This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/zE-RRbp9c-IDS6rMIF4lAOagyEA.roa File: zE-RRbp9c-IDS6rMIF4lAOagyEA.roa (raw, json) Hash identifier: J1DN9SHZqmcH157DFxe3XxHmi7o/sbW2MsAx65EEjDM= Subject key identifier: CC:4F:91:45:BA:7D:73:E2:03:4B:AA:CC:20:5E:25:00:E6:A0:C8:40 Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Certificate serial: 019B7D5AFE34CF49F5FC820FAF483F7004AB Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/zE-RRbp9c-IDS6rMIF4lAOagyEA.roa Signing time: Fri 02 Jan 2026 06:17:53 +0000 ROA not before: Fri 02 Jan 2026 06:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 54339 IP address blocks: 89.37.119.0/24 maxlen: 24 89.38.229.0/24 maxlen: 24 89.42.89.0/24 maxlen: 24 89.42.92.0/24 maxlen: 24 89.42.93.0/24 maxlen: 24 89.43.142.0/24 maxlen: 24 89.46.4.0/24 maxlen: 24 89.47.123.0/24 maxlen: 24 89.47.124.0/24 maxlen: 24 93.113.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:fe:34:cf:49:f5:fc:82:0f:af:48:3f:70:04:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Validity Not Before: Jan 2 06:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cc4f9145ba7d73e2034baacc205e2500e6a0c840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d4:0e:94:f9:86:67:ea:da:85:28:1b:39:d6: b0:ac:cb:53:6a:f2:cf:1d:f0:fa:84:ae:03:2c:4d: 83:08:29:f8:80:20:0d:8f:3d:16:15:d4:1e:4e:17: 00:27:6b:5e:ec:22:86:b0:80:ee:dc:8e:80:57:b5: 43:c3:da:f8:6b:c8:ff:b2:e7:72:80:4f:9b:50:8d: 58:75:f2:77:a3:f0:8f:62:e1:f7:4e:06:c9:71:c2: e5:19:aa:88:8c:93:55:16:1e:9e:40:80:29:0b:eb: 7c:3d:d7:9a:72:6b:78:e0:5b:4a:66:55:bc:d7:17: e6:40:de:8e:01:d9:17:93:0a:7d:b9:eb:40:a8:e0: e6:0f:1e:de:af:1f:bf:1a:5b:ef:24:24:f7:f4:34: f6:fb:84:da:8e:84:e5:53:f4:f2:55:f0:bf:35:b2: ee:4d:d5:9a:92:b4:ba:eb:65:89:06:58:7f:bd:53: 06:d9:7a:f8:92:b2:99:34:6a:08:31:64:b6:76:ea: 65:40:f1:32:23:aa:10:19:d9:2a:93:7c:f3:ca:8f: 13:d7:5f:c0:26:53:43:12:69:79:5c:85:b7:16:95: 57:fc:fc:41:36:38:5d:f5:df:59:5e:c9:b5:50:d6: ee:4c:0a:ee:12:cc:1f:34:b8:96:b9:23:89:9a:4b: 5d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:4F:91:45:BA:7D:73:E2:03:4B:AA:CC:20:5E:25:00:E6:A0:C8:40 X509v3 Authority Key Identifier: keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/zE-RRbp9c-IDS6rMIF4lAOagyEA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.37.119.0/24 89.38.229.0/24 89.42.89.0/24 89.42.92.0/23 89.43.142.0/24 89.46.4.0/24 89.47.123.0-89.47.124.255 93.113.176.0/24 Signature Algorithm: sha256WithRSAEncryption 02:31:af:08:1f:14:66:98:21:5e:ad:dd:1f:9a:5c:4f:13:cb: 27:59:5a:ca:4a:25:b8:75:d0:e3:c3:7c:64:e1:18:cb:d3:51: cc:8c:cf:6d:1e:f8:a7:e1:3f:19:f8:0a:70:15:10:65:80:7b: a2:ad:a2:c3:d4:64:3b:db:50:e0:1b:b6:1e:71:a5:02:75:8e: ef:ce:35:6f:7f:7e:98:ac:c0:10:9a:3e:2a:e4:49:d8:97:a5: 56:38:07:18:a0:33:0d:e3:d2:d0:44:5f:c5:17:ae:37:ff:6d: 37:0e:af:40:7e:c3:19:a0:08:e9:ad:d9:c1:77:fd:6f:06:e1: f8:3e:ef:cd:f3:29:6a:cc:08:ac:c7:46:d0:da:6b:ed:d7:2d: 57:94:51:82:ee:f4:bb:d5:35:a0:64:4f:28:82:76:6b:ea:30: 0f:38:b2:ca:7b:de:6c:78:57:25:b5:fb:7a:29:49:03:a2:1d: ae:8c:94:cb:f1:0f:94:4a:a0:fb:89:f8:d6:91:24:ea:c6:e0: 35:c1:34:6f:71:9c:e0:9e:88:5b:0f:9c:ce:6e:1a:d3:df:39: d1:ba:77:ce:a2:29:0e:5e:0e:99:5c:97:32:f1:fd:df:4d:31: 78:16:b7:05:fa:86:c5:04:7b:da:a9:57:ca:99:0a:ab:31:a9: c1:9c:83:ed -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgISAZt9Wv40z0n1/IIPr0g/cASrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm MDFjMWQwHhcNMjYwMTAyMDYxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzRmOTE0NWJhN2Q3M2UyMDM0YmFhY2MyMDVlMjUwMGU2YTBjODQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9QOlPmGZ+rahSgbOdawrMtTavLP HfD6hK4DLE2DCCn4gCANjz0WFdQeThcAJ2te7CKGsIDu3I6AV7VDw9r4a8j/sudy gE+bUI1YdfJ3o/CPYuH3TgbJccLlGaqIjJNVFh6eQIApC+t8Pdeacmt44FtKZlW8 1xfmQN6OAdkXkwp9uetAqODmDx7erx+/GlvvJCT39DT2+4TajoTlU/TyVfC/NbLu TdWakrS662WJBlh/vVMG2Xr4krKZNGoIMWS2duplQPEyI6oQGdkqk3zzyo8T11/A JlNDEml5XIW3FpVX/PxBNjhd9d9ZXsm1UNbuTAruEswfNLiWuSOJmktd9QIDAQAB o4ICOzCCAjcwHQYDVR0OBBYEFMxPkUW6fXPiA0uqzCBeJQDmoMhAMB8GA1UdIwQY MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt YjQyZjIzZDgyOGMzLzEvekUtUlJicDljLUlEUzZyTUlGNGxBT2FneUVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQAWSV3AwQA WSblAwQAWSpZAwQBWSpcAwQAWSuOAwQAWS4EMAwDBABZL3sDBABZL3wDBABdcbAw DQYJKoZIhvcNAQELBQADggEBAAIxrwgfFGaYIV6t3R+aXE8TyydZWspKJbh10OPD fGThGMvTUcyMz20e+KfhPxn4CnAVEGWAe6KtosPUZDvbUOAbth5xpQJ1ju/ONW9/ fpiswBCaPirkSdiXpVY4BxigMw3j0tBEX8UXrjf/bTcOr0B+wxmgCOmt2cF3/W8G 4fg+783zKWrMCKzHRtDaa+3XLVeUUYLu9LvVNaBkTyiCdmvqMA84ssp73mx4VyW1 +3opSQOiHa6MlMvxD5RKoPuJ+NaRJOrG4DXBNG9xnOCeiFsPnM5uGtPfOdG6d86i KQ5eDplclzLx/d9NMXgWtwX6hsUEe9qpV8qZCqsxqcGcg+0= -----END CERTIFICATE-----Generated at Mon Jan 19 19:58:16 2026 by rpki-client