This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/1qEKqAJdH_5JUlUOsEMtQdOuv-Q.roa File: 1qEKqAJdH_5JUlUOsEMtQdOuv-Q.roa (raw, json) Hash identifier: OkbONL4Kv2cLwbDetNkEjbv+0531gLH+WXA/3kqlV9c= Subject key identifier: D6:A1:0A:A8:02:5D:1F:FE:49:52:55:0E:B0:43:2D:41:D3:AE:BF:E4 Certificate issuer: /CN=89da60f049dfba34be4b4e8418b9ff492125c449 Certificate serial: 019B7DCB4D6FD29B2765A2668E14BC9FE695 Authority key identifier: 89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/1qEKqAJdH_5JUlUOsEMtQdOuv-Q.roa Signing time: Fri 02 Jan 2026 08:20:34 +0000 ROA not before: Fri 02 Jan 2026 08:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1 IP address blocks: 94.206.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:4d:6f:d2:9b:27:65:a2:66:8e:14:bc:9f:e6:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89da60f049dfba34be4b4e8418b9ff492125c449 Validity Not Before: Jan 2 08:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d6a10aa8025d1ffe4952550eb0432d41d3aebfe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:bd:67:19:3b:42:0d:7b:40:91:a2:c7:48:29: 41:c2:23:3d:c3:0f:6a:88:c8:44:ca:7b:3e:8d:4d: 93:14:3b:3d:2f:d7:cf:7f:b8:d7:fe:50:f6:48:97: d9:ce:37:98:b4:d8:cb:40:b8:59:d3:1e:b5:c1:42: 51:89:37:47:ff:cb:dc:45:a4:8a:21:4a:5e:6b:28: 61:07:a3:4f:26:83:0b:7c:a6:74:f9:a7:1b:cf:9f: 99:74:fb:66:99:45:b8:ba:cd:d2:68:4f:99:86:44: 1d:1b:49:6c:e2:bf:4e:2a:7d:c1:a8:58:74:f5:5a: 60:cd:98:36:70:bc:d8:96:e2:7d:cd:5a:ac:11:51: a7:18:c7:b8:ab:00:a0:8e:9c:c6:da:2a:85:ef:32: 19:54:86:15:c6:f5:ba:44:50:19:c0:b0:2d:b3:12: 0d:c2:43:9e:11:63:60:af:8e:51:5a:25:92:55:6b: 3e:3a:49:5d:58:f7:2f:4b:cd:ae:df:68:cf:35:b5: 2f:2d:f8:75:f5:65:4a:a9:96:81:9b:2a:59:b9:89: d5:06:81:58:cb:1b:ed:08:df:9d:88:42:36:a4:55: 7a:94:cd:81:fe:83:10:63:1b:39:f2:20:fd:44:4b: b1:2d:b2:a7:f8:ad:46:45:50:4c:e7:0e:8b:45:de: d0:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:A1:0A:A8:02:5D:1F:FE:49:52:55:0E:B0:43:2D:41:D3:AE:BF:E4 X509v3 Authority Key Identifier: keyid:89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/1qEKqAJdH_5JUlUOsEMtQdOuv-Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.206.108.0/23 Signature Algorithm: sha256WithRSAEncryption 80:68:ed:cd:81:37:9e:2f:e0:b7:7c:11:d3:06:6a:12:d1:3b: 8b:ef:ca:65:98:7c:85:a1:e3:57:71:dd:b4:a5:a7:cf:63:5a: 73:0d:2d:dc:7d:ad:e7:ff:ee:f0:54:c1:49:14:af:43:f8:e0: e3:c4:40:19:48:79:17:09:45:26:a4:c6:42:02:dc:01:96:ac: 28:06:b0:b1:94:b9:a5:13:bf:f3:75:28:76:f8:d4:a9:5d:f2: 50:8e:ee:f8:75:67:48:83:5b:f6:75:54:5e:59:70:a1:81:8b: f6:75:d6:9e:a7:2f:b0:53:b9:69:72:dd:61:57:c0:bd:e7:2d: 46:96:c8:1e:de:c9:90:1c:2a:0d:81:5f:8b:d1:98:dd:19:9a: 54:6e:55:61:c3:82:3f:14:5c:39:a2:6d:04:a3:cf:1a:6c:5a: 35:36:46:d6:4f:55:27:e8:ae:87:aa:fc:26:72:7d:88:4e:b7: 94:8d:e4:47:0e:1e:20:9c:85:a4:1b:02:7d:58:e8:45:20:cb: 17:f8:07:c2:01:84:4d:cd:52:d3:f3:54:ae:46:62:03:b2:71: e5:b9:a9:69:af:1c:6e:3e:c5:b6:67:66:cc:28:46:30:ee:8b: 3a:d7:8b:f7:20:65:33:43:24:0f:f1:91:d0:7b:af:a5:49:0e: a7:25:72:6b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y01v0psnZaJmjhS8n+aVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5ZGE2MGYwNDlkZmJhMzRiZTRiNGU4NDE4YjlmZjQ5MjEy NWM0NDkwHhcNMjYwMTAyMDgyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNmExMGFhODAyNWQxZmZlNDk1MjU1MGViMDQzMmQ0MWQzYWViZmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjb1nGTtCDXtAkaLHSClBwiM9ww9q iMhEyns+jU2TFDs9L9fPf7jX/lD2SJfZzjeYtNjLQLhZ0x61wUJRiTdH/8vcRaSK IUpeayhhB6NPJoMLfKZ0+acbz5+ZdPtmmUW4us3SaE+ZhkQdG0ls4r9OKn3BqFh0 9VpgzZg2cLzYluJ9zVqsEVGnGMe4qwCgjpzG2iqF7zIZVIYVxvW6RFAZwLAtsxIN wkOeEWNgr45RWiWSVWs+OkldWPcvS82u32jPNbUvLfh19WVKqZaBmypZuYnVBoFY yxvtCN+diEI2pFV6lM2B/oMQYxs58iD9REuxLbKn+K1GRVBM5w6LRd7Q4wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNahCqgCXR/+SVJVDrBDLUHTrr/kMB8GA1UdIwQY MBaAFInaYPBJ37o0vktOhBi5/0khJcRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWRwZzhFbmZ1alMtUzA2RUdMbl9TU0VseEVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTQ3N2YtMDc4NS00MDI2LTgzYmUt Njk4OTBjODI5ZTMzLzEvMXFFS3FBSmRIXzVKVWxVT3NFTXRRZE91di1RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9kZTQ3N2YtMDc4NS00MDI2LTgzYmUtNjk4OTBjODI5ZTMz LzEvaWRwZzhFbmZ1alMtUzA2RUdMbl9TU0VseEVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXs5sMA0G CSqGSIb3DQEBCwUAA4IBAQCAaO3NgTeeL+C3fBHTBmoS0TuL78plmHyFoeNXcd20 pafPY1pzDS3cfa3n/+7wVMFJFK9D+ODjxEAZSHkXCUUmpMZCAtwBlqwoBrCxlLml E7/zdSh2+NSpXfJQju74dWdIg1v2dVReWXChgYv2ddaepy+wU7lpct1hV8C95y1G lsge3smQHCoNgV+L0ZjdGZpUblVhw4I/FFw5om0Eo88abFo1NkbWT1Un6K6Hqvwm cn2ITreUjeRHDh4gnIWkGwJ9WOhFIMsX+AfCAYRNzVLT81SuRmIDsnHlualprxxu PsW2Z2bMKEYw7os614v3IGUzQyQP8ZHQe6+lSQ6nJXJr -----END CERTIFICATE-----Generated at Sun Jan 25 21:04:31 2026 by rpki-client