This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/j2qKFrWfusxDiFzkFOC9pNjdNeM.roa File: j2qKFrWfusxDiFzkFOC9pNjdNeM.roa (raw, json) Hash identifier: eedi82Numcyo5s6BIiJHhclTJ6KJqgbKjG36ZSW5eFU= Subject key identifier: 8F:6A:8A:16:B5:9F:BA:CC:43:88:5C:E4:14:E0:BD:A4:D8:DD:35:E3 Certificate issuer: /CN=2631166de785a3531bdc8361f1190a8369a7ed6a Certificate serial: 019B77C73798777B89C87092DBA7516FEDA2 Authority key identifier: 26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/j2qKFrWfusxDiFzkFOC9pNjdNeM.roa Signing time: Thu 01 Jan 2026 04:18:23 +0000 ROA not before: Thu 01 Jan 2026 04:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208685 IP address blocks: 89.47.1.0/24 maxlen: 24 2a00:1ca8:8a::/48 maxlen: 48 2a03:3f40:89::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.mft rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:37:98:77:7b:89:c8:70:92:db:a7:51:6f:ed:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2631166de785a3531bdc8361f1190a8369a7ed6a Validity Not Before: Jan 1 04:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8f6a8a16b59fbacc43885ce414e0bda4d8dd35e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:36:f9:0d:6f:b7:7b:fe:60:c0:e5:93:d9:11: de:99:b5:3b:bb:00:c8:32:18:40:65:7b:c0:bb:19: fe:40:23:69:21:6d:c0:44:8a:09:0e:8f:c5:66:df: 48:71:61:0b:23:4b:4a:8c:18:03:c9:72:10:6e:a4: 49:3d:85:ec:96:d0:3a:79:8c:be:e0:00:2d:8f:a7: 59:8c:7e:b4:55:92:07:91:f4:c7:79:8e:4e:d6:e3: 97:0a:5a:17:4d:11:1d:83:f1:c7:77:c4:a2:5d:9e: 06:cd:6d:bc:77:88:62:7b:be:6d:76:15:ad:d5:cc: 96:a5:42:cc:38:79:68:56:aa:47:2b:46:45:18:ec: ca:65:6c:0b:d1:de:f8:31:96:5f:f0:4d:5f:38:46: 27:bb:72:35:4a:0b:6b:2e:f5:1b:eb:74:e0:4a:40: 76:9e:a4:8e:35:0a:3d:6e:32:4d:80:65:ce:af:7c: cc:aa:e9:f4:5b:60:64:76:58:19:4e:8b:58:fb:02: 2d:18:b9:89:ec:90:a9:79:cd:90:b6:c8:3d:c2:c6: 66:5e:9a:c6:99:dc:8f:c6:46:84:25:54:5f:02:31: 70:e9:a8:ac:42:2f:ec:51:f1:03:46:35:83:b7:4d: 59:f2:88:a3:fb:52:31:3a:e4:46:23:2c:11:97:d5: 05:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:6A:8A:16:B5:9F:BA:CC:43:88:5C:E4:14:E0:BD:A4:D8:DD:35:E3 X509v3 Authority Key Identifier: keyid:26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/j2qKFrWfusxDiFzkFOC9pNjdNeM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.47.1.0/24 IPv6: 2a00:1ca8:8a::/48 2a03:3f40:89::/48 Signature Algorithm: sha256WithRSAEncryption 43:c5:5d:08:cc:95:8d:f2:ee:d7:24:be:d8:34:9f:a3:bd:d3: 7c:91:72:5e:da:c1:39:3a:d0:54:a4:c8:ae:7c:21:6c:74:ad: 2c:3f:39:05:b7:9b:22:8a:96:74:e9:f3:57:66:66:17:f2:1f: ba:18:4f:5d:2c:fb:7b:fb:74:cb:69:08:79:a0:a1:f5:c7:a1: 12:6d:58:44:b6:3a:bc:22:29:f1:92:80:04:23:07:8a:30:58: b8:30:a4:3d:10:d6:f0:de:8f:ea:13:01:a9:54:eb:86:17:9a: 0b:4d:af:63:e0:09:fd:b9:4b:37:3d:56:c3:c2:7f:f5:36:24: 35:20:c2:93:4c:da:17:5a:b7:fc:e4:b8:f6:55:51:a6:56:1a: 06:05:fa:c6:6a:50:30:ce:f7:6b:49:f9:c4:14:4b:99:e1:56: bc:33:13:ed:34:d3:92:4a:a5:95:5c:e2:15:b2:8c:a4:42:29: e8:8b:0b:bf:f1:a0:11:bb:df:7e:80:2b:9a:58:8a:aa:ed:da: d5:99:a8:f2:ef:b7:eb:4b:64:c2:c5:33:94:58:e1:3a:fc:c1: 9c:64:f3:b4:ad:e1:19:f6:01:cd:f6:dd:73:64:3f:13:ae:27: 88:0d:5b:39:52:9b:f5:07:e2:10:a8:b4:05:59:f4:bb:38:c4: dc:90:4e:33 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt3xzeYd3uJyHCS26dRb+2iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2MzExNjZkZTc4NWEzNTMxYmRjODM2MWYxMTkwYTgzNjlh N2VkNmEwHhcNMjYwMTAxMDQxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZjZhOGExNmI1OWZiYWNjNDM4ODVjZTQxNGUwYmRhNGQ4ZGQzNWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDb5DW+3e/5gwOWT2RHembU7uwDI MhhAZXvAuxn+QCNpIW3ARIoJDo/FZt9IcWELI0tKjBgDyXIQbqRJPYXsltA6eYy+ 4AAtj6dZjH60VZIHkfTHeY5O1uOXCloXTREdg/HHd8SiXZ4GzW28d4hie75tdhWt 1cyWpULMOHloVqpHK0ZFGOzKZWwL0d74MZZf8E1fOEYnu3I1SgtrLvUb63TgSkB2 nqSONQo9bjJNgGXOr3zMqun0W2BkdlgZTotY+wItGLmJ7JCpec2Qtsg9wsZmXprG mdyPxkaEJVRfAjFw6aisQi/sUfEDRjWDt01Z8oij+1IxOuRGIywRl9UFIwIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFI9qiha1n7rMQ4hc5BTgvaTY3TXjMB8GA1UdIwQY MBaAFCYxFm3nhaNTG9yDYfEZCoNpp+1qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmpFV2JlZUZvMU1iM0lOaDhSa0tnMm1uN1dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9mYjAxNTctNjc0Ni00YjAwLThmOGUt Yjg5YTI2MTk5OTc2LzEvajJxS0ZyV2Z1c3hEaUZ6a0ZPQzlwTmpkTmVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9mYjAxNTctNjc0Ni00YjAwLThmOGUtYjg5YTI2MTk5OTc2 LzEvSmpFV2JlZUZvMU1iM0lOaDhSa0tnMm1uN1dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQAWS8BMBgE AgACMBIDBwAqAByoAIoDBwAqAz9AAIkwDQYJKoZIhvcNAQELBQADggEBAEPFXQjM lY3y7tckvtg0n6O903yRcl7awTk60FSkyK58IWx0rSw/OQW3myKKlnTp81dmZhfy H7oYT10s+3v7dMtpCHmgofXHoRJtWES2OrwiKfGSgAQjB4owWLgwpD0Q1vDej+oT AalU64YXmgtNr2PgCf25Szc9VsPCf/U2JDUgwpNM2hdat/zkuPZVUaZWGgYF+sZq UDDO92tJ+cQUS5nhVrwzE+0005JKpZVc4hWyjKRCKeiLC7/xoBG7336AK5pYiqrt 2tWZqPLvt+tLZMLFM5RY4Tr8wZxk87St4Rn2Ac323XNkPxOuJ4gNWzlSm/UH4hCo tAVZ9Ls4xNyQTjM= -----END CERTIFICATE-----Generated at Wed Jan 21 15:37:01 2026 by rpki-client