This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Lb9OwNM-9ulVONU9krvKWCvBt_k.roa File: Lb9OwNM-9ulVONU9krvKWCvBt_k.roa (raw, json) Hash identifier: Q9Pob1NH5fVZBQGubnYnySAZjfiHzLcvtGgKd2HTn+Y= Subject key identifier: 2D:BF:4E:C0:D3:3E:F6:E9:55:38:D5:3D:92:BB:CA:58:2B:C1:B7:F9 Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Certificate serial: 019B7D5B0678BF7BB63314C97FBB2CECD205 Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Lb9OwNM-9ulVONU9krvKWCvBt_k.roa Signing time: Fri 02 Jan 2026 06:17:56 +0000 ROA not before: Fri 02 Jan 2026 06:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207483 IP address blocks: 89.33.12.0/24 maxlen: 24 89.46.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:06:78:bf:7b:b6:33:14:c9:7f:bb:2c:ec:d2:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Validity Not Before: Jan 2 06:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2dbf4ec0d33ef6e95538d53d92bbca582bc1b7f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:90:e3:82:fa:f6:d9:51:e1:c2:d7:21:8d:bb: 56:19:40:d2:97:45:d4:fb:44:93:7d:d2:ac:ba:1f: 4b:45:f8:82:a6:1a:aa:20:7d:07:9c:60:0f:06:af: b5:7b:92:98:ea:31:4e:fa:8c:0c:6e:a8:e7:2a:4e: 62:af:3a:8a:21:cc:a8:53:01:2e:c6:86:1c:8e:52: 86:78:9b:f1:29:7c:a3:84:1b:3e:8c:06:5d:db:56: d4:5d:95:da:d9:0e:9b:8e:f0:ea:31:cc:7c:b1:92: 6d:83:b8:12:08:f9:6b:f9:6c:23:16:d5:e7:3c:08: a9:80:0a:7b:df:c4:c0:77:cf:d3:e1:75:1f:e4:7c: ec:26:ca:03:23:81:45:d0:65:a3:5d:88:53:f1:25: 55:a0:08:e8:12:a8:63:2e:aa:86:0d:62:2c:41:37: e3:83:18:e1:bf:80:dd:cc:88:00:1a:c7:45:65:fc: 7a:6e:d5:72:45:00:16:8c:b9:c1:a3:64:2b:c0:69: 54:52:cf:10:52:a1:23:a9:f6:30:2a:2e:f2:e2:8a: df:19:c5:9a:97:74:07:69:60:b1:f5:85:72:fa:6b: 45:9a:f9:8f:9b:0a:21:90:b1:26:7e:7c:d7:f3:d3: 29:cf:7f:bb:9f:7d:39:82:30:71:2c:e3:3b:9c:9c: 56:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:BF:4E:C0:D3:3E:F6:E9:55:38:D5:3D:92:BB:CA:58:2B:C1:B7:F9 X509v3 Authority Key Identifier: keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Lb9OwNM-9ulVONU9krvKWCvBt_k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.33.12.0/24 89.46.1.0/24 Signature Algorithm: sha256WithRSAEncryption 18:c0:15:c0:25:26:fd:6d:7f:c2:c1:c6:e8:44:b8:f0:07:10: e0:b1:77:ce:bc:48:01:e3:95:17:81:76:36:d2:73:84:a2:ea: e0:2b:85:d1:d2:6a:46:58:1c:2d:84:48:68:97:52:5a:89:97: 26:16:ba:34:41:e9:b5:d9:06:38:a4:18:c3:ab:1b:bf:93:53: 76:39:fe:2f:9e:ee:67:9b:a8:57:38:9c:48:30:29:d7:84:fb: bf:3a:0e:ba:e2:14:09:2f:2f:a0:19:cf:05:9c:19:4e:55:61: 0b:34:2a:15:5e:b3:34:89:05:00:85:4a:91:86:6f:6f:42:d0: cc:dc:43:9c:f8:71:17:04:d8:29:e4:bc:a0:37:5d:be:16:d9: 0e:e5:45:dc:10:9d:97:f5:28:e4:09:dc:a4:fd:bf:7b:a0:88: e5:18:7e:82:9f:56:aa:3c:c3:cf:ad:d9:40:ff:22:b5:30:a6: a9:c5:53:0d:47:64:90:b4:e9:1e:1a:b8:de:7e:bc:82:11:ba: a6:45:3d:8e:3b:f4:72:40:ee:03:8a:e9:95:e8:19:8a:df:f2: a3:b4:a6:56:07:e7:21:1e:15:9d:5d:51:5c:be:18:e5:93:70: bd:26:22:f5:08:f9:82:05:e0:17:28:be:a9:e0:e4:7c:d5:44: d0:9f:53:94 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9WwZ4v3u2MxTJf7ss7NIFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm MDFjMWQwHhcNMjYwMTAyMDYxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZGJmNGVjMGQzM2VmNmU5NTUzOGQ1M2Q5MmJiY2E1ODJiYzFiN2Y5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJDjgvr22VHhwtchjbtWGUDSl0XU +0STfdKsuh9LRfiCphqqIH0HnGAPBq+1e5KY6jFO+owMbqjnKk5irzqKIcyoUwEu xoYcjlKGeJvxKXyjhBs+jAZd21bUXZXa2Q6bjvDqMcx8sZJtg7gSCPlr+WwjFtXn PAipgAp738TAd8/T4XUf5HzsJsoDI4FF0GWjXYhT8SVVoAjoEqhjLqqGDWIsQTfj gxjhv4DdzIgAGsdFZfx6btVyRQAWjLnBo2QrwGlUUs8QUqEjqfYwKi7y4orfGcWa l3QHaWCx9YVy+mtFmvmPmwohkLEmfnzX89Mpz3+7n305gjBxLOM7nJxW/wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFC2/TsDTPvbpVTjVPZK7ylgrwbf5MB8GA1UdIwQY MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt YjQyZjIzZDgyOGMzLzEvTGI5T3dOTS05dWxWT05VOWtydktXQ3ZCdF9rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWSEMAwQA WS4BMA0GCSqGSIb3DQEBCwUAA4IBAQAYwBXAJSb9bX/CwcboRLjwBxDgsXfOvEgB 45UXgXY20nOEourgK4XR0mpGWBwthEhol1JaiZcmFro0Qem12QY4pBjDqxu/k1N2 Of4vnu5nm6hXOJxIMCnXhPu/Og664hQJLy+gGc8FnBlOVWELNCoVXrM0iQUAhUqR hm9vQtDM3EOc+HEXBNgp5LygN12+FtkO5UXcEJ2X9SjkCdyk/b97oIjlGH6Cn1aq PMPPrdlA/yK1MKapxVMNR2SQtOkeGrjefryCEbqmRT2OO/RyQO4DiumV6BmK3/Kj tKZWB+chHhWdXVFcvhjlk3C9JiL1CPmCBeAXKL6p4OR81UTQn1OU -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:14 2026 by rpki-client