This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/7Bf6x7rUPN4LbE1-JGFIncvJFlg.roa File: 7Bf6x7rUPN4LbE1-JGFIncvJFlg.roa (raw, json) Hash identifier: HJDbBC11Mh/bL5WcwLk/jAqdavkY2Sm042zRtTkSY3c= Subject key identifier: EC:17:FA:C7:BA:D4:3C:DE:0B:6C:4D:7E:24:61:48:9D:CB:C9:16:58 Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16 Certificate serial: 019B7EA6F3BBE692091A5570FA83CF53A398 Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/7Bf6x7rUPN4LbE1-JGFIncvJFlg.roa Signing time: Fri 02 Jan 2026 12:20:29 +0000 ROA not before: Fri 02 Jan 2026 12:20:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203997 IP address blocks: 89.23.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:f3:bb:e6:92:09:1a:55:70:fa:83:cf:53:a3:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16 Validity Not Before: Jan 2 12:20:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ec17fac7bad43cde0b6c4d7e2461489dcbc91658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:5e:6c:85:a9:83:4e:fc:f0:74:d8:80:93:55: a1:62:23:66:1c:a9:02:ab:5b:cf:38:e4:1f:51:7a: fb:f8:d6:90:9b:2d:c6:83:d2:70:ce:6c:18:96:2f: 3f:ea:d3:a9:92:93:e9:9b:45:eb:a9:bf:8d:01:bc: e1:e6:44:92:b4:c2:25:ff:0d:aa:e2:24:cd:12:0e: ac:68:9d:13:c0:f6:34:31:17:19:94:b9:31:d4:da: cd:4c:f5:2b:3b:03:01:1f:b3:45:8b:a7:fa:f6:ce: ee:7b:aa:27:96:66:62:4e:37:ac:c8:7b:30:31:bf: f5:8b:f1:31:ec:c0:47:88:f3:02:74:3d:5c:35:9d: 70:0e:39:d8:5f:d3:77:b6:c1:72:90:93:e3:90:49: f9:0f:64:f3:5d:42:6d:fd:10:6a:99:a8:bf:a6:e3: 47:ac:c8:e3:10:64:53:de:80:76:1d:81:fd:aa:cd: d7:a8:8c:ca:f1:31:1d:b4:e8:72:ae:18:09:71:ad: 32:ed:e9:45:91:b6:19:58:76:fa:b4:88:be:e6:16: e1:f0:f3:64:7b:15:6a:4b:ce:70:ef:ca:c2:6f:af: 3e:81:c0:b3:00:07:c4:c8:09:2d:08:e5:38:9d:34: b6:9e:c9:11:aa:76:05:34:fa:89:cb:16:39:f7:4c: 6f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:17:FA:C7:BA:D4:3C:DE:0B:6C:4D:7E:24:61:48:9D:CB:C9:16:58 X509v3 Authority Key Identifier: keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/7Bf6x7rUPN4LbE1-JGFIncvJFlg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.23.94.0/24 Signature Algorithm: sha256WithRSAEncryption 40:bf:70:5f:cc:3c:55:ea:6a:85:4f:a9:3f:18:5c:41:54:5a: 72:dc:35:55:97:9e:fd:af:00:f6:a6:25:e0:99:8a:01:c8:a3: af:08:2e:98:8a:bb:5e:fa:22:70:a9:a1:3a:b2:96:88:88:85: 23:22:d4:f4:92:6b:42:8b:99:59:c6:c1:33:56:a6:fe:78:1a: 75:86:54:fc:1f:93:b4:1a:1f:9d:b6:78:6f:25:69:4b:d8:72: 29:2f:6e:c9:a5:09:e9:95:65:64:13:64:78:4a:9f:59:de:07: 53:61:2a:61:4e:e3:8b:78:3b:b6:66:e5:21:c6:bf:b4:52:9b: e0:fc:c1:65:14:74:2a:53:67:0d:55:04:5b:6a:2c:d3:10:c7: a0:b4:26:23:c6:99:22:2e:ed:c7:fe:92:80:ef:50:dd:7d:53: 49:94:cf:db:1f:28:9f:05:7a:a4:c3:4b:8f:84:87:23:d7:af: c6:c7:77:06:2e:7f:a6:93:59:44:93:68:35:bc:c7:16:b2:81: 51:22:e4:6e:f3:d0:70:3d:4f:eb:6e:86:3b:9c:d8:e2:5b:1f: 0e:54:8d:08:7d:e4:5a:66:d0:4b:82:65:f7:54:4d:1d:29:44: ae:04:8e:ac:96:c4:28:c6:bd:77:73:d2:fb:54:2e:4e:34:ec: 77:68:87:08 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pvO75pIJGlVw+oPPU6OYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NzEzZWYyNTI3N2UxM2RkNzNmNDQxOTZmZGE1Y2VjMGZk OWNlMTYwHhcNMjYwMTAyMTIyMDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzE3ZmFjN2JhZDQzY2RlMGI2YzRkN2UyNDYxNDg5ZGNiYzkxNjU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA915shamDTvzwdNiAk1WhYiNmHKkC q1vPOOQfUXr7+NaQmy3Gg9JwzmwYli8/6tOpkpPpm0Xrqb+NAbzh5kSStMIl/w2q 4iTNEg6saJ0TwPY0MRcZlLkx1NrNTPUrOwMBH7NFi6f69s7ue6onlmZiTjesyHsw Mb/1i/Ex7MBHiPMCdD1cNZ1wDjnYX9N3tsFykJPjkEn5D2TzXUJt/RBqmai/puNH rMjjEGRT3oB2HYH9qs3XqIzK8TEdtOhyrhgJca0y7elFkbYZWHb6tIi+5hbh8PNk exVqS85w78rCb68+gcCzAAfEyAktCOU4nTS2nskRqnYFNPqJyxY590xvZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOwX+se61DzeC2xNfiRhSJ3LyRZYMB8GA1UdIwQY MBaAFOlxPvJSd+E91z9EGW/aXOwP2c4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEt MGY2NmMxODg3OTE2LzEvN0JmNng3clVQTjRMYkUxLUpHRkluY3ZKRmxnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEtMGY2NmMxODg3OTE2 LzEvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWRdeMA0G CSqGSIb3DQEBCwUAA4IBAQBAv3BfzDxV6mqFT6k/GFxBVFpy3DVVl579rwD2piXg mYoByKOvCC6Yirte+iJwqaE6spaIiIUjItT0kmtCi5lZxsEzVqb+eBp1hlT8H5O0 Gh+dtnhvJWlL2HIpL27JpQnplWVkE2R4Sp9Z3gdTYSphTuOLeDu2ZuUhxr+0Upvg /MFlFHQqU2cNVQRbaizTEMegtCYjxpkiLu3H/pKA71DdfVNJlM/bHyifBXqkw0uP hIcj16/Gx3cGLn+mk1lEk2g1vMcWsoFRIuRu89BwPU/rboY7nNjiWx8OVI0IfeRa ZtBLgmX3VE0dKUSuBI6slsQoxr13c9L7VC5ONOx3aIcI -----END CERTIFICATE-----Generated at Sun Jan 25 13:32:37 2026 by rpki-client