This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/66PvU9zZe40QPvYfUbIMVwRtoUc.roa File: 66PvU9zZe40QPvYfUbIMVwRtoUc.roa (raw, json) Hash identifier: PuDY7T0dTQnWl6fRZWtjtvnzjPu119CD4rEyspEfVG0= Subject key identifier: EB:A3:EF:53:DC:D9:7B:8D:10:3E:F6:1F:51:B2:0C:57:04:6D:A1:47 Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Certificate serial: 019B77C7445A038933EB1B52DD40E8F37D5E Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/66PvU9zZe40QPvYfUbIMVwRtoUc.roa Signing time: Thu 01 Jan 2026 04:18:26 +0000 ROA not before: Thu 01 Jan 2026 04:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20001 IP address blocks: 89.34.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 13:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:44:5a:03:89:33:eb:1b:52:dd:40:e8:f3:7d:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Validity Not Before: Jan 1 04:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eba3ef53dcd97b8d103ef61f51b20c57046da147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:61:ab:3f:ce:50:c0:91:08:df:5d:4e:51:1e: f6:ab:cc:6a:c4:0f:17:5c:57:51:d6:51:a9:66:45: 69:b0:cf:25:2c:e0:8d:d8:5a:e7:e3:e9:90:0a:f8: 3d:c0:ea:39:df:30:11:ce:79:c9:d5:3e:40:34:f8: b9:e2:85:1c:92:b6:e8:6b:b2:30:03:fc:f5:9c:70: 01:78:9f:27:50:b0:8c:99:f7:b9:d7:d0:82:89:d5: 59:1a:83:1e:c3:64:df:08:fa:f1:69:16:d7:41:65: db:ef:bf:23:cc:26:0e:f2:bc:39:49:cc:47:67:bf: 4f:c5:d4:88:08:97:ae:91:10:33:b0:78:c7:ab:7a: d9:47:1b:de:8b:6f:73:8a:cb:6d:0b:f2:6e:51:94: 4a:ac:1e:9d:ef:71:77:6d:5e:1f:d7:d2:01:87:8e: d2:79:b3:6f:27:50:fe:aa:d0:04:52:09:6f:f1:41: c7:04:f6:d9:be:8f:d6:f2:85:65:98:d2:01:71:76: 0e:e7:86:60:2d:00:9d:ba:d6:d9:ef:09:91:51:35: 92:b1:51:b6:0f:86:23:54:c0:60:e6:43:5a:3e:ff: 37:e5:18:05:ca:5f:c1:fe:b8:16:5a:94:0a:b0:33: aa:43:b1:ad:86:30:43:6d:9b:5e:a0:d9:67:14:14: 23:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:A3:EF:53:DC:D9:7B:8D:10:3E:F6:1F:51:B2:0C:57:04:6D:A1:47 X509v3 Authority Key Identifier: keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/66PvU9zZe40QPvYfUbIMVwRtoUc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.34.171.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:d3:05:61:78:e3:7a:b7:62:90:00:03:96:7f:bc:dc:3c:d5: 68:4b:2e:61:b9:e5:3b:89:30:9b:97:43:fa:3a:25:5f:0c:43: 90:7d:99:2c:d5:1e:c3:1e:04:65:0a:18:11:9c:e2:cb:9d:48: 21:af:18:20:8c:bf:49:5f:d2:2f:1d:24:f4:7e:96:94:e4:aa: c2:38:31:7d:11:ba:00:f0:1b:0f:ef:7d:d3:b7:ad:d8:93:a9: 20:9c:31:eb:b1:0e:b1:94:a2:ca:19:f7:24:18:43:82:ff:97: d9:3f:ea:bf:3b:f8:1c:af:3e:53:64:cb:12:26:76:37:f2:3e: 36:49:5b:75:4c:3f:3a:65:3d:d6:1a:0e:1d:13:16:e2:ea:39: 8d:f0:b7:9c:fd:39:87:44:f5:2b:84:0d:e3:f0:3f:5c:76:52: 75:6e:ef:f2:d8:fc:fb:78:b6:03:8f:4c:89:d6:d8:b0:0b:1b: 4b:69:da:41:03:ec:4e:a3:ad:3f:d7:ab:e3:13:f4:8d:25:92: 4b:c9:78:37:04:06:3a:b3:a5:1e:0c:0f:b6:50:a8:6d:0f:42: d6:60:9a:e1:d5:4a:5d:9f:92:ae:a6:1b:86:6d:65:86:37:ef: 2b:75:c9:9f:21:be:18:01:ad:bd:4a:f5:4a:47:29:f6:83:47: ed:d7:ed:55 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x0RaA4kz6xtS3UDo831eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0OGEyN2Y0NGIxMDQwNGM1MmY2ZmZjNGUwOGRjODJiZjhi NWRlZTQwHhcNMjYwMTAxMDQxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYmEzZWY1M2RjZDk3YjhkMTAzZWY2MWY1MWIyMGM1NzA0NmRhMTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWGrP85QwJEI311OUR72q8xqxA8X XFdR1lGpZkVpsM8lLOCN2Frn4+mQCvg9wOo53zARznnJ1T5ANPi54oUckrboa7Iw A/z1nHABeJ8nULCMmfe519CCidVZGoMew2TfCPrxaRbXQWXb778jzCYO8rw5ScxH Z79PxdSICJeukRAzsHjHq3rZRxvei29zisttC/JuUZRKrB6d73F3bV4f19IBh47S ebNvJ1D+qtAEUglv8UHHBPbZvo/W8oVlmNIBcXYO54ZgLQCdutbZ7wmRUTWSsVG2 D4YjVMBg5kNaPv835RgFyl/B/rgWWpQKsDOqQ7GthjBDbZteoNlnFBQj5QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOuj71Pc2XuNED72H1GyDFcEbaFHMB8GA1UdIwQY MBaAFNSKJ/RLEEBMUvb/xOCNyCv4td7kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYt NTlmNTk4NGI2NGVhLzEvNjZQdlU5elplNDBRUHZZZlViSU1Wd1J0b1VjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYtNTlmNTk4NGI2NGVh LzEvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSKrMA0G CSqGSIb3DQEBCwUAA4IBAQBO0wVheON6t2KQAAOWf7zcPNVoSy5hueU7iTCbl0P6 OiVfDEOQfZks1R7DHgRlChgRnOLLnUghrxggjL9JX9IvHST0fpaU5KrCODF9EboA 8BsP733Tt63Yk6kgnDHrsQ6xlKLKGfckGEOC/5fZP+q/O/gcrz5TZMsSJnY38j42 SVt1TD86ZT3WGg4dExbi6jmN8Lec/TmHRPUrhA3j8D9cdlJ1bu/y2Pz7eLYDj0yJ 1tiwCxtLadpBA+xOo60/16vjE/SNJZJLyXg3BAY6s6UeDA+2UKhtD0LWYJrh1Upd n5KuphuGbWWGN+8rdcmfIb4YAa29SvVKRyn2g0ft1+1V -----END CERTIFICATE-----Generated at Thu Jan 1 20:22:37 2026 by rpki-client