This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/iH6fiU2MwA_JVde938_dinZWteU.roa File: iH6fiU2MwA_JVde938_dinZWteU.roa (raw, json) Hash identifier: CeWp1jjX/VSuF2JHoUdzeVzso8JqI7jTMF7fGXhr/do= Subject key identifier: 88:7E:9F:89:4D:8C:C0:0F:C9:55:D7:BD:DF:CF:DD:8A:76:56:B5:E5 Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Certificate serial: 019B7D5AFEB49A79D39DEA8088CF155B570C Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/iH6fiU2MwA_JVde938_dinZWteU.roa Signing time: Fri 02 Jan 2026 06:17:53 +0000 ROA not before: Fri 02 Jan 2026 06:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 55201 IP address blocks: 89.37.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:fe:b4:9a:79:d3:9d:ea:80:88:cf:15:5b:57:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Validity Not Before: Jan 2 06:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=887e9f894d8cc00fc955d7bddfcfdd8a7656b5e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:28:53:0b:ef:37:c6:af:98:6f:fc:ce:cd:5a: 89:71:a2:43:49:6d:3d:8b:ad:aa:17:b3:cf:47:bd: 66:0b:1d:a6:76:7b:2b:23:0f:bd:b9:c4:7a:cf:69: e5:c9:e7:88:2e:6c:8b:76:aa:82:c2:7b:c3:46:2f: d9:e5:56:fe:ee:f1:27:5c:25:7a:c4:52:3f:a9:8e: 68:6d:60:8e:7a:64:c7:de:be:8c:33:e8:de:e5:8e: f3:0a:41:46:fc:3a:2b:44:33:92:9b:ea:23:65:b5: d9:16:41:d3:02:ca:a8:05:cd:88:48:79:f8:5d:d9: 27:d2:df:d8:e5:b1:97:10:ca:ff:69:1d:18:5c:ba: 78:63:04:a8:e7:d9:09:c9:f8:57:6d:1b:60:42:92: 8e:69:15:07:54:51:f6:0e:19:2a:c0:86:c1:b2:ee: 77:e4:bc:29:4f:4a:e0:cf:57:fc:be:e1:48:69:66: 6b:2b:43:da:1a:e4:a6:42:ff:73:e2:56:8c:31:b2: c7:ef:a7:7b:bf:36:90:bb:5d:ac:89:e9:22:a2:9a: a6:ad:a0:d8:70:54:96:36:0d:35:78:57:67:64:18: 73:01:58:93:28:67:7f:c3:a8:3e:76:a0:cc:22:68: 5b:ca:24:aa:c6:85:00:74:7c:aa:31:dd:73:b3:79: 7c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:7E:9F:89:4D:8C:C0:0F:C9:55:D7:BD:DF:CF:DD:8A:76:56:B5:E5 X509v3 Authority Key Identifier: keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/iH6fiU2MwA_JVde938_dinZWteU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.37.118.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:7d:73:16:84:88:53:1e:59:66:a1:b2:36:d9:c7:0c:fa:17: 27:af:d5:a2:b1:d5:60:37:40:41:d2:ed:9d:80:e6:2e:0e:6a: ac:e6:0c:1d:df:50:bf:48:92:49:ba:ca:43:6e:04:62:da:df: 4c:2d:65:09:4a:1b:2a:3b:df:58:10:7b:26:a0:0b:c4:ef:ec: 71:b3:d9:f8:e5:bf:49:ee:a3:b1:20:95:e5:57:a7:13:bf:c2: 81:95:e5:15:a4:fc:ab:07:71:1b:fb:64:d8:b9:b1:c5:df:24: d9:a1:cc:eb:ee:55:10:d2:63:58:09:6f:3a:d0:f1:12:3f:e9: 9a:51:7c:df:01:83:b8:81:b2:69:17:d8:7c:40:3a:65:5c:18: 74:cc:45:d8:0c:bd:33:bb:2e:48:8a:58:fa:c3:04:95:42:11: 9e:48:3f:c3:02:b9:ad:7e:39:75:8c:d8:54:ce:f1:1a:78:41: d7:04:b6:75:bd:e2:3c:b7:11:bc:23:5e:92:9d:d8:98:09:28: ee:6e:17:e6:41:ba:9e:9b:fc:35:88:c2:b8:7c:d9:83:ee:04: d8:e4:46:ef:e1:b6:57:b6:b9:c2:17:5b:fa:29:60:d4:b2:7b: 6c:58:f8:f6:f5:d7:69:85:41:5c:d2:63:8a:1c:f5:b4:84:75: 53:eb:ca:64 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9Wv60mnnTneqAiM8VW1cMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm MDFjMWQwHhcNMjYwMTAyMDYxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODdlOWY4OTRkOGNjMDBmYzk1NWQ3YmRkZmNmZGQ4YTc2NTZiNWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqShTC+83xq+Yb/zOzVqJcaJDSW09 i62qF7PPR71mCx2mdnsrIw+9ucR6z2nlyeeILmyLdqqCwnvDRi/Z5Vb+7vEnXCV6 xFI/qY5obWCOemTH3r6MM+je5Y7zCkFG/DorRDOSm+ojZbXZFkHTAsqoBc2ISHn4 Xdkn0t/Y5bGXEMr/aR0YXLp4YwSo59kJyfhXbRtgQpKOaRUHVFH2DhkqwIbBsu53 5LwpT0rgz1f8vuFIaWZrK0PaGuSmQv9z4laMMbLH76d7vzaQu12siekiopqmraDY cFSWNg01eFdnZBhzAViTKGd/w6g+dqDMImhbyiSqxoUAdHyqMd1zs3l8DwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIh+n4lNjMAPyVXXvd/P3Yp2VrXlMB8GA1UdIwQY MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt YjQyZjIzZDgyOGMzLzEvaUg2ZmlVMk13QV9KVmRlOTM4X2RpblpXdGVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSV2MA0G CSqGSIb3DQEBCwUAA4IBAQAdfXMWhIhTHllmobI22ccM+hcnr9WisdVgN0BB0u2d gOYuDmqs5gwd31C/SJJJuspDbgRi2t9MLWUJShsqO99YEHsmoAvE7+xxs9n45b9J 7qOxIJXlV6cTv8KBleUVpPyrB3Eb+2TYubHF3yTZoczr7lUQ0mNYCW860PESP+ma UXzfAYO4gbJpF9h8QDplXBh0zEXYDL0zuy5Iilj6wwSVQhGeSD/DArmtfjl1jNhU zvEaeEHXBLZ1veI8txG8I16SndiYCSjubhfmQbqem/w1iMK4fNmD7gTY5Ebv4bZX trnCF1v6KWDUsntsWPj29ddphUFc0mOKHPW0hHVT68pk -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:59 2026 by rpki-client