This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/m8OUYt95c0gsccT3qg35Pd1aFek.roa File: m8OUYt95c0gsccT3qg35Pd1aFek.roa (raw, json) Hash identifier: FEOEys9T2rPPrABHwNRqKKDgOhtR8OssY0hOcSQtnvc= Subject key identifier: 9B:C3:94:62:DF:79:73:48:2C:71:C4:F7:AA:0D:F9:3D:DD:5A:15:E9 Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16 Certificate serial: 019B8EC9EBA38296EB6D441DBFD0FD990132 Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/m8OUYt95c0gsccT3qg35Pd1aFek.roa Signing time: Mon 05 Jan 2026 15:32:36 +0000 ROA not before: Mon 05 Jan 2026 15:32:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20473 IP address blocks: 89.23.82.0/24 maxlen: 24 89.23.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8e:c9:eb:a3:82:96:eb:6d:44:1d:bf:d0:fd:99:01:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16 Validity Not Before: Jan 5 15:32:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9bc39462df7973482c71c4f7aa0df93ddd5a15e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b9:c2:af:68:3a:d2:bc:fb:62:10:94:19:b3: 91:03:70:a5:4c:07:b5:78:8d:a2:f5:08:d3:04:0f: 67:d1:21:d3:2d:16:21:c5:94:d8:fb:6e:4b:5e:3f: e9:a2:0b:8c:c3:8c:c2:ef:d0:de:8f:52:8a:c4:e9: 02:ca:6e:58:c6:d4:18:32:8e:33:c5:df:23:60:38: 1c:52:40:3e:6d:2e:c6:e5:59:c7:9d:35:8f:a0:de: 16:4e:32:5d:ae:2f:48:5e:c6:59:cf:63:e4:dc:2a: 4e:95:fa:44:d2:7e:da:cb:f0:a6:64:6f:db:0d:a4: 10:44:be:24:33:1c:26:66:df:07:76:1b:9e:98:f6: 66:23:4e:cc:8b:8a:fc:81:7e:2b:e0:c3:83:56:34: a6:0c:19:41:b2:94:0f:f0:cb:6a:6b:73:4f:e1:ef: 80:36:c4:bf:da:b3:11:3b:17:f6:5f:91:fd:17:59: 47:d2:d6:75:ae:c3:1e:b4:58:87:cd:25:a8:cb:97: bf:77:9d:39:cb:bb:cf:08:f0:39:3e:e4:7a:bc:7e: b0:9c:c0:c3:da:39:5a:2f:b4:13:f8:2d:ef:be:b8: 62:f1:8a:af:30:80:43:5a:20:c8:c0:a6:ad:8b:2f: f7:29:5b:39:a9:75:c6:ea:45:c4:ea:fa:e4:52:82: f1:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:C3:94:62:DF:79:73:48:2C:71:C4:F7:AA:0D:F9:3D:DD:5A:15:E9 X509v3 Authority Key Identifier: keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/m8OUYt95c0gsccT3qg35Pd1aFek.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.23.82.0/24 89.23.93.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:46:42:b7:42:52:ba:1a:fa:40:27:29:ed:b0:dc:6f:e8:8d: be:e7:5c:77:74:0a:25:a5:2e:6f:ec:f5:76:4c:ce:ae:2f:29: bf:88:52:41:81:37:49:b7:b4:d8:1f:6d:49:c4:44:4a:0e:ad: a8:4e:ae:3e:b6:d4:e4:26:91:e3:59:1b:ca:4a:5b:55:e0:93: a3:3e:2e:0e:e1:fc:34:d4:ed:47:a8:b1:57:db:b5:2e:b8:05: b3:59:e1:62:bc:7c:e1:6d:f1:12:04:9d:38:89:bd:6b:d8:30: b2:fe:9d:2f:eb:95:eb:b5:b7:ff:e9:38:76:d6:4f:3d:2e:2e: f2:fe:d5:3a:e2:b6:31:12:37:0c:83:ee:7d:ff:b4:7d:63:32: 4e:f3:b8:e7:97:72:1a:71:43:e6:bb:26:f9:f6:0c:83:b5:2f: 2f:bb:97:e8:f2:08:80:bc:99:b5:6d:82:37:fe:22:28:fc:a6: 93:62:82:5b:34:8e:47:fe:56:e0:7b:41:90:60:15:99:5c:b1: de:e9:65:bb:44:9b:8b:97:8f:30:44:1e:9c:1b:d7:37:3d:51: c8:2b:1a:15:b3:5d:ba:35:b5:e4:53:11:83:60:12:d4:f5:19: 83:c6:27:87:5e:bf:5e:e8:31:37:2e:5c:85:63:00:b2:19:62: 7a:82:66:68 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZuOyeujgpbrbUQdv9D9mQEyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NzEzZWYyNTI3N2UxM2RkNzNmNDQxOTZmZGE1Y2VjMGZk OWNlMTYwHhcNMjYwMTA1MTUzMjM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YmMzOTQ2MmRmNzk3MzQ4MmM3MWM0ZjdhYTBkZjkzZGRkNWExNWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrnCr2g60rz7YhCUGbORA3ClTAe1 eI2i9QjTBA9n0SHTLRYhxZTY+25LXj/poguMw4zC79Dej1KKxOkCym5YxtQYMo4z xd8jYDgcUkA+bS7G5VnHnTWPoN4WTjJdri9IXsZZz2Pk3CpOlfpE0n7ay/CmZG/b DaQQRL4kMxwmZt8HdhuemPZmI07Mi4r8gX4r4MODVjSmDBlBspQP8Mtqa3NP4e+A NsS/2rMROxf2X5H9F1lH0tZ1rsMetFiHzSWoy5e/d505y7vPCPA5PuR6vH6wnMDD 2jlaL7QT+C3vvrhi8YqvMIBDWiDIwKatiy/3KVs5qXXG6kXE6vrkUoLx8wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJvDlGLfeXNILHHE96oN+T3dWhXpMB8GA1UdIwQY MBaAFOlxPvJSd+E91z9EGW/aXOwP2c4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEt MGY2NmMxODg3OTE2LzEvbThPVVl0OTVjMGdzY2NUM3FnMzVQZDFhRmVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEtMGY2NmMxODg3OTE2 LzEvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWRdSAwQA WRddMA0GCSqGSIb3DQEBCwUAA4IBAQBqRkK3QlK6GvpAJyntsNxv6I2+51x3dAol pS5v7PV2TM6uLym/iFJBgTdJt7TYH21JxERKDq2oTq4+ttTkJpHjWRvKSltV4JOj Pi4O4fw01O1HqLFX27UuuAWzWeFivHzhbfESBJ04ib1r2DCy/p0v65Xrtbf/6Th2 1k89Li7y/tU64rYxEjcMg+59/7R9YzJO87jnl3IacUPmuyb59gyDtS8vu5fo8giA vJm1bYI3/iIo/KaTYoJbNI5H/lbge0GQYBWZXLHe6WW7RJuLl48wRB6cG9c3PVHI KxoVs126NbXkUxGDYBLU9RmDxieHXr9e6DE3LlyFYwCyGWJ6gmZo -----END CERTIFICATE-----Generated at Sun Jan 25 13:33:32 2026 by rpki-client