This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/6fgg7xqsr523qGPHi7CkI57esnw.roa File: 6fgg7xqsr523qGPHi7CkI57esnw.roa (raw, json) Hash identifier: 5t3Zc2A+rFjBdc1Q1JO52S5zZdf8XazOqarQklkOaQs= Subject key identifier: E9:F8:20:EF:1A:AC:AF:9D:B7:A8:63:C7:8B:B0:A4:23:9E:DE:B2:7C Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Certificate serial: 019B7AC84DEAF51607B6D99E29E5DAFDE66F Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/6fgg7xqsr523qGPHi7CkI57esnw.roa Signing time: Thu 01 Jan 2026 18:18:26 +0000 ROA not before: Thu 01 Jan 2026 18:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 18526 IP address blocks: 89.106.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:4d:ea:f5:16:07:b6:d9:9e:29:e5:da:fd:e6:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Validity Not Before: Jan 1 18:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e9f820ef1aacaf9db7a863c78bb0a4239edeb27c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f9:e8:e8:81:bf:37:c3:6d:c8:e9:49:50:48: a1:2c:6e:0c:c2:fa:dd:30:95:6a:67:05:87:9f:94: c1:6e:de:ab:4a:c5:1d:e6:e8:43:c6:bc:cd:37:09: ec:89:59:91:b1:09:ee:65:6a:26:27:a1:6d:e3:c3: ec:54:75:d1:59:19:3c:99:e0:15:d7:de:3c:1b:8d: 9e:4b:fd:13:cc:bb:71:77:cb:81:6a:f6:95:7b:79: a3:b1:c3:23:f1:45:1f:a7:e5:c4:42:10:99:c5:25: b3:3e:67:7e:72:9d:f5:6b:00:bd:59:08:83:01:43: 56:11:2e:58:47:90:af:7f:d5:e7:50:b2:fe:39:49: 23:b6:16:4d:00:fd:a4:e3:35:81:3e:b1:df:3f:8a: 35:14:1a:9d:b7:1a:ca:84:87:90:3f:80:d8:b7:40: c2:8d:ee:7c:8f:32:2e:01:c4:12:88:e1:cb:df:a6: f4:8a:44:db:15:9f:9e:3c:bb:99:28:b3:18:5d:97: 3d:96:f3:1f:20:d8:c2:b1:9f:d1:67:fc:b7:3e:a5: f0:2a:82:b3:22:33:41:53:cd:e1:f6:c1:50:69:80: 71:26:62:96:68:d9:78:7f:55:8a:56:d0:f1:32:c5: 8d:6f:6a:22:a2:4a:b8:19:db:17:0b:0c:f4:12:c7: 5a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:F8:20:EF:1A:AC:AF:9D:B7:A8:63:C7:8B:B0:A4:23:9E:DE:B2:7C X509v3 Authority Key Identifier: keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/6fgg7xqsr523qGPHi7CkI57esnw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.106.0.0/24 Signature Algorithm: sha256WithRSAEncryption c7:e9:a1:b9:91:dd:e0:3e:6a:48:d2:ad:af:b9:a5:67:da:81: e7:c5:6e:37:2b:f9:6b:3a:26:ec:87:46:ce:85:38:59:29:42: d9:d5:eb:44:11:d0:f1:9b:f7:24:43:ac:8e:05:9b:19:8c:f4: c5:60:da:7b:16:f6:a0:cb:66:2a:c3:35:0b:45:c9:3b:43:f9: 8d:a5:7a:0c:4a:c1:38:6a:a6:26:f9:13:90:bc:93:7a:7b:32: 06:02:b9:b6:07:a4:46:e0:e0:d4:11:02:d3:05:ca:b2:5d:51: 7d:bc:5c:08:3a:44:da:6d:e0:da:1d:8f:b0:e6:07:58:e7:8a: d2:d4:e8:f3:e8:04:08:a3:cb:82:5f:95:a7:c2:01:6d:39:1e: 00:8f:61:dc:65:49:48:4d:4c:40:4f:09:b7:00:66:c1:97:de: 26:c3:a1:f5:aa:67:89:3b:68:39:38:61:e4:8d:83:6b:d7:de: 90:d1:a1:2b:72:76:a1:ce:f8:b3:e0:7a:f1:fc:21:68:3f:d0: b2:5c:22:4f:77:74:59:f5:b9:be:54:4b:dc:03:2a:2c:3e:a9: 15:36:2d:a5:fc:9d:85:1d:9a:57:95:3c:04:c1:9e:81:2b:1f: 0c:f9:fb:56:0c:51:3a:92:7c:1d:fe:49:71:11:da:a5:1a:a6: b6:63:d5:3e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yE3q9RYHttmeKeXa/eZvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz MGNiNjMwHhcNMjYwMTAxMTgxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOWY4MjBlZjFhYWNhZjlkYjdhODYzYzc4YmIwYTQyMzllZGViMjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/no6IG/N8NtyOlJUEihLG4Mwvrd MJVqZwWHn5TBbt6rSsUd5uhDxrzNNwnsiVmRsQnuZWomJ6Ft48PsVHXRWRk8meAV 1948G42eS/0TzLtxd8uBavaVe3mjscMj8UUfp+XEQhCZxSWzPmd+cp31awC9WQiD AUNWES5YR5Cvf9XnULL+OUkjthZNAP2k4zWBPrHfP4o1FBqdtxrKhIeQP4DYt0DC je58jzIuAcQSiOHL36b0ikTbFZ+ePLuZKLMYXZc9lvMfINjCsZ/RZ/y3PqXwKoKz IjNBU83h9sFQaYBxJmKWaNl4f1WKVtDxMsWNb2oiokq4GdsXCwz0EsdagQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOn4IO8arK+dt6hjx4uwpCOe3rJ8MB8GA1UdIwQY MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt YjRiOGRiMjBiMWZiLzEvNmZnZzd4cXNyNTIzcUdQSGk3Q2tJNTdlc253LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWWoAMA0G CSqGSIb3DQEBCwUAA4IBAQDH6aG5kd3gPmpI0q2vuaVn2oHnxW43K/lrOibsh0bO hThZKULZ1etEEdDxm/ckQ6yOBZsZjPTFYNp7Fvagy2YqwzULRck7Q/mNpXoMSsE4 aqYm+ROQvJN6ezIGArm2B6RG4ODUEQLTBcqyXVF9vFwIOkTabeDaHY+w5gdY54rS 1Ojz6AQIo8uCX5WnwgFtOR4Aj2HcZUlITUxATwm3AGbBl94mw6H1qmeJO2g5OGHk jYNr196Q0aErcnahzviz4Hrx/CFoP9CyXCJPd3RZ9bm+VEvcAyosPqkVNi2l/J2F HZpXlTwEwZ6BKx8M+ftWDFE6knwd/klxEdqlGqa2Y9U+ -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:18 2026 by rpki-client