This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Ns4sZNzyPoZOHwtEXBGQOnfWi5Q.roa File: Ns4sZNzyPoZOHwtEXBGQOnfWi5Q.roa (raw, json) Hash identifier: fgj5AOGivVs8ixom/2ZkL4vRmrA57sK+dsdluK8Lim8= Subject key identifier: 36:CE:2C:64:DC:F2:3E:86:4E:1F:0B:44:5C:11:90:3A:77:D6:8B:94 Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Certificate serial: 019B7D5B0CFC6D70F22826172E98BCA7D506 Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Ns4sZNzyPoZOHwtEXBGQOnfWi5Q.roa Signing time: Fri 02 Jan 2026 06:17:57 +0000 ROA not before: Fri 02 Jan 2026 06:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 401937 IP address blocks: 89.33.193.0/24 maxlen: 24 89.42.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:0c:fc:6d:70:f2:28:26:17:2e:98:bc:a7:d5:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Validity Not Before: Jan 2 06:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=36ce2c64dcf23e864e1f0b445c11903a77d68b94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e0:a6:cf:0b:67:88:79:aa:e2:32:f3:8c:89: 50:dc:fa:c9:bd:f2:11:c1:ca:92:d0:7e:ae:54:6f: 64:82:8a:26:f2:73:13:00:96:9d:18:12:b3:24:ae: 12:92:11:05:85:7a:d6:9c:a8:aa:13:5a:58:b9:d6: ce:b6:77:5a:2f:e9:ba:7a:0f:02:59:7a:c8:ee:71: 3e:e8:37:f2:0f:3e:d5:e9:10:39:77:52:e9:45:f3: e0:96:3f:68:8b:0d:fc:df:a2:a3:99:1d:70:9b:bd: e7:ed:b7:20:b9:53:4b:16:c6:db:d5:8c:97:03:f2: 05:02:18:ed:c2:ad:1e:d8:62:b9:69:c2:31:43:c1: 01:06:6c:3e:f7:91:1b:0b:93:7d:0a:db:66:60:ef: d6:2f:ca:86:ef:41:16:bd:8f:cb:14:4d:70:ab:08: 10:ed:4c:31:b6:6c:f0:71:dd:52:3c:2c:3c:ff:ba: f8:99:b9:70:f7:bb:1f:b9:a1:31:b6:a3:21:08:08: 8a:a8:24:04:43:fc:0e:2b:5b:73:e7:e6:0f:eb:c1: 35:fe:4c:3f:00:c3:75:34:93:50:ff:e8:c1:ae:a3: 8b:b0:85:b2:9d:cb:34:31:17:40:7f:0b:a0:4e:97: 84:04:3e:67:9c:e1:9d:4a:30:ce:9e:28:2b:be:ee: 29:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:CE:2C:64:DC:F2:3E:86:4E:1F:0B:44:5C:11:90:3A:77:D6:8B:94 X509v3 Authority Key Identifier: keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Ns4sZNzyPoZOHwtEXBGQOnfWi5Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.33.193.0/24 89.42.80.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:33:5b:4e:02:d6:20:ee:7e:17:10:c5:12:51:d4:c3:1f:24: 0c:49:dc:03:4a:22:a7:26:f3:91:2d:30:cd:8c:7c:b3:ef:c5: 32:7d:18:76:71:77:d1:28:c7:14:2b:49:b0:14:70:a4:5d:0a: b3:ff:81:d3:9c:f0:9a:58:09:3a:2b:69:e9:e5:2a:b3:72:3e: 99:3b:13:10:36:e2:a1:be:25:07:62:b6:27:e8:03:e2:7c:71: d3:42:2d:00:9e:e6:ec:32:14:08:b8:69:b2:cf:2a:5a:96:15: 9e:a8:a2:4f:07:f5:2f:67:8b:bd:23:af:d1:44:71:b8:7d:40: 3e:a8:54:42:43:82:aa:74:67:ed:89:7c:cf:da:58:40:c3:03: 80:3d:34:bb:5f:06:05:1a:b7:0c:2c:59:ff:ca:96:4d:7f:cb: 48:be:cc:d2:ee:77:f7:91:4b:5c:a6:f0:57:8e:6b:f5:ec:fc: fd:65:43:1c:9a:87:fe:06:4f:ee:cc:d4:5f:ec:42:7d:3b:78: 67:0b:fa:07:43:58:e4:33:e9:f7:42:37:f2:fc:1a:24:aa:79: c4:f2:cb:11:63:1d:a0:88:4d:81:b2:39:07:26:35:13:f9:cc: e4:71:a9:34:23:00:96:7c:61:a1:43:cf:9c:a8:c8:ca:82:64: b5:14:63:67 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9Wwz8bXDyKCYXLpi8p9UGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm MDFjMWQwHhcNMjYwMTAyMDYxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNmNlMmM2NGRjZjIzZTg2NGUxZjBiNDQ1YzExOTAzYTc3ZDY4Yjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseCmzwtniHmq4jLzjIlQ3PrJvfIR wcqS0H6uVG9kgoom8nMTAJadGBKzJK4SkhEFhXrWnKiqE1pYudbOtndaL+m6eg8C WXrI7nE+6DfyDz7V6RA5d1LpRfPglj9oiw3836KjmR1wm73n7bcguVNLFsbb1YyX A/IFAhjtwq0e2GK5acIxQ8EBBmw+95EbC5N9CttmYO/WL8qG70EWvY/LFE1wqwgQ 7Uwxtmzwcd1SPCw8/7r4mblw97sfuaExtqMhCAiKqCQEQ/wOK1tz5+YP68E1/kw/ AMN1NJNQ/+jBrqOLsIWyncs0MRdAfwugTpeEBD5nnOGdSjDOnigrvu4pbQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDbOLGTc8j6GTh8LRFwRkDp31ouUMB8GA1UdIwQY MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt YjQyZjIzZDgyOGMzLzEvTnM0c1pOenlQb1pPSHd0RVhCR1FPbmZXaTVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWSHBAwQA WSpQMA0GCSqGSIb3DQEBCwUAA4IBAQArM1tOAtYg7n4XEMUSUdTDHyQMSdwDSiKn JvORLTDNjHyz78UyfRh2cXfRKMcUK0mwFHCkXQqz/4HTnPCaWAk6K2np5Sqzcj6Z OxMQNuKhviUHYrYn6APifHHTQi0AnubsMhQIuGmyzypalhWeqKJPB/UvZ4u9I6/R RHG4fUA+qFRCQ4KqdGftiXzP2lhAwwOAPTS7XwYFGrcMLFn/ypZNf8tIvszS7nf3 kUtcpvBXjmv17Pz9ZUMcmof+Bk/uzNRf7EJ9O3hnC/oHQ1jkM+n3Qjfy/BokqnnE 8ssRYx2giE2BsjkHJjUT+czkcak0IwCWfGGhQ8+cqMjKgmS1FGNn -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:18 2026 by rpki-client