This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/m6CFvFAczr2F2DiKaFi8VY6jdPc.roa File: m6CFvFAczr2F2DiKaFi8VY6jdPc.roa (raw, json) Hash identifier: 1cETzaUqMjEIhVmKAeMSNUEoxmYNmG6Gm0P7w6RCk0k= Subject key identifier: 9B:A0:85:BC:50:1C:CE:BD:85:D8:38:8A:68:58:BC:55:8E:A3:74:F7 Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Certificate serial: 019B77C74A517FB258420D744B5AD9AE4F94 Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/m6CFvFAczr2F2DiKaFi8VY6jdPc.roa Signing time: Thu 01 Jan 2026 04:18:28 +0000 ROA not before: Thu 01 Jan 2026 04:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64267 IP address blocks: 89.34.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 13:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:4a:51:7f:b2:58:42:0d:74:4b:5a:d9:ae:4f:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Validity Not Before: Jan 1 04:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9ba085bc501ccebd85d8388a6858bc558ea374f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:9a:f2:9c:2f:69:5a:a1:b7:31:c5:c3:ab:3c: 79:85:45:bc:ba:22:95:8a:16:60:50:2d:57:55:c9: 1d:77:f5:96:e6:75:24:4a:ba:40:ca:b8:ff:a9:46: c1:79:16:e8:94:e1:f5:bf:cb:3a:67:2b:4e:38:0f: 61:91:47:84:05:96:98:42:18:a1:67:01:b4:c5:88: e5:73:6d:ed:c2:16:fd:91:77:a9:8f:3a:90:53:36: 21:1d:8d:d5:13:43:46:7a:dc:12:82:3e:09:7b:8e: 1c:7d:c8:7d:ed:84:c6:60:d6:42:05:25:01:19:c2: e9:27:28:de:0b:7d:15:82:60:87:62:06:cc:f9:f9: a5:cb:4c:3d:6b:c6:cf:f1:9f:38:a6:bd:8e:06:1c: 48:91:bb:38:c9:5c:0f:54:07:61:37:70:ce:7f:cf: 6d:33:bc:0b:69:cf:ba:5d:8f:f5:b1:65:02:08:d8: 9b:9b:e7:c7:69:31:9e:ad:e6:05:a2:07:a8:11:18: 85:08:86:9c:4b:8a:b3:bd:d4:32:f5:f2:f2:b7:88: b3:04:3e:fa:39:7b:eb:01:84:3a:a4:1b:ff:75:41: e9:ea:29:07:cf:8f:5d:e4:77:ca:f1:96:95:c3:60: ff:fc:a3:c2:a5:83:0f:a0:d7:8d:e9:f9:70:d1:13: b3:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:A0:85:BC:50:1C:CE:BD:85:D8:38:8A:68:58:BC:55:8E:A3:74:F7 X509v3 Authority Key Identifier: keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/m6CFvFAczr2F2DiKaFi8VY6jdPc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.34.171.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:e6:69:03:25:fb:b7:07:06:20:55:4d:cd:2c:04:97:18:42: 2d:f4:83:5e:bf:d0:0a:e5:66:89:4c:18:6c:a3:c3:92:78:82: 77:55:4e:00:55:98:2f:da:8e:33:7c:47:07:5e:5a:30:b1:20: 8a:e5:b0:3a:96:81:02:f3:24:bb:9b:3f:1d:2a:cb:e4:53:1d: ff:61:79:94:8b:b8:f8:2b:86:ac:74:fa:8e:c6:5c:54:09:58: 9e:b4:02:64:ce:37:74:1f:30:92:87:99:a7:5b:d0:98:66:18: d7:b1:15:5d:5b:53:e9:54:18:d8:69:c2:d9:9c:ba:26:20:a9: 73:f2:86:77:e8:ab:16:5a:01:3a:9e:23:70:22:99:1c:ba:bc: a6:e2:43:76:93:fa:c6:80:ae:24:6e:e0:41:36:46:cf:49:c7: 11:f3:d4:13:c1:85:c9:13:00:df:4a:bd:e7:2d:8b:e3:7f:5d: 0b:eb:c6:fb:c9:09:b1:ce:2e:70:00:46:21:36:15:45:e2:ec: ff:1b:bb:35:8e:ac:cd:00:ba:4f:5c:28:0e:1a:d1:46:60:9a: 6f:02:24:d1:d8:f3:4c:7e:15:47:cb:9f:df:30:44:d9:2d:23: 02:2a:27:57:a0:f7:50:a0:f9:01:69:0c:8a:c7:e9:d2:f7:6c: b8:7f:64:e0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x0pRf7JYQg10S1rZrk+UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0OGEyN2Y0NGIxMDQwNGM1MmY2ZmZjNGUwOGRjODJiZjhi NWRlZTQwHhcNMjYwMTAxMDQxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YmEwODViYzUwMWNjZWJkODVkODM4OGE2ODU4YmM1NThlYTM3NGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5prynC9pWqG3McXDqzx5hUW8uiKV ihZgUC1XVckdd/WW5nUkSrpAyrj/qUbBeRbolOH1v8s6ZytOOA9hkUeEBZaYQhih ZwG0xYjlc23twhb9kXepjzqQUzYhHY3VE0NGetwSgj4Je44cfch97YTGYNZCBSUB GcLpJyjeC30VgmCHYgbM+fmly0w9a8bP8Z84pr2OBhxIkbs4yVwPVAdhN3DOf89t M7wLac+6XY/1sWUCCNibm+fHaTGereYFogeoERiFCIacS4qzvdQy9fLyt4izBD76 OXvrAYQ6pBv/dUHp6ikHz49d5HfK8ZaVw2D//KPCpYMPoNeN6flw0ROzdwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJughbxQHM69hdg4imhYvFWOo3T3MB8GA1UdIwQY MBaAFNSKJ/RLEEBMUvb/xOCNyCv4td7kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYt NTlmNTk4NGI2NGVhLzEvbTZDRnZGQWN6cjJGMkRpS2FGaThWWTZqZFBjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYtNTlmNTk4NGI2NGVh LzEvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSKrMA0G CSqGSIb3DQEBCwUAA4IBAQCO5mkDJfu3BwYgVU3NLASXGEIt9INev9AK5WaJTBhs o8OSeIJ3VU4AVZgv2o4zfEcHXlowsSCK5bA6loEC8yS7mz8dKsvkUx3/YXmUi7j4 K4asdPqOxlxUCVietAJkzjd0HzCSh5mnW9CYZhjXsRVdW1PpVBjYacLZnLomIKlz 8oZ36KsWWgE6niNwIpkcurym4kN2k/rGgK4kbuBBNkbPSccR89QTwYXJEwDfSr3n LYvjf10L68b7yQmxzi5wAEYhNhVF4uz/G7s1jqzNALpPXCgOGtFGYJpvAiTR2PNM fhVHy5/fMETZLSMCKidXoPdQoPkBaQyKx+nS92y4f2Tg -----END CERTIFICATE-----Generated at Thu Jan 1 20:23:16 2026 by rpki-client