This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/1-jgQKPi7Edu44qotnLRvfiDmUjg.roa File: 1-jgQKPi7Edu44qotnLRvfiDmUjg.roa (raw, json) Hash identifier: DtB7LDeB4wm3T1aBp3KU6ar/NBB+N0KzL2u/UR6UO2w= Subject key identifier: FA:38:10:28:F8:BB:11:DB:B8:E2:AA:2D:9C:B4:6F:7E:20:E6:52:38 Certificate issuer: /CN=74896c544b461d8b062eff9e3d2c29cd3cc960ec Certificate serial: 019B7EA6DDC23AF1A01CDD8BD5667355C933 Authority key identifier: 74:89:6C:54:4B:46:1D:8B:06:2E:FF:9E:3D:2C:29:CD:3C:C9:60:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dIlsVEtGHYsGLv-ePSwpzTzJYOw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/1-jgQKPi7Edu44qotnLRvfiDmUjg.roa Signing time: Fri 02 Jan 2026 12:20:23 +0000 ROA not before: Fri 02 Jan 2026 12:20:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 36351 IP address blocks: 89.38.52.0/24 maxlen: 24 89.38.53.0/24 maxlen: 24 89.38.54.0/24 maxlen: 24 185.69.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.mft rsync://rpki.ripe.net/repository/DEFAULT/dIlsVEtGHYsGLv-ePSwpzTzJYOw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:dd:c2:3a:f1:a0:1c:dd:8b:d5:66:73:55:c9:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74896c544b461d8b062eff9e3d2c29cd3cc960ec Validity Not Before: Jan 2 12:20:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa381028f8bb11dbb8e2aa2d9cb46f7e20e65238 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:29:98:15:f8:35:5b:00:0b:0a:9c:4f:30:2e: 16:ec:d3:a8:72:fd:4b:a8:c8:08:19:41:68:28:73: e8:3b:0d:b8:68:37:ce:d5:90:7b:f8:73:87:4b:27: 1c:5c:37:09:ab:eb:b9:3d:61:f4:25:3d:20:8b:01: 2d:09:f5:3f:aa:fb:14:50:2a:79:b1:4c:8f:ae:14: 57:a4:03:08:76:82:db:71:b5:98:95:e0:79:12:b3: f7:c4:27:08:a0:23:9f:a3:64:78:5a:96:80:ca:5d: f9:ee:50:1d:5d:01:0f:8c:0c:24:08:f6:33:19:51: f7:79:28:d9:0e:13:42:26:8d:ba:18:8e:75:50:78: f3:6f:2e:86:76:a3:9c:50:1e:41:90:1e:ca:93:32: 97:75:94:fa:25:6d:bd:28:a7:01:ed:71:ee:47:09: 36:f3:d4:3f:82:b6:ae:7f:c2:d0:bb:38:c3:d2:d6: 2b:15:2c:a4:0b:59:bd:3e:50:f1:f3:d8:0a:2c:ac: a6:10:01:19:e8:13:15:1e:dd:ce:c5:3f:35:d2:84: cc:0f:d3:e1:2a:35:1f:7f:08:90:63:ef:12:41:f6: e0:99:12:8d:65:e9:79:3a:a4:52:9d:4e:ae:9a:61: 76:9a:e8:18:67:e7:9a:c2:02:50:2a:39:fe:57:0e: 42:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:38:10:28:F8:BB:11:DB:B8:E2:AA:2D:9C:B4:6F:7E:20:E6:52:38 X509v3 Authority Key Identifier: keyid:74:89:6C:54:4B:46:1D:8B:06:2E:FF:9E:3D:2C:29:CD:3C:C9:60:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIlsVEtGHYsGLv-ePSwpzTzJYOw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/1-jgQKPi7Edu44qotnLRvfiDmUjg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.38.52.0-89.38.54.255 185.69.240.0/24 Signature Algorithm: sha256WithRSAEncryption 60:6f:12:93:8f:ec:61:d8:f4:17:9f:47:4d:89:8a:e1:3e:fc: 5f:c9:41:f3:7f:bf:96:42:60:ba:b9:e2:fe:65:8e:5c:c8:4b: b3:46:30:04:8f:f3:46:80:34:e6:b9:6a:40:ae:b3:e2:30:cf: 20:7a:10:74:05:a1:66:87:82:4b:c4:95:f0:d2:6b:aa:61:5b: 34:9c:e1:fc:27:1b:51:20:4f:cd:c6:fa:62:6a:d4:48:fa:50: ec:3e:d8:06:85:62:cd:24:ce:b5:a0:84:aa:3e:61:9c:46:5d: cc:12:b5:d8:de:5c:c7:a0:87:9f:ee:1a:cf:88:bb:bc:38:5a: 76:c9:5b:dd:b3:bc:4b:af:e2:ed:68:d9:b3:f3:46:ed:7d:1e: 98:91:13:94:3a:42:de:e6:c7:5f:4a:66:cd:76:2a:1c:97:25: a6:5c:d3:d3:1c:95:27:a4:29:81:44:4b:b2:d8:96:84:9e:6e: 89:1b:85:68:84:e0:82:76:9c:93:04:e3:e1:7d:c7:3d:c8:5c: e5:72:f3:8d:dc:89:88:15:90:0d:67:63:fa:63:f2:a5:f3:b4: bf:c9:66:63:34:c5:9f:98:dc:4b:cf:8a:83:d1:cf:37:cc:72: da:a3:3f:73:e6:67:5a:d0:09:29:74:93:6e:5f:db:4b:6a:31: 9b:40:8e:39 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+pt3COvGgHN2L1WZzVckzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ODk2YzU0NGI0NjFkOGIwNjJlZmY5ZTNkMmMyOWNkM2Nj OTYwZWMwHhcNMjYwMTAyMTIyMDIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTM4MTAyOGY4YmIxMWRiYjhlMmFhMmQ5Y2I0NmY3ZTIwZTY1MjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCmYFfg1WwALCpxPMC4W7NOocv1L qMgIGUFoKHPoOw24aDfO1ZB7+HOHSyccXDcJq+u5PWH0JT0giwEtCfU/qvsUUCp5 sUyPrhRXpAMIdoLbcbWYleB5ErP3xCcIoCOfo2R4WpaAyl357lAdXQEPjAwkCPYz GVH3eSjZDhNCJo26GI51UHjzby6GdqOcUB5BkB7KkzKXdZT6JW29KKcB7XHuRwk2 89Q/grauf8LQuzjD0tYrFSykC1m9PlDx89gKLKymEAEZ6BMVHt3OxT810oTMD9Ph KjUffwiQY+8SQfbgmRKNZel5OqRSnU6ummF2mugYZ+eawgJQKjn+Vw5CvQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFPo4ECj4uxHbuOKqLZy0b34g5lI4MB8GA1UdIwQY MBaAFHSJbFRLRh2LBi7/nj0sKc08yWDsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZElsc1ZFdEdIWXNHTHYtZVBTd3B6VHpKWU93LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iYzIyYTktZjg3MS00MDBjLThmY2Yt Y2YxNzQwODIzNDAwLzEvMS1qZ1FLUGk3RWR1NDRxb3RuTFJ2ZmlEbVVqZy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYzMvYmMyMmE5LWY4NzEtNDAwYy04ZmNmLWNmMTc0MDgyMzQw MC8xL2RJbHNWRXRHSFlzR0x2LWVQU3dwelR6SllPdy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAtBggrBgEFBQcBBwEB/wQeMBwwGgQCAAEwFDAMAwQCWSY0 AwQAWSY2AwQAuUXwMA0GCSqGSIb3DQEBCwUAA4IBAQBgbxKTj+xh2PQXn0dNiYrh PvxfyUHzf7+WQmC6ueL+ZY5cyEuzRjAEj/NGgDTmuWpArrPiMM8gehB0BaFmh4JL xJXw0muqYVs0nOH8JxtRIE/NxvpiatRI+lDsPtgGhWLNJM61oISqPmGcRl3MErXY 3lzHoIef7hrPiLu8OFp2yVvds7xLr+LtaNmz80btfR6YkROUOkLe5sdfSmbNdioc lyWmXNPTHJUnpCmBREuy2JaEnm6JG4VohOCCdpyTBOPhfcc9yFzlcvON3ImIFZAN Z2P6Y/Kl87S/yWZjNMWfmNxLz4qD0c83zHLaoz9z5mda0AkpdJNuX9tLajGbQI45 -----END CERTIFICATE-----Generated at Fri Jan 2 16:27:19 2026 by rpki-client