This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/1tgtjL3B3YdYAU03MUR31VYv6CI.roa File: 1tgtjL3B3YdYAU03MUR31VYv6CI.roa (raw, json) Hash identifier: 16zjErqZd+Fe3OsAh8pnaOrjHjMKr/IPGlIT7NNIBL0= Subject key identifier: D6:D8:2D:8C:BD:C1:DD:87:58:01:4D:37:31:44:77:D5:56:2F:E8:22 Certificate issuer: /CN=72e13915fa1bc579f5856f58ecb24786379a5d48 Certificate serial: 019B7834DAE44D1334F064129761AEB60E57 Authority key identifier: 72:E1:39:15:FA:1B:C5:79:F5:85:6F:58:EC:B2:47:86:37:9A:5D:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuE5FfobxXn1hW9Y7LJHhjeaXUg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/1tgtjL3B3YdYAU03MUR31VYv6CI.roa Signing time: Thu 01 Jan 2026 06:18:08 +0000 ROA not before: Thu 01 Jan 2026 06:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57101 IP address blocks: 89.22.208.0/21 maxlen: 21 91.230.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/cuE5FfobxXn1hW9Y7LJHhjeaXUg.crl rsync://rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/cuE5FfobxXn1hW9Y7LJHhjeaXUg.mft rsync://rpki.ripe.net/repository/DEFAULT/cuE5FfobxXn1hW9Y7LJHhjeaXUg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:da:e4:4d:13:34:f0:64:12:97:61:ae:b6:0e:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72e13915fa1bc579f5856f58ecb24786379a5d48 Validity Not Before: Jan 1 06:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d6d82d8cbdc1dd8758014d37314477d5562fe822 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4d:00:21:e5:08:d9:7e:91:1c:35:31:c5:89: e2:92:68:b6:84:e6:bb:40:1b:62:40:62:af:fd:a2: ae:d1:2b:2a:87:33:61:8c:7d:9c:76:4b:60:1f:46: e3:1e:a6:d5:0b:88:47:26:6d:97:8e:66:01:ff:b3: 22:80:4a:19:78:a5:5d:d6:b8:74:96:83:58:57:bd: 47:33:fe:9c:f9:98:9a:2f:9b:00:f1:36:55:5c:fd: de:d8:4f:22:6b:57:44:51:98:a9:78:fa:c3:98:d4: 55:e6:46:a1:a6:c5:2a:e7:6a:eb:ff:39:32:ac:0d: df:1a:a6:6d:8e:c2:6e:b2:4e:b4:cf:0c:16:b2:84: b0:93:8f:ee:fd:54:96:17:17:78:ea:a0:98:87:86: 35:3b:b2:96:0d:08:4c:d0:9a:45:2d:c6:13:3c:4d: ec:62:3a:ac:a1:95:95:9d:f8:64:e3:76:2a:2b:26: 58:bb:23:19:68:47:3e:e3:7a:fe:2e:34:9e:3f:91: a6:99:2b:71:ca:5c:6c:37:ef:eb:e8:22:05:73:70: 17:16:ce:e5:17:74:f0:f4:5c:91:c3:aa:a1:91:b3: fb:d4:7d:ed:3c:2b:cb:f5:5a:d8:1e:66:6e:aa:1f: 2e:58:0b:63:81:21:f3:76:c0:71:f7:02:2a:2a:60: 4b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:D8:2D:8C:BD:C1:DD:87:58:01:4D:37:31:44:77:D5:56:2F:E8:22 X509v3 Authority Key Identifier: keyid:72:E1:39:15:FA:1B:C5:79:F5:85:6F:58:EC:B2:47:86:37:9A:5D:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuE5FfobxXn1hW9Y7LJHhjeaXUg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/1tgtjL3B3YdYAU03MUR31VYv6CI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/cuE5FfobxXn1hW9Y7LJHhjeaXUg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.22.208.0/21 91.230.157.0/24 Signature Algorithm: sha256WithRSAEncryption 54:2c:e4:ec:17:92:fe:13:10:4c:79:8b:e8:53:ac:04:7f:c4: 2c:51:c0:7c:a3:2b:c5:e6:4b:c7:67:ea:d0:68:ec:7c:f8:d3: 47:bf:ef:48:0b:28:9b:30:6d:4e:c1:87:72:3d:e4:a4:95:dd: 54:89:e4:f3:db:27:b7:2d:38:4d:58:6a:71:e3:87:6e:0d:30: e6:b7:9f:c3:5b:bc:cc:10:ee:50:da:fc:fc:a2:97:11:b6:74: 86:3f:51:6b:25:c8:04:9b:dc:74:1b:6c:05:ca:4a:13:f7:92: 6d:2c:66:f9:c6:f0:a8:38:a9:5a:7e:f4:44:b7:5f:64:30:f2: af:b6:69:f3:5b:e7:d8:d0:9c:b4:83:6e:24:f0:81:c1:ed:81: 1c:1a:55:12:89:a3:9a:bb:18:65:03:60:17:24:1d:56:11:63: 33:5b:98:41:c3:85:2e:59:f7:0f:b1:56:65:21:d8:0c:97:bd: 03:74:77:75:7e:4e:a8:51:14:cb:23:9e:c5:fb:7d:50:78:c4: bc:e1:c9:94:32:5f:1d:b0:de:52:85:ba:fe:ed:d4:3d:84:25: 98:52:87:a5:73:c5:a7:6d:1d:fe:7d:ea:b0:83:a9:e3:dc:f0: ac:92:d7:ad:8f:c9:ba:4f:11:b9:d5:22:9b:63:d5:7c:45:a5: 0d:d1:8b:ca -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NNrkTRM08GQSl2Gutg5XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZTEzOTE1ZmExYmM1NzlmNTg1NmY1OGVjYjI0Nzg2Mzc5 YTVkNDgwHhcNMjYwMTAxMDYxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNmQ4MmQ4Y2JkYzFkZDg3NTgwMTRkMzczMTQ0NzdkNTU2MmZlODIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsU0AIeUI2X6RHDUxxYnikmi2hOa7 QBtiQGKv/aKu0SsqhzNhjH2cdktgH0bjHqbVC4hHJm2XjmYB/7MigEoZeKVd1rh0 loNYV71HM/6c+ZiaL5sA8TZVXP3e2E8ia1dEUZipePrDmNRV5kahpsUq52rr/zky rA3fGqZtjsJusk60zwwWsoSwk4/u/VSWFxd46qCYh4Y1O7KWDQhM0JpFLcYTPE3s YjqsoZWVnfhk43YqKyZYuyMZaEc+43r+LjSeP5GmmStxylxsN+/r6CIFc3AXFs7l F3Tw9FyRw6qhkbP71H3tPCvL9VrYHmZuqh8uWAtjgSHzdsBx9wIqKmBL4QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNbYLYy9wd2HWAFNNzFEd9VWL+giMB8GA1UdIwQY MBaAFHLhORX6G8V59YVvWOyyR4Y3ml1IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3VFNUZmb2J4WG4xaFc5WTdMSkhoamVhWFVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi85MmJiYmYtOWY5My00NzQxLTg2ODIt ZjFlOGJkNzQxODBjLzEvMXRndGpMM0IzWWRZQVUwM01VUjMxVll2NkNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi85MmJiYmYtOWY5My00NzQxLTg2ODItZjFlOGJkNzQxODBj LzEvY3VFNUZmb2J4WG4xaFc5WTdMSkhoamVhWFVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDWRbQAwQA W+adMA0GCSqGSIb3DQEBCwUAA4IBAQBULOTsF5L+ExBMeYvoU6wEf8QsUcB8oyvF 5kvHZ+rQaOx8+NNHv+9ICyibMG1OwYdyPeSkld1UieTz2ye3LThNWGpx44duDTDm t5/DW7zMEO5Q2vz8opcRtnSGP1FrJcgEm9x0G2wFykoT95JtLGb5xvCoOKlafvRE t19kMPKvtmnzW+fY0Jy0g24k8IHB7YEcGlUSiaOauxhlA2AXJB1WEWMzW5hBw4Uu WfcPsVZlIdgMl70DdHd1fk6oURTLI57F+31QeMS84cmUMl8dsN5Shbr+7dQ9hCWY Uoelc8WnbR3+feqwg6nj3PCsktetj8m6TxG51SKbY9V8RaUN0YvK -----END CERTIFICATE-----Generated at Sun Jan 25 20:49:06 2026 by rpki-client