This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/p9ZB8LhikgX0NH9kSBmVE_h8VM0.roa File: p9ZB8LhikgX0NH9kSBmVE_h8VM0.roa (raw, json) Hash identifier: giZdo+WMM4DfE3UfmO/kuAtFXlFqu/J2nbMXMbRlUhQ= Subject key identifier: A7:D6:41:F0:B8:62:92:05:F4:34:7F:64:48:19:95:13:F8:7C:54:CD Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Certificate serial: 019B77C7475F8EA8B04C76674B44FC842B76 Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/p9ZB8LhikgX0NH9kSBmVE_h8VM0.roa Signing time: Thu 01 Jan 2026 04:18:27 +0000 ROA not before: Thu 01 Jan 2026 04:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29802 IP address blocks: 89.32.130.0/24 maxlen: 24 89.32.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 13:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:47:5f:8e:a8:b0:4c:76:67:4b:44:fc:84:2b:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Validity Not Before: Jan 1 04:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a7d641f0b8629205f4347f6448199513f87c54cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:dc:25:88:ad:b6:7b:23:7f:e9:cf:96:43:25: 86:dc:c1:46:db:b9:76:d5:5a:b9:0e:bd:2a:eb:5a: cd:5c:28:26:8a:67:f5:51:1a:1d:a2:b4:a8:3b:12: 85:56:41:41:e5:af:e4:30:5d:dd:47:ee:7a:98:5a: 26:77:ee:e9:f2:21:57:a6:71:e7:36:7f:81:3f:42: 6b:13:94:54:9e:d9:fb:a3:dd:eb:90:fd:64:e9:44: 59:0d:b0:fa:1c:5f:5c:cf:98:bd:e4:40:a5:3d:be: 3f:ea:fe:0c:39:86:cc:d3:51:dd:89:b7:d7:1d:ad: 30:fc:1b:73:16:e7:56:f6:54:00:ba:a9:74:ff:5e: ce:17:38:4b:68:90:40:2a:a9:50:1e:a0:17:fb:21: 46:92:ea:02:2b:13:44:ad:f0:f2:b9:ef:8d:65:a6: 56:91:78:a2:71:ce:c6:dd:32:47:bc:c0:bb:b5:f7: eb:3a:14:6c:8b:ef:b1:44:35:d4:cc:b2:05:49:d0: aa:12:e4:10:1b:4a:fc:87:15:6e:f2:a1:b2:73:d7: ee:98:0c:d2:0f:a5:77:9c:65:5b:52:38:64:2f:64: 4a:62:39:da:c1:b5:80:eb:5b:61:c3:3a:a0:82:ae: 42:f6:93:98:17:66:6b:cd:2a:07:f9:78:9a:f5:e2: 43:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:D6:41:F0:B8:62:92:05:F4:34:7F:64:48:19:95:13:F8:7C:54:CD X509v3 Authority Key Identifier: keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/p9ZB8LhikgX0NH9kSBmVE_h8VM0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.32.130.0/23 Signature Algorithm: sha256WithRSAEncryption 8b:1c:5b:13:e2:ff:67:23:3a:eb:9c:4c:c0:08:22:90:d8:f9: a6:24:40:b0:2d:68:42:e4:1a:8e:fe:4e:78:ac:5d:e8:da:bc: 7f:b5:eb:5e:c5:e0:81:c1:25:21:73:7d:86:7b:98:d1:ae:56: f3:9b:71:5c:20:fa:14:40:87:ea:5b:8a:9a:89:0e:6a:15:bc: 40:9c:fa:90:96:dc:e1:00:eb:1d:81:0f:af:0a:98:2f:8e:c4: 5c:5a:87:b1:06:3e:fe:3a:3e:e5:9d:3e:86:e9:9d:41:94:c0: 03:7d:ea:ea:c2:e6:6f:20:d1:41:4f:c7:a2:3a:54:62:2c:d7: b1:9f:a7:d4:ce:05:16:9d:26:80:ac:5a:c2:e4:5c:f9:3e:0f: f2:46:12:9f:c8:09:d7:0f:f7:31:b2:c3:92:4e:d4:97:77:5a: e4:97:c2:fd:9b:60:1f:b8:08:17:f7:e7:eb:4c:f1:ea:eb:15: 4d:b3:60:6e:07:26:76:70:ca:3e:e7:57:0d:ee:f7:d3:34:22: 23:57:8c:9f:76:3d:08:f4:c0:3b:b0:8a:30:2d:15:3c:59:66: e5:8a:97:02:bb:a8:66:7d:80:cc:47:3f:be:19:f1:1e:c5:4b: fe:cc:b9:2d:7a:31:c9:e8:dc:63:b2:09:49:4b:82:16:9d:fb: 6f:f6:2d:31 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x0dfjqiwTHZnS0T8hCt2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0OGEyN2Y0NGIxMDQwNGM1MmY2ZmZjNGUwOGRjODJiZjhi NWRlZTQwHhcNMjYwMTAxMDQxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhN2Q2NDFmMGI4NjI5MjA1ZjQzNDdmNjQ0ODE5OTUxM2Y4N2M1NGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNwliK22eyN/6c+WQyWG3MFG27l2 1Vq5Dr0q61rNXCgmimf1URodorSoOxKFVkFB5a/kMF3dR+56mFomd+7p8iFXpnHn Nn+BP0JrE5RUntn7o93rkP1k6URZDbD6HF9cz5i95EClPb4/6v4MOYbM01HdibfX Ha0w/BtzFudW9lQAuql0/17OFzhLaJBAKqlQHqAX+yFGkuoCKxNErfDyue+NZaZW kXiicc7G3TJHvMC7tffrOhRsi++xRDXUzLIFSdCqEuQQG0r8hxVu8qGyc9fumAzS D6V3nGVbUjhkL2RKYjnawbWA61thwzqggq5C9pOYF2ZrzSoH+Xia9eJDpwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKfWQfC4YpIF9DR/ZEgZlRP4fFTNMB8GA1UdIwQY MBaAFNSKJ/RLEEBMUvb/xOCNyCv4td7kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYt NTlmNTk4NGI2NGVhLzEvcDlaQjhMaGlrZ1gwTkg5a1NCbVZFX2g4Vk0wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYtNTlmNTk4NGI2NGVh LzEvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBWSCCMA0G CSqGSIb3DQEBCwUAA4IBAQCLHFsT4v9nIzrrnEzACCKQ2PmmJECwLWhC5BqO/k54 rF3o2rx/tetexeCBwSUhc32Ge5jRrlbzm3FcIPoUQIfqW4qaiQ5qFbxAnPqQltzh AOsdgQ+vCpgvjsRcWoexBj7+Oj7lnT6G6Z1BlMADferqwuZvINFBT8eiOlRiLNex n6fUzgUWnSaArFrC5Fz5Pg/yRhKfyAnXD/cxssOSTtSXd1rkl8L9m2AfuAgX9+fr TPHq6xVNs2BuByZ2cMo+51cN7vfTNCIjV4yfdj0I9MA7sIowLRU8WWblipcCu6hm fYDMRz++GfEexUv+zLktejHJ6NxjsglJS4IWnftv9i0x -----END CERTIFICATE-----Generated at Thu Jan 1 20:22:36 2026 by rpki-client