This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/ZJwTMNXqxfNY67S0OjMaONEb0Yk.roa File: ZJwTMNXqxfNY67S0OjMaONEb0Yk.roa (raw, json) Hash identifier: DDiwSB/IU+SV2dkupydxZzhClTYyFRpGhNS4KQcEIdI= Subject key identifier: 64:9C:13:30:D5:EA:C5:F3:58:EB:B4:B4:3A:33:1A:38:D1:1B:D1:89 Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Certificate serial: 019B8904E4D3A502EE8E2EFB002B77BEE16F Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/ZJwTMNXqxfNY67S0OjMaONEb0Yk.roa Signing time: Sun 04 Jan 2026 12:39:17 +0000 ROA not before: Sun 04 Jan 2026 12:39:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 133153 IP address blocks: 89.40.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:89:04:e4:d3:a5:02:ee:8e:2e:fb:00:2b:77:be:e1:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Validity Not Before: Jan 4 12:39:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=649c1330d5eac5f358ebb4b43a331a38d11bd189 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c2:ef:e1:bf:fe:82:a8:89:6b:01:00:89:60: 2c:73:c2:af:5f:18:26:d2:65:64:30:3f:f8:a3:42: 03:83:8e:b7:45:9c:03:2e:28:fe:f5:94:ac:d2:6a: fd:cd:20:57:1d:bf:62:6f:6f:bf:59:85:34:bc:ed: c0:60:26:d4:d2:e4:4d:7e:9c:ea:94:98:44:ca:b6: 82:22:8e:c2:28:fe:fe:e7:53:f1:13:52:e3:eb:54: 50:4b:7b:d9:1c:eb:8b:75:c5:b6:ea:25:84:93:18: f2:b6:08:d0:1e:89:f7:5d:93:e3:f9:dd:c5:2d:7b: a5:8a:48:65:f2:0d:b4:6e:e8:95:4a:5f:65:4a:30: c7:1b:03:ed:b8:b8:dd:eb:4a:6a:55:80:ee:6d:cd: 5d:19:7d:4e:7d:2a:f6:60:40:b9:98:7b:53:7d:af: c3:e2:63:3e:69:cb:11:23:2c:94:dd:e6:d8:64:d0: 8c:ad:ee:2a:c1:02:1b:4c:8f:20:6a:ee:e6:00:46: e5:ab:16:4d:af:f0:ff:7c:6e:16:18:6a:a9:de:ab: 61:4a:b2:63:bc:67:51:6a:2b:b2:4b:b3:13:c4:7c: a9:0d:da:64:ac:cf:74:f8:bf:9f:ea:63:99:23:73: ca:f2:bf:eb:0f:e4:06:9c:75:95:12:36:5c:eb:1d: c7:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:9C:13:30:D5:EA:C5:F3:58:EB:B4:B4:3A:33:1A:38:D1:1B:D1:89 X509v3 Authority Key Identifier: keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/ZJwTMNXqxfNY67S0OjMaONEb0Yk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.40.83.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:ee:45:2c:45:2f:2b:6a:27:8b:9c:54:a2:04:07:7a:76:23: 02:7c:45:0e:07:7e:9a:39:34:b2:08:30:25:34:bc:82:34:71: 77:75:6c:3d:80:18:83:95:71:b8:9e:8d:9e:7b:76:eb:f9:3e: 4c:99:eb:9e:df:c8:e9:83:3b:6d:a1:bd:b6:d3:65:49:2d:64: df:fc:f4:bb:ad:0d:37:8e:e3:fe:a1:ab:fd:3c:6d:43:0f:b1: 64:71:ae:1f:72:53:5d:d0:e7:0c:3c:d1:bc:7a:ed:0f:da:71: af:3e:dd:f0:a5:e1:b6:5e:ce:ed:32:6e:37:64:ab:92:c5:0e: 22:4f:32:25:2b:5d:50:28:21:a5:1d:15:0c:dc:f6:1e:bb:cd: d5:dc:9d:0a:2a:e6:37:81:39:39:90:2d:9f:b5:03:30:ea:d1: 89:f0:fb:71:af:f3:c7:2b:26:b3:d7:52:ee:07:61:5d:7b:44: 6c:90:bf:c2:74:fc:0b:88:6e:c9:83:1c:1c:29:6f:49:31:80: c7:70:01:c7:60:ac:ce:f1:62:8b:7f:ba:b2:67:d9:68:4b:58: f5:bc:2b:52:27:c7:3c:1d:cd:a8:08:b4:de:6a:f7:5e:89:24: df:9e:bc:01:1b:cb:3a:73:96:e7:5e:7a:b8:00:ac:fb:14:68: d7:4a:bd:9a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuJBOTTpQLuji77ACt3vuFvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm MDFjMWQwHhcNMjYwMTA0MTIzOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDljMTMzMGQ1ZWFjNWYzNThlYmI0YjQzYTMzMWEzOGQxMWJkMTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8Lv4b/+gqiJawEAiWAsc8KvXxgm 0mVkMD/4o0IDg463RZwDLij+9ZSs0mr9zSBXHb9ib2+/WYU0vO3AYCbU0uRNfpzq lJhEyraCIo7CKP7+51PxE1Lj61RQS3vZHOuLdcW26iWEkxjytgjQHon3XZPj+d3F LXulikhl8g20buiVSl9lSjDHGwPtuLjd60pqVYDubc1dGX1OfSr2YEC5mHtTfa/D 4mM+acsRIyyU3ebYZNCMre4qwQIbTI8gau7mAEblqxZNr/D/fG4WGGqp3qthSrJj vGdRaiuyS7MTxHypDdpkrM90+L+f6mOZI3PK8r/rD+QGnHWVEjZc6x3HNwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGScEzDV6sXzWOu0tDozGjjRG9GJMB8GA1UdIwQY MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt YjQyZjIzZDgyOGMzLzEvWkp3VE1OWHF4Zk5ZNjdTME9qTWFPTkViMFlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWShTMA0G CSqGSIb3DQEBCwUAA4IBAQAr7kUsRS8raieLnFSiBAd6diMCfEUOB36aOTSyCDAl NLyCNHF3dWw9gBiDlXG4no2ee3br+T5Mmeue38jpgzttob2202VJLWTf/PS7rQ03 juP+oav9PG1DD7Fkca4fclNd0OcMPNG8eu0P2nGvPt3wpeG2Xs7tMm43ZKuSxQ4i TzIlK11QKCGlHRUM3PYeu83V3J0KKuY3gTk5kC2ftQMw6tGJ8Ptxr/PHKyaz11Lu B2Fde0RskL/CdPwLiG7JgxwcKW9JMYDHcAHHYKzO8WKLf7qyZ9loS1j1vCtSJ8c8 Hc2oCLTeavdeiSTfnrwBG8s6c5bnXnq4AKz7FGjXSr2a -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:45 2026 by rpki-client