This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/B4sbRuZ01wLj0KypMzzGDFaTFK8.roa File: B4sbRuZ01wLj0KypMzzGDFaTFK8.roa (raw, json) Hash identifier: /ArT1E116OzXM4iZ5PWuEIVDejNEtt8L6ZZMySiQuAE= Subject key identifier: 07:8B:1B:46:E6:74:D7:02:E3:D0:AC:A9:33:3C:C6:0C:56:93:14:AF Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5AA6F9BEEEE0E1E830774C49DA6776 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/B4sbRuZ01wLj0KypMzzGDFaTFK8.roa Signing time: Thu 01 Jan 2026 16:18:39 +0000 ROA not before: Thu 01 Jan 2026 16:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50385 IP address blocks: 89.213.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:a6:f9:be:ee:e0:e1:e8:30:77:4c:49:da:67:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=078b1b46e674d702e3d0aca9333cc60c569314af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:07:bb:55:a4:0d:f6:fc:50:e0:32:b5:e5:5e: 66:3a:d9:10:68:64:dc:62:38:a4:4f:63:1c:b7:0f: 33:b6:d1:d3:2f:41:f7:90:e1:80:a5:a9:52:13:86: bd:72:f4:9a:c7:be:a0:78:02:56:18:a3:41:dc:b2: df:83:dc:a1:c8:6a:bd:2e:6b:3e:f7:49:cc:41:45: 13:f2:45:15:0b:66:14:25:9c:45:f7:e0:da:d8:41: 84:9a:4f:e8:11:1a:79:4c:64:ea:59:ef:04:f5:d2: 0b:15:5e:69:08:68:8e:70:2c:7b:6c:0f:7b:a4:fc: 7e:29:62:99:fc:02:7f:37:63:7f:2d:d8:70:c9:72: 6c:54:0a:d6:a7:f8:d7:8b:15:d4:41:88:6e:42:63: 83:20:06:cf:6f:0e:ab:24:da:ef:c8:54:52:ac:a2: 16:21:46:9f:9a:96:d7:b9:c3:f4:d5:00:70:ee:c6: 5f:a7:fe:36:c1:b5:f0:83:42:68:d4:5e:60:e2:eb: 3d:fa:25:ec:54:c0:17:6d:63:c7:c5:96:5e:af:f5: 3d:17:44:b0:8e:99:c7:b0:f9:a4:e0:e7:e0:38:13: 49:38:85:7b:71:11:ae:65:f0:94:f3:ac:59:13:7c: be:cf:92:2c:a6:14:62:6a:b0:96:1c:e7:5e:ec:b6: cf:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:8B:1B:46:E6:74:D7:02:E3:D0:AC:A9:33:3C:C6:0C:56:93:14:AF X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/B4sbRuZ01wLj0KypMzzGDFaTFK8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.213.230.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:c3:ab:3b:e8:7e:11:2d:79:0e:49:17:48:a3:3f:4a:b4:39: 13:65:46:d2:48:bc:21:b9:2a:f4:f7:6e:3d:16:94:46:a1:80: d0:1f:be:57:7b:58:86:1a:4f:b9:04:1b:ca:92:92:c6:78:6e: 2b:b8:d4:f6:a6:b5:ed:ee:cf:e9:40:04:9e:45:b5:f8:f2:56: 9b:9a:18:92:e7:cb:7e:fb:4c:2c:a1:75:af:c0:57:83:2e:2d: f7:65:b6:23:89:e7:f8:65:a0:33:f8:4f:02:74:8e:20:9b:3a: f0:55:9c:b2:90:47:9b:72:1b:cf:cc:e7:04:8d:9e:71:a4:90: a9:17:fa:38:51:8e:cf:af:48:45:80:17:29:5f:bb:f9:e0:1c: 48:dc:06:8a:c0:c3:e6:45:19:e2:7c:f3:15:54:1d:ca:f1:a5: 70:63:16:4a:b2:3c:dd:15:e2:0f:c7:6f:78:70:d0:c6:04:fa: 67:2f:3f:4f:2c:5d:55:98:ac:6a:5c:84:6f:5a:ce:54:9c:5d: c1:48:ff:43:9b:bf:b0:75:6b:22:5e:70:c9:77:95:5a:aa:2c: 63:7d:e6:31:0d:2d:60:c2:4b:9c:d1:3b:31:29:b4:6c:40:4a: 0c:75:bb:e3:88:28:7e:f4:c1:f2:58:16:f3:f2:04:68:fb:93: f1:e8:53:82 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wqb5vu7g4egwd0xJ2md2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzhiMWI0NmU2NzRkNzAyZTNkMGFjYTkzMzNjYzYwYzU2OTMxNGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwe7VaQN9vxQ4DK15V5mOtkQaGTc YjikT2Mctw8zttHTL0H3kOGApalSE4a9cvSax76geAJWGKNB3LLfg9yhyGq9Lms+ 90nMQUUT8kUVC2YUJZxF9+Da2EGEmk/oERp5TGTqWe8E9dILFV5pCGiOcCx7bA97 pPx+KWKZ/AJ/N2N/LdhwyXJsVArWp/jXixXUQYhuQmODIAbPbw6rJNrvyFRSrKIW IUafmpbXucP01QBw7sZfp/42wbXwg0Jo1F5g4us9+iXsVMAXbWPHxZZer/U9F0Sw jpnHsPmk4OfgOBNJOIV7cRGuZfCU86xZE3y+z5IsphRiarCWHOde7LbPSQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAeLG0bmdNcC49CsqTM8xgxWkxSvMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvQjRzYlJ1WjAxd0xqMEt5cE16ekdERmFURks4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWdXmMA0G CSqGSIb3DQEBCwUAA4IBAQBqw6s76H4RLXkOSRdIoz9KtDkTZUbSSLwhuSr09249 FpRGoYDQH75Xe1iGGk+5BBvKkpLGeG4ruNT2prXt7s/pQASeRbX48labmhiS58t+ +0wsoXWvwFeDLi33ZbYjief4ZaAz+E8CdI4gmzrwVZyykEebchvPzOcEjZ5xpJCp F/o4UY7Pr0hFgBcpX7v54BxI3AaKwMPmRRnifPMVVB3K8aVwYxZKsjzdFeIPx294 cNDGBPpnLz9PLF1VmKxqXIRvWs5UnF3BSP9Dm7+wdWsiXnDJd5VaqixjfeYxDS1g wkuc0TsxKbRsQEoMdbvjiCh+9MHyWBbz8gRo+5Px6FOC -----END CERTIFICATE-----Generated at Sun Jan 25 07:17:15 2026 by rpki-client