This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/sl1JvwMo_PnxNUT0n7b37VjHYBI.roa File: sl1JvwMo_PnxNUT0n7b37VjHYBI.roa (raw, json) Hash identifier: 4s59F4JeRBM9UIf8FZMIueAYaOBneqDZ1z5HCj442e0= Subject key identifier: B2:5D:49:BF:03:28:FC:F9:F1:35:44:F4:9F:B6:F7:ED:58:C7:60:12 Certificate issuer: /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b Certificate serial: 019B7C115A2137FE0B97BDC922549E74FBF5 Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/sl1JvwMo_PnxNUT0n7b37VjHYBI.roa Signing time: Fri 02 Jan 2026 00:17:50 +0000 ROA not before: Fri 02 Jan 2026 00:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199478 IP address blocks: 62.82.32.0/23 maxlen: 24 89.140.116.0/22 maxlen: 24 89.140.229.0/24 maxlen: 24 89.140.234.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:5a:21:37:fe:0b:97:bd:c9:22:54:9e:74:fb:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b Validity Not Before: Jan 2 00:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b25d49bf0328fcf9f13544f49fb6f7ed58c76012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:fb:23:83:03:43:dd:e2:12:72:aa:0f:6d:e3: 24:00:aa:63:da:fe:32:fb:7f:f8:e4:52:b2:3f:5c: e1:b6:4d:e0:91:83:45:a4:21:0b:a8:93:c0:1f:24: 49:c5:ff:20:7f:7a:db:47:58:11:aa:d0:1e:1f:cd: 7e:82:94:3a:91:62:b1:a7:eb:d4:02:67:9c:fa:2c: 13:07:0e:12:c0:b8:bf:cb:db:de:61:06:43:9d:bf: 14:14:59:b7:68:48:7f:66:a0:a3:67:f8:2a:eb:79: 33:65:30:0b:46:36:53:31:41:7e:62:da:31:b3:13: 88:4d:de:e5:7c:68:8a:b1:fd:17:c0:e1:58:28:3a: a8:9c:09:ca:d4:55:0f:9a:18:05:41:d4:00:70:e9: 4b:6f:12:ce:bf:08:1a:21:63:dc:31:52:4f:07:97: 63:4b:1d:b4:47:d0:6d:96:8c:7b:5f:36:58:37:95: 64:f4:0a:8d:4e:78:9e:f3:37:bf:ff:fe:73:02:9a: 8d:ce:64:7f:a0:2a:b5:d4:94:9f:81:b0:f9:fc:81: 4b:dc:a8:79:55:83:ec:de:e0:5b:1c:0d:3b:93:72: 10:1c:13:c8:e5:58:a7:10:49:71:2c:94:06:94:2a: 32:62:f5:2f:5e:bd:3e:6a:1b:c9:6a:2d:1f:d9:01: f2:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:5D:49:BF:03:28:FC:F9:F1:35:44:F4:9F:B6:F7:ED:58:C7:60:12 X509v3 Authority Key Identifier: keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/sl1JvwMo_PnxNUT0n7b37VjHYBI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.82.32.0/23 89.140.116.0/22 89.140.229.0/24 89.140.234.0/23 Signature Algorithm: sha256WithRSAEncryption 14:96:f7:c7:57:2c:5c:46:04:0b:9a:b7:e0:73:fb:13:5b:3c: 4e:11:1f:46:71:13:de:59:f2:5d:d5:8e:76:69:4f:ad:fc:35: 62:7e:a9:c3:f3:e3:b6:0d:c5:c2:16:05:8e:2f:68:3a:20:73: 01:fa:27:e4:bc:33:c0:92:54:67:5f:c4:9e:9c:99:76:c6:7d: ec:56:f2:6b:bf:59:d0:cb:ec:77:1b:27:15:2b:1d:f6:60:cc: e0:74:08:1c:dd:d7:aa:a9:9a:0a:e3:8f:43:ec:b6:34:08:97: 46:d1:b5:8c:39:1f:37:4a:db:8c:ce:e5:ae:6c:b4:9a:45:00: e4:b7:0d:cf:a6:41:6e:79:28:24:55:4d:7f:23:43:34:d1:c9: 86:72:25:1d:69:63:02:85:66:52:7f:b2:8d:fc:6c:5c:a3:db: ae:79:88:79:54:69:28:fe:63:d4:9c:d5:15:87:e5:59:6c:bd: 74:dd:6b:ec:13:d7:fd:bf:8f:29:01:e8:70:7a:b6:b9:2d:89: 01:f7:b6:f2:a7:4b:63:12:f4:1f:07:b5:00:10:21:4e:ec:2d: 0a:66:b8:47:5d:a0:f5:72:74:b2:09:d1:be:4d:ba:34:59:7e: a4:81:c6:34:df:4c:6a:da:4d:04:c0:29:8b:f0:01:94:6b:bf: 81:30:8f:3c -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt8EVohN/4Ll73JIlSedPv1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0MzRmMTY4NjEwMjg3NmM2MjE2YmNlYTI4YTVlNTAyZWMw ZDdiNmIwHhcNMjYwMTAyMDAxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMjVkNDliZjAzMjhmY2Y5ZjEzNTQ0ZjQ5ZmI2ZjdlZDU4Yzc2MDEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvsjgwND3eIScqoPbeMkAKpj2v4y +3/45FKyP1zhtk3gkYNFpCELqJPAHyRJxf8gf3rbR1gRqtAeH81+gpQ6kWKxp+vU Amec+iwTBw4SwLi/y9veYQZDnb8UFFm3aEh/ZqCjZ/gq63kzZTALRjZTMUF+Ytox sxOITd7lfGiKsf0XwOFYKDqonAnK1FUPmhgFQdQAcOlLbxLOvwgaIWPcMVJPB5dj Sx20R9Btlox7XzZYN5Vk9AqNTnie8ze///5zApqNzmR/oCq11JSfgbD5/IFL3Kh5 VYPs3uBbHA07k3IQHBPI5VinEElxLJQGlCoyYvUvXr0+ahvJai0f2QHyMwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFLJdSb8DKPz58TVE9J+29+1Yx2ASMB8GA1UdIwQY MBaAFNQ08WhhAodsYha86iil5QLsDXtrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMURUeGFHRUNoMnhpRnJ6cUtLWGxBdXdOZTJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC83MjZiYjQtNWQ4Ny00MDJkLTkxY2Ut NTcxMmQ5NWFlNjM4LzEvc2wxSnZ3TW9fUG54TlVUMG43YjM3VmpIWUJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC83MjZiYjQtNWQ4Ny00MDJkLTkxY2UtNTcxMmQ5NWFlNjM4 LzEvMURUeGFHRUNoMnhpRnJ6cUtLWGxBdXdOZTJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBPlIgAwQC WYx0AwQAWYzlAwQBWYzqMA0GCSqGSIb3DQEBCwUAA4IBAQAUlvfHVyxcRgQLmrfg c/sTWzxOER9GcRPeWfJd1Y52aU+t/DVifqnD8+O2DcXCFgWOL2g6IHMB+ifkvDPA klRnX8SenJl2xn3sVvJrv1nQy+x3GycVKx32YMzgdAgc3deqqZoK449D7LY0CJdG 0bWMOR83StuMzuWubLSaRQDktw3PpkFueSgkVU1/I0M00cmGciUdaWMChWZSf7KN /Gxco9uueYh5VGko/mPUnNUVh+VZbL103WvsE9f9v48pAehwera5LYkB97byp0tj EvQfB7UAECFO7C0KZrhHXaD1cnSyCdG+Tbo0WX6kgcY030xq2k0EwCmL8AGUa7+B MI88 -----END CERTIFICATE-----Generated at Sun Jan 25 17:47:27 2026 by rpki-client