This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Ps_5yykp1EYcHSv0rjWZWSxVY40.roa File: Ps_5yykp1EYcHSv0rjWZWSxVY40.roa (raw, json) Hash identifier: O1CraEZhnjdpTgmMctmYzVsbmflyI4MYMrcdf2NzcDg= Subject key identifier: 3E:CF:F9:CB:29:29:D4:46:1C:1D:2B:F4:AE:35:99:59:2C:55:63:8D Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Certificate serial: 019B7D5AF0A5B47DB4FA9AD8A461B9A87892 Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Ps_5yykp1EYcHSv0rjWZWSxVY40.roa Signing time: Fri 02 Jan 2026 06:17:50 +0000 ROA not before: Fri 02 Jan 2026 06:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 996 IP address blocks: 89.34.224.0/23 maxlen: 23 89.34.224.0/24 maxlen: 24 89.34.225.0/24 maxlen: 24 89.34.231.0/24 maxlen: 24 89.37.119.0/24 maxlen: 24 89.40.82.0/24 maxlen: 24 89.42.143.0/24 maxlen: 24 89.46.0.0/24 maxlen: 24 89.47.99.0/24 maxlen: 24 89.47.117.0/24 maxlen: 24 89.47.118.0/24 maxlen: 24 89.47.125.0/24 maxlen: 24 89.47.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:f0:a5:b4:7d:b4:fa:9a:d8:a4:61:b9:a8:78:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Validity Not Before: Jan 2 06:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ecff9cb2929d4461c1d2bf4ae3599592c55638d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:07:25:55:e2:00:a7:1f:b7:ec:bf:2d:40:8e: be:8c:76:f8:c8:00:80:ff:0d:b9:6e:63:dc:99:1b: fe:10:b7:f0:bd:24:25:71:55:64:20:21:ad:99:e9: 04:d2:71:94:bc:c5:59:93:ab:e0:31:b7:bb:15:a2: 5e:d3:89:61:99:70:ed:92:1e:88:ba:55:fe:94:d2: 2b:78:e7:32:0f:03:87:5a:bf:00:9f:10:68:90:18: 2f:c4:77:21:5d:f7:28:ce:56:db:29:83:43:34:ed: 67:ca:d9:50:7e:b8:11:69:3b:bf:9a:9b:f3:5e:6e: 40:f1:65:58:ef:a2:61:b4:c0:c6:50:7d:2e:ea:35: bd:6e:05:ef:7d:bf:d5:85:4d:77:95:dd:10:cd:ce: 8a:00:c9:3d:97:13:04:be:ab:a0:de:3b:30:2d:45: 0b:0e:bc:2c:26:25:e2:92:f3:50:f8:e5:b4:9e:76: 29:79:08:f7:26:50:5a:11:43:a9:6a:d8:66:80:f8: 9e:b3:91:a6:61:a2:36:2a:20:0c:18:41:bf:01:31: c9:10:c5:1d:08:3b:43:38:f6:3d:91:b1:51:7f:60: 24:19:9b:2a:27:25:12:e1:c2:02:14:df:39:9f:cf: f9:02:c2:28:92:97:25:a6:fc:a9:5f:70:a7:77:63: d8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:CF:F9:CB:29:29:D4:46:1C:1D:2B:F4:AE:35:99:59:2C:55:63:8D X509v3 Authority Key Identifier: keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/Ps_5yykp1EYcHSv0rjWZWSxVY40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.34.224.0/23 89.34.231.0/24 89.37.119.0/24 89.40.82.0/24 89.42.143.0/24 89.46.0.0/24 89.47.99.0/24 89.47.117.0-89.47.118.255 89.47.125.0/24 89.47.127.0/24 Signature Algorithm: sha256WithRSAEncryption 08:fc:53:75:12:84:84:ce:d3:7d:f3:ca:4d:27:ab:93:1f:a4: c5:44:b4:96:c4:3c:98:c4:ee:4b:4f:75:2a:0e:47:40:38:92: 1a:b5:45:7b:46:c6:4c:31:d6:60:26:19:e0:5f:60:4f:c3:8b: 43:4a:5a:92:be:57:8e:40:3e:be:b8:0f:03:7c:5b:54:34:43: 83:ff:f9:80:33:22:75:83:5c:a1:01:bc:c7:a2:65:55:db:7a: 17:70:20:37:47:78:76:52:ec:90:1c:8c:02:20:bb:7a:0d:01: ea:b1:b4:3e:54:c9:8a:4a:4e:2b:6c:90:91:1f:fb:52:ae:ff: c4:4c:5a:c8:0a:65:45:42:64:25:16:92:04:88:81:6b:44:90: 3a:29:94:9d:9c:f0:42:9f:87:fa:2b:2a:85:06:39:94:98:cb: 60:fb:22:e9:4a:09:92:0b:69:71:18:63:6e:4c:76:82:87:17: c3:2d:4a:1c:e8:94:27:8f:bc:99:88:e9:60:cb:ec:e0:01:11: 55:f8:30:08:fc:cc:d0:60:dc:73:8f:85:e2:6a:ca:12:40:4e: e8:d8:5d:14:3a:d8:3e:61:00:c5:0c:9f:a3:9c:c5:5c:b9:9a: 78:14:9a:c5:2f:7a:7f:f3:88:1f:d2:ba:3c:f5:a0:d8:03:71: ac:0e:3e:fd -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgISAZt9WvCltH20+prYpGG5qHiSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm MDFjMWQwHhcNMjYwMTAyMDYxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZWNmZjljYjI5MjlkNDQ2MWMxZDJiZjRhZTM1OTk1OTJjNTU2MzhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQclVeIApx+37L8tQI6+jHb4yACA /w25bmPcmRv+ELfwvSQlcVVkICGtmekE0nGUvMVZk6vgMbe7FaJe04lhmXDtkh6I ulX+lNIreOcyDwOHWr8AnxBokBgvxHchXfcozlbbKYNDNO1nytlQfrgRaTu/mpvz Xm5A8WVY76JhtMDGUH0u6jW9bgXvfb/VhU13ld0Qzc6KAMk9lxMEvqug3jswLUUL DrwsJiXikvNQ+OW0nnYpeQj3JlBaEUOpathmgPies5GmYaI2KiAMGEG/ATHJEMUd CDtDOPY9kbFRf2AkGZsqJyUS4cICFN85n8/5AsIokpclpvypX3Cnd2PYrQIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFD7P+cspKdRGHB0r9K41mVksVWONMB8GA1UdIwQY MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt YjQyZjIzZDgyOGMzLzEvUHNfNXl5a3AxRVljSFN2MHJqV1pXU3hWWTQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF0GCCsGAQUFBwEHAQH/BE4wTDBKBAIAATBEAwQBWSLgAwQA WSLnAwQAWSV3AwQAWShSAwQAWSqPAwQAWS4AAwQAWS9jMAwDBABZL3UDBABZL3YD BABZL30DBABZL38wDQYJKoZIhvcNAQELBQADggEBAAj8U3UShITO033zyk0nq5Mf pMVEtJbEPJjE7ktPdSoOR0A4khq1RXtGxkwx1mAmGeBfYE/Di0NKWpK+V45APr64 DwN8W1Q0Q4P/+YAzInWDXKEBvMeiZVXbehdwIDdHeHZS7JAcjAIgu3oNAeqxtD5U yYpKTitskJEf+1Ku/8RMWsgKZUVCZCUWkgSIgWtEkDoplJ2c8EKfh/orKoUGOZSY y2D7IulKCZILaXEYY25MdoKHF8MtShzolCePvJmI6WDL7OABEVX4MAj8zNBg3HOP heJqyhJATujYXRQ62D5hAMUMn6OcxVy5mngUmsUven/ziB/Sujz1oNgDcawOPv0= -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:20 2026 by rpki-client