This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/SKFAby0zyUCohxjH5Tthuqf8Ubg.roa File: SKFAby0zyUCohxjH5Tthuqf8Ubg.roa (raw, json) Hash identifier: 0WbPaPkIHylJbxv6VQV+L7lpXSzaNC7O7FWG8hfv+AY= Subject key identifier: 48:A1:40:6F:2D:33:C9:40:A8:87:18:C7:E5:3B:61:BA:A7:FC:51:B8 Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Certificate serial: 019B7D5B0904C0AE47F8EA62CA63AE2363BA Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/SKFAby0zyUCohxjH5Tthuqf8Ubg.roa Signing time: Fri 02 Jan 2026 06:17:56 +0000 ROA not before: Fri 02 Jan 2026 06:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212336 IP address blocks: 89.34.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:09:04:c0:ae:47:f8:ea:62:ca:63:ae:23:63:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Validity Not Before: Jan 2 06:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=48a1406f2d33c940a88718c7e53b61baa7fc51b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c1:97:02:fb:2e:50:f4:08:32:e2:0f:e2:89: f9:be:b7:bd:7b:6f:0f:53:7f:22:d0:a9:3b:c0:ce: 47:3a:65:f8:4b:df:c5:7a:22:fa:12:c4:49:f7:ae: 68:da:ce:46:31:17:ca:7e:ba:40:89:18:fb:4c:05: 5e:2a:8d:b2:83:b3:7d:c8:fa:61:8b:c1:2a:12:99: 1d:57:70:c6:3a:d2:29:66:45:83:cd:4a:5b:63:4f: 66:42:79:91:e7:35:62:63:6b:a0:25:54:3e:6f:be: f9:47:88:17:20:f4:a3:cf:4a:da:ba:68:a3:64:fb: e2:74:37:ea:95:fe:67:90:46:90:f2:b1:dd:99:db: bc:88:09:7b:9c:7f:f2:d5:7c:2b:5d:c9:a2:c2:96: cc:aa:f3:42:7a:80:0f:45:ba:cb:03:2d:2a:ef:19: d4:a4:d7:db:b3:c8:a5:db:b8:44:3d:45:ea:22:a2: e2:6a:18:93:8b:c3:e7:5e:38:02:13:87:f2:64:03: 6d:da:6a:91:36:c9:3c:be:eb:b5:15:64:12:7c:46: de:20:73:25:3e:61:04:59:aa:60:f4:f6:6d:c4:c9: 17:51:b0:17:1d:22:8f:43:b6:d8:a8:17:db:57:8e: 78:d2:ea:f0:f0:1a:50:04:3b:3d:2f:4e:4e:4a:d0: cf:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:A1:40:6F:2D:33:C9:40:A8:87:18:C7:E5:3B:61:BA:A7:FC:51:B8 X509v3 Authority Key Identifier: keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/SKFAby0zyUCohxjH5Tthuqf8Ubg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.34.227.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:36:0a:8f:40:85:23:a5:8e:13:3d:26:23:d2:e8:4f:17:ee: 80:97:77:ce:21:8e:2d:e4:18:49:be:09:cc:6b:e0:61:57:a4: 48:68:6a:b2:23:2f:e7:40:17:b6:14:cd:38:d1:10:20:81:6d: f3:ba:18:a8:db:4f:ef:e8:eb:12:c9:7d:28:8f:ed:61:1a:c6: a9:b5:9f:62:7c:a1:85:22:61:97:8c:a3:9b:09:9a:f6:f9:2c: 2f:34:0b:4a:fa:a4:dc:d6:a1:61:77:ee:2f:68:2f:d4:47:a4: 4d:b7:0c:0d:ee:61:64:1d:45:7d:7e:c7:96:e9:16:7e:93:e0: 7e:0f:ba:18:d6:2c:78:cf:b3:13:e8:91:68:cf:2a:07:ce:b7: 0b:de:91:b5:24:d7:f0:c2:f1:8b:10:f0:f2:00:1a:81:a4:5a: e4:50:a5:36:50:2c:6a:99:a1:c5:61:26:da:d1:22:36:5d:cb: 21:ac:33:4f:b2:1c:54:4c:36:18:e5:bf:86:fc:6f:49:ee:56: 05:1f:e3:50:ff:da:d7:d6:9b:94:90:34:28:a1:26:f1:59:04: 66:5b:a8:fd:37:06:bf:30:bc:52:54:a1:f9:85:a4:62:08:44: 41:34:9e:4c:09:89:5b:be:72:77:97:64:b3:e2:d5:c0:49:33: 89:1d:40:d2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9WwkEwK5H+OpiymOuI2O6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm MDFjMWQwHhcNMjYwMTAyMDYxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OGExNDA2ZjJkMzNjOTQwYTg4NzE4YzdlNTNiNjFiYWE3ZmM1MWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMGXAvsuUPQIMuIP4on5vre9e28P U38i0Kk7wM5HOmX4S9/FeiL6EsRJ965o2s5GMRfKfrpAiRj7TAVeKo2yg7N9yPph i8EqEpkdV3DGOtIpZkWDzUpbY09mQnmR5zViY2ugJVQ+b775R4gXIPSjz0raumij ZPvidDfqlf5nkEaQ8rHdmdu8iAl7nH/y1XwrXcmiwpbMqvNCeoAPRbrLAy0q7xnU pNfbs8il27hEPUXqIqLiahiTi8PnXjgCE4fyZANt2mqRNsk8vuu1FWQSfEbeIHMl PmEEWapg9PZtxMkXUbAXHSKPQ7bYqBfbV4540urw8BpQBDs9L05OStDPHwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEihQG8tM8lAqIcYx+U7Ybqn/FG4MB8GA1UdIwQY MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt YjQyZjIzZDgyOGMzLzEvU0tGQWJ5MHp5VUNvaHhqSDVUdGh1cWY4VWJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSLjMA0G CSqGSIb3DQEBCwUAA4IBAQAuNgqPQIUjpY4TPSYj0uhPF+6Al3fOIY4t5BhJvgnM a+BhV6RIaGqyIy/nQBe2FM040RAggW3zuhio20/v6OsSyX0oj+1hGsaptZ9ifKGF ImGXjKObCZr2+SwvNAtK+qTc1qFhd+4vaC/UR6RNtwwN7mFkHUV9fseW6RZ+k+B+ D7oY1ix4z7MT6JFozyoHzrcL3pG1JNfwwvGLEPDyABqBpFrkUKU2UCxqmaHFYSba 0SI2XcshrDNPshxUTDYY5b+G/G9J7lYFH+NQ/9rX1puUkDQooSbxWQRmW6j9Nwa/ MLxSVKH5haRiCERBNJ5MCYlbvnJ3l2Sz4tXASTOJHUDS -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:59 2026 by rpki-client