This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/roGj8PsrflrrrvuvT9PngiQSHak.roa File: roGj8PsrflrrrvuvT9PngiQSHak.roa (raw, json) Hash identifier: jojG3zohlJJV0S+nf+YbYjTVWcGBV4+hLrLJw3fTnBE= Subject key identifier: AE:81:A3:F0:FB:2B:7E:5A:EB:AE:FB:AF:4F:D3:E7:82:24:12:1D:A9 Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16 Certificate serial: 019B7EA6F045F84CF0B823A3FF1663AD2238 Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/roGj8PsrflrrrvuvT9PngiQSHak.roa Signing time: Fri 02 Jan 2026 12:20:28 +0000 ROA not before: Fri 02 Jan 2026 12:20:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198510 IP address blocks: 89.23.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:f0:45:f8:4c:f0:b8:23:a3:ff:16:63:ad:22:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16 Validity Not Before: Jan 2 12:20:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae81a3f0fb2b7e5aebaefbaf4fd3e78224121da9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:26:d3:b7:d2:41:c7:71:86:c3:21:a7:fb:77: b2:77:ce:e6:50:15:31:0c:d8:07:70:04:a7:45:a6: dd:f5:e8:28:ef:85:2e:40:21:b5:85:ac:84:37:ac: a5:f8:9b:36:48:36:d6:80:05:0e:cd:ca:04:54:55: bc:9e:5b:43:3f:79:ff:00:ad:c5:c2:67:e2:27:6c: a0:15:f1:84:21:e1:97:cb:64:d9:02:f1:b3:08:da: 5f:dc:0f:f0:64:52:c4:e7:7e:e6:5f:74:45:a4:da: b5:30:89:97:31:bc:53:2a:bf:4f:ed:e6:1a:42:59: d9:cd:c5:16:56:91:0f:17:cf:b2:83:f8:0c:2d:f9: f2:f4:f7:d6:aa:ec:50:b6:2e:ef:43:8e:b2:d9:e3: 81:c6:50:9f:37:04:08:89:95:e0:9f:2c:b8:e2:32: 76:25:56:49:9f:68:bc:78:d2:18:b5:9f:97:e1:2b: a9:58:3c:74:e6:85:ae:f1:dc:ca:65:94:e5:e5:b6: 7b:72:85:55:20:ba:d5:0b:d7:7c:9a:0e:ec:2c:42: 76:3b:a3:eb:ba:8c:1f:d1:94:f6:28:39:88:b2:ac: f7:ad:8c:a5:3a:97:12:86:2e:d1:3a:42:b2:79:46: db:6a:65:e3:d5:7c:1e:a2:a4:43:fc:01:1e:b2:6b: 68:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:81:A3:F0:FB:2B:7E:5A:EB:AE:FB:AF:4F:D3:E7:82:24:12:1D:A9 X509v3 Authority Key Identifier: keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/roGj8PsrflrrrvuvT9PngiQSHak.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.23.94.0/24 Signature Algorithm: sha256WithRSAEncryption 54:48:be:a0:97:25:c4:d7:d5:0a:95:c8:e3:f1:a1:7a:cb:bf: 1d:0d:6f:08:fe:c0:3b:ff:0a:b4:03:10:a9:78:e1:82:4b:4c: a3:b8:e7:03:4b:d8:fc:12:d9:8d:aa:44:3f:e7:44:dd:39:57: 47:4a:32:f6:54:a8:5e:7d:d1:12:1d:93:17:90:3f:84:8e:ea: b9:50:52:aa:61:ac:93:cd:45:c9:1f:2f:d4:76:a7:ad:06:5a: c6:d6:ff:fb:a4:47:32:38:89:d3:58:8a:5e:57:13:42:69:d5: 45:cf:dc:86:7e:32:c1:d6:16:c5:a3:32:91:43:09:0c:29:0c: 75:bd:3e:e0:25:da:31:c6:99:b9:70:5c:c1:c0:66:dc:04:b0: 0b:cb:68:73:22:d6:3b:80:ae:a8:46:1e:e1:85:08:8d:ff:8f: 37:82:97:54:af:c4:13:e1:39:d3:03:21:27:57:00:c3:1f:ea: f8:8b:34:16:69:9e:06:18:db:94:1d:e2:3b:17:0c:58:a1:2d: a0:9e:3f:1d:96:5d:70:e4:0d:b2:eb:a0:f2:c6:5d:f2:f0:d8: 6f:08:61:c9:90:36:5b:98:ff:49:21:f3:9c:c7:f3:d6:bb:1b: c6:74:d4:28:8d:57:64:04:fb:8b:9f:96:18:d2:ca:40:03:55: 4a:be:66:bf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pvBF+EzwuCOj/xZjrSI4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NzEzZWYyNTI3N2UxM2RkNzNmNDQxOTZmZGE1Y2VjMGZk OWNlMTYwHhcNMjYwMTAyMTIyMDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTgxYTNmMGZiMmI3ZTVhZWJhZWZiYWY0ZmQzZTc4MjI0MTIxZGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ybTt9JBx3GGwyGn+3eyd87mUBUx DNgHcASnRabd9ego74UuQCG1hayEN6yl+Js2SDbWgAUOzcoEVFW8nltDP3n/AK3F wmfiJ2ygFfGEIeGXy2TZAvGzCNpf3A/wZFLE537mX3RFpNq1MImXMbxTKr9P7eYa QlnZzcUWVpEPF8+yg/gMLfny9PfWquxQti7vQ46y2eOBxlCfNwQIiZXgnyy44jJ2 JVZJn2i8eNIYtZ+X4SupWDx05oWu8dzKZZTl5bZ7coVVILrVC9d8mg7sLEJ2O6Pr uowf0ZT2KDmIsqz3rYylOpcShi7ROkKyeUbbamXj1XweoqRD/AEesmtoFwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK6Bo/D7K35a6677r0/T54IkEh2pMB8GA1UdIwQY MBaAFOlxPvJSd+E91z9EGW/aXOwP2c4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEt MGY2NmMxODg3OTE2LzEvcm9HajhQc3JmbHJycnZ1dlQ5UG5naVFTSGFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEtMGY2NmMxODg3OTE2 LzEvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWRdeMA0G CSqGSIb3DQEBCwUAA4IBAQBUSL6glyXE19UKlcjj8aF6y78dDW8I/sA7/wq0AxCp eOGCS0yjuOcDS9j8EtmNqkQ/50TdOVdHSjL2VKhefdESHZMXkD+Ejuq5UFKqYayT zUXJHy/UdqetBlrG1v/7pEcyOInTWIpeVxNCadVFz9yGfjLB1hbFozKRQwkMKQx1 vT7gJdoxxpm5cFzBwGbcBLALy2hzItY7gK6oRh7hhQiN/483gpdUr8QT4TnTAyEn VwDDH+r4izQWaZ4GGNuUHeI7FwxYoS2gnj8dll1w5A2y66Dyxl3y8NhvCGHJkDZb mP9JIfOcx/PWuxvGdNQojVdkBPuLn5YY0spAA1VKvma/ -----END CERTIFICATE-----Generated at Sun Jan 25 12:22:13 2026 by rpki-client