This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/1HgN1jwalcG4P8feVb04KhuFrV0.roa File: 1HgN1jwalcG4P8feVb04KhuFrV0.roa (raw, json) Hash identifier: /w9O4XbKLbxExGjrImzaWfj09XVEcX3nuVWjs3rYjs4= Subject key identifier: D4:78:0D:D6:3C:1A:95:C1:B8:3F:C7:DE:55:BD:38:2A:1B:85:AD:5D Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Certificate serial: 019B7D5CD9783150D54A359A081E4D299F7C Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/1HgN1jwalcG4P8feVb04KhuFrV0.roa Signing time: Fri 02 Jan 2026 06:19:55 +0000 ROA not before: Fri 02 Jan 2026 06:19:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210644 IP address blocks: 89.23.103.0/24 maxlen: 24 2a11:fc80::/30 maxlen: 30 2a11:fc84::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:d9:78:31:50:d5:4a:35:9a:08:1e:4d:29:9f:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Validity Not Before: Jan 2 06:19:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d4780dd63c1a95c1b83fc7de55bd382a1b85ad5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b4:9c:a1:44:77:00:17:4a:96:39:af:0d:57: 29:0a:ac:ad:88:c2:71:82:48:74:dd:83:17:94:37: 19:6c:29:4d:17:81:52:05:6f:9b:d0:9c:49:39:33: 26:53:74:5a:1c:19:25:de:8c:ce:80:8e:7a:c1:81: c2:79:10:4a:f2:d1:c4:b8:57:88:3b:5c:23:c1:84: 22:04:84:4d:92:38:ce:52:53:b3:c8:3d:ce:91:5d: a3:1b:cb:e0:b9:3b:6a:30:7e:0a:ed:65:ec:5b:18: d2:22:9b:5a:60:4c:7a:96:8e:0d:f5:20:b2:26:d9: 81:db:c3:11:b9:dc:bf:ed:92:86:2f:4a:9b:bd:da: 05:5a:05:4f:99:b1:a3:76:00:e1:83:a8:b0:5b:98: f8:c6:06:d9:9d:bc:38:80:2d:bd:11:60:c0:45:4f: 45:ff:4e:ff:bc:37:fa:79:a6:d2:09:bc:5c:f3:37: 9d:2d:6d:d7:2d:7c:62:20:0f:f0:16:59:44:f1:19: 8e:e2:3a:ce:cb:f0:2b:78:42:4e:c5:95:dc:1f:a2: 3f:79:ee:04:08:e7:7f:1b:c7:2a:3e:24:39:9b:10: c4:df:44:b3:14:ad:1a:67:b8:8e:fc:c6:0e:89:4d: ca:d5:b8:d5:75:c3:5a:90:22:aa:4e:d2:e0:eb:32: 31:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:78:0D:D6:3C:1A:95:C1:B8:3F:C7:DE:55:BD:38:2A:1B:85:AD:5D X509v3 Authority Key Identifier: keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/1HgN1jwalcG4P8feVb04KhuFrV0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.23.103.0/24 IPv6: 2a11:fc80::/29 Signature Algorithm: sha256WithRSAEncryption d2:06:e5:44:8b:29:c0:92:e7:09:6f:9c:b1:6f:76:44:5e:7c: c8:99:fe:c3:17:04:a4:b1:64:c2:b8:92:94:24:a6:72:c4:28: 55:41:39:91:ea:db:3c:04:4d:e9:4b:fc:6d:e6:0b:8c:45:83: 38:cf:48:18:4b:a4:de:36:ce:3d:80:b3:15:2e:34:c7:4b:22: 20:9d:7e:df:88:27:fe:52:d3:af:ae:92:30:6b:76:2c:dc:f1: 90:30:d3:ba:1f:12:43:a5:e6:3e:41:d7:6d:5b:2d:60:5e:88: b7:c3:50:99:49:d9:e7:e5:ee:99:e2:fc:00:25:15:bf:22:40: d6:56:a1:34:9f:10:61:54:21:b6:ff:a0:f9:b5:69:af:8b:c5: d3:ee:91:01:68:74:aa:17:bd:7f:c5:6e:5e:60:08:dc:4e:72: 02:c5:da:bf:ff:6f:74:80:a7:50:aa:b3:d8:ca:d6:4f:9f:f5: 71:4f:6c:28:df:71:85:6e:82:4c:ab:86:e1:c4:4b:5c:05:bd: d3:1d:d8:4a:30:0d:d6:0b:a0:14:9f:09:0f:ca:08:dd:7a:6b: 14:07:0a:62:06:64:f6:f2:8e:e5:21:0b:33:2b:bb:87:a0:f2: c2:38:71:6e:27:5d:43:bf:3e:07:dc:83:76:2c:5a:a7:c4:71: 7d:00:ed:cf -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9XNl4MVDVSjWaCB5NKZ98MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MDg0NzVmZjBkOGVjOTYwMzM2MDE2ZTBlMDQyMjFhOThl NWVjZjIwHhcNMjYwMTAyMDYxOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDc4MGRkNjNjMWE5NWMxYjgzZmM3ZGU1NWJkMzgyYTFiODVhZDVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorScoUR3ABdKljmvDVcpCqytiMJx gkh03YMXlDcZbClNF4FSBW+b0JxJOTMmU3RaHBkl3ozOgI56wYHCeRBK8tHEuFeI O1wjwYQiBIRNkjjOUlOzyD3OkV2jG8vguTtqMH4K7WXsWxjSIptaYEx6lo4N9SCy JtmB28MRudy/7ZKGL0qbvdoFWgVPmbGjdgDhg6iwW5j4xgbZnbw4gC29EWDARU9F /07/vDf6eabSCbxc8zedLW3XLXxiIA/wFllE8RmO4jrOy/AreEJOxZXcH6I/ee4E COd/G8cqPiQ5mxDE30SzFK0aZ7iO/MYOiU3K1bjVdcNakCKqTtLg6zIxnQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFNR4DdY8GpXBuD/H3lW9OCobha1dMB8GA1UdIwQY MBaAFHUIR1/w2OyWAzYBbg4EIhqY5ezyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWIt MTcxYzM2N2JlNzgyLzEvMUhnTjFqd2FsY0c0UDhmZVZiMDRLaHVGclYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWItMTcxYzM2N2JlNzgy LzEvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAWRdnMA0E AgACMAcDBQMqEfyAMA0GCSqGSIb3DQEBCwUAA4IBAQDSBuVEiynAkucJb5yxb3ZE XnzImf7DFwSksWTCuJKUJKZyxChVQTmR6ts8BE3pS/xt5guMRYM4z0gYS6TeNs49 gLMVLjTHSyIgnX7fiCf+UtOvrpIwa3Ys3PGQMNO6HxJDpeY+QddtWy1gXoi3w1CZ Sdnn5e6Z4vwAJRW/IkDWVqE0nxBhVCG2/6D5tWmvi8XT7pEBaHSqF71/xW5eYAjc TnICxdq//290gKdQqrPYytZPn/VxT2wo33GFboJMq4bhxEtcBb3THdhKMA3WC6AU nwkPygjdemsUBwpiBmT28o7lIQszK7uHoPLCOHFuJ11Dvz4H3IN2LFqnxHF9AO3P -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:59 2026 by rpki-client