This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/89rYGxAtaqZ3ZK9x0O0jymSIagw.roa File: 89rYGxAtaqZ3ZK9x0O0jymSIagw.roa (raw, json) Hash identifier: MlQykDP+P8c+/zOWXDU+3hN/+cvxs5AGjXDmDkTBzIo= Subject key identifier: F3:DA:D8:1B:10:2D:6A:A6:77:64:AF:71:D0:ED:23:CA:64:88:6A:0C Certificate issuer: /CN=122a646bed4c417a6b4805f93d77a7a465e34b93 Certificate serial: 019B7EA6F2BE71974423A7579EE64D05BB09 Authority key identifier: 12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/89rYGxAtaqZ3ZK9x0O0jymSIagw.roa Signing time: Fri 02 Jan 2026 12:20:28 +0000 ROA not before: Fri 02 Jan 2026 12:20:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205384 IP address blocks: 93.159.180.0/24 maxlen: 24 93.159.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.crl rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.mft rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:f2:be:71:97:44:23:a7:57:9e:e6:4d:05:bb:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=122a646bed4c417a6b4805f93d77a7a465e34b93 Validity Not Before: Jan 2 12:20:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f3dad81b102d6aa67764af71d0ed23ca64886a0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:d2:22:2d:ed:45:c4:5e:05:1a:12:1b:06:61: 39:fb:2e:55:a3:de:a3:4f:86:e8:e6:3d:40:9c:a3: db:f9:50:a1:7f:d4:65:ed:43:5d:43:b3:db:8e:08: 8b:72:c3:12:19:a0:93:d2:05:66:e9:aa:c7:8e:b9: fa:c9:e6:13:9c:cf:7e:75:d1:63:92:ea:a1:7c:26: f3:c5:99:6e:4d:52:8a:85:5c:9b:8e:48:b7:7a:49: d5:89:f8:3c:5a:32:53:8c:ee:f5:1a:45:2f:b3:87: c2:70:d3:f5:ab:eb:7a:64:fc:a7:21:d5:88:65:3a: 03:6d:cc:20:68:a4:c8:b9:37:de:99:81:13:b6:2c: 26:7b:1b:65:9f:18:b1:62:71:f0:a0:de:e2:75:5d: 7b:19:8b:85:98:0e:a5:61:5a:6b:70:17:f2:b3:69: b9:7a:12:4b:9e:10:55:ca:88:88:4a:bf:42:03:60: 19:54:62:98:d9:8d:33:55:8d:38:ea:ab:8c:42:af: 1e:e9:1e:8c:97:ac:b1:59:b2:1e:a8:34:f1:5b:e6: 44:5e:d7:6e:4b:3d:c1:19:31:18:43:e3:a7:bf:27: 81:05:59:fd:e6:93:85:d9:7e:ca:e5:70:f1:3e:0a: c2:f9:09:e2:fd:ee:5c:5b:47:0e:80:4c:c3:39:c4: cf:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:DA:D8:1B:10:2D:6A:A6:77:64:AF:71:D0:ED:23:CA:64:88:6A:0C X509v3 Authority Key Identifier: keyid:12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/89rYGxAtaqZ3ZK9x0O0jymSIagw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.159.180.0/23 Signature Algorithm: sha256WithRSAEncryption 43:3b:f1:4a:54:b0:fa:30:39:97:04:a6:9a:c5:46:6d:d0:eb: 75:0a:0d:e8:63:66:b4:eb:d5:76:53:d0:87:93:ff:84:5d:64: 15:97:75:ea:df:ba:07:43:d5:6d:66:cf:13:a4:4b:93:4f:b6: 55:ec:c0:bf:be:1d:37:46:ab:f1:05:f1:d8:12:37:fb:fa:c3: 22:f4:e4:7b:d4:62:19:01:49:d7:97:e0:7b:e0:ef:37:5e:1d: aa:96:54:e0:c7:ac:d6:0a:ab:86:22:06:e2:80:eb:32:48:22: fc:12:13:58:6e:32:81:9f:ed:63:2c:f6:e1:aa:60:58:27:e8: e8:bb:06:6f:7f:fa:1e:ec:55:ab:53:15:93:46:12:07:89:9f: 33:a1:69:03:69:ee:32:dc:5b:10:fe:5d:27:12:f8:f7:fc:7c: 2b:e1:43:fd:d9:9f:bd:d1:7e:34:1a:8e:0c:81:33:75:2e:f2: da:90:7b:f6:d8:52:f1:9b:ae:05:29:d5:1a:84:c7:d5:d4:24: 05:9f:64:fe:24:3e:52:65:84:88:08:ef:47:04:1d:42:2e:9e: 9f:ac:1b:54:31:ae:90:2a:b6:33:08:ea:a8:0c:e6:fa:83:2f: fb:9b:0c:cb:fb:ae:69:ec:df:d9:22:c5:bf:42:0e:c7:f5:04: 76:65:25:8b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pvK+cZdEI6dXnuZNBbsJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyMmE2NDZiZWQ0YzQxN2E2YjQ4MDVmOTNkNzdhN2E0NjVl MzRiOTMwHhcNMjYwMTAyMTIyMDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmM2RhZDgxYjEwMmQ2YWE2Nzc2NGFmNzFkMGVkMjNjYTY0ODg2YTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49IiLe1FxF4FGhIbBmE5+y5Vo96j T4bo5j1AnKPb+VChf9Rl7UNdQ7PbjgiLcsMSGaCT0gVm6arHjrn6yeYTnM9+ddFj kuqhfCbzxZluTVKKhVybjki3eknVifg8WjJTjO71GkUvs4fCcNP1q+t6ZPynIdWI ZToDbcwgaKTIuTfemYETtiwmextlnxixYnHwoN7idV17GYuFmA6lYVprcBfys2m5 ehJLnhBVyoiISr9CA2AZVGKY2Y0zVY046quMQq8e6R6Ml6yxWbIeqDTxW+ZEXtdu Sz3BGTEYQ+OnvyeBBVn95pOF2X7K5XDxPgrC+Qni/e5cW0cOgEzDOcTP4QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPPa2BsQLWqmd2SvcdDtI8pkiGoMMB8GA1UdIwQY MBaAFBIqZGvtTEF6a0gF+T13p6Rl40uTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWlwa2EtMU1RWHByU0FYNVBYZW5wR1hqUzVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9hNTk2ZTItMjlkMi00OGM2LTliYWIt NWNiZDFmM2ZmMzlhLzEvODlyWUd4QXRhcVozWks5eDBPMGp5bVNJYWd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9hNTk2ZTItMjlkMi00OGM2LTliYWItNWNiZDFmM2ZmMzlh LzEvRWlwa2EtMU1RWHByU0FYNVBYZW5wR1hqUzVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXZ+0MA0G CSqGSIb3DQEBCwUAA4IBAQBDO/FKVLD6MDmXBKaaxUZt0Ot1Cg3oY2a069V2U9CH k/+EXWQVl3Xq37oHQ9VtZs8TpEuTT7ZV7MC/vh03RqvxBfHYEjf7+sMi9OR71GIZ AUnXl+B74O83Xh2qllTgx6zWCquGIgbigOsySCL8EhNYbjKBn+1jLPbhqmBYJ+jo uwZvf/oe7FWrUxWTRhIHiZ8zoWkDae4y3FsQ/l0nEvj3/Hwr4UP92Z+90X40Go4M gTN1LvLakHv22FLxm64FKdUahMfV1CQFn2T+JD5SZYSICO9HBB1CLp6frBtUMa6Q KrYzCOqoDOb6gy/7mwzL+65p7N/ZIsW/Qg7H9QR2ZSWL -----END CERTIFICATE-----Generated at Sun Jan 25 16:54:12 2026 by rpki-client