This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/bW53EtXJ3r0FVbiUMHrqdcji8-k.roa File: bW53EtXJ3r0FVbiUMHrqdcji8-k.roa (raw, json) Hash identifier: Agx64tXBDE5vEiSUf7cXOxWRWkCaPMDDDTjOqeoVhkk= Subject key identifier: 6D:6E:77:12:D5:C9:DE:BD:05:55:B8:94:30:7A:EA:75:C8:E2:F3:E9 Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Certificate serial: 019B7D5AFC849E99D09EA041DDBBCAAB656B Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/bW53EtXJ3r0FVbiUMHrqdcji8-k.roa Signing time: Fri 02 Jan 2026 06:17:53 +0000 ROA not before: Fri 02 Jan 2026 06:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43641 IP address blocks: 89.42.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 03:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:fc:84:9e:99:d0:9e:a0:41:dd:bb:ca:ab:65:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Validity Not Before: Jan 2 06:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d6e7712d5c9debd0555b894307aea75c8e2f3e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:9c:12:fe:db:d7:cc:9f:a8:56:de:84:ae:82: 1b:ba:32:fb:4e:1f:bd:bf:fc:b7:c3:8b:cf:07:64: b0:a5:03:fa:51:5e:d4:55:00:3d:23:d8:1d:5f:8f: 27:0c:cb:4c:37:9d:af:46:a5:0f:95:70:7b:2f:e9: 88:5e:ff:9a:73:ec:bf:68:09:a8:1c:12:8c:11:71: 4c:42:05:be:4d:88:66:9c:db:de:a6:ff:0b:23:bf: 28:84:25:36:c9:c6:04:1d:ea:97:24:e3:97:bd:35: 9b:3c:7d:99:71:09:c8:c9:70:ad:62:f5:3c:f4:f1: 9f:7c:16:82:f5:98:21:27:44:0c:17:cd:b3:84:b1: 6b:c2:62:87:5d:ff:16:43:c4:33:14:4e:e3:1c:b9: 1b:c7:48:bc:30:d9:18:67:e9:a6:ca:cc:e0:6f:c8: f3:99:b6:0c:74:7f:85:22:0a:eb:f1:4e:10:51:77: 9f:0d:20:44:a0:f8:d8:c9:8b:01:da:52:d1:af:0e: 95:98:5b:c4:24:9c:9b:df:30:a8:28:5a:5f:4c:4c: 60:c5:e9:97:f3:50:da:98:ba:42:08:c1:c5:46:9d: 40:54:c1:19:77:4e:b6:26:b2:ba:4b:8c:fe:3b:81: f6:c3:ca:9d:11:15:42:b0:1e:86:23:32:ac:2f:b2: 76:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:6E:77:12:D5:C9:DE:BD:05:55:B8:94:30:7A:EA:75:C8:E2:F3:E9 X509v3 Authority Key Identifier: keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/bW53EtXJ3r0FVbiUMHrqdcji8-k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.42.91.0/24 Signature Algorithm: sha256WithRSAEncryption 59:41:ea:9a:7f:98:cf:2d:a9:9d:b3:c7:30:f0:eb:1e:85:54: ed:c2:a3:ac:51:a9:d7:fa:4c:73:b4:12:8b:6a:3d:81:49:9c: ab:2d:8f:21:ae:05:bf:f8:12:91:9a:69:1c:55:78:20:86:ae: c8:77:38:3b:a0:4e:0e:0c:21:05:ec:a4:c2:72:72:bc:be:23: ee:34:da:50:1f:a9:7c:0c:7a:fd:c0:e3:df:44:01:79:ea:a1: 23:7e:58:4b:83:b1:35:b6:62:f4:a1:03:d6:24:84:63:4f:ae: 58:29:1d:52:87:d3:cb:0d:74:9f:af:b9:2e:d5:3e:69:5f:aa: a4:1d:43:47:e2:d1:cd:ab:73:eb:c2:fc:21:ae:dd:46:92:7f: af:be:a9:3c:32:e6:08:9d:95:37:03:03:69:03:6b:32:87:73: bb:0f:cd:29:a8:5f:80:d1:39:83:53:ab:81:85:3a:2e:2d:cd: ac:d7:4f:cb:eb:77:61:77:2e:7b:53:f2:61:16:97:d7:34:a7: eb:ea:48:fd:49:39:c0:59:3f:a2:f7:3d:cf:94:cf:a6:d1:6a: bb:d3:81:5d:85:2f:98:d3:2f:42:19:81:4e:7c:dc:be:44:37: 2b:aa:2d:4f:30:de:57:9d:5a:9c:b2:6f:20:d7:e5:db:b8:3d: a5:c7:27:ba -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9WvyEnpnQnqBB3bvKq2VrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm MDFjMWQwHhcNMjYwMTAyMDYxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDZlNzcxMmQ1YzlkZWJkMDU1NWI4OTQzMDdhZWE3NWM4ZTJmM2U5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA75wS/tvXzJ+oVt6EroIbujL7Th+9 v/y3w4vPB2SwpQP6UV7UVQA9I9gdX48nDMtMN52vRqUPlXB7L+mIXv+ac+y/aAmo HBKMEXFMQgW+TYhmnNvepv8LI78ohCU2ycYEHeqXJOOXvTWbPH2ZcQnIyXCtYvU8 9PGffBaC9ZghJ0QMF82zhLFrwmKHXf8WQ8QzFE7jHLkbx0i8MNkYZ+mmyszgb8jz mbYMdH+FIgrr8U4QUXefDSBEoPjYyYsB2lLRrw6VmFvEJJyb3zCoKFpfTExgxemX 81DamLpCCMHFRp1AVMEZd062JrK6S4z+O4H2w8qdERVCsB6GIzKsL7J2aQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG1udxLVyd69BVW4lDB66nXI4vPpMB8GA1UdIwQY MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt YjQyZjIzZDgyOGMzLzEvYlc1M0V0WEozcjBGVmJpVU1IcnFkY2ppOC1rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSpbMA0G CSqGSIb3DQEBCwUAA4IBAQBZQeqaf5jPLamds8cw8OsehVTtwqOsUanX+kxztBKL aj2BSZyrLY8hrgW/+BKRmmkcVXgghq7Idzg7oE4ODCEF7KTCcnK8viPuNNpQH6l8 DHr9wOPfRAF56qEjflhLg7E1tmL0oQPWJIRjT65YKR1Sh9PLDXSfr7ku1T5pX6qk HUNH4tHNq3Prwvwhrt1Gkn+vvqk8MuYInZU3AwNpA2syh3O7D80pqF+A0TmDU6uB hTouLc2s10/L63dhdy57U/JhFpfXNKfr6kj9STnAWT+i9z3PlM+m0Wq704FdhS+Y 0y9CGYFOfNy+RDcrqi1PMN5XnVqcsm8g1+XbuD2lxye6 -----END CERTIFICATE-----Generated at Mon Jan 19 11:25:06 2026 by rpki-client