This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ISMPbYJNAgFh9JhyoU3ulPQn0v4.roa File: ISMPbYJNAgFh9JhyoU3ulPQn0v4.roa (raw, json) Hash identifier: iLtYkUhNOTm3nG10H1CdQCisB2kUkuLJGDfGimPgRPY= Subject key identifier: 21:23:0F:6D:82:4D:02:01:61:F4:98:72:A1:4D:EE:94:F4:27:D2:FE Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5AE71A9F60ABF2667B0F25D41CBF34 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ISMPbYJNAgFh9JhyoU3ulPQn0v4.roa Signing time: Thu 01 Jan 2026 16:18:56 +0000 ROA not before: Thu 01 Jan 2026 16:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 262725 IP address blocks: 89.213.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:e7:1a:9f:60:ab:f2:66:7b:0f:25:d4:1c:bf:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=21230f6d824d020161f49872a14dee94f427d2fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d9:8d:d7:e5:46:40:b6:24:8f:08:de:d0:84: 1b:c0:f2:00:51:39:35:fb:c9:11:9a:d8:80:0a:1d: e0:33:42:59:6b:a3:ef:a4:df:1f:c8:99:ac:d6:fb: 2a:4c:f7:ec:6d:02:12:87:94:3c:05:f5:19:27:55: 66:0b:47:be:8c:7e:a1:22:24:f0:e5:3b:08:c9:e3: 52:91:ad:bd:c7:7f:30:e2:49:b3:4a:f8:89:c7:49: c8:c1:32:a1:da:32:6e:7e:35:98:29:fb:3b:8c:08: 03:23:63:6c:39:f2:03:ff:ce:f5:cb:32:3f:8a:8c: 9c:19:61:2c:02:f8:98:a7:3e:7d:60:bf:81:65:30: dc:da:60:1b:7f:d0:6c:25:1d:25:0e:49:87:ee:eb: 35:19:4c:94:12:1f:f9:e9:32:ae:40:e4:d2:fd:3c: bc:dc:f0:83:d5:f2:49:38:96:07:29:a9:87:30:dd: 21:6c:f1:16:a7:31:51:5d:b1:fb:3c:f3:03:5f:12: 44:c0:c1:22:4e:3f:de:b1:f6:56:dc:75:81:cb:d7: 67:66:37:54:99:ba:d4:34:a7:d5:1f:a7:a1:eb:b1: 8b:b3:8d:11:ef:ea:aa:d7:f2:88:57:5b:da:28:62: d7:1f:a0:78:15:1f:57:54:7c:9f:67:b3:78:42:ca: 73:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:23:0F:6D:82:4D:02:01:61:F4:98:72:A1:4D:EE:94:F4:27:D2:FE X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/ISMPbYJNAgFh9JhyoU3ulPQn0v4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.213.41.0/24 Signature Algorithm: sha256WithRSAEncryption 56:57:35:1b:94:f0:96:56:66:50:b3:15:5c:9b:24:e7:3f:95: 8c:77:12:ed:b6:da:0f:d4:03:4b:21:63:da:c1:0d:03:36:10: be:ea:33:b2:71:54:53:a0:b9:ea:6b:44:2f:56:05:d5:f8:83: 6c:e2:fb:b3:34:e9:ff:81:1a:fc:52:14:aa:d8:71:11:29:f9: a6:32:79:48:9d:21:56:ce:dc:e7:88:85:c4:ce:73:66:ac:0c: 4f:2a:6d:3a:49:f8:48:9a:17:2b:49:fb:84:99:99:67:98:7e: 16:fb:05:ce:e3:b1:7f:85:4a:38:c8:53:35:8f:d8:a9:1f:5a: 53:f2:77:83:15:dd:6a:26:a0:3d:68:2b:24:6d:97:d8:99:35: d2:d1:b7:a5:23:f9:24:64:4f:62:af:b3:57:65:14:41:d4:a4: c7:1b:5e:27:eb:09:92:62:a9:bf:15:72:21:8c:b8:07:86:fe: 76:e8:ae:88:3c:53:68:58:ed:b6:04:40:4c:bd:02:2e:67:90: f0:5e:b8:03:3a:32:f3:cb:15:af:27:4e:15:0e:a4:a8:cd:94: 37:49:cb:98:d9:d6:ed:5f:7e:1f:c6:c1:9c:3e:40:ea:ef:ef: b7:99:cf:ab:1e:84:8a:9e:70:41:8c:d1:5c:fb:4f:37:45:f4: e5:7d:a0:55 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wucan2Cr8mZ7DyXUHL80MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTIzMGY2ZDgyNGQwMjAxNjFmNDk4NzJhMTRkZWU5NGY0MjdkMmZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdmN1+VGQLYkjwje0IQbwPIAUTk1 +8kRmtiACh3gM0JZa6PvpN8fyJms1vsqTPfsbQISh5Q8BfUZJ1VmC0e+jH6hIiTw 5TsIyeNSka29x38w4kmzSviJx0nIwTKh2jJufjWYKfs7jAgDI2NsOfID/871yzI/ ioycGWEsAviYpz59YL+BZTDc2mAbf9BsJR0lDkmH7us1GUyUEh/56TKuQOTS/Ty8 3PCD1fJJOJYHKamHMN0hbPEWpzFRXbH7PPMDXxJEwMEiTj/esfZW3HWBy9dnZjdU mbrUNKfVH6eh67GLs40R7+qq1/KIV1vaKGLXH6B4FR9XVHyfZ7N4Qspz7QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCEjD22CTQIBYfSYcqFN7pT0J9L+MB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvSVNNUGJZSk5BZ0ZoOUpoeW9VM3VsUFFuMHY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWdUpMA0G CSqGSIb3DQEBCwUAA4IBAQBWVzUblPCWVmZQsxVcmyTnP5WMdxLtttoP1ANLIWPa wQ0DNhC+6jOycVRToLnqa0QvVgXV+INs4vuzNOn/gRr8UhSq2HERKfmmMnlInSFW ztzniIXEznNmrAxPKm06SfhImhcrSfuEmZlnmH4W+wXO47F/hUo4yFM1j9ipH1pT 8neDFd1qJqA9aCskbZfYmTXS0belI/kkZE9ir7NXZRRB1KTHG14n6wmSYqm/FXIh jLgHhv526K6IPFNoWO22BEBMvQIuZ5DwXrgDOjLzyxWvJ04VDqSozZQ3ScuY2dbt X34fxsGcPkDq7++3mc+rHoSKnnBBjNFc+083RfTlfaBV -----END CERTIFICATE-----Generated at Sun Jan 25 07:17:56 2026 by rpki-client