This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/IWFu4PcIHs7L8thEAkF3lVO_2XI.roa File: IWFu4PcIHs7L8thEAkF3lVO_2XI.roa (raw, json) Hash identifier: 4zilbczhiZchZfoj7btdnHaec0KUj97xB6CgD8W5sFw= Subject key identifier: 21:61:6E:E0:F7:08:1E:CE:CB:F2:D8:44:02:41:77:95:53:BF:D9:72 Certificate issuer: /CN=2e6b33413faa5e5e1d279a2a25ff81d8d15325df Certificate serial: 019B7BA3B5BA3534C0A02526153178FFBAB5 Authority key identifier: 2E:6B:33:41:3F:AA:5E:5E:1D:27:9A:2A:25:FF:81:D8:D1:53:25:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmszQT-qXl4dJ5oqJf-B2NFTJd8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/IWFu4PcIHs7L8thEAkF3lVO_2XI.roa Signing time: Thu 01 Jan 2026 22:18:04 +0000 ROA not before: Thu 01 Jan 2026 22:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61353 IP address blocks: 89.34.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.crl rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.mft rsync://rpki.ripe.net/repository/DEFAULT/LmszQT-qXl4dJ5oqJf-B2NFTJd8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 22:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:b5:ba:35:34:c0:a0:25:26:15:31:78:ff:ba:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e6b33413faa5e5e1d279a2a25ff81d8d15325df Validity Not Before: Jan 1 22:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=21616ee0f7081ececbf2d8440241779553bfd972 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:64:77:26:30:f4:b2:66:0a:39:43:21:b7:27: 22:83:26:c4:8f:20:57:74:d5:01:01:97:35:48:1a: 97:79:f8:58:79:d9:cc:57:4f:23:dc:1a:8c:96:6b: 4b:03:7f:cc:df:26:c3:75:bb:11:93:20:42:cb:b9: 26:48:33:7c:b8:7a:a1:51:75:8d:c8:37:8f:43:8e: ac:77:00:e3:1e:4a:a7:f2:51:d6:fa:6a:37:21:da: 0c:d6:8e:94:6c:0f:da:aa:e5:91:47:5f:ef:9e:68: 76:c2:ca:2a:95:ae:0b:db:d6:d1:e8:2c:1a:72:52: 36:11:56:b0:2d:e3:02:f6:35:e0:6c:ca:98:19:fc: 42:da:fe:f1:76:06:14:30:90:2f:69:09:28:57:5e: 70:86:25:66:8f:a3:bc:14:82:d5:9d:a0:3a:94:17: cf:96:07:ee:4f:20:5c:cf:1f:2a:41:cf:92:bd:e1: 3e:fa:50:7e:49:09:6c:7d:ae:d8:2c:4a:97:f3:4a: 6f:ce:de:c8:59:a2:e3:8d:cd:6c:db:60:ee:ac:0c: bc:7d:43:2c:68:32:3b:30:35:60:81:34:73:ab:6b: 23:04:23:fc:31:74:8c:59:03:33:4c:b7:21:d4:19: 4f:cf:c1:53:60:70:f0:3a:4e:17:7f:51:cf:ca:18: ce:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:61:6E:E0:F7:08:1E:CE:CB:F2:D8:44:02:41:77:95:53:BF:D9:72 X509v3 Authority Key Identifier: keyid:2E:6B:33:41:3F:AA:5E:5E:1D:27:9A:2A:25:FF:81:D8:D1:53:25:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmszQT-qXl4dJ5oqJf-B2NFTJd8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/IWFu4PcIHs7L8thEAkF3lVO_2XI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/accde8-f46f-4ef9-94af-8dd81e4b3e33/1/LmszQT-qXl4dJ5oqJf-B2NFTJd8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.34.160.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:57:8c:b3:5e:8f:8e:e2:e2:4b:99:d3:a7:a0:02:91:37:44: 7b:8b:9d:5d:66:04:23:e3:e4:2f:e7:f7:7f:e3:be:ad:23:0b: dc:3b:bb:ac:a5:69:19:49:8a:10:e6:5d:81:d8:e9:11:42:f8: ce:0e:93:d9:92:e1:97:2b:97:4a:31:18:0e:cd:c4:1c:e0:4f: c7:0d:52:75:aa:11:47:9e:2e:6e:c7:64:12:29:87:26:bb:60: de:e4:60:91:52:08:f4:7a:bd:c3:b8:31:f9:88:57:db:d5:86: 8c:85:5d:f8:8e:e0:79:5c:9e:fc:d4:3c:da:c0:4c:dc:c4:35: d9:9d:f6:a6:23:75:81:63:db:21:74:c5:e4:83:28:ed:14:b0: b2:d4:9a:85:93:e0:eb:da:f5:20:6f:e2:58:83:62:6b:78:eb: 28:70:07:f2:f0:16:b4:75:84:28:44:4f:cb:d8:b6:49:c5:81: 50:94:e3:ff:fe:48:1c:5d:8e:55:e4:c2:2a:b3:fb:43:24:db: 4f:ba:8e:1f:87:7e:72:79:81:7b:bb:e9:b0:f4:b3:c4:dc:08: d7:2e:93:e2:02:9e:ef:96:80:1f:5c:3d:e4:dd:18:3e:04:09: 58:f0:e7:ee:f8:80:5b:f6:eb:af:79:5e:2a:2f:15:31:3e:c0: 2c:71:29:ab -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o7W6NTTAoCUmFTF4/7q1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlNmIzMzQxM2ZhYTVlNWUxZDI3OWEyYTI1ZmY4MWQ4ZDE1 MzI1ZGYwHhcNMjYwMTAxMjIxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTYxNmVlMGY3MDgxZWNlY2JmMmQ4NDQwMjQxNzc5NTUzYmZkOTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA62R3JjD0smYKOUMhtycigybEjyBX dNUBAZc1SBqXefhYednMV08j3BqMlmtLA3/M3ybDdbsRkyBCy7kmSDN8uHqhUXWN yDePQ46sdwDjHkqn8lHW+mo3IdoM1o6UbA/aquWRR1/vnmh2wsoqla4L29bR6Cwa clI2EVawLeMC9jXgbMqYGfxC2v7xdgYUMJAvaQkoV15whiVmj6O8FILVnaA6lBfP lgfuTyBczx8qQc+SveE++lB+SQlsfa7YLEqX80pvzt7IWaLjjc1s22DurAy8fUMs aDI7MDVggTRzq2sjBCP8MXSMWQMzTLch1BlPz8FTYHDwOk4Xf1HPyhjO1QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCFhbuD3CB7Oy/LYRAJBd5VTv9lyMB8GA1UdIwQY MBaAFC5rM0E/ql5eHSeaKiX/gdjRUyXfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG1zelFULXFYbDRkSjVvcUpmLUIyTkZUSmQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9hY2NkZTgtZjQ2Zi00ZWY5LTk0YWYt OGRkODFlNGIzZTMzLzEvSVdGdTRQY0lIczdMOHRoRUFrRjNsVk9fMlhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9hY2NkZTgtZjQ2Zi00ZWY5LTk0YWYtOGRkODFlNGIzZTMz LzEvTG1zelFULXFYbDRkSjVvcUpmLUIyTkZUSmQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSKgMA0G CSqGSIb3DQEBCwUAA4IBAQBbV4yzXo+O4uJLmdOnoAKRN0R7i51dZgQj4+Qv5/d/ 476tIwvcO7uspWkZSYoQ5l2B2OkRQvjODpPZkuGXK5dKMRgOzcQc4E/HDVJ1qhFH ni5ux2QSKYcmu2De5GCRUgj0er3DuDH5iFfb1YaMhV34juB5XJ781DzawEzcxDXZ nfamI3WBY9shdMXkgyjtFLCy1JqFk+Dr2vUgb+JYg2JreOsocAfy8Ba0dYQoRE/L 2LZJxYFQlOP//kgcXY5V5MIqs/tDJNtPuo4fh35yeYF7u+mw9LPE3AjXLpPiAp7v loAfXD3k3Rg+BAlY8Ofu+IBb9uuveV4qLxUxPsAscSmr -----END CERTIFICATE-----Generated at Tue Jan 20 09:04:39 2026 by rpki-client