This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/1qKDTARbhvruXt3ILuIy-rNMiI8.roa File: 1qKDTARbhvruXt3ILuIy-rNMiI8.roa (raw, json) Hash identifier: gFA6+Fyql5FgrCjgzqxvmnZ7Gi6PHGZmTsvh1G/Ttjk= Subject key identifier: D6:A2:83:4C:04:5B:86:FA:EE:5E:DD:C8:2E:E2:32:FA:B3:4C:88:8F Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Certificate serial: 019B7AC86348796C5628864199FC20297C82 Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/1qKDTARbhvruXt3ILuIy-rNMiI8.roa Signing time: Thu 01 Jan 2026 18:18:31 +0000 ROA not before: Thu 01 Jan 2026 18:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213896 IP address blocks: 89.106.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:63:48:79:6c:56:28:86:41:99:fc:20:29:7c:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Validity Not Before: Jan 1 18:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d6a2834c045b86faee5eddc82ee232fab34c888f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:86:2b:62:a6:3b:e7:d4:3c:fb:31:74:5d:08: c6:e7:6c:f3:42:0c:70:30:d8:8c:40:4c:3b:bb:af: 12:f1:4d:c7:4b:8c:c3:3e:7f:93:c8:80:ec:26:19: 07:18:2b:ee:ce:85:5f:6f:d0:44:5f:93:d4:a3:b0: 60:1d:f1:08:02:0a:ef:03:a7:30:d3:c2:98:3f:e6: 71:90:93:48:e2:f7:96:ee:e8:d2:33:f9:fa:d5:5f: cb:6a:53:5c:0c:d7:40:ac:55:71:66:d7:db:4b:03: 2e:3e:da:73:37:25:76:54:c1:d0:44:c5:d9:57:57: 07:f0:bd:07:cd:80:0e:33:5c:db:32:2b:87:13:f8: c9:0b:af:25:8d:e3:48:a2:c1:e7:f1:5d:45:ac:44: 18:fa:35:77:66:52:90:0a:d0:42:74:6b:a7:84:35: b3:da:39:dd:1d:85:46:cc:91:cb:d0:8e:e6:25:dc: ca:5a:76:3a:da:64:ff:62:18:03:c1:19:eb:5e:ae: 3c:8b:c1:5c:14:a0:e2:0a:5e:08:2c:4e:d8:b9:5e: e5:bb:ea:69:7c:aa:f4:9b:6a:51:d5:8b:dd:0d:cc: 94:89:88:06:0c:fe:e3:6d:34:7b:4c:37:f3:3d:02: 6e:ab:21:ba:d5:2e:e6:89:f7:f4:7c:78:8e:7e:57: e1:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:A2:83:4C:04:5B:86:FA:EE:5E:DD:C8:2E:E2:32:FA:B3:4C:88:8F X509v3 Authority Key Identifier: keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/1qKDTARbhvruXt3ILuIy-rNMiI8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.106.12.0/24 Signature Algorithm: sha256WithRSAEncryption 67:b3:33:ee:39:6d:c1:31:e6:b7:6f:15:7e:b1:f8:21:55:38: 1c:2b:2a:04:a6:0d:5b:73:ce:b3:e8:55:f5:49:9c:54:93:b9: 84:99:4c:fe:eb:23:3b:ad:e5:e7:d2:f0:b3:07:32:c9:29:a5: cc:46:e2:2f:07:4b:a6:89:7b:e8:0e:0a:23:96:d4:3d:6c:f7: b3:66:6a:6a:c9:85:9b:ed:08:31:6f:87:fc:e7:b2:17:e0:65: 93:0f:15:56:c8:11:52:c3:86:0a:01:fe:2f:cb:62:30:5d:bd: dd:f7:f9:18:87:49:55:69:64:b9:bf:bb:3b:ef:59:e2:5f:cf: 68:44:c8:03:7c:26:e5:91:5b:81:5b:5e:72:70:be:0d:0b:2e: 9e:f7:e2:95:4f:c9:5b:07:fa:bb:9e:68:fd:b0:55:36:0b:c1: 3b:a5:5a:8b:77:f6:66:6c:c6:b2:e5:21:28:8a:e9:db:52:58: be:a4:b0:61:b5:1e:e1:4a:31:6b:95:24:44:57:82:34:ac:7b: a9:67:fe:98:1b:16:61:5b:54:f7:ba:39:de:b3:1f:62:af:88: 3c:2e:dc:94:0c:a3:12:8c:e7:5b:ab:f3:4e:b4:16:f3:8c:da: db:22:90:6b:ef:4d:71:eb:71:90:b9:23:f1:76:da:a9:96:d0: 5a:37:ab:4e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yGNIeWxWKIZBmfwgKXyCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz MGNiNjMwHhcNMjYwMTAxMTgxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNmEyODM0YzA0NWI4NmZhZWU1ZWRkYzgyZWUyMzJmYWIzNGM4ODhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4YrYqY759Q8+zF0XQjG52zzQgxw MNiMQEw7u68S8U3HS4zDPn+TyIDsJhkHGCvuzoVfb9BEX5PUo7BgHfEIAgrvA6cw 08KYP+ZxkJNI4veW7ujSM/n61V/LalNcDNdArFVxZtfbSwMuPtpzNyV2VMHQRMXZ V1cH8L0HzYAOM1zbMiuHE/jJC68ljeNIosHn8V1FrEQY+jV3ZlKQCtBCdGunhDWz 2jndHYVGzJHL0I7mJdzKWnY62mT/YhgDwRnrXq48i8FcFKDiCl4ILE7YuV7lu+pp fKr0m2pR1YvdDcyUiYgGDP7jbTR7TDfzPQJuqyG61S7miff0fHiOflfhzwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNaig0wEW4b67l7dyC7iMvqzTIiPMB8GA1UdIwQY MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt YjRiOGRiMjBiMWZiLzEvMXFLRFRBUmJodnJ1WHQzSUx1SXktck5NaUk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWWoMMA0G CSqGSIb3DQEBCwUAA4IBAQBnszPuOW3BMea3bxV+sfghVTgcKyoEpg1bc86z6FX1 SZxUk7mEmUz+6yM7reXn0vCzBzLJKaXMRuIvB0umiXvoDgojltQ9bPezZmpqyYWb 7Qgxb4f857IX4GWTDxVWyBFSw4YKAf4vy2IwXb3d9/kYh0lVaWS5v7s771niX89o RMgDfCblkVuBW15ycL4NCy6e9+KVT8lbB/q7nmj9sFU2C8E7pVqLd/ZmbMay5SEo iunbUli+pLBhtR7hSjFrlSREV4I0rHupZ/6YGxZhW1T3ujnesx9ir4g8LtyUDKMS jOdbq/NOtBbzjNrbIpBr701x63GQuSPxdtqpltBaN6tO -----END CERTIFICATE-----Generated at Sun Jan 25 13:54:25 2026 by rpki-client