This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/S9tol4ac1-HW0tr-jX-hs8Ta5zI.roa File: S9tol4ac1-HW0tr-jX-hs8Ta5zI.roa (raw, json) Hash identifier: LOKSp3jCd6OG+N4ntd2n2+wi7VK1V2jElzlxJY/0tyA= Subject key identifier: 4B:DB:68:97:86:9C:D7:E1:D6:D2:DA:FE:8D:7F:A1:B3:C4:DA:E7:32 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5AA43EF7FE17AE46A7382047F6C5C5 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/S9tol4ac1-HW0tr-jX-hs8Ta5zI.roa Signing time: Thu 01 Jan 2026 16:18:39 +0000 ROA not before: Thu 01 Jan 2026 16:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44803 IP address blocks: 89.28.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:a4:3e:f7:fe:17:ae:46:a7:38:20:47:f6:c5:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4bdb6897869cd7e1d6d2dafe8d7fa1b3c4dae732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d7:9c:d1:51:a4:6d:7f:2a:be:37:3e:51:db: b2:a5:bd:c5:0a:47:9c:ce:15:76:46:c9:14:b9:eb: c4:4b:58:e5:bb:a4:b2:53:54:18:b7:dd:7f:eb:3f: b9:3c:a0:5e:55:56:8a:ae:09:34:2e:87:7e:ae:bd: 78:7c:5b:24:b6:7e:86:8c:02:b0:3a:b3:33:82:6f: 6d:e3:7f:0c:e9:93:74:e4:87:47:93:be:89:fb:5f: f9:9d:a2:6f:a8:43:6e:15:f4:50:21:ba:65:aa:ee: 67:e9:2b:cb:13:5d:e4:ba:c6:9b:74:f4:c1:41:88: 39:93:80:3a:f9:04:0d:8f:56:4e:70:ad:4d:cb:d5: 35:81:08:65:ab:95:de:69:a4:b8:63:82:5a:20:07: e7:7b:88:bb:b6:96:71:34:f6:d1:73:f1:23:e9:47: e7:09:76:49:e9:23:e3:da:dd:bc:c0:89:af:e4:82: 4a:c2:61:97:ed:d7:e5:c6:3c:c2:69:25:8a:23:4a: a2:e5:6e:09:49:a7:d7:a2:52:ab:1b:d9:6e:ec:da: f0:5f:86:77:c7:18:0e:22:8e:65:21:6d:21:06:b7: 18:1b:6e:46:ad:8e:42:3b:23:d6:b8:3a:1b:22:67: d9:9b:72:e8:45:11:63:67:a2:2d:55:cd:55:20:9f: 20:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:DB:68:97:86:9C:D7:E1:D6:D2:DA:FE:8D:7F:A1:B3:C4:DA:E7:32 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/S9tol4ac1-HW0tr-jX-hs8Ta5zI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.28.236.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:36:9c:24:68:2a:26:97:93:ab:dd:f4:76:73:99:df:b3:10: e1:4f:bb:ab:12:d2:04:c5:b6:36:77:1e:1c:1d:72:2c:90:bd: bd:78:51:b4:f1:86:25:0f:8d:65:4a:7d:78:71:27:24:8c:6e: 75:fe:18:f5:59:8b:5d:5b:c9:02:fa:c1:79:b7:a6:2b:a7:77: b1:a2:81:2f:ff:46:4f:20:88:dc:0c:9f:0b:e4:d4:c3:90:6b: fb:2e:d8:10:ad:4d:48:13:bf:1c:84:b5:c8:6b:a1:63:d1:2c: c5:9f:c2:08:1b:96:cc:c8:25:71:ff:3f:9c:06:b7:e8:f5:cb: 7d:0b:98:69:95:69:38:8e:2a:35:9f:1e:44:da:c6:40:56:ec: 4c:4e:6b:af:3e:7d:7b:44:59:dc:1d:0c:a8:b0:48:1b:70:b2: ec:7d:eb:93:d2:1f:6b:2d:8e:b0:cb:3a:3a:ad:80:0a:2c:9c: ee:9a:ab:08:c1:17:e7:d2:71:1e:6d:e3:13:e4:2f:74:5e:29: 66:c0:06:1f:3a:7f:f3:c4:02:58:b2:1e:85:60:1e:1c:6e:cd: 92:08:f4:58:19:05:ed:fc:db:86:c1:23:cb:d6:18:54:f9:ec: 10:07:4b:5a:f4:ab:9c:3f:80:7f:e4:2f:2c:75:1d:b5:13:c8: ff:c9:1d:d7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WqQ+9/4XrkanOCBH9sXFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YmRiNjg5Nzg2OWNkN2UxZDZkMmRhZmU4ZDdmYTFiM2M0ZGFlNzMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9ec0VGkbX8qvjc+Uduypb3FCkec zhV2RskUuevES1jlu6SyU1QYt91/6z+5PKBeVVaKrgk0Lod+rr14fFsktn6GjAKw OrMzgm9t438M6ZN05IdHk76J+1/5naJvqENuFfRQIbplqu5n6SvLE13kusabdPTB QYg5k4A6+QQNj1ZOcK1Ny9U1gQhlq5XeaaS4Y4JaIAfne4i7tpZxNPbRc/Ej6Ufn CXZJ6SPj2t28wImv5IJKwmGX7dflxjzCaSWKI0qi5W4JSafXolKrG9lu7NrwX4Z3 xxgOIo5lIW0hBrcYG25GrY5COyPWuDobImfZm3LoRRFjZ6ItVc1VIJ8gywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEvbaJeGnNfh1tLa/o1/obPE2ucyMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvUzl0b2w0YWMxLUhXMHRyLWpYLWhzOFRhNXpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWRzsMA0G CSqGSIb3DQEBCwUAA4IBAQCaNpwkaComl5Or3fR2c5nfsxDhT7urEtIExbY2dx4c HXIskL29eFG08YYlD41lSn14cSckjG51/hj1WYtdW8kC+sF5t6Yrp3exooEv/0ZP IIjcDJ8L5NTDkGv7LtgQrU1IE78chLXIa6Fj0SzFn8IIG5bMyCVx/z+cBrfo9ct9 C5hplWk4jio1nx5E2sZAVuxMTmuvPn17RFncHQyosEgbcLLsfeuT0h9rLY6wyzo6 rYAKLJzumqsIwRfn0nEebeMT5C90XilmwAYfOn/zxAJYsh6FYB4cbs2SCPRYGQXt /NuGwSPL1hhU+ewQB0ta9KucP4B/5C8sdR21E8j/yR3X -----END CERTIFICATE-----Generated at Sun Jan 25 07:15:25 2026 by rpki-client