This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/8EOVzYX_BJ-ZmF_HqJuyyAPajJA.roa File: 8EOVzYX_BJ-ZmF_HqJuyyAPajJA.roa (raw, json) Hash identifier: xujS/Qo3HpfPwVexCBb689ygJGUwXsBcqj9eWdAu9Y0= Subject key identifier: F0:43:95:CD:85:FF:04:9F:99:98:5F:C7:A8:9B:B2:C8:03:DA:8C:90 Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Certificate serial: 019B7AC84C6DCF8712776B25CE99DD4E7A22 Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/8EOVzYX_BJ-ZmF_HqJuyyAPajJA.roa Signing time: Thu 01 Jan 2026 18:18:25 +0000 ROA not before: Thu 01 Jan 2026 18:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16276 IP address blocks: 89.106.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:4c:6d:cf:87:12:77:6b:25:ce:99:dd:4e:7a:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Validity Not Before: Jan 1 18:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f04395cd85ff049f99985fc7a89bb2c803da8c90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ed:00:dc:d5:2c:61:10:17:f2:e5:95:85:17: 13:90:6e:d9:2e:1f:4f:60:ce:7a:1e:33:5e:e1:87: 24:a8:79:06:3f:b3:03:be:e6:c5:c8:30:a6:04:9f: c5:8c:93:9d:d8:60:65:a8:be:f3:11:04:fb:89:93: 26:ca:69:f0:9f:23:c3:67:58:4e:2a:4d:11:72:a1: f2:d5:d4:63:a1:e3:b8:1a:5b:52:e3:02:05:c6:a5: cd:ac:e2:7b:c5:6f:18:d5:20:1b:76:b0:19:11:88: 65:a6:5c:ae:c6:37:bc:e6:0d:59:ad:d6:d2:0e:47: 7e:72:ba:27:9e:ec:95:ac:cb:30:c9:27:6e:59:b8: e5:fd:35:98:89:b2:63:34:35:3f:e2:0a:0e:a4:01: 95:a5:a5:0c:36:b9:c6:f7:39:fa:ae:31:88:38:e4: f5:68:19:37:3f:e2:ea:0d:d2:22:bf:95:4f:22:18: 91:e5:55:25:9a:a1:87:ce:8f:94:62:9d:b3:db:f6: 7c:b0:25:d6:24:2b:98:66:0f:9c:50:90:22:81:e1: 2d:65:0a:1a:98:74:2f:f6:b9:e9:3d:6e:46:64:63: a2:07:0a:4f:83:d8:3c:af:a7:b7:18:d7:c1:7c:4b: 85:ba:fa:f4:c7:37:4f:92:cd:d0:5e:26:d7:29:66: f7:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:43:95:CD:85:FF:04:9F:99:98:5F:C7:A8:9B:B2:C8:03:DA:8C:90 X509v3 Authority Key Identifier: keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/8EOVzYX_BJ-ZmF_HqJuyyAPajJA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.106.2.0/24 Signature Algorithm: sha256WithRSAEncryption b3:15:6a:05:6c:01:4d:a5:73:db:c6:f1:63:29:3f:3e:64:35: 17:6a:7e:e8:4d:df:6e:32:c2:c3:32:a9:81:e4:ee:8a:8c:7a: 50:af:9f:2c:71:ab:9a:4c:83:88:dd:3a:26:e5:1c:c1:7c:3a: 35:d5:35:e6:91:c3:e8:cc:c3:cc:0d:3a:46:3f:dc:ce:c5:d9: 58:e0:c1:81:fe:a6:6a:57:69:4d:2a:8a:62:b4:f1:97:e1:5e: 76:67:7d:65:ca:62:dc:9b:cb:41:6a:2b:e0:4d:61:4e:ac:9f: f6:e7:f0:0d:56:e1:34:48:89:08:63:4f:a7:9c:47:9f:19:ba: a8:de:34:15:8f:05:fb:1c:01:e6:7a:27:bd:f8:2b:bb:d6:84: 7d:79:53:6c:20:2d:f7:1d:bd:33:9f:72:02:3a:06:4f:a3:be: ef:2f:14:6e:51:1c:26:a9:58:cc:fd:53:38:02:08:a9:3e:72: 8c:e6:9e:6c:e8:29:36:a0:17:9f:17:86:cb:96:3b:7a:fe:ff: 87:7e:72:ed:71:e6:e8:c7:c8:33:cc:f9:64:db:ab:39:c0:7b: e7:17:bd:d8:fe:bf:db:2e:1d:9d:4d:1f:f9:8b:6c:3c:c4:8a: 2f:45:ae:4b:c7:86:44:ac:1b:9e:72:3c:e1:bd:d1:9f:03:2f: 60:17:a9:10 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yExtz4cSd2slzpndTnoiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz MGNiNjMwHhcNMjYwMTAxMTgxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDQzOTVjZDg1ZmYwNDlmOTk5ODVmYzdhODliYjJjODAzZGE4YzkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtO0A3NUsYRAX8uWVhRcTkG7ZLh9P YM56HjNe4YckqHkGP7MDvubFyDCmBJ/FjJOd2GBlqL7zEQT7iZMmymnwnyPDZ1hO Kk0RcqHy1dRjoeO4GltS4wIFxqXNrOJ7xW8Y1SAbdrAZEYhlplyuxje85g1ZrdbS Dkd+cronnuyVrMswySduWbjl/TWYibJjNDU/4goOpAGVpaUMNrnG9zn6rjGIOOT1 aBk3P+LqDdIiv5VPIhiR5VUlmqGHzo+UYp2z2/Z8sCXWJCuYZg+cUJAigeEtZQoa mHQv9rnpPW5GZGOiBwpPg9g8r6e3GNfBfEuFuvr0xzdPks3QXibXKWb3hwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPBDlc2F/wSfmZhfx6ibssgD2oyQMB8GA1UdIwQY MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt YjRiOGRiMjBiMWZiLzEvOEVPVnpZWF9CSi1abUZfSHFKdXl5QVBhakpBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWWoCMA0G CSqGSIb3DQEBCwUAA4IBAQCzFWoFbAFNpXPbxvFjKT8+ZDUXan7oTd9uMsLDMqmB 5O6KjHpQr58scauaTIOI3Tom5RzBfDo11TXmkcPozMPMDTpGP9zOxdlY4MGB/qZq V2lNKopitPGX4V52Z31lymLcm8tBaivgTWFOrJ/25/ANVuE0SIkIY0+nnEefGbqo 3jQVjwX7HAHmeie9+Cu71oR9eVNsIC33Hb0zn3ICOgZPo77vLxRuURwmqVjM/VM4 AgipPnKM5p5s6Ck2oBefF4bLljt6/v+HfnLtcebox8gzzPlk26s5wHvnF73Y/r/b Lh2dTR/5i2w8xIovRa5Lx4ZErBuecjzhvdGfAy9gF6kQ -----END CERTIFICATE-----Generated at Sun Jan 25 13:33:35 2026 by rpki-client