This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/sFbjjm9G4nIcCl6eddoCOU60Adg.roa File: sFbjjm9G4nIcCl6eddoCOU60Adg.roa (raw, json) Hash identifier: s7stSepgHsyCZyovoxvn1tgIewGdFX/4iFQZDg8eOb0= Subject key identifier: B0:56:E3:8E:6F:46:E2:72:1C:0A:5E:9E:75:DA:02:39:4E:B4:01:D8 Certificate issuer: /CN=56d641486bdc98d4a7de0928a42d7d68e6015f30 Certificate serial: 019B7E3860CAF99B0D3979946103CBC4857F Authority key identifier: 56:D6:41:48:6B:DC:98:D4:A7:DE:09:28:A4:2D:7D:68:E6:01:5F:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/sFbjjm9G4nIcCl6eddoCOU60Adg.roa Signing time: Fri 02 Jan 2026 10:19:42 +0000 ROA not before: Fri 02 Jan 2026 10:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48282 IP address blocks: 89.110.88.0/24 maxlen: 24 89.110.89.0/24 maxlen: 24 89.110.90.0/24 maxlen: 24 89.110.91.0/24 maxlen: 24 89.110.92.0/24 maxlen: 24 89.110.93.0/24 maxlen: 24 89.110.94.0/24 maxlen: 24 89.110.95.0/24 maxlen: 24 89.110.96.0/24 maxlen: 24 89.110.97.0/24 maxlen: 24 89.110.98.0/24 maxlen: 24 89.110.99.0/24 maxlen: 24 2a0d:8480::/48 maxlen: 48 2a0d:8480:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:60:ca:f9:9b:0d:39:79:94:61:03:cb:c4:85:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56d641486bdc98d4a7de0928a42d7d68e6015f30 Validity Not Before: Jan 2 10:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b056e38e6f46e2721c0a5e9e75da02394eb401d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0e:7b:08:b6:45:ae:dc:15:6d:f4:bc:1a:76: f0:24:42:7f:99:3c:a8:31:47:94:71:40:ef:4e:11: 57:f0:cc:54:a1:03:fe:7e:8b:50:76:29:9b:ef:a1: 90:e6:d1:ba:52:ba:9d:0b:15:94:18:03:51:88:ca: 2b:c9:99:e0:47:48:22:b6:a0:24:74:e2:61:19:eb: 7e:9c:62:d7:bb:e4:3f:bc:cb:37:c3:e3:af:72:98: 6d:b3:5d:91:ba:32:cd:f0:a6:29:5b:e9:0e:d8:0b: 0e:17:02:e5:ba:01:b1:da:21:1b:9d:91:d8:d8:0b: 3e:8f:0e:41:d1:6e:7e:7e:1b:10:75:76:31:dd:d3: 63:0a:25:c7:f7:2e:f7:ef:fd:3c:eb:62:12:35:77: a4:92:f9:03:17:44:ef:91:ce:fc:11:53:f7:95:ea: 87:80:ca:fa:f6:f0:4b:22:ef:8e:bf:d7:02:e7:b5: f3:65:8f:9c:5f:0e:98:ca:74:2d:e5:b6:92:7c:d7: e5:16:79:ba:38:27:47:c1:68:fd:c0:a8:30:72:1b: 61:09:37:16:f5:86:4f:c7:4a:2d:21:99:ca:fe:ad: 04:b2:10:d3:60:f1:f8:96:d7:d5:70:e6:0f:4b:3f: 7c:3c:d6:cb:01:8f:38:eb:c0:de:a1:2f:9c:27:9a: 68:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:56:E3:8E:6F:46:E2:72:1C:0A:5E:9E:75:DA:02:39:4E:B4:01:D8 X509v3 Authority Key Identifier: keyid:56:D6:41:48:6B:DC:98:D4:A7:DE:09:28:A4:2D:7D:68:E6:01:5F:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/sFbjjm9G4nIcCl6eddoCOU60Adg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.110.88.0-89.110.99.255 IPv6: 2a0d:8480::/48 2a0d:8480:2::/48 Signature Algorithm: sha256WithRSAEncryption 8d:8e:09:84:19:59:91:7c:50:36:5c:97:f8:db:46:65:38:7c: 5d:fd:27:d4:cc:f7:a5:df:00:3d:c7:78:28:62:01:f4:3f:fd: bb:5c:d8:1f:b0:32:b4:70:b1:68:ce:9b:c8:65:72:12:7e:e8: 87:00:19:83:83:83:53:57:af:ec:07:51:9e:f8:23:f1:df:5a: fd:c5:0a:9d:ed:61:81:51:c5:4f:01:cc:94:e1:2f:1e:6e:3a: bb:cd:87:ea:70:1f:cd:ec:f9:83:db:fe:a2:51:83:db:12:3f: fa:47:81:90:c0:89:04:20:b0:80:61:d7:30:3d:16:c1:2d:53: 5e:8c:7f:68:d3:31:68:91:08:68:3d:8c:8f:e6:df:83:86:09: 3d:23:06:53:dd:9d:47:57:29:db:ee:2c:21:7b:95:56:f3:66: 85:19:8a:3e:fb:a6:ec:53:fb:4a:52:66:95:18:42:96:8e:0b: 87:94:30:b0:cc:f9:40:b7:88:e1:b6:15:b9:42:9e:e2:54:3e: a3:d4:6e:0d:61:ac:f8:5c:2c:44:62:5c:1b:e1:2f:6a:f7:45: 6e:10:61:6a:cd:b4:95:39:fe:3a:f3:a4:c0:89:28:01:8f:d1: 96:06:32:85:55:7a:f0:eb:fb:1a:9f:cf:c6:d2:6e:14:c9:02: 38:3a:40:b0 -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZt+OGDK+ZsNOXmUYQPLxIV/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2ZDY0MTQ4NmJkYzk4ZDRhN2RlMDkyOGE0MmQ3ZDY4ZTYw MTVmMzAwHhcNMjYwMTAyMTAxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDU2ZTM4ZTZmNDZlMjcyMWMwYTVlOWU3NWRhMDIzOTRlYjQwMWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsg57CLZFrtwVbfS8GnbwJEJ/mTyo MUeUcUDvThFX8MxUoQP+fotQdimb76GQ5tG6UrqdCxWUGANRiMoryZngR0gitqAk dOJhGet+nGLXu+Q/vMs3w+Ovcphts12RujLN8KYpW+kO2AsOFwLlugGx2iEbnZHY 2As+jw5B0W5+fhsQdXYx3dNjCiXH9y737/0862ISNXekkvkDF0Tvkc78EVP3leqH gMr69vBLIu+Ov9cC57XzZY+cXw6YynQt5baSfNflFnm6OCdHwWj9wKgwchthCTcW 9YZPx0otIZnK/q0EshDTYPH4ltfVcOYPSz98PNbLAY8468DeoS+cJ5porQIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFLBW445vRuJyHApennXaAjlOtAHYMB8GA1UdIwQY MBaAFFbWQUhr3JjUp94JKKQtfWjmAV8wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnRaQlNHdmNtTlNuM2drb3BDMTlhT1lCWHpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9iNjUxMjYtMzFjYi00YWU2LWJlY2Et ZTNlMDRiZDRmMjQyLzEvc0ZiamptOUc0bkljQ2w2ZWRkb0NPVTYwQWRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9iNjUxMjYtMzFjYi00YWU2LWJlY2EtZTNlMDRiZDRmMjQy LzEvVnRaQlNHdmNtTlNuM2drb3BDMTlhT1lCWHpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAUBAIAATAOMAwDBANZblgD BAJZbmAwGAQCAAIwEgMHACoNhIAAAAMHACoNhIAAAjANBgkqhkiG9w0BAQsFAAOC AQEAjY4JhBlZkXxQNlyX+NtGZTh8Xf0n1Mz3pd8APcd4KGIB9D/9u1zYH7AytHCx aM6byGVyEn7ohwAZg4ODU1ev7AdRnvgj8d9a/cUKne1hgVHFTwHMlOEvHm46u82H 6nAfzez5g9v+olGD2xI/+keBkMCJBCCwgGHXMD0WwS1TXox/aNMxaJEIaD2Mj+bf g4YJPSMGU92dR1cp2+4sIXuVVvNmhRmKPvum7FP7SlJmlRhClo4Lh5QwsMz5QLeI 4bYVuUKe4lQ+o9RuDWGs+FwsRGJcG+EvavdFbhBhas20lTn+OvOkwIkoAY/RlgYy hVV68Ov7Gp/PxtJuFMkCODpAsA== -----END CERTIFICATE-----Generated at Mon Jan 26 00:59:20 2026 by rpki-client