This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/i32oc9P50jJmJ6NXxrhWkSEafaU.roa File: i32oc9P50jJmJ6NXxrhWkSEafaU.roa (raw, json) Hash identifier: mtnOn4WK/ds4HsY3qFfkYDvAIkmMkR0O5fwjSKEmTFY= Subject key identifier: 8B:7D:A8:73:D3:F9:D2:32:66:27:A3:57:C6:B8:56:91:21:1A:7D:A5 Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4 Certificate serial: 019B77C6F96E611061C92EAF23F9CB76464B Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/i32oc9P50jJmJ6NXxrhWkSEafaU.roa Signing time: Thu 01 Jan 2026 04:18:07 +0000 ROA not before: Thu 01 Jan 2026 04:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33487 IP address blocks: 89.28.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 03:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:f9:6e:61:10:61:c9:2e:af:23:f9:cb:76:46:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4 Validity Not Before: Jan 1 04:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b7da873d3f9d2326627a357c6b85691211a7da5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c4:fa:c2:4c:70:6a:16:14:2f:1c:58:33:28: 1e:20:d9:1b:9c:b9:30:65:f6:1b:7f:f5:ce:35:4b: ca:57:5f:59:ff:10:4e:b0:96:58:86:94:b8:6b:0b: f7:c9:95:01:58:b0:3d:aa:4e:11:2e:0f:3a:b6:51: c7:9d:ef:57:60:93:56:3e:06:cc:8a:26:ea:a9:ba: 25:de:cf:16:b8:78:ad:ee:a9:93:9a:ef:11:7e:c2: f0:33:73:a8:b3:be:dc:9b:8b:bd:3e:63:40:75:58: 40:e7:2e:63:ad:da:df:18:16:4f:7f:e9:c5:6d:f6: b4:01:2c:2f:81:fc:c8:41:30:5a:26:35:0c:01:bc: 9d:17:94:57:d5:56:b1:68:b8:2f:f2:4f:22:6e:1f: 30:b3:cc:84:36:89:08:39:81:e2:9a:b1:9d:2e:ba: 6b:8b:fb:44:a3:db:eb:44:b1:be:83:37:76:db:f4: 50:a3:61:51:98:af:eb:d1:ff:b1:d5:51:4f:9b:b9: a8:7d:3d:65:3c:b3:de:d3:32:31:3d:02:1d:77:65: 43:b4:b5:f6:44:db:61:8f:33:50:ed:fa:d8:23:c9: ee:31:b7:24:7b:9c:cc:48:b6:90:91:90:4d:df:9d: 88:54:30:a5:14:96:29:40:b4:11:70:44:07:80:b4: f8:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:7D:A8:73:D3:F9:D2:32:66:27:A3:57:C6:B8:56:91:21:1A:7D:A5 X509v3 Authority Key Identifier: keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/i32oc9P50jJmJ6NXxrhWkSEafaU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.28.205.0/24 Signature Algorithm: sha256WithRSAEncryption a8:7a:43:4d:91:e3:23:56:1a:0d:30:54:61:d6:cb:9c:6e:1e: 0a:c7:5c:02:58:8c:3e:39:d0:64:75:df:de:35:67:81:18:7d: a6:a8:74:76:d8:97:b1:73:ff:f0:9d:cf:49:17:5e:78:c8:10: a9:fd:06:cb:fd:69:d9:7f:d8:5d:04:5e:fa:aa:c3:7a:38:c1: b1:80:7f:cf:75:31:81:01:91:0f:ce:6b:67:49:78:be:10:88: b7:aa:ce:ba:1b:20:9a:1e:1f:b6:28:97:55:6b:6e:e7:51:9a: 67:80:a1:5c:9c:c0:5a:6d:cf:a1:3c:ec:ae:7a:5b:57:d1:cc: 22:6b:06:b7:e6:fe:25:be:5a:c6:e5:32:b7:f8:d6:40:f6:34: 6a:92:4d:2c:6f:5a:e6:31:25:81:54:51:03:e3:4c:12:1a:e7: 52:cd:55:73:e2:d4:d4:71:97:2e:d0:f6:cb:4b:25:f5:63:95: 40:81:fc:31:b6:d4:dc:2b:89:58:76:7d:8e:cc:8e:49:53:19: f2:a3:58:03:25:2a:ac:be:00:19:de:5f:97:e3:5c:f5:cf:f6: 39:05:77:d4:5c:ab:b6:99:02:3e:29:92:92:37:43:b3:ab:87: 68:45:11:9c:de:95:6c:f8:ab:f1:60:71:26:8e:72:86:23:bb: 84:5b:b9:8c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xvluYRBhyS6vI/nLdkZLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlNWIzMzQ5NjU3ODg3OTRkNmYxNDdhMmYwMDRkMTNiZTMy NTdkYzQwHhcNMjYwMTAxMDQxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjdkYTg3M2QzZjlkMjMyNjYyN2EzNTdjNmI4NTY5MTIxMWE3ZGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucT6wkxwahYULxxYMygeINkbnLkw ZfYbf/XONUvKV19Z/xBOsJZYhpS4awv3yZUBWLA9qk4RLg86tlHHne9XYJNWPgbM iibqqbol3s8WuHit7qmTmu8RfsLwM3Oos77cm4u9PmNAdVhA5y5jrdrfGBZPf+nF bfa0ASwvgfzIQTBaJjUMAbydF5RX1VaxaLgv8k8ibh8ws8yENokIOYHimrGdLrpr i/tEo9vrRLG+gzd22/RQo2FRmK/r0f+x1VFPm7mofT1lPLPe0zIxPQIdd2VDtLX2 RNthjzNQ7frYI8nuMbcke5zMSLaQkZBN352IVDClFJYpQLQRcEQHgLT4HQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIt9qHPT+dIyZiejV8a4VpEhGn2lMB8GA1UdIwQY MBaAFB5bM0lleIeU1vFHovAE0TvjJX3EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDIt OTk5MGUyZDllYWZlLzEvaTMyb2M5UDUwakptSjZOWHhyaFdrU0VhZmFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC85YmEzOGEtNDg1Mi00MTNkLTljZDItOTk5MGUyZDllYWZl LzEvSGxzelNXVjRoNVRXOFVlaThBVFJPLU1sZmNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWRzNMA0G CSqGSIb3DQEBCwUAA4IBAQCoekNNkeMjVhoNMFRh1sucbh4Kx1wCWIw+OdBkdd/e NWeBGH2mqHR22Jexc//wnc9JF154yBCp/QbL/WnZf9hdBF76qsN6OMGxgH/PdTGB AZEPzmtnSXi+EIi3qs66GyCaHh+2KJdVa27nUZpngKFcnMBabc+hPOyueltX0cwi awa35v4lvlrG5TK3+NZA9jRqkk0sb1rmMSWBVFED40wSGudSzVVz4tTUcZcu0PbL SyX1Y5VAgfwxttTcK4lYdn2OzI5JUxnyo1gDJSqsvgAZ3l+X41z1z/Y5BXfUXKu2 mQI+KZKSN0Ozq4doRRGc3pVs+KvxYHEmjnKGI7uEW7mM -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:39 2026 by rpki-client