This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/bbFX6_Nm4-9B28kXT09llwxN0f8.roa File: bbFX6_Nm4-9B28kXT09llwxN0f8.roa (raw, json) Hash identifier: kZe8W2fvtIj9jQva3qCMuMri4mgHtauxrvDhVnVxJN0= Subject key identifier: 6D:B1:57:EB:F3:66:E3:EF:41:DB:C9:17:4F:4F:65:97:0C:4D:D1:FF Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Certificate serial: 019B7D5B034ACDC9F7DAD98BD231F73604AD Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/bbFX6_Nm4-9B28kXT09llwxN0f8.roa Signing time: Fri 02 Jan 2026 06:17:55 +0000 ROA not before: Fri 02 Jan 2026 06:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137897 IP address blocks: 89.42.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:03:4a:cd:c9:f7:da:d9:8b:d2:31:f7:36:04:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Validity Not Before: Jan 2 06:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6db157ebf366e3ef41dbc9174f4f65970c4dd1ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:08:4c:76:0a:9a:62:6c:a7:6c:41:9d:26:e8: ab:16:c1:8a:a1:c4:15:a1:30:9b:6e:c3:e4:01:b6: 35:5a:a0:2a:18:55:c6:ab:dc:23:84:fe:6a:4e:ff: 4a:82:c1:5b:bd:ed:ae:e9:2a:10:61:87:12:26:0d: 6c:39:53:5b:21:b2:91:42:d3:eb:81:9a:4c:90:fc: c7:40:e8:62:90:47:8e:b3:c8:f5:14:1a:54:2d:bb: d6:e0:1e:d9:cf:17:c7:55:64:12:2e:22:68:55:70: 5e:b1:96:70:a8:c2:71:48:34:72:69:92:f3:89:4a: ea:36:9c:78:be:f4:44:01:1a:0e:01:db:92:d8:2c: cd:5a:ea:8d:80:9a:ad:ca:db:a2:d4:cf:f4:54:2d: cc:62:e6:33:9e:7e:ed:26:c5:20:dd:44:64:6f:64: 01:a9:cb:e0:14:7e:79:53:1b:a5:90:f6:17:78:6c: 3c:e8:db:f7:8d:51:88:ae:a1:9b:9d:a6:7e:60:2c: 06:a1:79:23:8a:0e:89:c4:6c:00:e9:60:97:7f:00: e2:29:1e:4f:ac:a3:89:f2:15:6b:22:7f:f9:5e:cf: 73:16:44:c3:35:28:b1:a5:a8:88:33:e8:25:5d:1c: 1b:09:60:00:f4:ef:3f:b4:1e:21:9a:09:89:ee:72: 94:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:B1:57:EB:F3:66:E3:EF:41:DB:C9:17:4F:4F:65:97:0C:4D:D1:FF X509v3 Authority Key Identifier: keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/bbFX6_Nm4-9B28kXT09llwxN0f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.42.87.0/24 Signature Algorithm: sha256WithRSAEncryption 01:55:29:ef:18:70:ec:98:67:66:6d:b7:ed:68:6a:f6:6b:ab: f3:32:ec:17:90:07:27:3d:b9:00:f3:47:52:c2:53:12:a2:6a: e9:3d:69:68:9d:46:2f:76:68:9f:47:eb:03:aa:2a:d8:a6:4e: 8c:c5:60:b4:9a:9d:3c:70:23:87:46:68:c4:c7:c5:0f:7d:a8: 56:65:7c:52:04:75:33:c5:7d:b7:78:1c:8e:ca:e5:93:2c:67: 5f:52:06:a7:d9:1a:11:00:55:57:e0:dc:38:9a:af:22:ad:2d: 58:94:58:16:bc:94:4c:95:63:4a:a8:5c:25:93:bd:a2:31:47: 3e:47:c4:57:aa:3a:4b:e8:3e:a1:a1:4a:22:81:f6:26:b3:fb: 4e:d8:61:49:6f:c1:8c:fc:21:03:8c:70:ea:61:fd:8f:37:5f: b8:ff:87:73:73:61:82:3a:d3:91:5f:9a:1a:0c:d7:52:75:5f: 92:30:97:24:49:ad:ad:4e:87:f5:6f:62:45:89:43:ed:71:5d: dc:bc:39:6c:0d:7f:75:ab:72:92:d1:20:41:bd:ea:f6:e5:af: 8f:2a:2a:30:38:45:d6:41:5b:43:40:f3:af:5c:c7:08:c3:ae: ec:ad:e9:30:fa:b5:0d:fa:61:97:c8:95:c4:bf:c3:2a:4d:48: 74:ee:af:55 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9WwNKzcn32tmL0jH3NgStMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm MDFjMWQwHhcNMjYwMTAyMDYxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZGIxNTdlYmYzNjZlM2VmNDFkYmM5MTc0ZjRmNjU5NzBjNGRkMWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAhMdgqaYmynbEGdJuirFsGKocQV oTCbbsPkAbY1WqAqGFXGq9wjhP5qTv9KgsFbve2u6SoQYYcSJg1sOVNbIbKRQtPr gZpMkPzHQOhikEeOs8j1FBpULbvW4B7ZzxfHVWQSLiJoVXBesZZwqMJxSDRyaZLz iUrqNpx4vvREARoOAduS2CzNWuqNgJqtytui1M/0VC3MYuYznn7tJsUg3URkb2QB qcvgFH55UxulkPYXeGw86Nv3jVGIrqGbnaZ+YCwGoXkjig6JxGwA6WCXfwDiKR5P rKOJ8hVrIn/5Xs9zFkTDNSixpaiIM+glXRwbCWAA9O8/tB4hmgmJ7nKU/wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG2xV+vzZuPvQdvJF09PZZcMTdH/MB8GA1UdIwQY MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt YjQyZjIzZDgyOGMzLzEvYmJGWDZfTm00LTlCMjhrWFQwOWxsd3hOMGY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSpXMA0G CSqGSIb3DQEBCwUAA4IBAQABVSnvGHDsmGdmbbftaGr2a6vzMuwXkAcnPbkA80dS wlMSomrpPWlonUYvdmifR+sDqirYpk6MxWC0mp08cCOHRmjEx8UPfahWZXxSBHUz xX23eByOyuWTLGdfUgan2RoRAFVX4Nw4mq8irS1YlFgWvJRMlWNKqFwlk72iMUc+ R8RXqjpL6D6hoUoigfYms/tO2GFJb8GM/CEDjHDqYf2PN1+4/4dzc2GCOtORX5oa DNdSdV+SMJckSa2tTof1b2JFiUPtcV3cvDlsDX91q3KS0SBBver25a+PKiowOEXW QVtDQPOvXMcIw67srekw+rUN+mGXyJXEv8MqTUh07q9V -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:37 2026 by rpki-client