This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/tI0Zo1x5lMuE1Oo2kVN0VY5aVHY.roa File: tI0Zo1x5lMuE1Oo2kVN0VY5aVHY.roa (raw, json) Hash identifier: ZQPRST/A5dBBoR6hpfF1x/+3X/vDgrc2Y9yH+05gEFQ= Subject key identifier: B4:8D:19:A3:5C:79:94:CB:84:D4:EA:36:91:53:74:55:8E:5A:54:76 Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Certificate serial: 019B7D5AFA05F6C530C0FEEF814B01D8908B Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/tI0Zo1x5lMuE1Oo2kVN0VY5aVHY.roa Signing time: Fri 02 Jan 2026 06:17:52 +0000 ROA not before: Fri 02 Jan 2026 06:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25693 IP address blocks: 89.33.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:fa:05:f6:c5:30:c0:fe:ef:81:4b:01:d8:90:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Validity Not Before: Jan 2 06:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b48d19a35c7994cb84d4ea36915374558e5a5476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5a:67:74:d3:d9:68:00:82:d9:f2:eb:72:f4: 9b:b9:78:41:bd:18:9e:b8:35:c0:9d:bf:06:5b:d4: 8b:9a:43:0c:c0:d2:ff:39:48:71:c3:3b:1d:e2:c6: 5b:de:49:50:87:b1:ca:65:c7:48:97:71:c3:7c:c6: e8:34:7d:0b:17:61:54:d3:d4:fc:4e:33:e6:57:a8: 5c:28:81:36:32:c5:36:85:b0:33:9d:3d:7a:a5:f7: c5:75:3a:85:fa:de:d2:6a:72:29:12:0d:2a:1b:3b: bc:b4:dd:e6:8b:e2:92:51:a3:68:5f:60:9e:03:54: 40:97:2b:ed:e3:0c:af:1e:0c:7a:8d:61:d1:3e:00: 78:52:bd:dd:69:94:d4:f9:41:7f:8d:0b:1e:ad:8a: 49:ee:c3:b5:2a:cf:e4:02:8e:04:5e:f0:83:6d:9d: 92:34:fc:f4:55:4d:5a:bf:eb:a3:fc:b0:52:4c:9a: b2:ea:9c:18:2d:63:35:fb:40:f2:c0:b0:7d:7b:c6: 04:1d:df:50:2c:db:7b:00:08:da:80:bd:3f:75:dc: f3:98:8e:3e:27:b6:46:93:e0:68:43:d4:02:03:25: a5:31:8d:36:61:12:69:2b:99:6d:92:12:07:0a:c8: b3:07:35:f0:ad:fc:5c:38:42:29:c3:8a:f6:d4:41: 49:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:8D:19:A3:5C:79:94:CB:84:D4:EA:36:91:53:74:55:8E:5A:54:76 X509v3 Authority Key Identifier: keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/tI0Zo1x5lMuE1Oo2kVN0VY5aVHY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.33.192.0/24 Signature Algorithm: sha256WithRSAEncryption 28:83:82:18:de:99:80:4a:6a:fb:73:43:24:ec:c5:0a:a2:96: dd:a5:35:de:de:69:8c:e8:a0:18:55:27:eb:46:da:95:c2:34: 59:64:61:b6:81:3c:1f:6f:c9:da:25:2d:0f:b6:18:32:f5:1f: 32:5f:14:f0:39:65:66:83:d9:c4:cf:2e:d8:72:ac:bd:41:da: 96:85:a7:c1:25:a0:e3:aa:c0:39:0d:59:d2:9e:07:22:a8:b5: 04:24:a0:e7:62:2f:02:16:fd:4e:51:d7:a8:b6:de:df:04:83: 4f:c2:98:c1:1b:ed:94:8a:6a:a5:15:1c:8c:f6:4c:fc:90:c2: 77:18:0c:e6:1d:5b:71:89:8b:67:50:0f:98:af:f7:45:26:91: cd:d1:36:b9:7d:27:f7:cc:ba:22:05:6a:26:a9:67:59:33:78: 0e:c3:e1:46:33:2e:49:63:6c:c9:41:5d:10:b4:9f:a2:f9:66: c7:cd:82:5c:5e:75:44:7a:d0:62:2d:67:1a:27:b3:09:40:5f: 23:7b:e4:9d:b2:d1:2c:28:d8:63:4d:92:4e:1e:d7:78:bb:43: 59:f0:ac:5e:03:d6:d8:ae:0f:cd:15:0e:df:53:47:a9:17:e7: 42:eb:70:6d:79:db:6f:88:27:15:c9:5c:57:92:c5:0c:93:d6: 35:7e:79:0a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9WvoF9sUwwP7vgUsB2JCLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm MDFjMWQwHhcNMjYwMTAyMDYxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDhkMTlhMzVjNzk5NGNiODRkNGVhMzY5MTUzNzQ1NThlNWE1NDc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlpndNPZaACC2fLrcvSbuXhBvRie uDXAnb8GW9SLmkMMwNL/OUhxwzsd4sZb3klQh7HKZcdIl3HDfMboNH0LF2FU09T8 TjPmV6hcKIE2MsU2hbAznT16pffFdTqF+t7SanIpEg0qGzu8tN3mi+KSUaNoX2Ce A1RAlyvt4wyvHgx6jWHRPgB4Ur3daZTU+UF/jQserYpJ7sO1Ks/kAo4EXvCDbZ2S NPz0VU1av+uj/LBSTJqy6pwYLWM1+0DywLB9e8YEHd9QLNt7AAjagL0/ddzzmI4+ J7ZGk+BoQ9QCAyWlMY02YRJpK5ltkhIHCsizBzXwrfxcOEIpw4r21EFJ2wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLSNGaNceZTLhNTqNpFTdFWOWlR2MB8GA1UdIwQY MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt YjQyZjIzZDgyOGMzLzEvdEkwWm8xeDVsTXVFMU9vMmtWTjBWWTVhVkhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSHAMA0G CSqGSIb3DQEBCwUAA4IBAQAog4IY3pmASmr7c0Mk7MUKopbdpTXe3mmM6KAYVSfr RtqVwjRZZGG2gTwfb8naJS0Pthgy9R8yXxTwOWVmg9nEzy7Ycqy9QdqWhafBJaDj qsA5DVnSngciqLUEJKDnYi8CFv1OUdeott7fBINPwpjBG+2UimqlFRyM9kz8kMJ3 GAzmHVtxiYtnUA+Yr/dFJpHN0Ta5fSf3zLoiBWomqWdZM3gOw+FGMy5JY2zJQV0Q tJ+i+WbHzYJcXnVEetBiLWcaJ7MJQF8je+SdstEsKNhjTZJOHtd4u0NZ8KxeA9bY rg/NFQ7fU0epF+dC63BtedtviCcVyVxXksUMk9Y1fnkK -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:42 2026 by rpki-client