This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/ABESchGm3xAWCWATli7x4kGiTzw.roa File: ABESchGm3xAWCWATli7x4kGiTzw.roa (raw, json) Hash identifier: AnU+yC61NkHACr9HWnVDLRjrcdrvaYYu39Z2t2XH2V8= Subject key identifier: 00:11:12:72:11:A6:DF:10:16:09:60:13:96:2E:F1:E2:41:A2:4F:3C Certificate issuer: /CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21 Certificate serial: 019B76EAFC35926E6D76526FBBDDBB51E2E8 Authority key identifier: 89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/ABESchGm3xAWCWATli7x4kGiTzw.roa Signing time: Thu 01 Jan 2026 00:17:50 +0000 ROA not before: Thu 01 Jan 2026 00:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49001 IP address blocks: 95.131.33.0/24 maxlen: 24 95.131.35.0/24 maxlen: 24 95.131.37.0/24 maxlen: 24 185.194.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:fc:35:92:6e:6d:76:52:6f:bb:dd:bb:51:e2:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21 Validity Not Before: Jan 1 00:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0011127211a6df1016096013962ef1e241a24f3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:0c:70:28:ee:fb:b2:65:f0:4e:d8:a1:28:7c: cb:28:bb:80:f7:c0:1b:97:41:66:0a:ab:4a:7d:61: bd:63:a8:82:c7:3a:19:5b:8d:db:aa:28:8f:da:2a: 85:66:36:35:19:6b:76:e6:a5:4e:91:6e:9a:af:eb: 5f:d3:67:47:39:90:f1:00:ef:41:8c:3e:a4:46:10: b3:4f:b7:29:9f:dc:22:f7:48:8d:44:cc:29:3a:84: 29:9a:97:61:5f:5b:b0:38:27:ca:0a:59:c7:78:70: b1:00:52:b4:80:74:87:63:a9:5e:8c:8b:83:14:e7: bb:cd:62:9a:1c:f0:c9:4e:ac:8e:78:7e:a8:8a:2a: 7b:13:e1:0e:dd:e1:83:cd:b7:e4:1f:43:80:4e:16: ef:a4:85:cb:8a:5b:23:5c:55:bc:05:23:17:aa:18: cc:72:14:47:73:f6:ec:a6:7e:a7:1c:29:81:a2:32: ee:c1:5d:72:05:f2:41:2e:30:5c:ab:13:87:99:93: de:ed:4a:88:80:c6:73:2b:34:90:7a:55:88:66:d5: 94:d1:07:4e:1b:35:73:a9:ec:3b:e9:6f:12:cb:a7: ea:45:8a:46:6b:02:94:35:51:5a:3c:69:cf:53:bf: f9:9f:75:56:d8:49:38:81:3f:10:22:87:b1:0a:5d: c8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:11:12:72:11:A6:DF:10:16:09:60:13:96:2E:F1:E2:41:A2:4F:3C X509v3 Authority Key Identifier: keyid:89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/ABESchGm3xAWCWATli7x4kGiTzw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.131.33.0/24 95.131.35.0/24 95.131.37.0/24 185.194.220.0/22 Signature Algorithm: sha256WithRSAEncryption 90:b2:61:5e:cc:c1:71:c0:f1:e1:d9:9c:f1:de:32:0b:64:97: a5:6b:6b:88:44:cb:c4:36:84:e6:01:c3:d4:b1:7d:f1:3e:53: bb:0b:94:f7:d4:6a:30:2d:62:dc:aa:8b:79:b7:33:b9:33:35: a3:3a:30:58:72:9a:94:2c:1d:29:40:cd:d5:7b:8b:5e:9d:64: 8e:29:1c:9b:4c:9f:c5:f1:ef:35:61:00:21:a9:f9:8b:21:22: 4f:da:9e:1e:e9:0a:e7:81:5e:f0:3d:c2:ee:0c:08:e3:f2:59: dc:fc:e1:00:9a:be:1a:97:cd:11:80:d1:f8:17:7d:54:9c:c6: 3b:6a:2f:09:5e:b1:a2:82:02:16:5d:e0:cc:76:bb:82:9e:eb: ff:e0:d7:39:53:b7:e2:05:59:21:d0:bf:79:1c:a4:11:be:26: 7e:b2:69:56:f1:d2:7f:7d:e8:97:d9:cd:31:36:af:0d:b1:90: d3:47:98:1a:92:7b:13:f1:ed:ea:3b:1e:95:fb:f3:96:53:8d: 8d:59:99:e1:ad:6d:24:45:17:29:35:71:47:7f:90:47:0a:6d: 2e:35:34:1c:39:ed:50:11:6d:b5:04:88:a8:84:47:d9:a7:3b: e7:cf:84:34:4f:0f:24:3d:8f:0a:89:de:68:5a:da:0a:bf:91: f0:d5:be:01 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt26vw1km5tdlJvu927UeLoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YTZjZDlmNGJlYjdiMGMwNGQzMWZmZTVjNjc0YTg3YTc3 MzlkMjEwHhcNMjYwMTAxMDAxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDExMTI3MjExYTZkZjEwMTYwOTYwMTM5NjJlZjFlMjQxYTI0ZjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8QxwKO77smXwTtihKHzLKLuA98Ab l0FmCqtKfWG9Y6iCxzoZW43bqiiP2iqFZjY1GWt25qVOkW6ar+tf02dHOZDxAO9B jD6kRhCzT7cpn9wi90iNRMwpOoQpmpdhX1uwOCfKClnHeHCxAFK0gHSHY6lejIuD FOe7zWKaHPDJTqyOeH6oiip7E+EO3eGDzbfkH0OAThbvpIXLilsjXFW8BSMXqhjM chRHc/bspn6nHCmBojLuwV1yBfJBLjBcqxOHmZPe7UqIgMZzKzSQelWIZtWU0QdO GzVzqew76W8Sy6fqRYpGawKUNVFaPGnPU7/5n3VW2Ek4gT8QIoexCl3IiwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFAAREnIRpt8QFglgE5Yu8eJBok88MB8GA1UdIwQY MBaAFImmzZ9L63sMBNMf/lxnSoenc50hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85OWE0Y2MtNDcyMC00YTY0LWFhMDYt MWY5MjQ0OTVmY2RkLzEvQUJFU2NoR20zeEFXQ1dBVGxpN3g0a0dpVHp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni85OWE0Y2MtNDcyMC00YTY0LWFhMDYtMWY5MjQ0OTVmY2Rk LzEvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAX4MhAwQA X4MjAwQAX4MlAwQCucLcMA0GCSqGSIb3DQEBCwUAA4IBAQCQsmFezMFxwPHh2Zzx 3jILZJela2uIRMvENoTmAcPUsX3xPlO7C5T31GowLWLcqot5tzO5MzWjOjBYcpqU LB0pQM3Ve4tenWSOKRybTJ/F8e81YQAhqfmLISJP2p4e6QrngV7wPcLuDAjj8lnc /OEAmr4al80RgNH4F31UnMY7ai8JXrGiggIWXeDMdruCnuv/4Nc5U7fiBVkh0L95 HKQRviZ+smlW8dJ/feiX2c0xNq8NsZDTR5gaknsT8e3qOx6V+/OWU42NWZnhrW0k RRcpNXFHf5BHCm0uNTQcOe1QEW21BIiohEfZpzvnz4Q0Tw8kPY8Kid5oWtoKv5Hw 1b4B -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:29 2026 by rpki-client