This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/9kBirkmDd4930ChdwnIoBUViGQQ.roa File: 9kBirkmDd4930ChdwnIoBUViGQQ.roa (raw, json) Hash identifier: aKMU2s6MfvlAkLZ1NNvEXa6aU0ecTGYiYVbbBWXlJVQ= Subject key identifier: F6:40:62:AE:49:83:77:8F:77:D0:28:5D:C2:72:28:05:45:62:19:04 Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Certificate serial: 019B7AC8668F06EB080A3E8B356DB6759527 Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/9kBirkmDd4930ChdwnIoBUViGQQ.roa Signing time: Thu 01 Jan 2026 18:18:32 +0000 ROA not before: Thu 01 Jan 2026 18:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216444 IP address blocks: 89.106.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:66:8f:06:eb:08:0a:3e:8b:35:6d:b6:75:95:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Validity Not Before: Jan 1 18:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f64062ae4983778f77d0285dc272280545621904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ef:68:cd:d3:6a:7d:ac:18:0e:a4:f4:55:19: 5f:6b:04:a1:5a:6b:61:b7:15:09:ad:b4:2f:ea:ff: f0:b6:b2:3c:4f:4e:c8:c8:44:a2:cd:1b:60:c9:ba: 2b:22:c4:3f:32:35:cf:6e:b8:71:80:be:cd:45:0e: ff:31:19:76:0b:26:4b:5f:8f:c2:b2:3e:b7:8b:65: 2b:e2:b3:3a:3d:2b:a9:4f:f0:6e:b9:81:7b:5b:e1: 7f:8b:29:1b:84:b9:49:41:45:80:82:a6:82:04:98: 4a:fe:5e:9d:53:29:4f:70:1f:cc:e9:16:77:8c:33: 9b:9e:56:f3:25:4c:42:ac:22:5a:2b:98:a0:21:b0: 31:84:fd:00:a9:a1:99:cf:b1:ac:06:4f:ad:1e:e1: b8:c7:ec:31:67:54:b9:f0:c9:36:27:23:94:de:1b: e6:a7:01:f8:d4:5d:97:0a:5c:d1:82:c9:e6:fc:58: cd:ba:fe:29:a2:11:93:29:53:57:6d:2e:84:a0:5a: d2:d8:8a:9c:51:00:fd:c7:14:71:40:4a:97:6e:04: 0b:0f:7d:3a:27:c7:a7:16:fc:e3:5f:48:0c:43:1e: 30:34:82:2e:93:57:14:58:f9:1a:0f:78:a5:55:c9: ae:c4:61:03:fa:0f:f7:50:28:d5:c9:27:77:90:61: 62:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:40:62:AE:49:83:77:8F:77:D0:28:5D:C2:72:28:05:45:62:19:04 X509v3 Authority Key Identifier: keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/9kBirkmDd4930ChdwnIoBUViGQQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.106.13.0/24 Signature Algorithm: sha256WithRSAEncryption 03:a0:93:44:35:75:a4:75:6d:7e:94:81:aa:e5:d5:08:0c:20: 8b:b5:80:b5:2b:b7:64:a9:b0:44:b0:40:fd:65:65:92:3b:fc: fa:69:7c:71:32:0b:c2:2f:61:48:64:8e:84:e1:94:65:2d:54: c6:14:46:c4:2a:9e:75:c3:41:51:70:20:82:f3:65:b0:b5:70: 3f:25:7d:f7:6c:42:d9:d0:73:55:dc:5e:e8:82:a9:51:00:05: d1:63:9d:77:f2:a7:79:f3:d7:f6:f8:18:4e:7d:00:be:9a:2c: 80:be:ae:5d:c6:04:05:5e:e1:20:73:35:46:30:2b:48:58:31: f6:18:d3:4a:90:97:61:4e:0e:0e:a8:42:16:43:cd:6b:7b:b5: b0:f3:09:99:92:49:6c:68:4f:f0:1b:83:0e:2a:9f:71:88:fd: eb:5e:7a:24:3a:40:ef:46:1f:3e:74:a3:a2:d4:ea:fe:e4:94: 1c:7e:bb:48:6e:8d:2a:d9:c3:40:2b:99:d0:01:0a:b6:3a:1d: f1:91:58:8e:85:78:5a:60:93:18:a8:55:b3:db:04:e2:8d:36: 33:7f:d7:e3:19:46:f6:43:aa:30:7e:ae:69:18:f3:53:d3:0b: 5a:de:65:59:20:ea:3f:5f:7c:7c:86:04:37:5c:ca:49:22:8d: ac:df:a5:6d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yGaPBusICj6LNW22dZUnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz MGNiNjMwHhcNMjYwMTAxMTgxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjQwNjJhZTQ5ODM3NzhmNzdkMDI4NWRjMjcyMjgwNTQ1NjIxOTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsu9ozdNqfawYDqT0VRlfawShWmth txUJrbQv6v/wtrI8T07IyESizRtgyborIsQ/MjXPbrhxgL7NRQ7/MRl2CyZLX4/C sj63i2Ur4rM6PSupT/BuuYF7W+F/iykbhLlJQUWAgqaCBJhK/l6dUylPcB/M6RZ3 jDObnlbzJUxCrCJaK5igIbAxhP0AqaGZz7GsBk+tHuG4x+wxZ1S58Mk2JyOU3hvm pwH41F2XClzRgsnm/FjNuv4pohGTKVNXbS6EoFrS2IqcUQD9xxRxQEqXbgQLD306 J8enFvzjX0gMQx4wNIIuk1cUWPkaD3ilVcmuxGED+g/3UCjVySd3kGFiYwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPZAYq5Jg3ePd9AoXcJyKAVFYhkEMB8GA1UdIwQY MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt YjRiOGRiMjBiMWZiLzEvOWtCaXJrbURkNDkzMENoZHduSW9CVVZpR1FRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWWoNMA0G CSqGSIb3DQEBCwUAA4IBAQADoJNENXWkdW1+lIGq5dUIDCCLtYC1K7dkqbBEsED9 ZWWSO/z6aXxxMgvCL2FIZI6E4ZRlLVTGFEbEKp51w0FRcCCC82WwtXA/JX33bELZ 0HNV3F7ogqlRAAXRY5138qd589f2+BhOfQC+miyAvq5dxgQFXuEgczVGMCtIWDH2 GNNKkJdhTg4OqEIWQ81re7Ww8wmZkklsaE/wG4MOKp9xiP3rXnokOkDvRh8+dKOi 1Or+5JQcfrtIbo0q2cNAK5nQAQq2Oh3xkViOhXhaYJMYqFWz2wTijTYzf9fjGUb2 Q6owfq5pGPNT0wta3mVZIOo/X3x8hgQ3XMpJIo2s36Vt -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:55 2026 by rpki-client