This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/G89I4eFQRreVo-7aKBmhJUYUtfE.roa File: G89I4eFQRreVo-7aKBmhJUYUtfE.roa (raw, json) Hash identifier: Y0sI6cJ3p/tnjubSMmOmQUTjHM00CIS1iUsc5f8JH6o= Subject key identifier: 1B:CF:48:E1:E1:50:46:B7:95:A3:EE:DA:28:19:A1:25:46:14:B5:F1 Certificate issuer: /CN=09dcf1e897e598ec3f1ab60bd443328726dedae4 Certificate serial: 019B7F15E95AC83B175F51364CC033A2E2E8 Authority key identifier: 09:DC:F1:E8:97:E5:98:EC:3F:1A:B6:0B:D4:43:32:87:26:DE:DA:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cdzx6JflmOw_GrYL1EMyhybe2uQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/G89I4eFQRreVo-7aKBmhJUYUtfE.roa Signing time: Fri 02 Jan 2026 14:21:40 +0000 ROA not before: Fri 02 Jan 2026 14:21:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208377 IP address blocks: 84.246.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/Cdzx6JflmOw_GrYL1EMyhybe2uQ.crl rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/Cdzx6JflmOw_GrYL1EMyhybe2uQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Cdzx6JflmOw_GrYL1EMyhybe2uQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:e9:5a:c8:3b:17:5f:51:36:4c:c0:33:a2:e2:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09dcf1e897e598ec3f1ab60bd443328726dedae4 Validity Not Before: Jan 2 14:21:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1bcf48e1e15046b795a3eeda2819a1254614b5f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:95:55:da:47:d4:9a:1e:27:0e:35:9a:c9:8b: 2e:bf:16:37:e7:c5:9a:8e:5f:be:5f:35:b6:15:08: 75:68:77:2a:97:e5:bd:78:93:f6:66:40:ec:e7:bd: 80:c3:e0:55:b6:b4:b6:86:b6:8e:84:09:a8:bb:f7: 56:2c:0e:a2:dd:82:98:ed:9f:30:cb:25:87:64:d5: 9f:73:eb:e9:97:a8:79:01:a9:54:61:4c:13:ee:49: d8:2b:24:94:4f:9f:76:d2:d2:9f:f9:92:b8:89:ce: 04:e5:b3:e0:8c:5d:49:2b:ff:0c:2b:ed:c3:60:53: fc:c8:1f:41:c7:ae:b8:4d:e6:8b:24:d0:da:ad:57: 1b:fb:fb:89:09:54:20:74:8a:ad:e5:95:78:cc:fd: 5a:c1:f3:3b:16:b0:61:62:f7:e7:cf:d4:dc:50:74: c9:e5:e1:89:55:0d:cf:8b:53:34:17:a6:d2:1c:00: 35:f2:36:22:ec:47:22:8b:66:16:95:00:c3:30:2d: 18:b4:47:93:60:f6:82:e7:16:a0:68:ea:5f:ef:7e: 1c:32:b0:55:fe:b0:5a:a9:fc:d3:f0:24:8a:78:86: 95:06:06:55:49:5a:35:9f:11:12:36:7c:b3:6d:21: cd:7f:21:88:d0:1a:55:8b:a5:f8:26:30:52:d8:bb: 26:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:CF:48:E1:E1:50:46:B7:95:A3:EE:DA:28:19:A1:25:46:14:B5:F1 X509v3 Authority Key Identifier: keyid:09:DC:F1:E8:97:E5:98:EC:3F:1A:B6:0B:D4:43:32:87:26:DE:DA:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cdzx6JflmOw_GrYL1EMyhybe2uQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/G89I4eFQRreVo-7aKBmhJUYUtfE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/Cdzx6JflmOw_GrYL1EMyhybe2uQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.246.242.0/24 Signature Algorithm: sha256WithRSAEncryption b6:0f:cb:66:fd:df:04:46:a6:9e:7b:d5:83:6c:1b:dd:02:c8: e4:72:a3:2e:82:73:a8:3c:f3:2a:5d:20:48:19:b5:c7:91:23: fe:2e:06:11:81:ca:14:17:3d:4d:19:f3:cc:cc:4e:94:55:27: 90:0d:05:2d:0a:67:ce:59:e4:03:a6:21:44:fe:b9:3f:5b:1f: 64:ef:b3:59:26:fd:61:8c:93:00:1c:6c:11:d9:10:dd:0b:c3: 72:41:6d:06:0e:eb:ab:a4:88:f7:be:74:c2:d1:61:44:ad:3c: 3c:d2:86:4d:37:f3:6c:28:73:31:21:bb:c6:1f:10:ec:c6:ac: 94:a5:55:78:43:f3:96:02:bb:0c:87:56:3d:cd:cd:d2:64:6c: d5:f7:40:39:c9:37:f9:72:25:f9:e5:b8:f1:79:03:54:52:a5: c5:1b:3f:fc:41:bb:df:c8:91:30:7c:b3:11:0d:04:ea:c9:a8: 5c:1d:e3:3b:3e:18:1c:40:b4:ee:d1:ef:17:57:92:c8:f1:9e: ba:cc:52:08:79:b8:6c:46:c1:15:18:ef:5e:1d:3c:c0:29:1d: c1:f1:17:50:2c:cc:70:bc:6e:91:cd:74:78:e3:63:79:d2:d9: 93:cb:e1:bb:e3:64:4c:ea:bf:53:d4:71:6e:af:7b:7c:51:59: 50:bb:ae:35 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FelayDsXX1E2TMAzouLoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ZGNmMWU4OTdlNTk4ZWMzZjFhYjYwYmQ0NDMzMjg3MjZk ZWRhZTQwHhcNMjYwMTAyMTQyMTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYmNmNDhlMWUxNTA0NmI3OTVhM2VlZGEyODE5YTEyNTQ2MTRiNWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5VV2kfUmh4nDjWayYsuvxY358Wa jl++XzW2FQh1aHcql+W9eJP2ZkDs572Aw+BVtrS2hraOhAmou/dWLA6i3YKY7Z8w yyWHZNWfc+vpl6h5AalUYUwT7knYKySUT5920tKf+ZK4ic4E5bPgjF1JK/8MK+3D YFP8yB9Bx664TeaLJNDarVcb+/uJCVQgdIqt5ZV4zP1awfM7FrBhYvfnz9TcUHTJ 5eGJVQ3Pi1M0F6bSHAA18jYi7Ecii2YWlQDDMC0YtEeTYPaC5xagaOpf734cMrBV /rBaqfzT8CSKeIaVBgZVSVo1nxESNnyzbSHNfyGI0BpVi6X4JjBS2LsmkwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBvPSOHhUEa3laPu2igZoSVGFLXxMB8GA1UdIwQY MBaAFAnc8eiX5ZjsPxq2C9RDMocm3trkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2R6eDZKZmxtT3dfR3JZTDFFTXloeWJlMnVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC85YmM0Y2MtYjY0Ni00NzAxLTg5NzUt NjIzZTE5OWZkYmU5LzEvRzg5STRlRlFScmVWby03YUtCbWhKVVlVdGZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC85YmM0Y2MtYjY0Ni00NzAxLTg5NzUtNjIzZTE5OWZkYmU5 LzEvQ2R6eDZKZmxtT3dfR3JZTDFFTXloeWJlMnVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVPbyMA0G CSqGSIb3DQEBCwUAA4IBAQC2D8tm/d8ERqaee9WDbBvdAsjkcqMugnOoPPMqXSBI GbXHkSP+LgYRgcoUFz1NGfPMzE6UVSeQDQUtCmfOWeQDpiFE/rk/Wx9k77NZJv1h jJMAHGwR2RDdC8NyQW0GDuurpIj3vnTC0WFErTw80oZNN/NsKHMxIbvGHxDsxqyU pVV4Q/OWArsMh1Y9zc3SZGzV90A5yTf5ciX55bjxeQNUUqXFGz/8QbvfyJEwfLMR DQTqyahcHeM7PhgcQLTu0e8XV5LI8Z66zFIIebhsRsEVGO9eHTzAKR3B8RdQLMxw vG6RzXR442N50tmTy+G742RM6r9T1HFur3t8UVlQu641 -----END CERTIFICATE-----Generated at Mon Jan 26 03:56:46 2026 by rpki-client