This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/1-zPv1sLkAImPDaF-sFx3J1tBqrg.roa File: 1-zPv1sLkAImPDaF-sFx3J1tBqrg.roa (raw, json) Hash identifier: lfy4SNV7N7tKzhQrJTRx4OtE/ViL7Dd59Cz+B5EnHRw= Subject key identifier: FB:33:EF:D6:C2:E4:00:89:8F:0D:A1:7E:B0:5C:77:27:5B:41:AA:B8 Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe Certificate serial: 019B7D5B28E9A12FA9826935886C1F7A1118 Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/1-zPv1sLkAImPDaF-sFx3J1tBqrg.roa Signing time: Fri 02 Jan 2026 06:18:04 +0000 ROA not before: Fri 02 Jan 2026 06:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198154 IP address blocks: 89.44.242.0/24 maxlen: 24 89.46.217.0/24 maxlen: 24 109.122.247.0/24 maxlen: 24 109.122.249.0/24 maxlen: 24 109.122.254.0/23 maxlen: 24 188.212.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:28:e9:a1:2f:a9:82:69:35:88:6c:1f:7a:11:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe Validity Not Before: Jan 2 06:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb33efd6c2e400898f0da17eb05c77275b41aab8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:46:26:67:ff:79:b3:c7:9f:37:01:7e:35:ed: 3a:70:48:40:ef:a1:2b:2c:ca:6c:42:84:c3:d2:6f: 57:fd:05:01:21:0c:6a:ab:c0:e4:f6:20:01:91:81: f7:92:a5:48:c5:ea:38:7d:b7:32:2a:a3:18:bb:65: 1e:ad:16:09:02:3a:17:ef:e2:be:73:98:9c:8b:85: e2:77:5f:6e:45:0c:56:f7:8b:0d:c1:ce:e0:c1:78: 7f:45:28:96:00:7b:29:40:ab:df:a8:c8:b8:3e:ef: a7:fe:66:bc:ce:33:28:86:5d:aa:77:c4:86:bb:b6: cf:d2:b8:9f:e0:7d:dc:05:37:01:3c:7c:02:ec:48: 5d:ba:ed:dc:93:66:64:9a:65:0b:20:04:3d:43:b8: 57:ad:7b:1b:1b:d1:d6:15:2c:71:1c:f6:e3:33:ba: 87:65:fb:a0:29:fc:f4:cc:9a:d6:30:2e:15:c5:08: d7:f6:4d:3c:3d:8f:d3:7f:dc:96:d9:15:95:08:14: 27:92:76:5b:bb:60:f2:96:6d:cb:c1:93:d1:ba:d7: b1:c2:dd:86:ee:b1:51:2f:fc:dd:85:3a:55:e4:ec: 0d:31:dc:8a:9d:b8:29:ab:e0:73:fc:7b:f9:13:9d: 05:69:c5:0b:4e:8e:c5:94:b7:0d:ef:da:85:b2:15: 87:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:33:EF:D6:C2:E4:00:89:8F:0D:A1:7E:B0:5C:77:27:5B:41:AA:B8 X509v3 Authority Key Identifier: keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/1-zPv1sLkAImPDaF-sFx3J1tBqrg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.44.242.0/24 89.46.217.0/24 109.122.247.0/24 109.122.249.0/24 109.122.254.0/23 188.212.99.0/24 Signature Algorithm: sha256WithRSAEncryption 28:b2:58:0d:34:87:20:c8:9a:dd:59:26:6b:e1:6c:36:df:2f: a5:a5:3c:82:ba:5b:d0:9d:58:fb:cd:28:a5:dd:47:a7:d6:e4: da:1f:c5:27:97:a0:e8:d8:0a:59:02:d5:9e:77:d3:41:fe:c0: ef:11:40:a2:4f:85:38:00:2a:96:47:e9:62:b9:0b:51:ac:36: 44:9b:b6:25:1b:27:19:2b:32:32:48:bd:0a:cd:c0:c1:78:a8: d6:ec:e9:39:93:3f:3d:8b:f6:b2:a1:47:3e:87:73:88:65:b7: 2a:d2:f5:47:b4:f7:78:01:01:f2:a9:11:6f:1d:d1:4c:21:c1: a8:1d:1f:3d:4f:50:c8:6b:00:0a:e3:2b:3c:77:18:85:79:19: 94:65:b0:ef:43:46:bc:35:02:9b:f0:5b:3d:28:cc:06:73:7e: 55:bd:d7:0a:d6:df:93:50:56:b1:35:0f:e9:99:99:4a:df:37: 0b:b1:c5:91:1d:f8:42:52:73:40:cf:82:1a:63:6c:7d:6a:79: f9:ff:24:b3:6b:e2:72:43:fb:20:92:82:4a:15:f2:43:a3:c6: 42:90:e2:cd:92:8d:b6:9a:d4:45:71:f2:2e:bc:7a:ca:de:2d: 65:d7:44:0d:3a:4d:17:ec:ba:8e:97:43:76:8f:a3:ec:3b:0c: 0f:c1:16:bf -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgISAZt9WyjpoS+pgmk1iGwfehEYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZGIzOGIzNDNkYTJkMTE5MzA5ZWRhYTE5YzdhNzg4NzAz MjdlYmUwHhcNMjYwMTAyMDYxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjMzZWZkNmMyZTQwMDg5OGYwZGExN2ViMDVjNzcyNzViNDFhYWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEYmZ/95s8efNwF+Ne06cEhA76Er LMpsQoTD0m9X/QUBIQxqq8Dk9iABkYH3kqVIxeo4fbcyKqMYu2UerRYJAjoX7+K+ c5ici4Xid19uRQxW94sNwc7gwXh/RSiWAHspQKvfqMi4Pu+n/ma8zjMohl2qd8SG u7bP0rif4H3cBTcBPHwC7Ehduu3ck2ZkmmULIAQ9Q7hXrXsbG9HWFSxxHPbjM7qH ZfugKfz0zJrWMC4VxQjX9k08PY/Tf9yW2RWVCBQnknZbu2Dylm3LwZPRutexwt2G 7rFRL/zdhTpV5OwNMdyKnbgpq+Bz/Hv5E50FacULTo7FlLcN79qFshWH8QIDAQAB o4ICKDCCAiQwHQYDVR0OBBYEFPsz79bC5ACJjw2hfrBcdydbQaq4MB8GA1UdIwQY MBaAFG3bOLND2i0RkwntqhnHp4hwMn6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQt M2RmYTUxMGQ2YjE2LzEvMS16UHYxc0xrQUltUERhRi1zRngzSjF0QnFyZy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNTIvYzk2MWEwLTRmNTMtNDIyYS1iN2RkLTNkZmE1MTBkNmIx Ni8xL2JkczRzMFBhTFJHVENlMnFHY2VuaUhBeWZyNC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjA9BggrBgEFBQcBBwEB/wQuMCwwKgQCAAEwJAMEAFks8gME AFku2QMEAG169wMEAG16+QMEAW16/gMEALzUYzANBgkqhkiG9w0BAQsFAAOCAQEA KLJYDTSHIMia3Vkma+FsNt8vpaU8grpb0J1Y+80opd1Hp9bk2h/FJ5eg6NgKWQLV nnfTQf7A7xFAok+FOAAqlkfpYrkLUaw2RJu2JRsnGSsyMki9Cs3AwXio1uzpOZM/ PYv2sqFHPodziGW3KtL1R7T3eAEB8qkRbx3RTCHBqB0fPU9QyGsACuMrPHcYhXkZ lGWw70NGvDUCm/BbPSjMBnN+Vb3XCtbfk1BWsTUP6ZmZSt83C7HFkR34QlJzQM+C GmNsfWp5+f8ks2vickP7IJKCShXyQ6PGQpDizZKNtprURXHyLrx6yt4tZddEDTpN F+y6jpdDdo+j7DsMD8EWvw== -----END CERTIFICATE-----Generated at Sun Jan 25 17:42:23 2026 by rpki-client