This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/eQ4EGhSV6uGFEKwIgwY9cmJUUYM.roa File: eQ4EGhSV6uGFEKwIgwY9cmJUUYM.roa (raw, json) Hash identifier: H69c+k9Jj7yLzfrYUCen8bz8XDZeFZd5WtWdrEuCPgc= Subject key identifier: 79:0E:04:1A:14:95:EA:E1:85:10:AC:08:83:06:3D:72:62:54:51:83 Certificate issuer: /CN=c0747fbe26c9cdd7628adfedb57b78be8de75e29 Certificate serial: 019B79ED0A26461DF922466E27E092BBB018 Authority key identifier: C0:74:7F:BE:26:C9:CD:D7:62:8A:DF:ED:B5:7B:78:BE:8D:E7:5E:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wHR_vibJzddiit_ttXt4vo3nXik.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/eQ4EGhSV6uGFEKwIgwY9cmJUUYM.roa Signing time: Thu 01 Jan 2026 14:18:56 +0000 ROA not before: Thu 01 Jan 2026 14:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 45566 IP address blocks: 89.207.228.0/24 maxlen: 24 89.207.231.0/24 maxlen: 24 185.25.28.0/23 maxlen: 23 2a00:79e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/wHR_vibJzddiit_ttXt4vo3nXik.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/wHR_vibJzddiit_ttXt4vo3nXik.mft rsync://rpki.ripe.net/repository/DEFAULT/wHR_vibJzddiit_ttXt4vo3nXik.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:0a:26:46:1d:f9:22:46:6e:27:e0:92:bb:b0:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0747fbe26c9cdd7628adfedb57b78be8de75e29 Validity Not Before: Jan 1 14:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=790e041a1495eae18510ac0883063d7262545183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f5:26:7b:78:4f:2f:a1:ef:d4:96:1f:96:5a: fa:a9:1b:7a:e3:9b:d2:0d:ba:d8:69:f0:04:6e:b7: 9b:49:1b:73:40:15:34:cd:86:ba:83:70:e5:a4:b9: ce:6a:1b:fe:c6:44:6b:6c:b9:62:11:d3:12:7c:7d: 8d:d2:6f:49:1d:f9:33:b1:29:07:ea:f2:79:25:f5: c9:a0:a9:82:b0:56:c1:29:5c:fb:59:b4:ef:23:74: 3b:c7:6a:2a:62:83:34:f8:59:b9:8c:06:5b:a1:d1: 0b:06:2f:c3:a1:b6:05:c7:aa:4a:6f:d4:7c:bf:d7: d8:15:21:db:ef:03:59:54:3c:94:4c:9a:0d:ca:88: 1d:10:08:b2:c7:2d:43:9d:6d:b9:2c:f4:98:02:35: 5e:05:32:f7:17:e1:be:05:81:96:08:5b:4c:be:98: 4f:2b:33:8f:99:6a:6b:66:dc:ed:08:1d:89:08:ea: 7e:be:ad:cf:c6:75:65:10:20:be:18:3e:78:40:1a: 33:05:2a:89:e7:e0:6e:3c:a4:a2:a1:ba:85:65:03: 15:d5:2f:cb:3f:db:cb:a0:71:08:96:8d:ec:25:e8: 48:6e:d6:50:6e:06:30:6f:2b:c3:ff:8f:bf:cc:02: 8b:ef:e9:58:8f:a3:d5:06:8f:47:6f:66:8b:db:6d: ca:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:0E:04:1A:14:95:EA:E1:85:10:AC:08:83:06:3D:72:62:54:51:83 X509v3 Authority Key Identifier: keyid:C0:74:7F:BE:26:C9:CD:D7:62:8A:DF:ED:B5:7B:78:BE:8D:E7:5E:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHR_vibJzddiit_ttXt4vo3nXik.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/eQ4EGhSV6uGFEKwIgwY9cmJUUYM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/wHR_vibJzddiit_ttXt4vo3nXik.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.207.228.0/24 89.207.231.0/24 185.25.28.0/23 IPv6: 2a00:79e0::/32 Signature Algorithm: sha256WithRSAEncryption 2a:a4:76:fa:d7:1b:89:a5:01:66:10:bf:55:ac:4b:9d:ee:67: 3c:25:96:41:64:15:06:85:5e:38:1d:8a:0a:81:59:d7:d1:14: 6e:7f:52:4b:32:63:30:aa:bb:1e:82:bb:b7:08:b2:3d:c5:c0: 12:33:75:c0:86:a5:0a:67:ef:81:c4:50:e2:be:f7:6e:32:21: 3b:78:c7:3f:fe:cc:b7:3a:8e:40:07:55:c7:ea:f7:16:b8:5e: 91:75:de:7b:a5:e7:0d:03:cb:5f:ab:70:e5:45:ac:65:cc:4a: 9e:87:79:39:fe:ec:4e:80:80:e8:07:76:2b:8b:b5:f2:ba:b9: 9a:67:3c:d4:b6:0c:1a:fd:d8:b2:ea:6b:1b:40:86:30:3f:c4: de:5f:eb:60:6e:0b:e4:96:e3:5f:ed:ca:1e:f4:63:b3:b6:5c: 1e:6a:fc:89:e5:22:b1:29:63:87:50:ac:6a:55:d9:86:05:74: 85:ef:36:64:68:4b:ca:68:f3:39:5c:09:96:9e:1e:58:4a:0c: 33:32:2f:c0:b2:dc:66:7c:f7:af:88:fe:38:85:08:ed:34:4c: a9:9c:ff:90:ba:be:da:1b:24:4e:92:b0:eb:21:22:28:df:65: 1c:67:52:95:9a:4c:08:69:b7:a3:fc:64:34:8c:1c:ee:f5:5a: 53:23:62:18 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt57QomRh35IkZuJ+CSu7AYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwNzQ3ZmJlMjZjOWNkZDc2MjhhZGZlZGI1N2I3OGJlOGRl NzVlMjkwHhcNMjYwMTAxMTQxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OTBlMDQxYTE0OTVlYWUxODUxMGFjMDg4MzA2M2Q3MjYyNTQ1MTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufUme3hPL6Hv1JYfllr6qRt645vS DbrYafAEbrebSRtzQBU0zYa6g3DlpLnOahv+xkRrbLliEdMSfH2N0m9JHfkzsSkH 6vJ5JfXJoKmCsFbBKVz7WbTvI3Q7x2oqYoM0+Fm5jAZbodELBi/DobYFx6pKb9R8 v9fYFSHb7wNZVDyUTJoNyogdEAiyxy1DnW25LPSYAjVeBTL3F+G+BYGWCFtMvphP KzOPmWprZtztCB2JCOp+vq3PxnVlECC+GD54QBozBSqJ5+BuPKSiobqFZQMV1S/L P9vLoHEIlo3sJehIbtZQbgYwbyvD/4+/zAKL7+lYj6PVBo9Hb2aL223KEQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFHkOBBoUlerhhRCsCIMGPXJiVFGDMB8GA1UdIwQY MBaAFMB0f74myc3XYorf7bV7eL6N514pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0hSX3ZpYkp6ZGRpaXRfdHRYdDR2bzNuWGlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC8yNDA2YWItM2JjYi00MWJjLWE5NDIt MzY4NjA4Mzg1ODgzLzEvZVE0RUdoU1Y2dUdGRUt3SWd3WTljbUpVVVlNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC8yNDA2YWItM2JjYi00MWJjLWE5NDItMzY4NjA4Mzg1ODgz LzEvd0hSX3ZpYkp6ZGRpaXRfdHRYdDR2bzNuWGlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAWc/kAwQA Wc/nAwQBuRkcMA0EAgACMAcDBQAqAHngMA0GCSqGSIb3DQEBCwUAA4IBAQAqpHb6 1xuJpQFmEL9VrEud7mc8JZZBZBUGhV44HYoKgVnX0RRuf1JLMmMwqrsegru3CLI9 xcASM3XAhqUKZ++BxFDivvduMiE7eMc//sy3Oo5AB1XH6vcWuF6Rdd57pecNA8tf q3DlRaxlzEqeh3k5/uxOgIDoB3Yri7XyurmaZzzUtgwa/diy6msbQIYwP8TeX+tg bgvkluNf7coe9GOztlweavyJ5SKxKWOHUKxqVdmGBXSF7zZkaEvKaPM5XAmWnh5Y SgwzMi/AstxmfPeviP44hQjtNEypnP+Qur7aGyROkrDrISIo32UcZ1KVmkwIabej /GQ0jBzu9VpTI2IY -----END CERTIFICATE-----Generated at Mon Jan 26 01:29:50 2026 by rpki-client