This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/9grt1cKyEz0xROHjU9cQ9iTytaM.roa File: 9grt1cKyEz0xROHjU9cQ9iTytaM.roa (raw, json) Hash identifier: ly4fpEWhaE8L48YtCfVHN7QzrQoUic6XO4hI5TbnRVU= Subject key identifier: F6:0A:ED:D5:C2:B2:13:3D:31:44:E1:E3:53:D7:10:F6:24:F2:B5:A3 Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Certificate serial: 019B7D5B06A1166E2E2BBB1DFACDA8F2EC57 Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/9grt1cKyEz0xROHjU9cQ9iTytaM.roa Signing time: Fri 02 Jan 2026 06:17:56 +0000 ROA not before: Fri 02 Jan 2026 06:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207847 IP address blocks: 89.34.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 00:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:06:a1:16:6e:2e:2b:bb:1d:fa:cd:a8:f2:ec:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d Validity Not Before: Jan 2 06:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f60aedd5c2b2133d3144e1e353d710f624f2b5a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f5:28:6d:76:7b:a4:35:7c:5f:e8:88:26:c9: 5b:88:47:24:48:67:b1:9a:68:73:8e:04:2d:6e:84: f2:b5:6b:1e:3c:05:e7:c4:9f:5b:06:22:76:d3:53: 69:8e:b3:04:9c:f1:5c:ed:3f:ae:bc:57:8f:59:e5: 20:c5:1b:be:72:12:a6:4b:81:14:24:60:f5:e1:bd: bb:35:a0:f9:9a:2d:ca:67:60:b1:bd:6e:c6:43:4d: 2c:25:7d:11:6f:a6:89:c0:55:6b:45:82:2b:1b:e8: 70:39:08:54:a2:e7:4a:e1:d6:14:aa:ed:0a:c4:47: 2f:03:03:3f:bf:59:69:1f:08:bb:6a:a6:90:ef:ea: c2:5b:fc:1c:68:36:51:5b:81:13:f3:7e:0c:3f:e7: 4e:41:89:87:2f:e0:a7:64:26:0d:c4:3d:0b:d7:66: 85:61:df:7b:7b:a5:14:3b:95:a6:88:b7:79:90:5a: be:f0:04:64:e7:99:52:55:f7:81:8c:b5:5b:1f:c2: 37:c7:03:a1:81:0e:04:ab:fd:50:4d:9b:eb:c1:48: 0b:0f:b2:0d:18:49:6c:90:0b:dc:9e:40:5b:b9:18: b4:31:c9:72:1a:34:97:34:66:17:b2:00:14:92:30: 3f:e7:fa:b3:92:e8:aa:4e:cc:25:3c:9f:ff:06:49: 02:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:0A:ED:D5:C2:B2:13:3D:31:44:E1:E3:53:D7:10:F6:24:F2:B5:A3 X509v3 Authority Key Identifier: keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/9grt1cKyEz0xROHjU9cQ9iTytaM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.34.230.0/24 Signature Algorithm: sha256WithRSAEncryption 25:cb:f6:eb:ea:d1:da:9f:69:e5:c2:86:ed:be:e2:21:10:4f: 58:09:59:58:06:54:3e:fe:37:41:29:ae:22:80:5b:64:68:33: 51:ee:c5:b3:9c:76:14:ee:a0:f6:36:3b:eb:d5:51:77:9f:46: 80:0d:66:ed:f9:ed:b0:b3:ba:4f:54:b5:d4:67:dd:03:fc:d5: 34:db:67:bd:d7:fd:a9:12:0c:c8:29:7c:00:cc:1a:63:bc:32: 33:92:5d:4c:bd:1c:eb:8d:06:3c:f1:1d:db:83:55:4d:95:9b: a2:06:75:a6:b9:1d:07:80:ea:00:a1:53:c1:35:65:e7:e0:a3: bf:16:42:23:9d:d2:86:69:88:15:b7:15:9a:e1:01:88:bc:64: 54:60:22:d0:c2:3a:d7:cd:a3:a4:9e:a1:21:d9:ae:2f:3b:85: f8:43:43:85:ce:7a:c6:a3:57:68:94:06:9d:a9:20:33:6a:16: f1:ef:b3:9c:44:71:a3:d9:49:41:45:08:09:35:89:a4:e9:89: b2:14:83:53:f2:8e:86:f9:16:7f:14:51:23:0a:6c:85:03:11: 09:53:b7:b8:7d:79:c9:c3:49:1a:69:3b:0c:01:ee:14:b1:4d: 07:f9:1f:d4:99:28:90:b8:79:49:73:9b:2a:fc:ba:74:ee:4c: ce:10:26:7f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9WwahFm4uK7sd+s2o8uxXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm MDFjMWQwHhcNMjYwMTAyMDYxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjBhZWRkNWMyYjIxMzNkMzE0NGUxZTM1M2Q3MTBmNjI0ZjJiNWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPUobXZ7pDV8X+iIJslbiEckSGex mmhzjgQtboTytWsePAXnxJ9bBiJ201NpjrMEnPFc7T+uvFePWeUgxRu+chKmS4EU JGD14b27NaD5mi3KZ2CxvW7GQ00sJX0Rb6aJwFVrRYIrG+hwOQhUoudK4dYUqu0K xEcvAwM/v1lpHwi7aqaQ7+rCW/wcaDZRW4ET834MP+dOQYmHL+CnZCYNxD0L12aF Yd97e6UUO5WmiLd5kFq+8ARk55lSVfeBjLVbH8I3xwOhgQ4Eq/1QTZvrwUgLD7IN GElskAvcnkBbuRi0MclyGjSXNGYXsgAUkjA/5/qzkuiqTswlPJ//BkkCCwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPYK7dXCshM9MUTh41PXEPYk8rWjMB8GA1UdIwQY MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt YjQyZjIzZDgyOGMzLzEvOWdydDFjS3lFejB4Uk9IalU5Y1E5aVR5dGFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSLmMA0G CSqGSIb3DQEBCwUAA4IBAQAly/br6tHan2nlwobtvuIhEE9YCVlYBlQ+/jdBKa4i gFtkaDNR7sWznHYU7qD2Njvr1VF3n0aADWbt+e2ws7pPVLXUZ90D/NU022e91/2p EgzIKXwAzBpjvDIzkl1MvRzrjQY88R3bg1VNlZuiBnWmuR0HgOoAoVPBNWXn4KO/ FkIjndKGaYgVtxWa4QGIvGRUYCLQwjrXzaOknqEh2a4vO4X4Q0OFznrGo1dolAad qSAzahbx77OcRHGj2UlBRQgJNYmk6YmyFINT8o6G+RZ/FFEjCmyFAxEJU7e4fXnJ w0kaaTsMAe4UsU0H+R/UmSiQuHlJc5sq/Lp07kzOECZ/ -----END CERTIFICATE-----Generated at Mon Jan 12 04:56:12 2026 by rpki-client