This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/GE8du5gQXaUDagMRSQAeyje9zD0.roa File: GE8du5gQXaUDagMRSQAeyje9zD0.roa (raw, json) Hash identifier: x1usQodr6+uB0mzcbHMaENAG55AejQGOm6n5jfxJBFs= Subject key identifier: 18:4F:1D:BB:98:10:5D:A5:03:6A:03:11:49:00:1E:CA:37:BD:CC:3D Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Certificate serial: 019B7D5B011C55DF8DC550DBD66FBF11E1E7 Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/GE8du5gQXaUDagMRSQAeyje9zD0.roa Signing time: Fri 02 Jan 2026 06:17:54 +0000 ROA not before: Fri 02 Jan 2026 06:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60604 IP address blocks: 89.35.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:01:1c:55:df:8d:c5:50:db:d6:6f:bf:11:e1:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Validity Not Before: Jan 2 06:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=184f1dbb98105da5036a031149001eca37bdcc3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:5d:c6:ab:c8:52:53:d8:2f:1f:28:2a:64:8f: 79:a9:1f:44:7a:71:78:c1:4c:e9:78:6b:14:cf:02: e7:8c:c1:4d:52:99:64:31:e1:bc:d0:b7:42:de:fa: a2:0f:07:fd:0a:82:53:ad:41:8d:75:04:bb:58:43: 99:7b:74:80:8d:bd:f3:fb:c6:fd:cd:ca:f2:47:73: 56:74:c9:7b:45:3f:20:98:c2:d8:53:5d:25:a7:3f: 78:42:07:c5:15:12:fb:5e:d2:7b:46:b3:8e:d3:57: 3c:b6:34:2a:e6:5f:4c:62:27:a6:40:ae:bf:3c:39: f0:3f:5a:07:aa:cd:fd:cf:c0:38:fe:0e:73:c8:b4: 1c:ca:5e:55:1c:d8:26:de:1c:5c:b0:6f:c7:c4:59: b5:4c:a5:62:f9:76:8d:66:17:14:93:98:eb:07:62: 9a:f0:7e:26:80:ed:61:84:7e:0a:6b:56:5e:eb:bd: 7a:fb:6e:b2:09:7e:fa:60:b2:87:76:ca:2d:9f:e4: 07:96:5c:4b:ba:38:4d:ab:0e:be:55:05:ed:e9:63: b4:37:fa:61:4a:5e:5d:9b:ee:7e:25:fb:ac:e0:a6: 80:ea:5d:e9:8b:6f:16:fb:05:12:2a:11:43:7a:35: 63:09:f2:09:c6:81:3a:90:1b:7b:eb:06:e2:4f:14: 76:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:4F:1D:BB:98:10:5D:A5:03:6A:03:11:49:00:1E:CA:37:BD:CC:3D X509v3 Authority Key Identifier: keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/GE8du5gQXaUDagMRSQAeyje9zD0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.35.158.0/24 Signature Algorithm: sha256WithRSAEncryption 59:7d:a0:02:90:ae:b3:b8:bc:5f:37:04:64:d7:4d:0d:a5:c2: 5c:06:45:c3:a4:cb:87:fb:34:ab:a9:75:af:c7:3c:a3:d1:40: c2:94:a1:5a:92:91:d6:4e:a9:ec:37:8b:40:63:cc:21:82:3d: 36:a2:f7:e4:26:2d:63:f2:f4:de:34:b3:00:7e:91:ba:77:04: 6c:7c:9d:e9:d5:07:00:91:01:58:45:e2:70:4c:51:c8:c0:29: 47:01:26:3e:75:68:ce:23:ca:9f:6a:ea:8c:cb:22:56:75:99: e1:8d:ce:51:4c:2a:11:02:78:3d:a6:a6:45:81:f8:49:4a:a4: bf:66:44:f8:11:08:9b:08:57:bc:bc:e4:a0:5a:94:62:39:df: 75:39:9d:61:34:53:eb:36:d4:99:d5:95:d8:6c:f2:8a:e1:be: d8:ef:77:f9:86:04:93:b6:70:12:d0:96:cb:d1:55:78:40:d3: 1a:25:14:ef:70:ba:22:59:dc:b3:4c:d3:e9:29:f8:36:2a:fd: 3b:25:dc:d6:74:77:b1:f8:40:7c:cb:d4:ab:ac:42:ed:07:55: f0:62:fa:7f:3f:64:00:e7:1b:d2:e9:d3:7c:2b:5f:e6:ff:b0: 7c:db:f5:3d:a0:4a:05:83:ab:40:cb:f2:56:09:49:e1:b2:74: 76:f4:02:70 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9WwEcVd+NxVDb1m+/EeHnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm MDFjMWQwHhcNMjYwMTAyMDYxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODRmMWRiYjk4MTA1ZGE1MDM2YTAzMTE0OTAwMWVjYTM3YmRjYzNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAll3Gq8hSU9gvHygqZI95qR9EenF4 wUzpeGsUzwLnjMFNUplkMeG80LdC3vqiDwf9CoJTrUGNdQS7WEOZe3SAjb3z+8b9 zcryR3NWdMl7RT8gmMLYU10lpz94QgfFFRL7XtJ7RrOO01c8tjQq5l9MYiemQK6/ PDnwP1oHqs39z8A4/g5zyLQcyl5VHNgm3hxcsG/HxFm1TKVi+XaNZhcUk5jrB2Ka 8H4mgO1hhH4Ka1Ze6716+26yCX76YLKHdsotn+QHllxLujhNqw6+VQXt6WO0N/ph Sl5dm+5+Jfus4KaA6l3pi28W+wUSKhFDejVjCfIJxoE6kBt76wbiTxR2AQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBhPHbuYEF2lA2oDEUkAHso3vcw9MB8GA1UdIwQY MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt YjQyZjIzZDgyOGMzLzEvR0U4ZHU1Z1FYYVVEYWdNUlNRQWV5amU5ekQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSOeMA0G CSqGSIb3DQEBCwUAA4IBAQBZfaACkK6zuLxfNwRk100NpcJcBkXDpMuH+zSrqXWv xzyj0UDClKFakpHWTqnsN4tAY8whgj02ovfkJi1j8vTeNLMAfpG6dwRsfJ3p1QcA kQFYReJwTFHIwClHASY+dWjOI8qfauqMyyJWdZnhjc5RTCoRAng9pqZFgfhJSqS/ ZkT4EQibCFe8vOSgWpRiOd91OZ1hNFPrNtSZ1ZXYbPKK4b7Y73f5hgSTtnAS0JbL 0VV4QNMaJRTvcLoiWdyzTNPpKfg2Kv07JdzWdHex+EB8y9SrrELtB1XwYvp/P2QA 5xvS6dN8K1/m/7B82/U9oEoFg6tAy/JWCUnhsnR29AJw -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:25 2026 by rpki-client