This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/89u9unREIWHzHaE6spWcBTF1lJo.roa File: 89u9unREIWHzHaE6spWcBTF1lJo.roa (raw, json) Hash identifier: 8xhdQpe85q4z4HC4KzOm7n7h5SGt2CLfQ4BpETrnUNI= Subject key identifier: F3:DB:BD:BA:74:44:21:61:F3:1D:A1:3A:B2:95:9C:05:31:75:94:9A Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c Certificate serial: 019B77C76B6C6CDA79065A354338C32EE747 Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/89u9unREIWHzHaE6spWcBTF1lJo.roa Signing time: Thu 01 Jan 2026 04:18:36 +0000 ROA not before: Thu 01 Jan 2026 04:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214697 IP address blocks: 94.228.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:6b:6c:6c:da:79:06:5a:35:43:38:c3:2e:e7:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c Validity Not Before: Jan 1 04:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f3dbbdba74442161f31da13ab2959c053175949a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d5:38:a1:4b:22:fe:c8:ab:bf:1b:60:4f:c4: 88:41:80:ae:07:b6:1a:1b:50:7b:ea:81:7c:ed:d2: 3a:3c:be:ed:f3:44:3d:8d:69:69:bb:43:d2:90:ea: ec:1d:8a:75:cb:c8:13:e2:eb:12:06:6f:07:0e:63: ae:09:3f:eb:54:15:d0:56:bb:5d:c4:98:cb:73:e8: 45:93:b4:76:1b:56:a9:23:51:88:14:59:2f:a9:81: a4:fe:f0:70:99:5f:4d:b5:2f:58:bd:36:8e:01:a4: 32:94:09:db:4a:fc:ca:89:1e:68:eb:58:ca:26:51: e5:a5:3c:96:d1:7e:d6:83:82:ed:24:62:6e:1e:05: f0:e4:96:db:24:48:e5:c3:12:c8:a3:19:5a:97:0b: c1:5d:aa:15:a3:3f:d4:f8:45:e3:86:81:07:d8:79: 2b:0c:00:b2:ba:94:e9:52:4c:ca:ae:5a:76:f0:19: 44:bf:87:a5:f9:5c:0f:41:f1:f8:c3:19:ba:38:bc: 0a:a1:bb:25:ac:35:6d:3a:de:84:0e:fa:8c:4d:ad: b0:8d:41:49:61:86:36:58:08:6e:5d:e7:5c:29:f1: 29:2f:5e:43:bf:fa:e7:07:c6:4f:6f:a5:ef:bc:fa: 06:b6:5c:d9:40:98:36:35:15:28:a9:dd:73:10:32: 74:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:DB:BD:BA:74:44:21:61:F3:1D:A1:3A:B2:95:9C:05:31:75:94:9A X509v3 Authority Key Identifier: keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/89u9unREIWHzHaE6spWcBTF1lJo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.228.166.0/24 Signature Algorithm: sha256WithRSAEncryption a7:f3:0a:f6:9e:c9:4a:dc:5d:69:6c:5c:ce:e4:42:b7:ea:49: 04:13:f6:71:28:58:f0:be:27:48:18:8a:0a:1e:9e:88:e8:03: 96:0c:f8:62:2d:1b:5f:a7:6e:7c:dd:92:43:3d:d4:67:59:2f: e1:fb:a3:fd:d8:35:0d:7c:40:54:8d:d7:2e:c2:c0:22:6f:21: 80:d8:9c:02:32:a6:7a:db:56:8d:f6:9e:6b:fb:b8:c7:06:1a: ed:70:2d:20:19:b6:fd:8d:39:be:7d:1c:fb:e7:75:08:91:a2: 98:9e:04:63:bf:8d:79:c8:41:ba:0b:64:48:4d:8d:f5:0d:25: 00:a7:1e:c9:89:4f:5d:dd:97:72:34:e7:21:ac:51:bd:fb:8c: 99:88:0d:01:06:15:28:a7:1a:52:d8:30:e3:b4:51:5b:e2:37: 66:78:4a:38:cb:c7:5a:ae:25:b7:9f:25:d6:93:18:18:0c:ac: 4a:f3:44:27:b8:2f:d9:d0:6d:ed:f3:9a:61:17:74:f5:27:f6: 93:61:f9:55:8a:67:ca:8f:db:07:45:fa:73:a2:29:9d:86:84: 93:3c:2d:a5:2e:64:06:86:5d:7d:ac:23:00:75:f1:54:5b:e3: 7b:1a:0c:13:d6:a9:79:ba:a7:10:c0:ec:0d:1d:46:8d:cb:80: b9:21:db:b1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x2tsbNp5Blo1QzjDLudHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExN2Y5ZDU1ODI2YjQyNDg2ZGZjODRkMzVjMWE2M2E1Y2U4 NzUwN2MwHhcNMjYwMTAxMDQxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmM2RiYmRiYTc0NDQyMTYxZjMxZGExM2FiMjk1OWMwNTMxNzU5NDlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotU4oUsi/sirvxtgT8SIQYCuB7Ya G1B76oF87dI6PL7t80Q9jWlpu0PSkOrsHYp1y8gT4usSBm8HDmOuCT/rVBXQVrtd xJjLc+hFk7R2G1apI1GIFFkvqYGk/vBwmV9NtS9YvTaOAaQylAnbSvzKiR5o61jK JlHlpTyW0X7Wg4LtJGJuHgXw5JbbJEjlwxLIoxlalwvBXaoVoz/U+EXjhoEH2Hkr DACyupTpUkzKrlp28BlEv4el+VwPQfH4wxm6OLwKobslrDVtOt6EDvqMTa2wjUFJ YYY2WAhuXedcKfEpL15Dv/rnB8ZPb6XvvPoGtlzZQJg2NRUoqd1zEDJ0uQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPPbvbp0RCFh8x2hOrKVnAUxdZSaMB8GA1UdIwQY MBaAFBF/nVWCa0JIbfyE01waY6XOh1B8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVgtZFZZSnJRa2h0X0lUVFhCcGpwYzZIVUh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9lYWZjNDEtYzM1OC00YjUxLTliMWMt M2ZiYmJhOTI0OWNkLzEvODl1OXVuUkVJV0h6SGFFNnNwV2NCVEYxbEpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9lYWZjNDEtYzM1OC00YjUxLTliMWMtM2ZiYmJhOTI0OWNk LzEvRVgtZFZZSnJRa2h0X0lUVFhCcGpwYzZIVUh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXuSmMA0G CSqGSIb3DQEBCwUAA4IBAQCn8wr2nslK3F1pbFzO5EK36kkEE/ZxKFjwvidIGIoK Hp6I6AOWDPhiLRtfp2583ZJDPdRnWS/h+6P92DUNfEBUjdcuwsAibyGA2JwCMqZ6 21aN9p5r+7jHBhrtcC0gGbb9jTm+fRz753UIkaKYngRjv415yEG6C2RITY31DSUA px7JiU9d3ZdyNOchrFG9+4yZiA0BBhUopxpS2DDjtFFb4jdmeEo4y8dariW3nyXW kxgYDKxK80QnuC/Z0G3t85phF3T1J/aTYflVimfKj9sHRfpzoimdhoSTPC2lLmQG hl19rCMAdfFUW+N7GgwT1ql5uqcQwOwNHUaNy4C5Idux -----END CERTIFICATE-----Generated at Sun Jan 25 21:57:45 2026 by rpki-client