This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-kvV8th1zG-6okFcjNpepWpl5Zw.roa File: 1-kvV8th1zG-6okFcjNpepWpl5Zw.roa (raw, json) Hash identifier: EAduqphAlk1HRf6yDqaTSO40sTKIswbzhYrl0i8K5MM= Subject key identifier: FA:4B:D5:F2:D8:75:CC:6F:BA:A2:41:5C:8C:DA:5E:A5:6A:65:E5:9C Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Certificate serial: 019B77594E7995E2CE6F51D5CD526D422241 Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-kvV8th1zG-6okFcjNpepWpl5Zw.roa Signing time: Thu 01 Jan 2026 02:18:20 +0000 ROA not before: Thu 01 Jan 2026 02:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42616 IP address blocks: 89.33.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:4e:79:95:e2:ce:6f:51:d5:cd:52:6d:42:22:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Validity Not Before: Jan 1 02:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa4bd5f2d875cc6fbaa2415c8cda5ea56a65e59c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:21:2c:53:c7:18:a9:fb:69:d9:d5:09:a6:f5: c5:97:8c:6e:d1:07:2a:ed:f9:2d:e8:84:b4:bd:b8: 42:e0:9b:b7:f0:6b:90:27:40:d0:89:10:e1:03:96: 77:6a:b9:93:af:a7:4a:0e:bf:31:68:c3:bc:82:0a: bc:37:de:fa:74:4e:d4:22:28:38:4d:68:eb:f1:6e: 5f:a2:91:a6:8b:cf:e5:7c:07:e9:f2:ea:86:65:17: 2c:54:92:65:9b:b0:07:c7:58:6d:42:37:79:cc:3d: 42:88:23:97:95:2e:7b:a7:65:06:b7:d6:76:ce:ab: 9b:87:88:1b:00:6b:f9:f2:e3:de:3f:e4:43:f2:93: 05:b5:6b:84:56:17:8b:45:a5:9e:45:fc:a1:ac:e1: 72:5a:16:de:16:b7:67:68:f0:b0:80:79:11:53:86: c7:19:e7:77:3b:ac:b3:45:ae:ac:07:4f:d4:1a:82: a0:9f:2d:d3:3c:e9:d6:3c:36:f8:c7:d4:0b:ec:1e: 16:7b:bc:b3:cd:46:9b:a6:71:75:0b:29:cb:1b:34: fe:35:dd:f7:90:e2:ea:a5:ac:da:dd:19:91:ba:62: a2:47:70:20:c8:12:9a:e4:6b:4f:f7:27:12:47:3b: 47:5c:ce:52:73:38:fe:c6:2c:47:c0:53:91:c6:f9: 90:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:4B:D5:F2:D8:75:CC:6F:BA:A2:41:5C:8C:DA:5E:A5:6A:65:E5:9C X509v3 Authority Key Identifier: keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-kvV8th1zG-6okFcjNpepWpl5Zw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.33.105.0/24 Signature Algorithm: sha256WithRSAEncryption 75:2b:c7:40:38:30:da:6a:b0:85:15:16:d5:1f:bf:e7:67:a6: ff:1e:cb:6c:d6:8b:8c:e6:ab:d8:98:58:ac:ab:9d:38:fe:8f: 36:db:36:5d:ed:52:28:ed:ba:94:12:6c:5b:72:a0:bd:71:d9: 47:17:67:d2:8e:b6:c2:f5:ed:f8:e6:84:be:28:55:d5:b9:ff: 8c:5c:67:ef:61:ba:3a:8b:34:f2:48:fb:d7:32:0e:cb:53:52: 0e:0e:02:ab:ad:bc:37:bd:14:68:25:a9:91:db:f6:bd:97:9d: 48:61:f7:06:43:5d:2e:1b:d0:a4:3c:ec:8a:93:91:74:cc:c2: f5:5e:50:72:e7:81:f3:67:5b:c5:fb:b4:1f:2b:45:e1:8e:af: 93:ce:2d:cb:77:cc:18:38:28:6f:7d:e4:d2:19:3d:d7:56:5a: dc:6c:25:32:d9:61:9b:ed:f4:3a:08:9e:c2:95:a7:6d:0a:3a: c6:6e:e8:0a:8b:be:de:90:24:13:31:67:f2:98:54:3d:b3:29: 66:87:ac:57:0f:c8:2d:23:62:e3:16:71:77:2a:81:e2:e8:e0: 73:ec:90:71:20:03:8e:1f:fa:de:ef:0e:cb:a0:bf:32:a2:2f: a7:de:77:51:db:0a:3a:1a:3e:97:5e:6f:1e:49:d7:d0:4e:a0: 93:19:16:83 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3WU55leLOb1HVzVJtQiJBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy MTliNTkwHhcNMjYwMTAxMDIxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTRiZDVmMmQ4NzVjYzZmYmFhMjQxNWM4Y2RhNWVhNTZhNjVlNTljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSEsU8cYqftp2dUJpvXFl4xu0Qcq 7fkt6IS0vbhC4Ju38GuQJ0DQiRDhA5Z3armTr6dKDr8xaMO8ggq8N976dE7UIig4 TWjr8W5fopGmi8/lfAfp8uqGZRcsVJJlm7AHx1htQjd5zD1CiCOXlS57p2UGt9Z2 zqubh4gbAGv58uPeP+RD8pMFtWuEVheLRaWeRfyhrOFyWhbeFrdnaPCwgHkRU4bH Ged3O6yzRa6sB0/UGoKgny3TPOnWPDb4x9QL7B4We7yzzUabpnF1CynLGzT+Nd33 kOLqpaza3RmRumKiR3AgyBKa5GtP9ycSRztHXM5Sczj+xixHwFORxvmQkwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPpL1fLYdcxvuqJBXIzaXqVqZeWcMB8GA1UdIwQY MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl LTkyZTI1ZmUxNjMzMS8xLzEta3ZWOHRoMXpHLTZva0Zjak5wZXBXcGw1Wncucm9h MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzc4L2RhMzM5OC02Njk4LTQ1ZjItYmFhZS05MmUyNWZlMTYz MzEvMS8xLU9ZbU5PRzlVVE9wM2tVU3JwakswYklobTFrLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSFp MA0GCSqGSIb3DQEBCwUAA4IBAQB1K8dAODDaarCFFRbVH7/nZ6b/Hsts1ouM5qvY mFisq504/o822zZd7VIo7bqUEmxbcqC9cdlHF2fSjrbC9e345oS+KFXVuf+MXGfv Ybo6izTySPvXMg7LU1IODgKrrbw3vRRoJamR2/a9l51IYfcGQ10uG9CkPOyKk5F0 zML1XlBy54HzZ1vF+7QfK0Xhjq+Tzi3Ld8wYOChvfeTSGT3XVlrcbCUy2WGb7fQ6 CJ7CladtCjrGbugKi77ekCQTMWfymFQ9sylmh6xXD8gtI2LjFnF3KoHi6OBz7JBx IAOOH/re7w7LoL8yoi+n3ndR2wo6Gj6XXm8eSdfQTqCTGRaD -----END CERTIFICATE-----Generated at Sun Jan 25 13:03:30 2026 by rpki-client