This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/cS-8gfmyDqE6vxCUPH9vmq-B8nM.roa File: cS-8gfmyDqE6vxCUPH9vmq-B8nM.roa (raw, json) Hash identifier: 7STh8hLSZKxJCdxY11aVN844wzjF1VHFw1qkBINtVLY= Subject key identifier: 71:2F:BC:81:F9:B2:0E:A1:3A:BF:10:94:3C:7F:6F:9A:AF:81:F2:73 Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Certificate serial: 019B7D5B089F9D9BFB8EA338C627D8A450A3 Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/cS-8gfmyDqE6vxCUPH9vmq-B8nM.roa Signing time: Fri 02 Jan 2026 06:17:56 +0000 ROA not before: Fri 02 Jan 2026 06:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211826 IP address blocks: 89.34.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:08:9f:9d:9b:fb:8e:a3:38:c6:27:d8:a4:50:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Validity Not Before: Jan 2 06:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=712fbc81f9b20ea13abf10943c7f6f9aaf81f273 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:02:08:a7:6a:0f:cc:ed:ff:8d:d5:b0:37:f9: 49:b2:92:2d:63:28:9c:ba:e4:f8:0d:fc:36:84:7a: 24:e3:2f:0a:09:5a:c0:91:1c:a7:81:d6:94:8a:1f: 47:74:2a:2f:03:0d:d3:85:48:38:31:a5:fd:e8:1c: 5a:28:2d:f3:ac:ae:8a:27:d5:a9:9b:42:60:e3:59: 58:5d:e0:91:8b:76:61:c8:a0:5b:1e:aa:ba:07:49: 8f:e8:6a:17:0f:ee:ee:97:68:c0:5d:29:3b:00:a6: 67:18:0e:dd:b9:e4:0c:0b:bc:a6:bf:78:1d:20:76: f8:65:3b:5c:e4:7b:b6:60:09:5b:ef:4e:4e:a4:32: 0a:5b:3b:ee:1e:4f:ce:20:12:78:e9:5a:4d:42:e5: 46:83:b1:eb:72:18:1c:a9:75:1a:e9:75:ab:62:b3: 31:2d:e9:ed:61:8b:62:0b:91:c9:51:82:16:15:27: 44:ac:69:c7:25:d5:f3:5b:12:61:2e:99:79:39:b1: d2:1f:5c:5e:9d:08:37:a1:ac:ba:31:2a:b2:65:cd: c8:51:b3:e6:b5:5d:cf:07:f7:09:aa:ad:56:26:57: fc:ad:35:05:c8:84:11:6a:16:fc:c4:1d:34:65:0d: 65:df:d7:3a:d5:1d:26:c5:02:05:60:83:0f:75:16: c3:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:2F:BC:81:F9:B2:0E:A1:3A:BF:10:94:3C:7F:6F:9A:AF:81:F2:73 X509v3 Authority Key Identifier: keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/cS-8gfmyDqE6vxCUPH9vmq-B8nM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.34.226.0/24 Signature Algorithm: sha256WithRSAEncryption 28:d2:86:bf:e8:a2:37:cb:38:9e:30:5a:9c:0d:4b:a8:e3:a3: 4d:91:9a:5e:fe:79:7c:ba:08:64:c5:02:e0:de:2b:aa:fd:af: 73:0f:e6:88:c7:ef:cf:00:aa:3c:da:6c:b8:15:1e:0e:55:b9: 3c:fe:ae:02:f1:29:21:ad:a6:8d:91:0f:f7:49:fb:82:15:a4: 38:c2:6f:1c:61:74:02:bf:c3:91:0a:22:52:06:01:fe:2c:2a: 97:53:cb:35:29:19:3d:13:54:8f:bd:e0:64:a9:c7:20:13:76: dd:3c:43:85:64:ab:e3:53:71:bd:4b:3e:98:fa:5c:92:3e:3c: 25:ea:3b:4d:12:8d:84:ca:1a:d2:ee:7f:19:79:f8:ed:38:59: 46:ab:ce:83:78:ca:90:46:c1:21:0d:19:28:e6:86:a2:a0:fc: 45:7c:5f:09:9e:e4:64:96:c5:27:d6:01:1b:f6:ef:3a:0b:14: 21:60:e2:e1:30:fb:b7:62:67:28:67:32:9f:15:ee:b9:bd:ae: b8:80:96:83:37:f6:2e:c9:92:b2:24:b8:84:9c:0f:5c:58:eb: 5f:96:11:75:88:10:2a:2c:aa:2e:44:dd:e1:91:aa:20:e9:2e: b0:d2:4d:8d:16:8a:c2:0c:6d:8a:8f:e6:bd:37:1e:a1:62:7d: ff:2f:7b:74 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9WwifnZv7jqM4xifYpFCjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm MDFjMWQwHhcNMjYwMTAyMDYxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTJmYmM4MWY5YjIwZWExM2FiZjEwOTQzYzdmNmY5YWFmODFmMjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgIIp2oPzO3/jdWwN/lJspItYyic uuT4Dfw2hHok4y8KCVrAkRyngdaUih9HdCovAw3ThUg4MaX96BxaKC3zrK6KJ9Wp m0Jg41lYXeCRi3ZhyKBbHqq6B0mP6GoXD+7ul2jAXSk7AKZnGA7dueQMC7ymv3gd IHb4ZTtc5Hu2YAlb705OpDIKWzvuHk/OIBJ46VpNQuVGg7HrchgcqXUa6XWrYrMx LentYYtiC5HJUYIWFSdErGnHJdXzWxJhLpl5ObHSH1xenQg3oay6MSqyZc3IUbPm tV3PB/cJqq1WJlf8rTUFyIQRahb8xB00ZQ1l39c61R0mxQIFYIMPdRbDKwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHEvvIH5sg6hOr8QlDx/b5qvgfJzMB8GA1UdIwQY MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt YjQyZjIzZDgyOGMzLzEvY1MtOGdmbXlEcUU2dnhDVVBIOXZtcS1COG5NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSLiMA0G CSqGSIb3DQEBCwUAA4IBAQAo0oa/6KI3yzieMFqcDUuo46NNkZpe/nl8ughkxQLg 3iuq/a9zD+aIx+/PAKo82my4FR4OVbk8/q4C8SkhraaNkQ/3SfuCFaQ4wm8cYXQC v8ORCiJSBgH+LCqXU8s1KRk9E1SPveBkqccgE3bdPEOFZKvjU3G9Sz6Y+lySPjwl 6jtNEo2EyhrS7n8ZefjtOFlGq86DeMqQRsEhDRko5oaioPxFfF8JnuRklsUn1gEb 9u86CxQhYOLhMPu3YmcoZzKfFe65va64gJaDN/YuyZKyJLiEnA9cWOtflhF1iBAq LKouRN3hkaog6S6w0k2NForCDG2Kj+a9Nx6hYn3/L3t0 -----END CERTIFICATE-----Generated at Sun Jan 25 17:34:01 2026 by rpki-client