This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/bNIYwT-GGRIGTVbudTDTxhoyJZs.roa File: bNIYwT-GGRIGTVbudTDTxhoyJZs.roa (raw, json) Hash identifier: h9HQkl7tPeR6NXdKroSwpVOF23UXEY4vZzd0PDDGSZ0= Subject key identifier: 6C:D2:18:C1:3F:86:19:12:06:4D:56:EE:75:30:D3:C6:1A:32:25:9B Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Certificate serial: 019B7D5B098E5EE2F3F364AA6F21B59069D8 Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/bNIYwT-GGRIGTVbudTDTxhoyJZs.roa Signing time: Fri 02 Jan 2026 06:17:56 +0000 ROA not before: Fri 02 Jan 2026 06:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214730 IP address blocks: 89.34.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 00:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:09:8e:5e:e2:f3:f3:64:aa:6f:21:b5:90:69:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Validity Not Before: Jan 2 06:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6cd218c13f861912064d56ee7530d3c61a32259b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5b:cc:18:52:19:2f:b4:c1:45:2b:d3:11:04: db:a4:e8:63:48:a0:a4:1b:67:6f:c5:82:6a:61:6f: c2:e8:ec:0f:21:15:a4:17:5f:5d:1f:5e:61:65:92: 1c:8f:69:8b:98:50:cf:0e:fc:08:e8:cf:20:86:3a: 04:5d:64:08:2e:64:9d:b9:2d:a2:f0:6a:a8:69:c3: 71:73:9c:2a:af:7a:f8:2c:65:9d:8d:42:4d:d3:b3: db:62:bd:df:c7:15:c0:3b:78:d8:5f:40:3b:3d:24: 7f:47:04:d2:9e:d0:24:1b:cc:4f:91:78:f2:46:12: 15:a5:c9:46:be:57:77:85:4c:3b:0d:21:7a:64:97: 57:b6:43:c6:c9:3f:cb:38:94:ff:0b:bb:1d:cb:52: 35:69:b7:18:d9:d9:a8:2b:ed:f0:e9:71:50:65:34: 69:8d:48:81:fe:2d:86:54:4b:55:e4:44:d8:10:31: 88:0f:71:15:d5:4a:44:29:2b:e1:2e:ea:ea:98:d1: 5d:ff:55:83:59:32:e9:01:55:c1:22:ac:cb:18:86: b2:24:db:e9:9e:9a:62:e3:8d:ee:e2:f3:d5:78:c7: ca:24:8a:6a:65:cd:f5:59:47:7f:92:12:05:5a:04: e1:3e:17:3b:32:53:70:51:37:c1:19:c7:73:8f:15: c7:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:D2:18:C1:3F:86:19:12:06:4D:56:EE:75:30:D3:C6:1A:32:25:9B X509v3 Authority Key Identifier: keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/bNIYwT-GGRIGTVbudTDTxhoyJZs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.34.230.0/24 Signature Algorithm: sha256WithRSAEncryption 25:f2:bd:aa:6e:52:71:ff:5e:eb:26:34:52:7b:dc:45:d3:11: 80:28:60:f1:c2:dd:55:3e:e6:d6:c4:0c:5c:a5:ad:30:d5:c1: 85:b7:ca:82:9c:65:a0:10:c8:57:5d:b9:17:c9:26:a3:1b:92: 7b:b5:cf:9b:7a:2d:a3:d0:3a:e7:98:88:56:54:b2:80:f5:bb: d9:0d:0d:a8:2c:07:a5:57:d6:31:2e:87:62:05:c6:fc:6f:14: ed:b1:99:d5:fc:a6:66:de:90:39:37:98:f2:f1:eb:35:e1:fb: fa:3c:4d:58:d7:7b:ea:a6:01:85:aa:2b:70:f0:85:a5:e0:8f: 60:d5:86:6a:00:17:4c:e9:62:85:55:68:3c:d5:9a:e7:ae:b2: 47:e9:72:00:d6:30:ae:1e:17:f8:47:90:bf:95:45:e6:08:2a: eb:52:b2:7c:27:54:74:39:b7:b8:78:8b:27:76:dc:e0:dd:8c: 6d:11:a9:39:d7:4c:07:3e:eb:40:90:d2:b3:7d:f8:7c:c6:2a: 55:ea:1a:2c:e7:0e:9e:d8:26:a5:fa:43:c5:d8:f6:ea:f2:aa: 5f:b3:b9:39:37:a8:00:cc:3e:c5:6b:39:2d:8d:c3:f9:f1:4e: 77:fd:0a:bb:04:f0:4e:d5:a5:c5:8d:30:d3:24:8b:b4:2f:35: b7:fa:42:30 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9WwmOXuLz82SqbyG1kGnYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm MDFjMWQwHhcNMjYwMTAyMDYxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Y2QyMThjMTNmODYxOTEyMDY0ZDU2ZWU3NTMwZDNjNjFhMzIyNTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlvMGFIZL7TBRSvTEQTbpOhjSKCk G2dvxYJqYW/C6OwPIRWkF19dH15hZZIcj2mLmFDPDvwI6M8ghjoEXWQILmSduS2i 8GqoacNxc5wqr3r4LGWdjUJN07PbYr3fxxXAO3jYX0A7PSR/RwTSntAkG8xPkXjy RhIVpclGvld3hUw7DSF6ZJdXtkPGyT/LOJT/C7sdy1I1abcY2dmoK+3w6XFQZTRp jUiB/i2GVEtV5ETYEDGID3EV1UpEKSvhLurqmNFd/1WDWTLpAVXBIqzLGIayJNvp nppi443u4vPVeMfKJIpqZc31WUd/khIFWgThPhc7MlNwUTfBGcdzjxXHdQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGzSGME/hhkSBk1W7nUw08YaMiWbMB8GA1UdIwQY MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt YjQyZjIzZDgyOGMzLzEvYk5JWXdULUdHUklHVFZidWRURFR4aG95SlpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSLmMA0G CSqGSIb3DQEBCwUAA4IBAQAl8r2qblJx/17rJjRSe9xF0xGAKGDxwt1VPubWxAxc pa0w1cGFt8qCnGWgEMhXXbkXySajG5J7tc+bei2j0DrnmIhWVLKA9bvZDQ2oLAel V9YxLodiBcb8bxTtsZnV/KZm3pA5N5jy8es14fv6PE1Y13vqpgGFqitw8IWl4I9g 1YZqABdM6WKFVWg81ZrnrrJH6XIA1jCuHhf4R5C/lUXmCCrrUrJ8J1R0Obe4eIsn dtzg3YxtEak510wHPutAkNKzffh8xipV6hos5w6e2Cal+kPF2Pbq8qpfs7k5N6gA zD7FazktjcP58U53/Qq7BPBO1aXFjTDTJIu0LzW3+kIw -----END CERTIFICATE-----Generated at Sun Jan 18 08:54:56 2026 by rpki-client