This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/9l48wyFznHCWwV89gIMazOivEC0.roa File: 9l48wyFznHCWwV89gIMazOivEC0.roa (raw, json) Hash identifier: h2nsMzb4VBCMaHTKYoVuTOsVcFdEHeS4njJsMRh4D/Y= Subject key identifier: F6:5E:3C:C3:21:73:9C:70:96:C1:5F:3D:80:83:1A:CC:E8:AF:10:2D Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Certificate serial: 019B775951B0C342AC1EB8EDDDEBDD2973E9 Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/9l48wyFznHCWwV89gIMazOivEC0.roa Signing time: Thu 01 Jan 2026 02:18:20 +0000 ROA not before: Thu 01 Jan 2026 02:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48669 IP address blocks: 89.38.104.0/24 maxlen: 24 93.115.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:51:b0:c3:42:ac:1e:b8:ed:dd:eb:dd:29:73:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Validity Not Before: Jan 1 02:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f65e3cc321739c7096c15f3d80831acce8af102d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0f:ea:d2:85:f5:a0:9c:29:fc:69:3c:f8:45: 87:e0:e5:33:3e:5f:0d:96:a8:4e:ad:49:ca:92:d6: de:0e:6f:f9:e5:6b:15:dc:ce:b0:de:6a:3f:38:d6: d1:15:9f:fe:55:42:d3:a5:1b:1f:f0:5e:34:0a:93: 83:a6:7d:3f:ef:ee:9d:50:0a:b1:c9:85:1c:a1:11: 5f:f4:c4:a0:cc:b0:34:64:99:86:58:04:a0:d5:17: 82:62:63:dd:a5:28:ac:2a:52:0d:7c:a0:e5:1b:45: 64:e5:16:3f:2f:a1:c5:dd:e7:02:06:f5:62:1a:4d: d7:95:a4:6e:6a:27:a2:1e:4b:a5:b5:5b:5c:4f:37: 64:d2:2a:3b:b7:a3:49:83:48:99:33:17:4a:ff:10: 2f:a9:21:0e:cd:24:12:83:28:eb:87:34:20:62:4c: c1:4b:9d:8b:c1:46:40:cf:de:bb:75:be:dc:c3:07: 6f:4c:9b:ae:d5:6f:51:4b:04:d5:43:a5:3d:0c:a1: fb:4f:2b:92:4c:12:3a:18:7f:49:e8:d6:bd:64:73: c6:59:cb:7b:30:01:fe:05:6b:f5:d0:61:20:38:55: ca:dc:ec:8c:ea:e0:78:14:22:bf:57:82:26:ef:52: c3:15:b4:30:fd:dd:fe:bd:59:b4:31:bd:53:b6:77: 68:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:5E:3C:C3:21:73:9C:70:96:C1:5F:3D:80:83:1A:CC:E8:AF:10:2D X509v3 Authority Key Identifier: keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/9l48wyFznHCWwV89gIMazOivEC0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.38.104.0/24 93.115.32.0/24 Signature Algorithm: sha256WithRSAEncryption 26:3b:2e:39:9e:0e:95:df:95:ef:29:ff:11:c7:97:2f:2e:1c: f4:25:a2:45:25:0c:b3:22:04:dc:a4:98:1f:06:52:ed:33:f0: b6:7b:42:4c:6c:1f:62:c9:53:0b:af:ee:91:da:59:1c:12:03: 2e:e3:c1:de:f2:fb:3f:9d:12:ea:b2:44:28:7d:af:dc:58:14: 8d:33:d4:ee:e7:aa:9b:f8:f0:2d:04:23:e3:f8:33:d2:fd:53: 70:6c:64:ee:1d:69:ae:47:3f:e8:d6:e0:a9:05:d9:48:9a:87: f1:2e:e4:85:29:4f:d9:d7:18:d4:81:eb:95:c3:54:be:e4:06: d4:b6:1c:dc:20:48:87:d0:f3:ee:ff:07:3f:55:0d:ed:cd:81: fc:a9:6d:fb:10:e7:98:d1:cf:fa:4e:7e:3b:ef:77:48:46:eb: 8e:3b:6c:cd:2f:60:df:8e:ca:27:af:43:a2:9b:88:4a:03:99: f0:64:6e:1e:cb:c4:57:44:f9:92:9b:ba:6e:8d:10:52:25:ca: 26:bb:77:b7:5f:d7:a0:35:38:57:68:8e:08:d7:be:f1:ce:63: de:43:ae:02:18:4e:97:f5:c6:7e:60:b0:42:1f:3d:82:43:7b: 98:15:bc:d0:5c:19:03:d7:06:40:f1:5d:f0:97:36:15:f3:02: c5:43:30:e9 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3WVGww0KsHrjt3evdKXPpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy MTliNTkwHhcNMjYwMTAxMDIxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjVlM2NjMzIxNzM5YzcwOTZjMTVmM2Q4MDgzMWFjY2U4YWYxMDJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQ/q0oX1oJwp/Gk8+EWH4OUzPl8N lqhOrUnKktbeDm/55WsV3M6w3mo/ONbRFZ/+VULTpRsf8F40CpODpn0/7+6dUAqx yYUcoRFf9MSgzLA0ZJmGWASg1ReCYmPdpSisKlINfKDlG0Vk5RY/L6HF3ecCBvVi Gk3XlaRuaieiHkultVtcTzdk0io7t6NJg0iZMxdK/xAvqSEOzSQSgyjrhzQgYkzB S52LwUZAz967db7cwwdvTJuu1W9RSwTVQ6U9DKH7TyuSTBI6GH9J6Na9ZHPGWct7 MAH+BWv10GEgOFXK3OyM6uB4FCK/V4Im71LDFbQw/d3+vVm0Mb1TtndoGwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFPZePMMhc5xwlsFfPYCDGszorxAtMB8GA1UdIwQY MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl LTkyZTI1ZmUxNjMzMS8xLzlsNDh3eUZ6bkhDV3dWODlnSU1hek9pdkVDMC5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBABZJmgD BABdcyAwDQYJKoZIhvcNAQELBQADggEBACY7LjmeDpXfle8p/xHHly8uHPQlokUl DLMiBNykmB8GUu0z8LZ7QkxsH2LJUwuv7pHaWRwSAy7jwd7y+z+dEuqyRCh9r9xY FI0z1O7nqpv48C0EI+P4M9L9U3BsZO4daa5HP+jW4KkF2Uiah/Eu5IUpT9nXGNSB 65XDVL7kBtS2HNwgSIfQ8+7/Bz9VDe3NgfypbfsQ55jRz/pOfjvvd0hG6447bM0v YN+OyievQ6KbiEoDmfBkbh7LxFdE+ZKbum6NEFIlyia7d7df16A1OFdojgjXvvHO Y95DrgIYTpf1xn5gsEIfPYJDe5gVvNBcGQPXBkDxXfCXNhXzAsVDMOk= -----END CERTIFICATE-----Generated at Sun Jan 25 13:02:01 2026 by rpki-client