This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/z1B-SHltxz3Ei797lspt8mFL3Kc.roa File: z1B-SHltxz3Ei797lspt8mFL3Kc.roa (raw, json) Hash identifier: secdVPkjBFWk/OJnYe8kN9tSy5mrHdgs61bS8p+iTtA= Subject key identifier: CF:50:7E:48:79:6D:C7:3D:C4:8B:BF:7B:96:CA:6D:F2:61:4B:DC:A7 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5AC16A58C74A061C2D4062D8A7A5A1 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/z1B-SHltxz3Ei797lspt8mFL3Kc.roa Signing time: Thu 01 Jan 2026 16:18:46 +0000 ROA not before: Thu 01 Jan 2026 16:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209336 IP address blocks: 89.213.62.0/24 maxlen: 24 212.38.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:c1:6a:58:c7:4a:06:1c:2d:40:62:d8:a7:a5:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf507e48796dc73dc48bbf7b96ca6df2614bdca7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:66:28:c8:27:3d:3e:53:f6:3d:96:79:bf:87: 08:db:eb:29:10:68:7d:65:08:b6:59:ef:9f:09:32: c0:b6:43:5d:c2:5d:bd:e9:4a:6c:52:8d:6a:f8:11: 72:1d:90:d7:17:7e:3b:ae:6e:ae:ac:5e:ff:09:5a: de:19:12:e1:64:3e:05:65:90:a1:9c:8f:af:df:0f: 00:5a:59:c7:c1:f6:9c:d3:a3:9f:84:4b:12:1d:14: 28:e8:42:a3:29:52:9c:69:f4:a3:96:d2:ca:9a:b9: ff:eb:19:a4:30:62:7f:ed:e0:64:4c:49:59:e3:be: ef:a1:06:d2:ff:ee:59:a5:d2:8f:1a:9b:b7:0d:9b: b5:09:26:08:be:9c:dd:68:91:f5:35:02:9d:6a:41: d9:cc:45:9a:12:e7:26:1d:5a:59:73:71:93:29:f9: b0:28:12:89:0a:3a:de:a3:cc:19:32:03:9a:00:82: 32:1c:24:e0:2c:d9:48:35:07:4e:7e:46:a4:3e:72: 1d:f8:90:ca:28:38:33:2a:03:8f:0e:4a:f6:9a:ea: 6a:c7:2b:0d:ba:82:f3:0c:1f:ef:55:d2:70:26:32: a9:1c:42:2e:c1:74:18:8e:66:5d:22:5e:94:b4:1b: 66:c6:02:a4:01:60:81:df:4d:2d:63:21:92:7f:2c: 48:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:50:7E:48:79:6D:C7:3D:C4:8B:BF:7B:96:CA:6D:F2:61:4B:DC:A7 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/z1B-SHltxz3Ei797lspt8mFL3Kc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.213.62.0/24 212.38.71.0/24 Signature Algorithm: sha256WithRSAEncryption a7:68:b5:6e:d9:96:4a:fb:08:eb:a1:8b:6c:18:e3:04:80:cc: 47:ef:36:74:d1:1e:e7:40:c9:77:15:83:93:a0:d4:fa:3b:d6: 21:a1:80:80:47:61:62:ca:40:02:42:d1:3c:97:83:e5:9f:75: 72:fa:87:f3:d6:92:e7:21:94:c3:31:70:ef:7e:95:b7:ee:ac: ce:71:f6:28:0d:52:62:6b:0c:47:e8:43:cd:bd:fa:7d:40:af: a9:13:c1:9e:65:6f:5b:98:b1:82:80:b9:dc:f6:e2:89:16:13: fe:37:6b:bb:d7:f7:cb:ed:63:35:94:f3:32:e0:17:f2:4f:2d: 89:a6:8d:53:02:c8:3d:b0:94:fc:db:5f:22:1a:b1:d0:bc:14: 1d:7b:a6:1a:30:4c:fd:8b:14:00:61:4d:31:e0:27:9f:41:74: 83:83:45:0a:b4:22:c6:f1:77:9c:af:f1:f2:35:a4:a5:dd:ba: 76:4d:93:eb:0e:b1:29:85:ee:a1:af:13:1f:b7:9b:da:7d:31: 69:df:56:86:4b:a8:a4:71:40:18:4e:84:72:09:70:72:98:cc: 18:d2:63:75:0f:9e:d3:e7:29:76:a9:14:da:cb:9d:26:ec:12: 81:bb:fc:1b:dc:44:83:bc:f9:03:86:21:57:50:7c:5b:e3:69: 41:47:11:8c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6WsFqWMdKBhwtQGLYp6WhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjUwN2U0ODc5NmRjNzNkYzQ4YmJmN2I5NmNhNmRmMjYxNGJkY2E3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12YoyCc9PlP2PZZ5v4cI2+spEGh9 ZQi2We+fCTLAtkNdwl296UpsUo1q+BFyHZDXF347rm6urF7/CVreGRLhZD4FZZCh nI+v3w8AWlnHwfac06OfhEsSHRQo6EKjKVKcafSjltLKmrn/6xmkMGJ/7eBkTElZ 477voQbS/+5ZpdKPGpu3DZu1CSYIvpzdaJH1NQKdakHZzEWaEucmHVpZc3GTKfmw KBKJCjreo8wZMgOaAIIyHCTgLNlINQdOfkakPnId+JDKKDgzKgOPDkr2mupqxysN uoLzDB/vVdJwJjKpHEIuwXQYjmZdIl6UtBtmxgKkAWCB300tYyGSfyxIUQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFM9Qfkh5bcc9xIu/e5bKbfJhS9ynMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvejFCLVNIbHR4ejNFaTc5N2xzcHQ4bUZMM0tjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWdU+AwQA 1CZHMA0GCSqGSIb3DQEBCwUAA4IBAQCnaLVu2ZZK+wjroYtsGOMEgMxH7zZ00R7n QMl3FYOToNT6O9YhoYCAR2FiykACQtE8l4Pln3Vy+ofz1pLnIZTDMXDvfpW37qzO cfYoDVJiawxH6EPNvfp9QK+pE8GeZW9bmLGCgLnc9uKJFhP+N2u71/fL7WM1lPMy 4BfyTy2Jpo1TAsg9sJT8218iGrHQvBQde6YaMEz9ixQAYU0x4CefQXSDg0UKtCLG 8Xecr/HyNaSl3bp2TZPrDrEphe6hrxMft5vafTFp31aGS6ikcUAYToRyCXBymMwY 0mN1D57T5yl2qRTay50m7BKBu/wb3ESDvPkDhiFXUHxb42lBRxGM -----END CERTIFICATE-----Generated at Sun Jan 25 07:15:47 2026 by rpki-client