This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/63c9db-8ab9-4c1e-af27-ed28851ecb76/1/KbY3nni1wEfL__PANyZgyUs7RUY.roa File: KbY3nni1wEfL__PANyZgyUs7RUY.roa (raw, json) Hash identifier: gJHLBx+13eQSnJw340+rzpbr2Pvo3zONDmCvI5/SYVk= Subject key identifier: 29:B6:37:9E:78:B5:C0:47:CB:FF:F3:C0:37:26:60:C9:4B:3B:45:46 Certificate issuer: /CN=4a1d20be77e12232323c1422fb5198fea0086034 Certificate serial: 019B78353E9C96944B69CBAD8E08E9011546 Authority key identifier: 4A:1D:20:BE:77:E1:22:32:32:3C:14:22:FB:51:98:FE:A0:08:60:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/63c9db-8ab9-4c1e-af27-ed28851ecb76/1/KbY3nni1wEfL__PANyZgyUs7RUY.roa Signing time: Thu 01 Jan 2026 06:18:33 +0000 ROA not before: Thu 01 Jan 2026 06:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212311 IP address blocks: 89.34.170.0/24 maxlen: 24 2a0f:ecc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/63c9db-8ab9-4c1e-af27-ed28851ecb76/1/Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/63c9db-8ab9-4c1e-af27-ed28851ecb76/1/Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:3e:9c:96:94:4b:69:cb:ad:8e:08:e9:01:15:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a1d20be77e12232323c1422fb5198fea0086034 Validity Not Before: Jan 1 06:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=29b6379e78b5c047cbfff3c0372660c94b3b4546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b1:55:db:6b:f4:44:3f:06:b4:e7:36:ae:81: b6:3f:8f:08:fc:d6:7e:05:80:0f:98:55:b9:4d:96: 85:2f:37:3f:a5:89:93:83:8f:98:1e:64:06:43:7d: 16:c1:98:df:e3:54:fb:25:e7:61:63:b2:97:26:1b: 91:d4:93:8f:e9:3d:b0:10:a7:20:cd:08:fe:6c:39: e5:f1:fc:35:95:2d:f9:eb:6d:97:76:64:08:e9:f8: e3:7c:26:19:2f:c6:de:1b:09:2c:fc:4e:94:07:53: 44:ae:2d:fc:e1:e6:74:ba:dd:00:d3:fa:96:b4:ca: 74:e4:af:05:86:a4:fe:65:f3:a8:c1:9e:56:d3:5a: 79:52:0b:ae:91:88:73:e0:96:fd:0b:d0:f7:a3:95: 50:ea:5a:71:61:f9:c0:a8:af:85:67:24:a6:0f:57: 77:42:ce:ec:65:33:43:6e:26:1c:68:74:28:8e:96: 48:a2:fe:46:52:76:f1:4a:cc:e8:d8:4d:fa:d9:e4: cd:9e:bf:24:57:7f:5c:90:0d:51:bb:69:d5:d2:23: ca:14:d0:f3:f5:fb:75:68:77:b4:31:b3:ad:b6:24: e3:77:1c:b8:38:36:c8:ca:a3:80:c2:ba:dc:36:7f: 1c:e0:5f:f5:df:78:e3:18:28:2f:2f:bc:10:46:c1: 3a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:B6:37:9E:78:B5:C0:47:CB:FF:F3:C0:37:26:60:C9:4B:3B:45:46 X509v3 Authority Key Identifier: keyid:4A:1D:20:BE:77:E1:22:32:32:3C:14:22:FB:51:98:FE:A0:08:60:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/63c9db-8ab9-4c1e-af27-ed28851ecb76/1/KbY3nni1wEfL__PANyZgyUs7RUY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/63c9db-8ab9-4c1e-af27-ed28851ecb76/1/Sh0gvnfhIjIyPBQi-1GY_qAIYDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.34.170.0/24 IPv6: 2a0f:ecc0::/29 Signature Algorithm: sha256WithRSAEncryption 25:53:72:9a:7f:9b:19:72:8c:bb:04:77:d8:4c:40:d3:03:53: 6e:02:2a:2b:6a:89:ae:5d:c7:42:82:99:5a:48:a8:cc:3a:24: 43:3c:d5:70:ee:2e:cb:5f:2a:b9:44:88:d2:8b:74:1a:30:6f: 77:de:e1:ec:aa:9d:a4:0d:b1:bc:b4:e9:4f:cb:e6:e2:8b:4d: b4:5c:49:86:59:3d:d6:53:29:8e:16:a8:dc:8f:f3:7b:87:c6: 86:7d:80:c8:3f:e1:26:aa:e3:98:e8:29:9f:49:80:da:87:c8: 85:b4:5e:28:2e:ba:34:20:64:42:5b:a2:c7:ed:c1:cd:0c:84: 73:b5:17:72:92:51:43:92:44:bf:57:eb:80:8b:1c:67:89:94: dd:9a:24:65:b5:e5:0d:f2:ba:63:ff:52:98:29:5c:e3:d2:e1: 53:81:af:fb:17:b2:8e:03:60:e8:b7:9f:75:b1:c1:bf:76:c5: af:e3:f6:91:83:da:8b:34:c5:29:80:2f:d3:54:97:23:77:bd: fc:ff:ff:e5:87:bb:07:2b:dc:b2:fb:b1:2f:6f:89:a4:eb:a8: c8:68:a7:34:18:4b:b9:52:aa:2a:38:14:69:6d:eb:57:a8:c4: 30:11:84:62:db:08:91:75:33:51:e7:8e:6d:21:be:5f:6e:4c: f7:4c:63:32 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4NT6clpRLacutjgjpARVGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhMWQyMGJlNzdlMTIyMzIzMjNjMTQyMmZiNTE5OGZlYTAw ODYwMzQwHhcNMjYwMTAxMDYxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOWI2Mzc5ZTc4YjVjMDQ3Y2JmZmYzYzAzNzI2NjBjOTRiM2I0NTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbFV22v0RD8GtOc2roG2P48I/NZ+ BYAPmFW5TZaFLzc/pYmTg4+YHmQGQ30WwZjf41T7JedhY7KXJhuR1JOP6T2wEKcg zQj+bDnl8fw1lS35622XdmQI6fjjfCYZL8beGwks/E6UB1NEri384eZ0ut0A0/qW tMp05K8FhqT+ZfOowZ5W01p5UguukYhz4Jb9C9D3o5VQ6lpxYfnAqK+FZySmD1d3 Qs7sZTNDbiYcaHQojpZIov5GUnbxSszo2E362eTNnr8kV39ckA1Ru2nV0iPKFNDz 9ft1aHe0MbOttiTjdxy4ODbIyqOAwrrcNn8c4F/133jjGCgvL7wQRsE6uQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFCm2N554tcBHy//zwDcmYMlLO0VGMB8GA1UdIwQY MBaAFEodIL534SIyMjwUIvtRmP6gCGA0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2gwZ3ZuZmhJakl5UEJRaS0xR1lfcUFJWURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi82M2M5ZGItOGFiOS00YzFlLWFmMjct ZWQyODg1MWVjYjc2LzEvS2JZM25uaTF3RWZMX19QQU55Wmd5VXM3UlVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi82M2M5ZGItOGFiOS00YzFlLWFmMjctZWQyODg1MWVjYjc2 LzEvU2gwZ3ZuZmhJakl5UEJRaS0xR1lfcUFJWURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAWSKqMA0E AgACMAcDBQMqD+zAMA0GCSqGSIb3DQEBCwUAA4IBAQAlU3Kaf5sZcoy7BHfYTEDT A1NuAioraomuXcdCgplaSKjMOiRDPNVw7i7LXyq5RIjSi3QaMG933uHsqp2kDbG8 tOlPy+bii020XEmGWT3WUymOFqjcj/N7h8aGfYDIP+EmquOY6CmfSYDah8iFtF4o Lro0IGRCW6LH7cHNDIRztRdyklFDkkS/V+uAixxniZTdmiRlteUN8rpj/1KYKVzj 0uFTga/7F7KOA2Dot591scG/dsWv4/aRg9qLNMUpgC/TVJcjd738///lh7sHK9yy +7Evb4mk66jIaKc0GEu5UqoqOBRpbetXqMQwEYRi2wiRdTNR545tIb5fbkz3TGMy -----END CERTIFICATE-----Generated at Tue Feb 10 02:47:06 2026 by rpki-client