This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/RB0GL9giB0u7zxwi4U8zR08ihPw.roa File: RB0GL9giB0u7zxwi4U8zR08ihPw.roa (raw, json) Hash identifier: Szh3L0AtY1SzUtQRUTJ6CEK6mqyoxGEDQuesq2qnd/s= Subject key identifier: 44:1D:06:2F:D8:22:07:4B:BB:CF:1C:22:E1:4F:33:47:4F:22:84:FC Certificate issuer: /CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8 Certificate serial: 019B7F84FDDE45E0CECE6B1E44F3B8664CEA Authority key identifier: 29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/RB0GL9giB0u7zxwi4U8zR08ihPw.roa Signing time: Fri 02 Jan 2026 16:23:00 +0000 ROA not before: Fri 02 Jan 2026 16:23:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198949 IP address blocks: 89.111.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.mft rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:fd:de:45:e0:ce:ce:6b:1e:44:f3:b8:66:4c:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29a9964e0cd35fb36757e5653ffa7626ac5deee8 Validity Not Before: Jan 2 16:23:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=441d062fd822074bbbcf1c22e14f33474f2284fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ef:22:0d:03:d0:3d:34:b5:f7:5d:55:91:d9: a5:17:a9:b2:db:eb:f1:57:85:63:26:a5:61:dc:b0: 08:e2:cb:62:a4:ed:2a:48:c7:87:50:d7:4b:b7:83: 0f:60:55:70:f0:98:6e:d4:39:72:dd:6e:1f:67:35: 9d:87:5a:b6:45:45:17:f5:20:11:62:f6:56:af:5e: 21:be:0b:31:4d:62:7c:27:ed:27:dd:9b:73:d6:66: 00:03:88:d9:15:19:a0:81:d0:e9:35:20:93:91:85: 05:98:20:36:99:8b:25:e4:f3:49:52:5b:dd:af:b6: 02:3e:01:0f:6a:d6:09:60:af:61:ca:b3:55:1f:ab: 41:2e:e6:69:f5:30:22:54:8a:cf:66:86:b0:f3:7a: 21:13:fb:61:4f:3a:03:ed:ef:47:d5:3c:2a:f8:64: f3:45:24:f4:20:f3:bb:fc:0c:a0:ce:90:f8:40:16: 83:3d:65:02:41:db:d7:b3:cb:9d:f7:b7:bd:92:44: 32:ef:fa:42:6d:34:ca:68:14:0e:6a:69:f3:55:24: 8e:13:46:fc:65:d8:07:bc:18:71:17:ad:2c:89:20: eb:2f:51:3d:cf:ed:88:3c:f0:c1:b9:e0:c9:f5:89: 44:76:e9:1a:c2:fb:0c:4a:95:7f:1a:a6:81:da:fd: 20:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:1D:06:2F:D8:22:07:4B:BB:CF:1C:22:E1:4F:33:47:4F:22:84:FC X509v3 Authority Key Identifier: keyid:29:A9:96:4E:0C:D3:5F:B3:67:57:E5:65:3F:FA:76:26:AC:5D:EE:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KamWTgzTX7NnV-VlP_p2Jqxd7ug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/RB0GL9giB0u7zxwi4U8zR08ihPw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/214063-f88f-4958-ae52-d9b533f7fbc3/1/KamWTgzTX7NnV-VlP_p2Jqxd7ug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.111.240.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:02:f0:c5:e4:2c:7f:a6:a4:8c:85:a7:86:37:fb:9e:1d:a4: e9:f9:39:03:96:d1:11:28:90:0e:71:44:d3:7a:82:d6:55:cd: cb:70:24:73:00:a1:23:56:40:46:6f:78:6c:98:8b:3a:41:1f: 23:0b:ab:e5:ef:20:06:6a:73:f9:38:74:90:98:57:81:ad:22: 1d:da:2c:f8:23:de:ae:04:60:e6:a9:65:2b:1f:c8:e9:e9:3d: b4:c8:cc:68:f5:2d:54:22:b1:9a:8d:5f:db:14:ee:19:a9:0b: 18:49:18:82:03:aa:ca:6d:67:74:44:93:a0:a3:b1:82:45:12: cd:61:5e:e8:f7:ae:de:7a:de:9e:c0:0e:6f:f2:a7:c9:1f:04: 47:2f:89:18:e5:11:6b:91:e0:89:03:26:82:8f:3e:70:6a:be: a2:ee:22:41:68:0e:c5:a4:45:29:12:fd:56:aa:5c:8e:9b:e8: e1:1f:a3:ec:9d:28:06:3d:1d:88:75:db:9e:37:48:62:5f:dd: 98:94:bc:8c:ed:36:a2:60:4f:e5:19:e3:97:ab:4c:b3:11:07: b5:9a:9c:28:ec:c3:a3:a2:39:e6:09:a9:6f:f0:a8:e5:00:fb: 9b:9a:33:cd:9d:b9:e1:78:39:18:a5:de:a2:10:f1:08:08:b6: cd:77:bb:76 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hP3eReDOzmseRPO4ZkzqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5YTk5NjRlMGNkMzVmYjM2NzU3ZTU2NTNmZmE3NjI2YWM1 ZGVlZTgwHhcNMjYwMTAyMTYyMzAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NDFkMDYyZmQ4MjIwNzRiYmJjZjFjMjJlMTRmMzM0NzRmMjI4NGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+8iDQPQPTS1911VkdmlF6my2+vx V4VjJqVh3LAI4stipO0qSMeHUNdLt4MPYFVw8Jhu1Dly3W4fZzWdh1q2RUUX9SAR YvZWr14hvgsxTWJ8J+0n3Ztz1mYAA4jZFRmggdDpNSCTkYUFmCA2mYsl5PNJUlvd r7YCPgEPatYJYK9hyrNVH6tBLuZp9TAiVIrPZoaw83ohE/thTzoD7e9H1Twq+GTz RST0IPO7/AygzpD4QBaDPWUCQdvXs8ud97e9kkQy7/pCbTTKaBQOamnzVSSOE0b8 ZdgHvBhxF60siSDrL1E9z+2IPPDBueDJ9YlEdukawvsMSpV/GqaB2v0ggQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEQdBi/YIgdLu88cIuFPM0dPIoT8MB8GA1UdIwQY MBaAFCmplk4M01+zZ1flZT/6diasXe7oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2FtV1RnelRYN05uVi1WbFBfcDJKcXhkN3VnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8yMTQwNjMtZjg4Zi00OTU4LWFlNTIt ZDliNTMzZjdmYmMzLzEvUkIwR0w5Z2lCMHU3enh3aTRVOHpSMDhpaFB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy8yMTQwNjMtZjg4Zi00OTU4LWFlNTItZDliNTMzZjdmYmMz LzEvS2FtV1RnelRYN05uVi1WbFBfcDJKcXhkN3VnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWW/wMA0G CSqGSIb3DQEBCwUAA4IBAQBvAvDF5Cx/pqSMhaeGN/ueHaTp+TkDltERKJAOcUTT eoLWVc3LcCRzAKEjVkBGb3hsmIs6QR8jC6vl7yAGanP5OHSQmFeBrSId2iz4I96u BGDmqWUrH8jp6T20yMxo9S1UIrGajV/bFO4ZqQsYSRiCA6rKbWd0RJOgo7GCRRLN YV7o967eet6ewA5v8qfJHwRHL4kY5RFrkeCJAyaCjz5war6i7iJBaA7FpEUpEv1W qlyOm+jhH6PsnSgGPR2IddueN0hiX92YlLyM7TaiYE/lGeOXq0yzEQe1mpwo7MOj ojnmCalv8KjlAPubmjPNnbnheDkYpd6iEPEICLbNd7t2 -----END CERTIFICATE-----Generated at Sun Jan 25 21:06:31 2026 by rpki-client