This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/1bcAiDqSjg40EzVO4ytfDWpkSvE.roa File: 1bcAiDqSjg40EzVO4ytfDWpkSvE.roa (raw, json) Hash identifier: 43VS4CRnWISMDMLy+6UcYdAY7CkwReNLiVh5H8h6WqU= Subject key identifier: D5:B7:00:88:3A:92:8E:0E:34:13:35:4E:E3:2B:5F:0D:6A:64:4A:F1 Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Certificate serial: 019B7D5CCFF5E7DB4269EE543609858808C1 Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/1bcAiDqSjg40EzVO4ytfDWpkSvE.roa Signing time: Fri 02 Jan 2026 06:19:53 +0000 ROA not before: Fri 02 Jan 2026 06:19:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60548 IP address blocks: 89.23.109.0/24 maxlen: 24 94.125.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:cf:f5:e7:db:42:69:ee:54:36:09:85:88:08:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Validity Not Before: Jan 2 06:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d5b700883a928e0e3413354ee32b5f0d6a644af1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4e:50:15:58:65:13:f0:77:5f:3f:2f:f7:da: 9f:3f:f7:e3:00:0a:5e:fb:2b:be:e2:6c:31:f2:ed: 52:68:d4:34:5f:7c:0e:b3:38:fb:29:bd:13:4e:a2: e2:ac:26:cc:53:18:ee:c5:58:ef:f2:40:92:98:c1: 24:cc:1a:64:1b:af:7d:27:ad:63:5a:c2:67:16:3a: 97:1e:d9:97:1d:d1:4b:90:ea:d5:92:85:e1:7e:10: e0:db:0c:7c:b4:54:87:07:58:28:3a:1f:9b:da:6b: 71:5e:41:a1:8d:77:4c:52:70:81:71:24:c9:9a:62: 6a:28:4e:95:87:5d:0d:f9:47:76:c2:ab:4e:f7:1c: e0:78:36:cd:4b:0a:bf:0d:ca:2c:74:e5:02:98:3f: 09:ed:d0:f0:b4:c8:18:ad:7a:29:3d:05:f0:f1:43: 65:15:11:70:0b:ab:0b:c7:9e:2b:e3:25:48:45:ab: 51:70:6d:8c:ac:83:96:7d:99:f6:ac:85:71:83:e6: 01:e7:6f:a5:9f:cb:f5:f7:32:34:03:34:16:9a:50: 9e:e2:e1:9f:60:b2:56:a8:a0:cb:1b:59:2d:2e:66: 2c:4a:78:de:18:14:a1:1f:9c:e6:1a:e5:1d:ef:8b: 76:dd:9e:1a:ad:1d:0f:f0:f3:fb:bf:26:98:0a:c3: 84:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:B7:00:88:3A:92:8E:0E:34:13:35:4E:E3:2B:5F:0D:6A:64:4A:F1 X509v3 Authority Key Identifier: keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/1bcAiDqSjg40EzVO4ytfDWpkSvE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.23.109.0/24 94.125.191.0/24 Signature Algorithm: sha256WithRSAEncryption 68:f5:91:b6:ef:07:f5:e7:0a:a4:8c:f0:f5:2d:cd:f0:5b:31: e9:1d:a9:44:c9:b5:d8:ce:51:e0:9a:0f:36:4c:7e:ea:e0:9c: de:ff:84:0a:13:d3:40:1a:e5:2f:cf:3f:99:34:6c:b3:64:c3: e0:b2:0f:0d:40:b0:74:51:4b:19:56:9e:33:d6:fe:4a:7a:4a: 4d:aa:ef:95:07:aa:8b:98:3c:b6:82:94:75:50:e0:31:6d:9a: b8:e6:95:e9:4a:ad:e6:c5:d8:2f:fc:cc:65:ae:5a:35:6d:63: aa:09:e4:52:d9:3f:a7:07:7f:95:d6:ed:b9:64:91:3d:59:8e: 15:4a:cc:70:f9:dc:76:7e:46:26:be:49:19:4e:10:8d:2f:35: 0c:ae:d1:69:b3:91:62:c0:6c:3e:44:e7:1d:b9:d7:0a:a6:4a: b3:b9:dc:9c:86:9d:64:22:f2:8a:e3:ba:b8:f7:1a:0d:5f:15: f6:0a:cb:4c:d8:6f:a8:62:fb:90:24:49:eb:74:c5:61:b1:f2: e4:27:3d:f1:d4:f5:de:b2:11:9e:9a:cb:bf:29:60:f4:13:06: 05:5a:6b:4d:eb:45:eb:35:df:36:af:bf:76:9a:66:d8:b8:f1: af:04:f6:be:d5:94:3e:f6:c4:20:c7:0a:88:85:ad:33:56:19: f2:f6:8a:be -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9XM/159tCae5UNgmFiAjBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MDg0NzVmZjBkOGVjOTYwMzM2MDE2ZTBlMDQyMjFhOThl NWVjZjIwHhcNMjYwMTAyMDYxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNWI3MDA4ODNhOTI4ZTBlMzQxMzM1NGVlMzJiNWYwZDZhNjQ0YWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv05QFVhlE/B3Xz8v99qfP/fjAApe +yu+4mwx8u1SaNQ0X3wOszj7Kb0TTqLirCbMUxjuxVjv8kCSmMEkzBpkG699J61j WsJnFjqXHtmXHdFLkOrVkoXhfhDg2wx8tFSHB1goOh+b2mtxXkGhjXdMUnCBcSTJ mmJqKE6Vh10N+Ud2wqtO9xzgeDbNSwq/DcosdOUCmD8J7dDwtMgYrXopPQXw8UNl FRFwC6sLx54r4yVIRatRcG2MrIOWfZn2rIVxg+YB52+ln8v19zI0AzQWmlCe4uGf YLJWqKDLG1ktLmYsSnjeGBShH5zmGuUd74t23Z4arR0P8PP7vyaYCsOECwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNW3AIg6ko4ONBM1TuMrXw1qZErxMB8GA1UdIwQY MBaAFHUIR1/w2OyWAzYBbg4EIhqY5ezyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWIt MTcxYzM2N2JlNzgyLzEvMWJjQWlEcVNqZzQwRXpWTzR5dGZEV3BrU3ZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWItMTcxYzM2N2JlNzgy LzEvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWRdtAwQA Xn2/MA0GCSqGSIb3DQEBCwUAA4IBAQBo9ZG27wf15wqkjPD1Lc3wWzHpHalEybXY zlHgmg82TH7q4Jze/4QKE9NAGuUvzz+ZNGyzZMPgsg8NQLB0UUsZVp4z1v5KekpN qu+VB6qLmDy2gpR1UOAxbZq45pXpSq3mxdgv/Mxlrlo1bWOqCeRS2T+nB3+V1u25 ZJE9WY4VSsxw+dx2fkYmvkkZThCNLzUMrtFps5FiwGw+ROcdudcKpkqzudychp1k IvKK47q49xoNXxX2CstM2G+oYvuQJEnrdMVhsfLkJz3x1PXeshGemsu/KWD0EwYF WmtN60XrNd82r792mmbYuPGvBPa+1ZQ+9sQgxwqIha0zVhny9oq+ -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:29 2026 by rpki-client