This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/1-iOJzCg7mS2QdSMBIdW2Guyn3hQ.roa File: 1-iOJzCg7mS2QdSMBIdW2Guyn3hQ.roa (raw, json) Hash identifier: PVKqYKVsrFFdzBy/HzOODB+3DNbkSFcoEgOpBYpqHGA= Subject key identifier: FA:23:89:CC:28:3B:99:2D:90:75:23:01:21:D5:B6:1A:EC:A7:DE:14 Certificate issuer: /CN=322d91b4aa96cc5732576d42335fddd0e5d6294f Certificate serial: 019B7B36548A30E7717222FE8D10A56585CB Authority key identifier: 32:2D:91:B4:AA:96:CC:57:32:57:6D:42:33:5F:DD:D0:E5:D6:29:4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mi2RtKqWzFcyV21CM1_d0OXWKU8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/1-iOJzCg7mS2QdSMBIdW2Guyn3hQ.roa Signing time: Thu 01 Jan 2026 20:18:36 +0000 ROA not before: Thu 01 Jan 2026 20:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39863 IP address blocks: 81.89.208.0/22 maxlen: 22 81.89.208.0/24 maxlen: 24 81.89.209.0/24 maxlen: 24 81.89.210.0/24 maxlen: 24 81.89.211.0/24 maxlen: 24 81.89.212.0/22 maxlen: 22 81.89.212.0/24 maxlen: 24 81.89.213.0/24 maxlen: 24 81.89.214.0/24 maxlen: 24 81.89.215.0/24 maxlen: 24 81.89.216.0/22 maxlen: 22 81.89.217.0/24 maxlen: 24 81.89.218.0/24 maxlen: 24 81.89.219.0/24 maxlen: 24 81.89.220.0/22 maxlen: 22 81.89.220.0/24 maxlen: 24 81.89.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft rsync://rpki.ripe.net/repository/DEFAULT/Mi2RtKqWzFcyV21CM1_d0OXWKU8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:54:8a:30:e7:71:72:22:fe:8d:10:a5:65:85:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=322d91b4aa96cc5732576d42335fddd0e5d6294f Validity Not Before: Jan 1 20:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa2389cc283b992d9075230121d5b61aeca7de14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:37:f0:72:c7:2d:06:e7:f4:35:bf:88:3d:f3: a1:a1:34:6c:63:f2:5c:a0:10:2c:88:43:08:4d:00: 93:c4:84:17:61:22:85:d8:d3:83:63:e6:9d:fd:85: 66:05:7e:52:b3:19:73:c3:07:03:68:0f:d6:21:fc: 92:d5:90:0e:ba:46:ea:40:65:07:00:d7:1d:c6:a6: f5:85:7a:d3:63:98:e9:b2:14:9a:fb:b3:d1:11:99: 00:9d:2a:98:85:07:ce:25:a6:a3:d3:0b:fe:57:ac: c9:be:3b:a5:ca:bd:b6:18:12:fa:d1:1c:e2:72:8e: d5:5f:b2:30:c6:4d:67:6d:f9:be:07:d4:86:1e:cd: 75:46:92:0c:e4:0b:fe:e7:61:04:96:4b:bd:bc:50: f1:06:03:b1:d9:65:30:ca:d8:4a:19:2d:33:63:1a: 27:d0:de:64:4d:31:9a:d0:c8:2a:d8:6f:82:a5:8f: 3c:70:cf:aa:ed:f7:77:02:ee:f3:8c:20:52:e2:05: ce:9b:d0:87:8d:8d:92:4e:98:9e:8b:7b:da:04:58: 23:70:f2:b8:6f:92:e5:ad:fa:d9:46:68:e3:ed:bc: 00:81:3a:42:28:c2:dd:cb:d6:be:8b:4e:01:23:ab: 58:5e:bf:fc:2f:1f:8d:5f:c4:b8:09:ed:32:a2:ac: 03:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:23:89:CC:28:3B:99:2D:90:75:23:01:21:D5:B6:1A:EC:A7:DE:14 X509v3 Authority Key Identifier: keyid:32:2D:91:B4:AA:96:CC:57:32:57:6D:42:33:5F:DD:D0:E5:D6:29:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mi2RtKqWzFcyV21CM1_d0OXWKU8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/1-iOJzCg7mS2QdSMBIdW2Guyn3hQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.89.208.0/20 Signature Algorithm: sha256WithRSAEncryption 24:ab:ac:44:be:a1:b4:4e:52:8b:86:b4:6f:c1:21:19:93:0d: 2b:fe:11:89:0b:5e:38:66:5d:73:45:4f:ea:d9:a5:87:99:af: ae:9b:2f:94:0d:72:1b:3c:79:a0:34:72:c7:33:05:83:f7:a3: b8:af:71:4d:1e:ef:5b:18:fe:4f:e7:e6:34:69:f7:c3:f7:82: 37:38:dd:7d:e7:9a:3a:f0:a2:f5:86:c2:4e:90:06:f4:af:c2: 3c:36:59:64:31:64:6d:b6:fe:5e:dc:66:fc:15:21:2c:fb:e7: 46:45:94:a2:0d:1b:92:12:b6:74:6d:f4:6a:a7:88:ae:e7:a1: 03:e3:57:3f:cb:6e:c6:16:e6:a1:fc:2b:bc:46:d3:ea:ea:f8: f9:2f:7b:58:82:c3:72:00:51:ef:c0:43:ff:a4:ab:70:80:8e: 9e:f0:33:24:43:e7:56:25:f5:f4:34:8e:aa:d7:26:98:09:2e: 4f:23:36:99:89:f7:ae:2b:3b:4b:e9:69:48:44:94:e2:87:1b: 97:7a:eb:99:78:5a:4e:63:ac:dd:10:26:94:d3:10:8c:b3:19: 34:79:de:93:28:4e:97:14:b0:fd:98:d5:22:24:17:c2:4e:b8: 06:9e:4a:79:b3:1c:57:b2:7a:f5:41:26:45:3d:02:24:f9:c5: cd:31:9c:59 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt7NlSKMOdxciL+jRClZYXLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyMmQ5MWI0YWE5NmNjNTczMjU3NmQ0MjMzNWZkZGQwZTVk NjI5NGYwHhcNMjYwMTAxMjAxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTIzODljYzI4M2I5OTJkOTA3NTIzMDEyMWQ1YjYxYWVjYTdkZTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujfwcsctBuf0Nb+IPfOhoTRsY/Jc oBAsiEMITQCTxIQXYSKF2NODY+ad/YVmBX5SsxlzwwcDaA/WIfyS1ZAOukbqQGUH ANcdxqb1hXrTY5jpshSa+7PREZkAnSqYhQfOJaaj0wv+V6zJvjulyr22GBL60Rzi co7VX7Iwxk1nbfm+B9SGHs11RpIM5Av+52EElku9vFDxBgOx2WUwythKGS0zYxon 0N5kTTGa0Mgq2G+CpY88cM+q7fd3Au7zjCBS4gXOm9CHjY2STpiei3vaBFgjcPK4 b5LlrfrZRmjj7bwAgTpCKMLdy9a+i04BI6tYXr/8Lx+NX8S4Ce0yoqwDvQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPojicwoO5ktkHUjASHVthrsp94UMB8GA1UdIwQY MBaAFDItkbSqlsxXMldtQjNf3dDl1ilPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWkyUnRLcVd6RmN5VjIxQ00xX2QwT1hXS1U4LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi85YmQxMjItZDZhOS00YTQwLTg2MGIt YjBlZmMwMWQ0ZjljLzEvMS1pT0p6Q2c3bVMyUWRTTUJJZFcyR3V5bjNoUS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZjYvOWJkMTIyLWQ2YTktNGE0MC04NjBiLWIwZWZjMDFkNGY5 Yy8xL01pMlJ0S3FXekZjeVYyMUNNMV9kME9YV0tVOC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBFFZ0DAN BgkqhkiG9w0BAQsFAAOCAQEAJKusRL6htE5Si4a0b8EhGZMNK/4RiQteOGZdc0VP 6tmlh5mvrpsvlA1yGzx5oDRyxzMFg/ejuK9xTR7vWxj+T+fmNGn3w/eCNzjdfeea OvCi9YbCTpAG9K/CPDZZZDFkbbb+Xtxm/BUhLPvnRkWUog0bkhK2dG30aqeIrueh A+NXP8tuxhbmofwrvEbT6ur4+S97WILDcgBR78BD/6SrcICOnvAzJEPnViX19DSO qtcmmAkuTyM2mYn3ris7S+lpSESU4ocbl3rrmXhaTmOs3RAmlNMQjLMZNHnekyhO lxSw/ZjVIiQXwk64Bp5KebMcV7J69UEmRT0CJPnFzTGcWQ== -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:26 2026 by rpki-client