This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/eiKeW5DZrw8ubUVRgQR3ZnISUA8.roa File: eiKeW5DZrw8ubUVRgQR3ZnISUA8.roa (raw, json) Hash identifier: G/mSpJ5ilGB6NcS3kOpxScz/226GTJNOO7cls8f2b0g= Subject key identifier: 7A:22:9E:5B:90:D9:AF:0F:2E:6D:45:51:81:04:77:66:72:12:50:0F Certificate issuer: /CN=f6bace78fc90278d82f1e8668a8a19ee9982cdc3 Certificate serial: 019B7E37DF28E0A9A60285FF9C84A61E2DDA Authority key identifier: F6:BA:CE:78:FC:90:27:8D:82:F1:E8:66:8A:8A:19:EE:99:82:CD:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rrOePyQJ42C8ehmiooZ7pmCzcM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/eiKeW5DZrw8ubUVRgQR3ZnISUA8.roa Signing time: Fri 02 Jan 2026 10:19:09 +0000 ROA not before: Fri 02 Jan 2026 10:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50198 IP address blocks: 89.150.58.0/24 maxlen: 24 185.223.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft rsync://rpki.ripe.net/repository/DEFAULT/9rrOePyQJ42C8ehmiooZ7pmCzcM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:df:28:e0:a9:a6:02:85:ff:9c:84:a6:1e:2d:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6bace78fc90278d82f1e8668a8a19ee9982cdc3 Validity Not Before: Jan 2 10:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a229e5b90d9af0f2e6d4551810477667212500f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f5:25:b2:5a:9b:10:52:48:2b:1c:c1:1d:6d: fe:3a:e5:b0:ca:ce:ab:58:a5:36:f1:7d:40:40:ba: 7a:c2:a3:7e:33:66:73:ce:4f:d5:0e:10:1c:f3:7d: 1b:ba:c5:8f:10:13:ea:9a:e1:2d:4f:44:1e:d3:e8: 96:51:76:e8:09:b5:77:08:51:ac:78:5a:87:69:a3: 9d:40:44:57:94:bc:bb:eb:37:2c:83:f1:2c:b3:a0: 7e:0c:82:9e:07:ed:5e:e1:97:e0:d2:13:ef:fb:3b: f1:06:c7:5b:83:35:6c:a0:e3:2e:cd:82:ed:e1:47: 7e:fc:2e:9d:82:b1:63:80:78:31:e3:d5:fc:a3:3d: c3:18:6b:11:5e:72:b7:2a:d6:1e:86:8e:3c:d6:06: 57:0d:a3:2c:5a:ab:ab:ed:41:9f:f2:91:0e:03:27: 66:98:77:1d:33:0d:d0:47:7e:79:9c:a7:c4:e6:c6: 1b:64:7b:b2:88:b9:22:b5:7c:a9:aa:e7:30:b0:93: 94:d8:1f:28:b8:38:e9:51:55:e7:d5:e7:03:d8:61: d9:d6:0f:f5:29:f5:0c:7c:6b:33:77:fd:c8:58:6d: bb:c8:1d:03:ec:e9:01:f0:ce:61:4c:5c:bb:f0:a3: 51:40:e4:88:b6:4f:d5:87:9f:d2:c4:e3:d0:6f:c3: 2a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:22:9E:5B:90:D9:AF:0F:2E:6D:45:51:81:04:77:66:72:12:50:0F X509v3 Authority Key Identifier: keyid:F6:BA:CE:78:FC:90:27:8D:82:F1:E8:66:8A:8A:19:EE:99:82:CD:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rrOePyQJ42C8ehmiooZ7pmCzcM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/eiKeW5DZrw8ubUVRgQR3ZnISUA8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.150.58.0/24 185.223.64.0/22 Signature Algorithm: sha256WithRSAEncryption b9:5a:5e:4b:0a:5d:ea:44:61:2a:9d:3a:dc:46:2c:83:cd:f8: 98:88:9d:76:cb:78:e7:57:34:53:4e:9f:bc:09:e7:d2:01:d8: 64:46:3a:2f:31:2e:bc:03:c2:23:23:ab:93:ce:01:d0:41:bb: a6:43:35:a6:ab:b0:f8:b2:44:43:13:de:b4:a2:72:89:d3:29: 2a:6c:de:e8:84:ce:fe:ad:fb:cd:c1:9e:6d:36:16:a5:15:87: 09:dd:0f:9c:98:90:c0:ed:fe:37:3e:2a:83:6c:a2:d8:59:0c: 9d:bc:4c:0e:96:03:f6:d5:5e:d7:d6:b5:77:67:71:de:35:3a: da:d6:9d:2b:b3:aa:d5:7d:49:65:b8:5c:92:a0:b9:5b:71:7c: df:f7:53:92:f7:f1:c0:ef:cd:60:a0:b0:72:5b:56:0d:94:81: 1f:ef:0e:43:b6:e7:ca:14:c7:df:6d:c2:e8:0e:5c:78:3b:d2: f5:7b:19:89:56:ce:c9:77:87:49:11:e4:94:88:f8:77:35:56: a1:c6:07:5a:6d:45:3a:ac:48:73:f3:23:b7:43:59:9b:04:02: e6:24:cc:a3:e6:b5:00:67:4e:e7:13:90:bf:ef:33:7c:25:ca: 93:85:76:77:fa:54:c8:1f:6f:22:f8:9b:43:82:33:88:40:66: 96:8b:87:92 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+N98o4KmmAoX/nISmHi3aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2YmFjZTc4ZmM5MDI3OGQ4MmYxZTg2NjhhOGExOWVlOTk4 MmNkYzMwHhcNMjYwMTAyMTAxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTIyOWU1YjkwZDlhZjBmMmU2ZDQ1NTE4MTA0Nzc2NjcyMTI1MDBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfUlslqbEFJIKxzBHW3+OuWwys6r WKU28X1AQLp6wqN+M2Zzzk/VDhAc830busWPEBPqmuEtT0Qe0+iWUXboCbV3CFGs eFqHaaOdQERXlLy76zcsg/Ess6B+DIKeB+1e4Zfg0hPv+zvxBsdbgzVsoOMuzYLt 4Ud+/C6dgrFjgHgx49X8oz3DGGsRXnK3KtYeho481gZXDaMsWqur7UGf8pEOAydm mHcdMw3QR355nKfE5sYbZHuyiLkitXypqucwsJOU2B8ouDjpUVXn1ecD2GHZ1g/1 KfUMfGszd/3IWG27yB0D7OkB8M5hTFy78KNRQOSItk/Vh5/SxOPQb8MqvwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHoinluQ2a8PLm1FUYEEd2ZyElAPMB8GA1UdIwQY MBaAFPa6znj8kCeNgvHoZoqKGe6Zgs3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXJyT2VQeVFKNDJDOGVobWlvb1o3cG1DemNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC83ODM1YzItMjA0Yy00ZGRlLThlZjkt ZjZkZDNiNTE2MWY1LzEvZWlLZVc1RFpydzh1YlVWUmdRUjNabklTVUE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC83ODM1YzItMjA0Yy00ZGRlLThlZjktZjZkZDNiNTE2MWY1 LzEvOXJyT2VQeVFKNDJDOGVobWlvb1o3cG1DemNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWZY6AwQC ud9AMA0GCSqGSIb3DQEBCwUAA4IBAQC5Wl5LCl3qRGEqnTrcRiyDzfiYiJ12y3jn VzRTTp+8CefSAdhkRjovMS68A8IjI6uTzgHQQbumQzWmq7D4skRDE960onKJ0ykq bN7ohM7+rfvNwZ5tNhalFYcJ3Q+cmJDA7f43PiqDbKLYWQydvEwOlgP21V7X1rV3 Z3HeNTra1p0rs6rVfUlluFySoLlbcXzf91OS9/HA781goLByW1YNlIEf7w5DtufK FMffbcLoDlx4O9L1exmJVs7Jd4dJEeSUiPh3NVahxgdabUU6rEhz8yO3Q1mbBALm JMyj5rUAZ07nE5C/7zN8JcqThXZ3+lTIH28i+JtDgjOIQGaWi4eS -----END CERTIFICATE-----Generated at Mon Jan 26 04:41:47 2026 by rpki-client