This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Ro9EIe0r1nxY4GC6XLbMKKzrMxI.roa File: Ro9EIe0r1nxY4GC6XLbMKKzrMxI.roa (raw, json) Hash identifier: oVY1ddXhjwtrLiR0a0LwjbplkuwadJDpAOGx9Tgi8Yg= Subject key identifier: 46:8F:44:21:ED:2B:D6:7C:58:E0:60:BA:5C:B6:CC:28:AC:EB:33:12 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019BDF9FB065E5EE1AB2EDCA342F403192CD Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Ro9EIe0r1nxY4GC6XLbMKKzrMxI.roa Signing time: Wed 21 Jan 2026 08:15:43 +0000 ROA not before: Wed 21 Jan 2026 08:15:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208690 IP address blocks: 212.38.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:df:9f:b0:65:e5:ee:1a:b2:ed:ca:34:2f:40:31:92:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 21 08:15:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=468f4421ed2bd67c58e060ba5cb6cc28aceb3312 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c8:82:c1:f9:99:2c:e5:e6:8d:73:a6:58:cc: 86:e1:a2:d3:06:e0:25:82:bd:ac:01:ca:77:07:05: eb:23:ed:15:75:0e:08:a2:53:7b:a5:0e:72:c4:f6: d9:bd:d2:19:a5:89:9c:1e:46:d4:83:27:5e:44:42: b2:63:26:b7:0a:7d:70:32:3a:d1:df:d0:a6:0f:c2: a4:0e:e1:3a:68:50:d6:0a:26:55:6d:14:3b:8c:de: 5f:2f:ad:1f:1b:49:14:a8:b7:32:77:7e:86:3c:12: bd:03:44:ca:32:bb:c8:e9:cf:19:56:ab:a0:73:3d: cd:d7:ef:91:a1:31:0e:a6:d6:e5:68:8f:f2:9e:e9: 58:ae:c1:e3:20:f0:11:94:53:20:b7:49:42:7e:80: bf:1b:8e:0c:92:4d:9b:77:48:38:e8:0b:6a:14:e4: e2:9f:a2:ef:46:e2:7d:d5:5b:9f:08:cf:b3:74:5b: ff:1f:ff:d7:68:2d:58:0c:cf:b6:e9:fc:9e:19:bc: 79:9c:a2:70:5c:b1:62:b2:07:e8:54:0e:21:62:09: bf:0b:0d:fa:d5:a2:d0:b7:64:89:ba:b1:98:d3:11: ff:2d:21:84:c9:87:c1:f6:2a:13:3d:f5:4d:f3:e7: 8d:4e:33:97:de:dc:30:30:08:15:1e:5b:de:4a:51: 1d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:8F:44:21:ED:2B:D6:7C:58:E0:60:BA:5C:B6:CC:28:AC:EB:33:12 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Ro9EIe0r1nxY4GC6XLbMKKzrMxI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.38.89.0/24 Signature Algorithm: sha256WithRSAEncryption 68:75:93:ec:31:8f:d5:b6:aa:9d:0d:16:06:3b:f6:27:2a:fd: 5b:7f:d4:84:c5:7e:bf:a9:ee:7e:cb:b1:4e:56:0e:3d:c3:80: ec:72:4d:e6:c2:af:ae:25:0d:6f:50:4e:60:35:66:3f:31:2f: 3f:86:a2:00:12:db:ac:59:45:8f:26:6e:dd:8a:1e:b1:34:7b: 8e:71:a4:52:f7:f5:75:73:0c:9c:8d:c4:ee:07:3b:ec:b4:9b: 80:83:82:93:28:b8:1b:39:af:08:fb:f5:ca:38:8b:6d:4b:74: b6:9b:65:5c:3f:95:cb:64:dd:b4:a7:c3:3d:75:0f:3d:c7:7a: 75:3a:c6:91:0e:d9:fb:74:22:e8:43:db:bf:20:ab:98:dd:e0: e4:66:41:26:42:94:9e:3d:91:1a:9a:9e:c8:30:a7:ff:97:6e: 7c:05:b7:b4:0f:6a:f6:aa:6d:f2:cc:a4:e1:b7:eb:3c:73:29: bb:b5:9b:82:17:68:e5:5f:73:20:89:e9:a2:cb:f0:eb:38:52: 90:1b:20:eb:3c:c1:aa:55:08:ac:3b:b5:0c:79:16:0e:9c:60: 62:9f:5f:da:3f:84:51:6f:ba:80:e4:41:c0:b0:b0:a6:e8:82: ea:7e:0c:76:6f:dd:31:74:87:26:90:e7:77:f6:d9:ff:2e:11: 1c:e1:98:48 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvfn7Bl5e4asu3KNC9AMZLNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTIxMDgxNTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjhmNDQyMWVkMmJkNjdjNThlMDYwYmE1Y2I2Y2MyOGFjZWIzMzEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMiCwfmZLOXmjXOmWMyG4aLTBuAl gr2sAcp3BwXrI+0VdQ4IolN7pQ5yxPbZvdIZpYmcHkbUgydeREKyYya3Cn1wMjrR 39CmD8KkDuE6aFDWCiZVbRQ7jN5fL60fG0kUqLcyd36GPBK9A0TKMrvI6c8ZVqug cz3N1++RoTEOptblaI/ynulYrsHjIPARlFMgt0lCfoC/G44Mkk2bd0g46AtqFOTi n6LvRuJ91VufCM+zdFv/H//XaC1YDM+26fyeGbx5nKJwXLFisgfoVA4hYgm/Cw36 1aLQt2SJurGY0xH/LSGEyYfB9ioTPfVN8+eNTjOX3twwMAgVHlveSlEdjwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEaPRCHtK9Z8WOBguly2zCis6zMSMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvUm85RUllMHIxbnhZNEdDNlhMYk1LS3pyTXhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1CZZMA0G CSqGSIb3DQEBCwUAA4IBAQBodZPsMY/VtqqdDRYGO/YnKv1bf9SExX6/qe5+y7FO Vg49w4Dsck3mwq+uJQ1vUE5gNWY/MS8/hqIAEtusWUWPJm7dih6xNHuOcaRS9/V1 cwycjcTuBzvstJuAg4KTKLgbOa8I+/XKOIttS3S2m2VcP5XLZN20p8M9dQ89x3p1 OsaRDtn7dCLoQ9u/IKuY3eDkZkEmQpSePZEamp7IMKf/l258Bbe0D2r2qm3yzKTh t+s8cym7tZuCF2jlX3Mgiemiy/DrOFKQGyDrPMGqVQisO7UMeRYOnGBin1/aP4RR b7qA5EHAsLCm6ILqfgx2b90xdIcmkOd39tn/LhEc4ZhI -----END CERTIFICATE-----Generated at Sun Jan 25 10:14:33 2026 by rpki-client