:dd:b0:7b:96:ee:15:b5:f4:a0:68:86:82:0b:bb:ec:73:b7: 1f:c0:e4:e7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9WwNzogaqphZxFJRyyoswMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm MDFjMWQwHhcNMjYwMTAyMDYxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMmNjODYxZjMyNTAzYjBlMzM3NzcyZWU0YmE5NGM1OTBhNTc3OTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmA2V/fksIhaOce0e7FygBPK6sVll eHzcTrTpO9WpUqhhNPNeKDghTseY7f74LY9cPmEbNq8zenRW6nmtZN3caTGP3JSK BYRRLX4pDoFnO50WndyyUVmQxI88iiJFNoecSA+QbcSOeBboL8ep+joJUv0dmd7b 8lRxYd71XNd5/R2aSKwul81LVIuqfCF9978BdDEqNEQHOTSJSSuUoZ0VMPBw/j/G zexA19CHMsZXfYmDzsRPp8/IhEIhy9ylnRHR/pLSlD/W+FgIXUhX9ahhVY0HLA2w 7qSyghc+Y4hLPgbCLTLu141OKgr2w1pckzM0h9cs266JssthHtUwjVh7+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFALMhh8yUDsOM3dy7kupTFkKV3k/MB8GA1UdIwQY MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt YjQyZjIzZDgyOGMzLzEvQXN5R0h6SlFPdzR6ZDNMdVM2bE1XUXBYZVQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSuNMA0G CSqGSIb3DQEBCwUAA4IBAQASopewENFhb5GxNY844GpdTL1QrvMiYTINfuG/cSWS PAMqOy8IUof7cbWk4fII5MA7PN8uqofxBGuC6Ru2752jN2sD6uNVcn+mkZJbxnjX W2beMZ0rKnaNbQZhxEuY+l9opqeyK6blFZQConzu48k1RkAGpDzAO3aSEKoBED68 8q1Y92w5wETKDODduTen9s0y8jTkeYZiaAxG1zUkcwFRE/+VWCC+qqIVPN5l7vSX +bQaLiRETJqr/G9KZJNIZ3LRaNBGXl8OTve66xkswjRLZOPqb/B9F4V2fYG5SNOR z7kMyBZ1AUyvfB9D3bB7lu4VtfSgaIaCC7vsc7cfwOTn -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:19 2026 by rpki-client