This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/1-OFiNLlRzB9gQ8rsqUmStAURmZE.roa File: 1-OFiNLlRzB9gQ8rsqUmStAURmZE.roa (raw, json) Hash identifier: quk6uhyttW/EQZVx4h/mLlD4R/KssH6i1p34w64L7zg= Subject key identifier: F8:E1:62:34:B9:51:CC:1F:60:43:CA:EC:A9:49:92:B4:05:11:99:91 Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Certificate serial: 019B7D5CDC804EF1F20B9A9C199792EBF609 Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/1-OFiNLlRzB9gQ8rsqUmStAURmZE.roa Signing time: Fri 02 Jan 2026 06:19:56 +0000 ROA not before: Fri 02 Jan 2026 06:19:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215540 IP address blocks: 89.23.103.0/24 maxlen: 24 89.23.107.0/24 maxlen: 24 89.23.108.0/24 maxlen: 24 185.39.204.0/24 maxlen: 24 185.39.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:dc:80:4e:f1:f2:0b:9a:9c:19:97:92:eb:f6:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Validity Not Before: Jan 2 06:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f8e16234b951cc1f6043caeca94992b405119991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c7:74:dd:ea:cf:38:76:62:5c:f5:ab:cf:ba: 4b:94:c6:14:c4:cc:d6:9f:b8:c6:9e:20:d8:21:c8: 9c:d3:97:04:90:fe:48:7a:62:ac:6b:d2:9a:ee:d7: 94:71:cb:44:24:18:cd:d6:8a:53:99:01:24:15:b7: 51:a1:2d:c8:d3:49:75:a0:48:cd:f4:93:21:e0:cc: 1b:2d:e1:5b:71:57:db:7d:26:06:02:a3:e4:40:9a: b7:74:f0:1f:1c:2f:0e:c4:ca:4d:20:2b:f7:6a:49: 67:c7:74:51:d1:36:02:fd:0e:c3:45:af:da:f1:0e: b6:b2:e1:4a:8a:4a:1d:0a:46:9d:19:2a:5c:6d:73: 7c:54:95:9d:13:62:2c:e2:83:dc:85:79:06:a7:1d: e2:b9:ae:fb:0e:f4:1f:9f:cd:ae:7f:04:ec:b3:ec: be:55:d7:9d:28:3e:ce:33:18:b8:f0:c2:22:0e:4e: 6d:ea:1b:ef:ae:36:c2:66:5e:b6:ad:a9:98:d8:7d: 7c:d7:47:91:d7:0e:99:bf:86:27:02:5c:2a:98:fa: 6e:fb:7e:1a:37:20:a6:6c:89:79:64:77:02:dd:cc: 2f:e6:7c:17:54:83:70:71:0e:be:24:b2:84:c9:4f: b6:79:62:1d:37:bb:fa:ff:ab:ff:56:ec:c9:fa:bf: 7e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:E1:62:34:B9:51:CC:1F:60:43:CA:EC:A9:49:92:B4:05:11:99:91 X509v3 Authority Key Identifier: keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/1-OFiNLlRzB9gQ8rsqUmStAURmZE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.23.103.0/24 89.23.107.0-89.23.108.255 185.39.204.0/24 185.39.207.0/24 Signature Algorithm: sha256WithRSAEncryption 82:02:a1:c2:a1:77:5a:e6:3c:56:85:09:4e:10:5a:89:d0:00: a6:62:19:01:db:15:bf:f7:1e:29:4e:20:0f:30:3b:a2:2f:05: c3:0b:62:c5:a4:75:d8:e1:5c:7f:c1:9a:b4:6f:c1:cd:cf:8c: ef:e4:76:63:1f:6c:a2:75:6f:55:67:66:0b:07:89:43:7c:13: 3d:c3:7b:b3:2d:02:04:53:bf:04:a5:f6:a8:a3:4f:a9:ea:e2: 44:39:ea:4d:b1:d8:67:96:d1:7e:87:da:fd:cc:cd:b4:e8:81: 11:76:f4:16:c4:5d:af:e0:8e:5c:94:41:44:25:3b:99:a8:88: b7:90:73:0c:d1:b1:90:b1:4c:dd:e3:a9:f3:e4:5a:d5:3e:ea: cd:d4:91:dc:e5:4d:ce:c3:74:8b:cb:b7:44:7d:66:3a:2d:e2: 0e:35:27:2e:a7:65:f4:7d:10:71:37:f5:ec:6d:1e:29:47:ff: 3f:bb:34:36:16:fa:7e:47:d8:a6:51:2a:a6:9e:35:93:f6:04: 30:64:6e:56:4b:24:37:b5:32:f8:dc:7f:d5:04:90:df:11:8a: 11:6e:83:20:e1:22:9e:66:96:a8:3e:7a:66:05:00:cb:10:e3: 0c:c8:67:de:54:67:14:b6:e1:1c:e7:3a:88:ee:b6:b3:8e:bb: c9:e5:7d:1e -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt9XNyATvHyC5qcGZeS6/YJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MDg0NzVmZjBkOGVjOTYwMzM2MDE2ZTBlMDQyMjFhOThl NWVjZjIwHhcNMjYwMTAyMDYxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOGUxNjIzNGI5NTFjYzFmNjA0M2NhZWNhOTQ5OTJiNDA1MTE5OTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMd03erPOHZiXPWrz7pLlMYUxMzW n7jGniDYIcic05cEkP5IemKsa9Ka7teUcctEJBjN1opTmQEkFbdRoS3I00l1oEjN 9JMh4MwbLeFbcVfbfSYGAqPkQJq3dPAfHC8OxMpNICv3aklnx3RR0TYC/Q7DRa/a 8Q62suFKikodCkadGSpcbXN8VJWdE2Is4oPchXkGpx3iua77DvQfn82ufwTss+y+ VdedKD7OMxi48MIiDk5t6hvvrjbCZl62ramY2H1810eR1w6Zv4YnAlwqmPpu+34a NyCmbIl5ZHcC3cwv5nwXVINwcQ6+JLKEyU+2eWIdN7v6/6v/VuzJ+r9+/QIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFPjhYjS5UcwfYEPK7KlJkrQFEZmRMB8GA1UdIwQY MBaAFHUIR1/w2OyWAzYBbg4EIhqY5ezyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWIt MTcxYzM2N2JlNzgyLzEvMS1PRmlOTGxSekI5Z1E4cnNxVW1TdEFVUm1aRS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZmUvMWZhNmEzLThkYzUtNGMzNS1hNDliLTE3MWMzNjdiZTc4 Mi8xL2RRaEhYX0RZN0pZRE5nRnVEZ1FpR3BqbDdQSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjA5BggrBgEFBQcBBwEB/wQqMCgwJgQCAAEwIAMEAFkXZzAM AwQAWRdrAwQAWRdsAwQAuSfMAwQAuSfPMA0GCSqGSIb3DQEBCwUAA4IBAQCCAqHC oXda5jxWhQlOEFqJ0ACmYhkB2xW/9x4pTiAPMDuiLwXDC2LFpHXY4Vx/wZq0b8HN z4zv5HZjH2yidW9VZ2YLB4lDfBM9w3uzLQIEU78Epfaoo0+p6uJEOepNsdhnltF+ h9r9zM206IERdvQWxF2v4I5clEFEJTuZqIi3kHMM0bGQsUzd46nz5FrVPurN1JHc 5U3Ow3SLy7dEfWY6LeIONScup2X0fRBxN/XsbR4pR/8/uzQ2Fvp+R9imUSqmnjWT 9gQwZG5WSyQ3tTL43H/VBJDfEYoRboMg4SKeZpaoPnpmBQDLEOMMyGfeVGcUtuEc 5zqI7razjrvJ5X0e -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:54 2026 by rpki-client