This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/rnJIlbs2iVDtWflxRJ2ZBYeF__I.roa File: rnJIlbs2iVDtWflxRJ2ZBYeF__I.roa (raw, json) Hash identifier: YKlhZLI+VkzsmAVmF0CZzBKBT9NCGEV+DX5m19LqsF4= Subject key identifier: AE:72:48:95:BB:36:89:50:ED:59:F9:71:44:9D:99:05:87:85:FF:F2 Certificate issuer: /CN=b9b350a0ae32e73e660c416c3f1406edd3615f82 Certificate serial: 019B7BA51ED6BFB7658735701AA928DB0452 Authority key identifier: B9:B3:50:A0:AE:32:E7:3E:66:0C:41:6C:3F:14:06:ED:D3:61:5F:82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubNQoK4y5z5mDEFsPxQG7dNhX4I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/rnJIlbs2iVDtWflxRJ2ZBYeF__I.roa Signing time: Thu 01 Jan 2026 22:19:37 +0000 ROA not before: Thu 01 Jan 2026 22:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12301 IP address blocks: 89.107.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.crl rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.mft rsync://rpki.ripe.net/repository/DEFAULT/ubNQoK4y5z5mDEFsPxQG7dNhX4I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:1e:d6:bf:b7:65:87:35:70:1a:a9:28:db:04:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9b350a0ae32e73e660c416c3f1406edd3615f82 Validity Not Before: Jan 1 22:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae724895bb368950ed59f971449d99058785fff2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a4:c9:33:a2:ac:71:0e:45:c4:7c:76:8f:f8: 21:c2:44:52:ee:1d:5b:cc:41:6e:ae:f1:00:55:2e: e5:13:9c:a1:16:7a:47:0f:5d:8a:5f:57:6e:bc:33: 15:0b:ab:c6:42:1d:91:38:5c:b1:6b:85:fc:51:63: 52:af:99:2b:77:cb:0c:a8:48:e1:77:67:16:c8:48: b0:04:55:7a:31:68:a1:a9:54:f5:2c:d0:1c:f6:23: 43:69:0c:1e:70:f4:8f:f1:2c:de:df:e9:a4:2b:f8: 15:49:cc:15:07:ae:5c:6d:2b:c4:dd:d9:69:1f:1a: 3b:eb:9e:ce:4c:dd:f2:be:98:f0:b7:2e:57:2c:82: f2:5a:3d:ad:1c:26:74:c2:9f:85:05:6c:54:ae:26: ed:7d:56:a4:70:32:48:30:dc:56:a2:9e:af:24:89: bc:d8:31:8a:9d:44:23:ee:8c:02:d1:de:a2:13:82: 35:a9:2a:55:f5:ad:ad:b1:90:ad:d5:ef:8d:4c:16: 00:1f:42:2e:a3:8f:52:6e:72:80:fa:c5:53:8e:b2: 1d:fc:42:63:2c:46:39:ab:78:84:94:d4:34:43:9f: 81:8b:ec:a9:5b:03:a5:89:db:ac:10:17:71:2d:63: 6d:74:05:0f:7a:17:df:33:2e:4b:ee:37:cb:3f:24: a7:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:72:48:95:BB:36:89:50:ED:59:F9:71:44:9D:99:05:87:85:FF:F2 X509v3 Authority Key Identifier: keyid:B9:B3:50:A0:AE:32:E7:3E:66:0C:41:6C:3F:14:06:ED:D3:61:5F:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubNQoK4y5z5mDEFsPxQG7dNhX4I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/rnJIlbs2iVDtWflxRJ2ZBYeF__I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/627e60-00a6-4d26-b93a-ef73b7b4ca3c/1/ubNQoK4y5z5mDEFsPxQG7dNhX4I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.107.253.0/24 Signature Algorithm: sha256WithRSAEncryption bb:59:05:ed:3e:e7:9b:c7:28:08:e1:e6:14:77:85:7f:be:1a: 82:34:00:27:d8:21:2b:d0:4b:27:45:40:1a:c1:63:59:93:07: 3d:cb:a8:d6:b3:a4:24:d9:43:30:2a:0e:46:92:fe:24:76:de: 72:fc:d4:24:5e:69:a8:b8:0f:4f:dd:05:d9:ba:76:b5:c0:4e: d2:79:ee:cb:6f:84:55:5d:d9:ae:21:c9:af:68:a4:00:82:cb: 15:34:c5:d0:9a:c2:79:2d:37:ca:8d:39:ec:db:4c:96:47:ff: 12:48:27:45:e9:e2:a1:88:d3:1f:37:0a:a0:ea:6e:97:56:66: 3e:bd:fc:6b:55:05:c3:ac:b5:32:a2:d0:06:c0:aa:16:d0:c3: 22:22:99:fc:ad:bc:ad:8a:13:ef:44:2e:39:2f:db:d3:e3:f2: 84:f0:cc:a5:0b:87:33:84:bc:04:57:1e:f8:b4:f2:9d:20:a2: 84:d1:40:b1:6b:ec:ff:7f:2e:3a:31:df:57:16:45:c7:ba:07: 77:ec:f7:a1:5e:56:f6:b2:9a:ef:d7:3b:27:02:37:bf:fe:93: 03:ce:aa:16:95:27:e1:f7:56:33:aa:47:ce:c9:d7:bb:75:28: 2d:1a:ec:a9:c8:94:9b:45:87:1d:3b:fc:a9:b4:3a:51:d7:f5: 9d:17:f9:ed -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pR7Wv7dlhzVwGqko2wRSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5YjM1MGEwYWUzMmU3M2U2NjBjNDE2YzNmMTQwNmVkZDM2 MTVmODIwHhcNMjYwMTAxMjIxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTcyNDg5NWJiMzY4OTUwZWQ1OWY5NzE0NDlkOTkwNTg3ODVmZmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaTJM6KscQ5FxHx2j/ghwkRS7h1b zEFurvEAVS7lE5yhFnpHD12KX1duvDMVC6vGQh2ROFyxa4X8UWNSr5krd8sMqEjh d2cWyEiwBFV6MWihqVT1LNAc9iNDaQwecPSP8Sze3+mkK/gVScwVB65cbSvE3dlp Hxo7657OTN3yvpjwty5XLILyWj2tHCZ0wp+FBWxUribtfVakcDJIMNxWop6vJIm8 2DGKnUQj7owC0d6iE4I1qSpV9a2tsZCt1e+NTBYAH0Iuo49SbnKA+sVTjrId/EJj LEY5q3iElNQ0Q5+Bi+ypWwOlidusEBdxLWNtdAUPehffMy5L7jfLPySn0wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK5ySJW7NolQ7Vn5cUSdmQWHhf/yMB8GA1UdIwQY MBaAFLmzUKCuMuc+ZgxBbD8UBu3TYV+CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWJOUW9LNHk1ejVtREVGc1B4UUc3ZE5oWDRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS82MjdlNjAtMDBhNi00ZDI2LWI5M2Et ZWY3M2I3YjRjYTNjLzEvcm5KSWxiczJpVkR0V2ZseFJKMlpCWWVGX19JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS82MjdlNjAtMDBhNi00ZDI2LWI5M2EtZWY3M2I3YjRjYTNj LzEvdWJOUW9LNHk1ejVtREVGc1B4UUc3ZE5oWDRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWWv9MA0G CSqGSIb3DQEBCwUAA4IBAQC7WQXtPuebxygI4eYUd4V/vhqCNAAn2CEr0EsnRUAa wWNZkwc9y6jWs6Qk2UMwKg5Gkv4kdt5y/NQkXmmouA9P3QXZuna1wE7See7Lb4RV XdmuIcmvaKQAgssVNMXQmsJ5LTfKjTns20yWR/8SSCdF6eKhiNMfNwqg6m6XVmY+ vfxrVQXDrLUyotAGwKoW0MMiIpn8rbytihPvRC45L9vT4/KE8MylC4czhLwEVx74 tPKdIKKE0UCxa+z/fy46Md9XFkXHugd37PehXlb2sprv1zsnAje//pMDzqoWlSfh 91YzqkfOyde7dSgtGuypyJSbRYcdO/yptDpR1/WdF/nt -----END CERTIFICATE-----Generated at Sun Jan 25 16:10:01 2026 by rpki-client