This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/A96M4o4K-C-mpJFks64l6ZTzyYA.roa File: A96M4o4K-C-mpJFks64l6ZTzyYA.roa (raw, json) Hash identifier: +Op0HPruIDX1Xdad2ewmEW0uBBs5KeWKXzC2JD2aSes= Subject key identifier: 03:DE:8C:E2:8E:0A:F8:2F:A6:A4:91:64:B3:AE:25:E9:94:F3:C9:80 Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16 Certificate serial: 019B7EA6ED823CE67D6565ABFCFB8B9D0CEA Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/A96M4o4K-C-mpJFks64l6ZTzyYA.roa Signing time: Fri 02 Jan 2026 12:20:27 +0000 ROA not before: Fri 02 Jan 2026 12:20:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50868 IP address blocks: 89.23.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:ed:82:3c:e6:7d:65:65:ab:fc:fb:8b:9d:0c:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16 Validity Not Before: Jan 2 12:20:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=03de8ce28e0af82fa6a49164b3ae25e994f3c980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b3:9b:ea:fb:c4:8c:1d:d7:ea:10:f9:3b:ea: b5:5f:8a:db:ea:f0:d3:90:7d:2c:56:b7:07:83:73: 08:ca:f6:d8:9c:c3:37:aa:92:2b:c5:fb:eb:9e:61: 3b:02:a4:8a:aa:23:80:2b:98:ac:76:c3:ba:77:94: e2:c5:5c:53:46:8e:e2:6d:85:77:38:85:a0:f4:90: 41:46:f0:07:b7:25:67:f5:b6:10:e3:1b:2a:db:18: aa:da:2a:fd:44:9b:b8:ff:fb:9d:6f:bb:ef:2e:91: 0d:f5:19:8d:75:09:43:99:58:59:9d:57:3a:0b:c6: 86:3a:60:85:c9:d5:40:fb:d3:5a:e0:6d:0d:f2:53: 3f:52:70:28:c6:10:77:5a:b6:22:fb:33:2b:e9:27: 7e:1c:fb:66:b8:27:6d:6a:b9:ae:d1:c1:f8:2c:23: 9a:3e:a3:8f:a9:29:5a:b8:a8:21:17:94:2b:02:40: e3:65:4a:ac:3c:20:5f:26:43:49:2f:24:93:e7:43: 08:ed:b0:5e:45:9d:d9:b1:b5:f9:8f:5b:c0:80:fd: 63:4e:1e:ed:01:a6:9a:98:0e:88:3b:a3:29:f1:e7: aa:09:39:30:86:a8:02:4e:e6:9e:3a:00:de:e5:0d: 06:18:e4:9d:12:49:e2:6e:e7:36:bf:55:d0:89:9c: 9a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:DE:8C:E2:8E:0A:F8:2F:A6:A4:91:64:B3:AE:25:E9:94:F3:C9:80 X509v3 Authority Key Identifier: keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/A96M4o4K-C-mpJFks64l6ZTzyYA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.23.89.0/24 Signature Algorithm: sha256WithRSAEncryption 44:17:3e:76:76:6d:73:ca:a2:97:82:e4:1f:09:6f:37:66:06: f4:91:b6:cf:a5:f0:41:19:c6:00:9a:09:bd:48:96:34:08:4e: a6:f1:3a:2a:88:08:c7:97:84:b1:a0:a6:9f:2a:24:b3:17:5a: 52:94:d2:8f:6c:8f:9c:49:d7:c9:ae:4a:46:8c:19:ed:9b:de: fb:53:be:cf:67:54:27:6a:57:91:f1:f1:de:65:8f:e7:90:92: 3d:c0:7e:0a:42:0b:b4:42:e2:79:c4:89:38:85:cf:31:c5:44: 49:c8:74:fd:7b:a2:f0:cc:bb:a3:4b:10:5a:74:fa:8c:7f:df: ba:d2:ee:e2:37:45:75:eb:cb:f7:be:45:19:17:75:a1:f6:d6: cf:7e:56:91:7f:ff:94:59:8b:24:a7:c0:17:b8:7a:be:4b:23: c0:b4:82:d0:8d:7b:a3:f5:68:98:db:cb:4e:ba:52:14:c6:b8: 71:7b:c0:d5:80:35:c5:bb:20:a4:50:a1:b8:f5:de:72:d2:21: bf:1b:3d:e7:a1:a7:1b:de:17:ce:14:42:37:48:c8:f6:19:42: 95:6e:ad:e9:55:54:de:f1:ac:86:d4:1c:90:2e:08:97:ac:cd: 99:1a:b6:77:3a:65:b9:46:11:8d:66:43:24:e3:5f:58:36:8a: 72:61:ed:e9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pu2CPOZ9ZWWr/PuLnQzqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NzEzZWYyNTI3N2UxM2RkNzNmNDQxOTZmZGE1Y2VjMGZk OWNlMTYwHhcNMjYwMTAyMTIyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwM2RlOGNlMjhlMGFmODJmYTZhNDkxNjRiM2FlMjVlOTk0ZjNjOTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrOb6vvEjB3X6hD5O+q1X4rb6vDT kH0sVrcHg3MIyvbYnMM3qpIrxfvrnmE7AqSKqiOAK5isdsO6d5TixVxTRo7ibYV3 OIWg9JBBRvAHtyVn9bYQ4xsq2xiq2ir9RJu4//udb7vvLpEN9RmNdQlDmVhZnVc6 C8aGOmCFydVA+9Na4G0N8lM/UnAoxhB3WrYi+zMr6Sd+HPtmuCdtarmu0cH4LCOa PqOPqSlauKghF5QrAkDjZUqsPCBfJkNJLyST50MI7bBeRZ3ZsbX5j1vAgP1jTh7t AaaamA6IO6Mp8eeqCTkwhqgCTuaeOgDe5Q0GGOSdEknibuc2v1XQiZyakwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAPejOKOCvgvpqSRZLOuJemU88mAMB8GA1UdIwQY MBaAFOlxPvJSd+E91z9EGW/aXOwP2c4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEt MGY2NmMxODg3OTE2LzEvQTk2TTRvNEstQy1tcEpGa3M2NGw2WlR6eVlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEtMGY2NmMxODg3OTE2 LzEvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWRdZMA0G CSqGSIb3DQEBCwUAA4IBAQBEFz52dm1zyqKXguQfCW83Zgb0kbbPpfBBGcYAmgm9 SJY0CE6m8ToqiAjHl4SxoKafKiSzF1pSlNKPbI+cSdfJrkpGjBntm977U77PZ1Qn aleR8fHeZY/nkJI9wH4KQgu0QuJ5xIk4hc8xxURJyHT9e6LwzLujSxBadPqMf9+6 0u7iN0V168v3vkUZF3Wh9tbPflaRf/+UWYskp8AXuHq+SyPAtILQjXuj9WiY28tO ulIUxrhxe8DVgDXFuyCkUKG49d5y0iG/Gz3noacb3hfOFEI3SMj2GUKVbq3pVVTe 8ayG1ByQLgiXrM2ZGrZ3OmW5RhGNZkMk419YNopyYe3p -----END CERTIFICATE-----Generated at Sun Jan 25 10:52:11 2026 by rpki-client