This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/coH2bpSR5thTzd8yt01ieyEmhs8.roa File: coH2bpSR5thTzd8yt01ieyEmhs8.roa (raw, json) Hash identifier: UZ7sRG6xsBNeIxeJKfhGD7vhn9JkENx7e+wdxprm7bs= Subject key identifier: 72:81:F6:6E:94:91:E6:D8:53:CD:DF:32:B7:4D:62:7B:21:26:86:CF Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Certificate serial: 019B7D5AFADEF13943E057B9223612DB1035 Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/coH2bpSR5thTzd8yt01ieyEmhs8.roa Signing time: Fri 02 Jan 2026 06:17:53 +0000 ROA not before: Fri 02 Jan 2026 06:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39345 IP address blocks: 89.34.24.0/23 maxlen: 23 188.214.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:fa:de:f1:39:43:e0:57:b9:22:36:12:db:10:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Validity Not Before: Jan 2 06:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7281f66e9491e6d853cddf32b74d627b212686cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:c4:3a:14:8f:2e:2b:5a:ba:44:ef:1b:dd:99: 0d:10:76:94:d8:0d:4f:21:cf:da:10:16:47:d0:63: 73:d2:14:86:87:f4:80:40:80:a4:f2:db:7d:68:11: f4:61:04:5d:e1:94:12:b7:e7:8d:f2:f5:6f:e8:d4: f6:4c:45:fe:7b:d4:45:c6:0a:35:67:0b:30:84:5f: 2c:85:5e:ce:ba:ea:f4:4e:72:d8:73:04:43:ae:50: 22:1e:13:f6:c6:10:7d:7b:d2:a2:0a:aa:6b:ee:66: f1:96:82:12:5e:28:59:77:87:81:4d:f7:df:b1:25: ba:a0:c7:7f:3c:a5:3f:c3:aa:82:aa:e6:8a:f0:f4: 99:95:df:fe:94:f3:70:8a:54:a1:ea:94:15:82:11: d9:2f:3e:18:f4:1e:53:9d:b2:bc:d1:d8:cb:6a:a7: 4e:ff:05:71:23:cb:b2:b9:df:00:29:ee:75:7f:7c: 9c:fa:de:00:d6:29:d9:cb:4e:3f:15:58:78:80:9b: ec:8e:e5:e6:f7:d9:9b:4c:8e:32:9e:85:b5:f1:0e: 37:c2:0d:56:7c:f2:eb:90:03:4a:f2:87:49:dc:f0: 79:42:c1:8f:f6:ad:f9:f1:7b:14:81:e5:f2:ac:c9: 8f:83:5b:29:e2:e6:b5:5c:18:1b:dc:ae:6b:45:86: df:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:81:F6:6E:94:91:E6:D8:53:CD:DF:32:B7:4D:62:7B:21:26:86:CF X509v3 Authority Key Identifier: keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/coH2bpSR5thTzd8yt01ieyEmhs8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.34.24.0/23 188.214.88.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:5b:a6:3d:b7:99:b8:41:4d:9a:e6:61:0e:04:2b:7a:aa:47: 54:27:59:9a:41:cd:d5:55:33:08:45:b9:3f:03:f8:74:51:85: 22:2b:83:d3:c9:de:eb:02:ab:b0:f7:ba:c6:b8:17:33:9e:7b: bf:b2:08:8d:01:e9:06:db:21:85:7a:d3:e2:7f:29:77:bf:f6: 10:97:89:0f:b0:a7:cc:26:eb:50:ed:70:34:e2:dd:13:14:04: 03:0d:23:51:27:5b:55:f1:4d:63:73:fa:64:af:b5:0e:3b:86: 1a:d9:83:13:66:99:64:a9:b2:ab:f1:f7:2d:18:55:19:07:e7: b2:0b:3b:b1:58:ec:b1:f3:18:3a:2f:9f:ab:a0:4e:02:5b:5f: 81:53:28:e0:31:a1:50:80:79:fa:7d:cf:be:79:af:c0:34:09: 62:bf:78:6a:65:3e:35:f6:91:0e:b8:b7:97:e3:bb:46:96:c6: a1:1e:36:15:50:5a:0a:30:13:c1:8e:76:c6:7b:b9:80:3e:98: 38:e7:14:4e:9d:93:30:b1:a2:be:88:8f:f4:7c:2a:94:6e:5f: d4:93:34:14:de:12:b4:fd:61:2b:91:95:4f:b2:4d:0c:f6:01: f8:07:c6:77:f7:6a:58:d5:0a:eb:e2:e4:59:96:8e:97:c7:53: 37:e8:21:d5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9Wvre8TlD4Fe5IjYS2xA1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm MDFjMWQwHhcNMjYwMTAyMDYxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MjgxZjY2ZTk0OTFlNmQ4NTNjZGRmMzJiNzRkNjI3YjIxMjY4NmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA58Q6FI8uK1q6RO8b3ZkNEHaU2A1P Ic/aEBZH0GNz0hSGh/SAQICk8tt9aBH0YQRd4ZQSt+eN8vVv6NT2TEX+e9RFxgo1 ZwswhF8shV7Ouur0TnLYcwRDrlAiHhP2xhB9e9KiCqpr7mbxloISXihZd4eBTfff sSW6oMd/PKU/w6qCquaK8PSZld/+lPNwilSh6pQVghHZLz4Y9B5TnbK80djLaqdO /wVxI8uyud8AKe51f3yc+t4A1inZy04/FVh4gJvsjuXm99mbTI4ynoW18Q43wg1W fPLrkANK8odJ3PB5QsGP9q358XsUgeXyrMmPg1sp4ua1XBgb3K5rRYbflQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHKB9m6UkebYU83fMrdNYnshJobPMB8GA1UdIwQY MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt YjQyZjIzZDgyOGMzLzEvY29IMmJwU1I1dGhUemQ4eXQwMWlleUVtaHM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBWSIYAwQA vNZYMA0GCSqGSIb3DQEBCwUAA4IBAQAaW6Y9t5m4QU2a5mEOBCt6qkdUJ1maQc3V VTMIRbk/A/h0UYUiK4PTyd7rAquw97rGuBcznnu/sgiNAekG2yGFetPifyl3v/YQ l4kPsKfMJutQ7XA04t0TFAQDDSNRJ1tV8U1jc/pkr7UOO4Ya2YMTZplkqbKr8fct GFUZB+eyCzuxWOyx8xg6L5+roE4CW1+BUyjgMaFQgHn6fc++ea/ANAliv3hqZT41 9pEOuLeX47tGlsahHjYVUFoKMBPBjnbGe7mAPpg45xROnZMwsaK+iI/0fCqUbl/U kzQU3hK0/WErkZVPsk0M9gH4B8Z392pY1Qrr4uRZlo6Xx1M36CHV -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:12 2026 by rpki-client