This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/FRjDaXdxigF7mQzONplOPiHTFho.roa File: FRjDaXdxigF7mQzONplOPiHTFho.roa (raw, json) Hash identifier: KBCsXhEPebLkZ0gaBZ+nxwT0GuCCo0/MAdwuTnajQd0= Subject key identifier: 15:18:C3:69:77:71:8A:01:7B:99:0C:CE:36:99:4E:3E:21:D3:16:1A Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Certificate serial: 019B9291ABB8775C073476BA32CD96BD2CA5 Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/FRjDaXdxigF7mQzONplOPiHTFho.roa Signing time: Tue 06 Jan 2026 09:09:38 +0000 ROA not before: Tue 06 Jan 2026 09:09:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5650 IP address blocks: 89.40.82.0/24 maxlen: 24 89.42.95.0/24 maxlen: 24 89.47.99.0/24 maxlen: 24 89.47.115.0/24 maxlen: 24 89.47.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 00:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:92:91:ab:b8:77:5c:07:34:76:ba:32:cd:96:bd:2c:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Validity Not Before: Jan 6 09:09:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1518c36977718a017b990cce36994e3e21d3161a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:74:9b:6b:c0:04:dd:64:f1:c1:da:93:08:36: e3:e9:20:d5:e8:94:13:c3:cb:55:3d:c7:17:2c:72: ef:68:d4:95:31:33:6f:b2:e9:16:15:9d:c6:e1:ca: cf:10:8c:a8:0d:91:3d:ee:7e:a0:91:cb:60:48:86: 02:5f:b2:b6:f7:d2:a0:c0:58:aa:85:0c:1c:48:42: 3c:5e:9c:7e:e7:d3:ae:4e:a1:4a:c4:6f:44:be:2c: 75:6c:b8:60:ef:51:9f:7b:72:bd:3f:bc:6e:d2:a9: 35:ba:5d:b6:07:d8:95:bb:0d:79:bb:29:eb:1f:2e: 77:68:8c:3c:90:3c:2a:26:72:33:5c:88:f4:a3:41: 2a:d3:9d:2f:f5:a7:bb:dc:c3:e7:43:21:44:d3:f3: 9e:36:ac:78:72:a2:51:99:7d:f3:13:51:06:3a:07: c8:c6:51:1f:d1:41:48:64:f7:0d:58:e3:07:93:01: 3c:8f:11:c1:c1:55:51:d5:4d:fb:b0:d4:67:a3:ac: 51:ac:5a:eb:e5:db:3e:35:a8:36:ce:14:30:78:10: 4e:2c:49:21:b2:66:53:62:3e:1c:3d:81:82:e8:df: 0b:c8:3f:0c:75:20:78:f0:ae:c2:68:35:3c:5f:a0: 64:6c:6e:e4:bf:fe:25:27:5a:cf:9c:c8:ed:85:2a: f2:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:18:C3:69:77:71:8A:01:7B:99:0C:CE:36:99:4E:3E:21:D3:16:1A X509v3 Authority Key Identifier: keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/FRjDaXdxigF7mQzONplOPiHTFho.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.40.82.0/24 89.42.95.0/24 89.47.99.0/24 89.47.115.0/24 89.47.119.0/24 Signature Algorithm: sha256WithRSAEncryption 43:7c:cf:89:67:79:45:37:2c:da:1f:7d:86:a1:c6:24:89:7d: 86:62:ac:c9:67:f0:2c:f7:d8:3f:36:94:4b:40:70:79:37:37: db:8c:d5:a0:1d:8a:1d:46:a0:19:1a:13:ff:5c:a5:03:82:c2: 44:ab:e9:22:4a:c2:a0:b8:23:55:aa:a3:c6:57:63:b0:22:bd: 2e:4a:6c:2a:69:85:f3:d3:78:fc:fb:44:c6:87:a8:20:df:fb: bc:96:2a:9f:b5:d7:22:76:fd:0b:50:e1:a7:15:a2:99:f0:54: f4:0f:25:1b:37:46:15:15:04:d2:b2:06:7d:fb:9a:e8:28:e7: 5a:7c:12:9c:57:89:b6:67:bc:98:dd:2f:10:79:1f:3d:ae:fe: a1:7c:cf:69:86:c7:02:4e:45:29:56:97:39:c9:27:9e:09:8d: 48:f5:0e:cb:13:18:fd:68:0b:09:30:c1:7a:91:42:4c:2e:ef: b9:f8:12:af:84:8d:5e:af:a6:b3:72:53:38:42:68:f6:2f:e4: 89:e4:56:35:b1:4b:13:99:25:b8:b9:49:8d:bf:aa:dd:de:ba: de:ac:b3:a0:db:b2:e4:bf:6e:08:09:60:b0:c8:07:ed:aa:c4: 96:9b:5d:53:02:1e:02:ad:08:49:ca:67:88:6d:82:06:c1:13: 82:92:50:7b -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZuSkau4d1wHNHa6Ms2WvSylMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm MDFjMWQwHhcNMjYwMTA2MDkwOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTE4YzM2OTc3NzE4YTAxN2I5OTBjY2UzNjk5NGUzZTIxZDMxNjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXSba8AE3WTxwdqTCDbj6SDV6JQT w8tVPccXLHLvaNSVMTNvsukWFZ3G4crPEIyoDZE97n6gkctgSIYCX7K299KgwFiq hQwcSEI8Xpx+59OuTqFKxG9Evix1bLhg71Gfe3K9P7xu0qk1ul22B9iVuw15uynr Hy53aIw8kDwqJnIzXIj0o0Eq050v9ae73MPnQyFE0/OeNqx4cqJRmX3zE1EGOgfI xlEf0UFIZPcNWOMHkwE8jxHBwVVR1U37sNRno6xRrFrr5ds+Nag2zhQweBBOLEkh smZTYj4cPYGC6N8LyD8MdSB48K7CaDU8X6BkbG7kv/4lJ1rPnMjthSrylwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFBUYw2l3cYoBe5kMzjaZTj4h0xYaMB8GA1UdIwQY MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt YjQyZjIzZDgyOGMzLzEvRlJqRGFYZHhpZ0Y3bVF6T05wbE9QaUhURmhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAWShSAwQA WSpfAwQAWS9jAwQAWS9zAwQAWS93MA0GCSqGSIb3DQEBCwUAA4IBAQBDfM+JZ3lF NyzaH32GocYkiX2GYqzJZ/As99g/NpRLQHB5NzfbjNWgHYodRqAZGhP/XKUDgsJE q+kiSsKguCNVqqPGV2OwIr0uSmwqaYXz03j8+0TGh6gg3/u8liqftdcidv0LUOGn FaKZ8FT0DyUbN0YVFQTSsgZ9+5roKOdafBKcV4m2Z7yY3S8QeR89rv6hfM9phscC TkUpVpc5ySeeCY1I9Q7LExj9aAsJMMF6kUJMLu+5+BKvhI1er6azclM4Qmj2L+SJ 5FY1sUsTmSW4uUmNv6rd3rrerLOg27Lkv24ICWCwyAftqsSWm11TAh4CrQhJymeI bYIGwROCklB7 -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:14 2026 by rpki-client