This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/6e27ZfqvDX1BOWbzp-ZtA3KU_4s.roa File: 6e27ZfqvDX1BOWbzp-ZtA3KU_4s.roa (raw, json) Hash identifier: RtjwjljdZS4U1oZvCJy//JjoyHKTOaBhxbQPvOKq1Ow= Subject key identifier: E9:ED:BB:65:FA:AF:0D:7D:41:39:66:F3:A7:E6:6D:03:72:94:FF:8B Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019BEC353CE76006E6771436F27A79F4EFAF Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/6e27ZfqvDX1BOWbzp-ZtA3KU_4s.roa Signing time: Fri 23 Jan 2026 18:54:30 +0000 ROA not before: Fri 23 Jan 2026 18:54:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206963 IP address blocks: 89.125.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 20:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ec:35:3c:e7:60:06:e6:77:14:36:f2:7a:79:f4:ef:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Jan 23 18:54:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e9edbb65faaf0d7d413966f3a7e66d037294ff8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8d:7f:ca:28:5c:cb:24:c1:6c:f6:1b:d3:f0: b5:2b:e3:d2:5e:03:2f:c2:00:5b:bd:17:3f:d0:90: 11:fb:e6:6a:c6:50:74:9c:a4:91:ea:15:75:9d:54: 7f:05:e9:d8:a1:b5:ae:5e:ff:fd:cf:fa:02:5b:99: 0e:65:62:01:95:9e:a4:65:89:98:ad:b5:26:bf:d2: 56:07:62:75:f5:ba:1c:bf:dc:6d:0f:d3:78:b4:26: 6d:93:10:6a:2e:d1:ad:ec:23:fa:6e:ca:1c:37:08: 04:43:a4:e7:68:e7:ca:b2:9b:6a:7a:d7:63:cd:69: 7e:79:09:da:5a:84:f7:eb:5b:89:7c:2d:8a:25:d2: ea:4f:78:d0:27:af:74:fd:c1:bf:6c:cb:77:50:b9: 8b:5c:c0:d8:bc:0f:b3:35:e2:bd:c8:08:cc:93:83: 89:ad:00:4c:d0:33:93:15:de:30:10:f3:39:d3:e9: 96:3b:76:a4:44:82:cc:17:a9:60:aa:8c:6b:7c:84: 45:93:b0:ae:ca:67:5a:5c:34:9c:78:58:04:0f:1e: 1d:52:c1:cd:f4:af:9d:84:c6:65:af:ff:76:4b:0b: 2a:a8:12:45:ca:23:a5:36:22:ff:0c:67:70:1b:6d: c6:d6:11:b7:ad:4f:54:1d:be:61:a8:1f:94:cc:03: de:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:ED:BB:65:FA:AF:0D:7D:41:39:66:F3:A7:E6:6D:03:72:94:FF:8B X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/6e27ZfqvDX1BOWbzp-ZtA3KU_4s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.125.36.0/24 Signature Algorithm: sha256WithRSAEncryption 46:a8:97:cf:ac:63:ce:07:6c:31:46:56:00:72:bc:71:2b:f4: fe:2f:5d:e1:32:cd:75:ed:b2:f6:52:b8:1f:54:c0:60:ab:0d: 6f:08:7d:ed:d3:df:f5:8e:79:6e:1c:aa:dd:a0:6e:a8:7d:e6: da:d4:c5:45:2e:86:3f:f7:22:b3:e9:b8:25:c4:62:f7:5c:04: 3b:d5:ec:58:0b:39:13:f8:4d:49:53:63:7f:04:3a:8c:42:43: 91:fe:ac:68:9d:ad:8e:e9:d1:0b:9f:09:a4:5c:ff:76:95:8b: 65:74:5b:cd:a3:f7:65:e3:05:de:3b:f4:6b:88:4f:b2:78:0c: 8a:89:13:9e:d5:a3:71:19:c8:2e:6f:8b:34:b2:77:c3:89:96: f1:78:05:36:3d:70:3c:8c:98:cf:da:ca:ad:e5:e8:6a:30:36: 8a:85:a9:a4:10:11:72:75:d4:94:e5:22:84:8a:5b:e3:9b:f5: 71:f1:26:fd:8f:ee:64:22:a7:1a:d6:02:ef:e9:7c:c0:92:f9: 2d:3b:46:81:6e:71:cf:0b:fb:49:33:23:3a:53:3f:58:ab:35: 17:27:e5:55:b3:90:02:de:52:48:9b:78:9d:b3:9d:b3:79:2e: 2f:ef:fa:05:b6:f7:2d:84:1c:fe:fc:d2:16:0e:36:10:97:ea: 14:73:ee:6d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvsNTznYAbmdxQ28np59O+vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjYwMTIzMTg1NDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOWVkYmI2NWZhYWYwZDdkNDEzOTY2ZjNhN2U2NmQwMzcyOTRmZjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx41/yihcyyTBbPYb0/C1K+PSXgMv wgBbvRc/0JAR++ZqxlB0nKSR6hV1nVR/BenYobWuXv/9z/oCW5kOZWIBlZ6kZYmY rbUmv9JWB2J19bocv9xtD9N4tCZtkxBqLtGt7CP6bsocNwgEQ6TnaOfKsptqetdj zWl+eQnaWoT361uJfC2KJdLqT3jQJ690/cG/bMt3ULmLXMDYvA+zNeK9yAjMk4OJ rQBM0DOTFd4wEPM50+mWO3akRILMF6lgqoxrfIRFk7CuymdaXDSceFgEDx4dUsHN 9K+dhMZlr/92SwsqqBJFyiOlNiL/DGdwG23G1hG3rU9UHb5hqB+UzAPedwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOntu2X6rw19QTlm86fmbQNylP+LMB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvNmUyN1pmcXZEWDFCT1dienAtWnRBM0tVXzRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWX0kMA0G CSqGSIb3DQEBCwUAA4IBAQBGqJfPrGPOB2wxRlYAcrxxK/T+L13hMs117bL2Urgf VMBgqw1vCH3t09/1jnluHKrdoG6ofeba1MVFLoY/9yKz6bglxGL3XAQ71exYCzkT +E1JU2N/BDqMQkOR/qxona2O6dELnwmkXP92lYtldFvNo/dl4wXeO/RriE+yeAyK iROe1aNxGcgub4s0snfDiZbxeAU2PXA8jJjP2sqt5ehqMDaKhamkEBFyddSU5SKE ilvjm/Vx8Sb9j+5kIqca1gLv6XzAkvktO0aBbnHPC/tJMyM6Uz9YqzUXJ+VVs5AC 3lJIm3ids52zeS4v7/oFtvcthBz+/NIWDjYQl+oUc+5t -----END CERTIFICATE-----Generated at Sun Jan 25 07:17:49 2026 by rpki-client