This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Pm8HvPdRNsrqIExd4ddVuBb2rB8.roa File: Pm8HvPdRNsrqIExd4ddVuBb2rB8.roa (raw, json) Hash identifier: gEldM5V+lNG6r5owII2Cj4+/vsBZ7rbA2Ql+8cJfa0Y= Subject key identifier: 3E:6F:07:BC:F7:51:36:CA:EA:20:4C:5D:E1:D7:55:B8:16:F6:AC:1F Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Certificate serial: 019B7D5B0817DBCF6945F7F2AEDA70D49E78 Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Pm8HvPdRNsrqIExd4ddVuBb2rB8.roa Signing time: Fri 02 Jan 2026 06:17:56 +0000 ROA not before: Fri 02 Jan 2026 06:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211409 IP address blocks: 89.42.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:08:17:db:cf:69:45:f7:f2:ae:da:70:d4:9e:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Validity Not Before: Jan 2 06:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3e6f07bcf75136caea204c5de1d755b816f6ac1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:0f:17:b8:db:b7:a1:13:18:59:de:1f:f6:ad: d7:22:e6:6b:54:1c:5b:97:37:13:6f:af:0f:79:38: a6:cb:c1:70:3b:c6:86:0d:f4:9b:33:9a:15:33:89: e8:27:11:d6:e7:ca:91:0a:df:15:db:ec:58:a1:d4: 2c:2c:75:a9:3d:6a:f6:8c:25:26:ad:09:a4:06:ad: 89:0a:45:f0:00:d5:87:07:2e:ad:b6:f2:b5:98:69: 61:a4:63:52:33:17:cf:03:2b:f9:7e:56:dd:37:6e: f6:44:59:ad:e2:15:e9:1a:1a:a0:3a:58:80:0e:9c: 4f:2a:ef:6b:79:68:7c:c9:e7:68:03:f3:7a:51:5b: c4:a3:65:c8:fe:47:fc:67:c0:f1:f2:bb:7a:ca:c4: 0d:08:f0:b4:b1:47:d9:cc:9d:1f:3b:a3:f4:26:05: 72:77:4c:5a:21:d5:af:2e:e6:e0:9a:8b:5c:4b:c9: 28:e2:0a:41:5b:7b:b7:b8:15:5a:96:49:97:fa:2b: b4:d6:77:c2:ab:68:bb:17:4a:1a:50:fa:c3:ae:c2: 71:2e:79:94:6f:59:fa:41:76:93:07:67:88:1d:d1: 05:62:01:36:df:72:bc:4d:5b:2d:27:6a:c0:e5:f0: 80:df:90:c7:5a:f7:ed:5f:21:39:9d:af:4d:60:98: b0:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:6F:07:BC:F7:51:36:CA:EA:20:4C:5D:E1:D7:55:B8:16:F6:AC:1F X509v3 Authority Key Identifier: keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Pm8HvPdRNsrqIExd4ddVuBb2rB8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.42.88.0/24 Signature Algorithm: sha256WithRSAEncryption 09:d7:b4:10:b9:ec:2b:08:23:b9:7a:be:05:35:0f:bf:ad:ee: 77:3c:60:2b:4b:e0:a8:fe:6b:5b:a1:52:c1:9c:c0:f6:a8:af: 92:50:dd:61:38:4a:94:af:df:60:b8:5d:45:5e:06:aa:be:49: fe:f1:1b:30:67:e8:f2:b6:c3:cc:5b:23:15:bb:6b:32:aa:88: 2f:ac:59:2c:66:fa:5b:60:0e:84:6c:a5:f0:1d:2e:cc:16:f3: 75:7f:84:e2:e2:44:13:6d:53:88:d0:8c:ff:29:b8:83:c5:6a: 8e:d1:ce:a7:46:a8:fc:1c:d0:bd:b3:99:c2:c2:35:45:9a:78: e6:fc:53:82:20:7e:18:25:9d:5f:9c:84:7d:85:51:da:f1:8c: c0:a9:8b:c6:d4:0b:52:5d:7f:89:9c:53:28:ea:2f:39:ff:c3: 59:6a:eb:d2:40:17:cd:09:36:d5:51:8f:a2:98:ad:44:ce:71: da:4b:1a:e2:1b:c8:30:d5:88:14:64:74:5f:84:a4:f6:31:f9: 58:d4:7f:2a:48:59:33:00:89:d7:3f:8c:80:18:0e:37:f7:4e: 27:2d:38:76:e4:99:0d:d5:af:8b:b6:c7:b4:21:a2:2b:a2:56: 51:c2:68:d6:81:57:55:ad:11:de:d4:60:b2:ce:1d:fb:9d:70: fe:86:57:f9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9WwgX289pRffyrtpw1J54MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm MDFjMWQwHhcNMjYwMTAyMDYxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTZmMDdiY2Y3NTEzNmNhZWEyMDRjNWRlMWQ3NTViODE2ZjZhYzFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmg8XuNu3oRMYWd4f9q3XIuZrVBxb lzcTb68PeTimy8FwO8aGDfSbM5oVM4noJxHW58qRCt8V2+xYodQsLHWpPWr2jCUm rQmkBq2JCkXwANWHBy6ttvK1mGlhpGNSMxfPAyv5flbdN272RFmt4hXpGhqgOliA DpxPKu9reWh8yedoA/N6UVvEo2XI/kf8Z8Dx8rt6ysQNCPC0sUfZzJ0fO6P0JgVy d0xaIdWvLubgmotcS8ko4gpBW3u3uBValkmX+iu01nfCq2i7F0oaUPrDrsJxLnmU b1n6QXaTB2eIHdEFYgE233K8TVstJ2rA5fCA35DHWvftXyE5na9NYJiwawIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD5vB7z3UTbK6iBMXeHXVbgW9qwfMB8GA1UdIwQY MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt YjQyZjIzZDgyOGMzLzEvUG04SHZQZFJOc3JxSUV4ZDRkZFZ1QmIyckI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSpYMA0G CSqGSIb3DQEBCwUAA4IBAQAJ17QQuewrCCO5er4FNQ+/re53PGArS+Co/mtboVLB nMD2qK+SUN1hOEqUr99guF1FXgaqvkn+8RswZ+jytsPMWyMVu2syqogvrFksZvpb YA6EbKXwHS7MFvN1f4Ti4kQTbVOI0Iz/KbiDxWqO0c6nRqj8HNC9s5nCwjVFmnjm /FOCIH4YJZ1fnIR9hVHa8YzAqYvG1AtSXX+JnFMo6i85/8NZauvSQBfNCTbVUY+i mK1EznHaSxriG8gw1YgUZHRfhKT2MflY1H8qSFkzAInXP4yAGA43904nLTh25JkN 1a+Ltse0IaIrolZRwmjWgVdVrRHe1GCyzh37nXD+hlf5 -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:24 2026 by rpki-client