This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/AFkieadyQlafVqrKorVXpPlSxeI.roa File: AFkieadyQlafVqrKorVXpPlSxeI.roa (raw, json) Hash identifier: yAEvdSOo+2CsVRJQwC3WGq6R9WkObt8ldTO4gxKAVNc= Subject key identifier: 00:59:22:79:A7:72:42:56:9F:56:AA:CA:A2:B5:57:A4:F9:52:C5:E2 Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Certificate serial: 019B7AC85EBFDE4164145FB72C31CD7C60A0 Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/AFkieadyQlafVqrKorVXpPlSxeI.roa Signing time: Thu 01 Jan 2026 18:18:30 +0000 ROA not before: Thu 01 Jan 2026 18:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204770 IP address blocks: 89.106.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:5e:bf:de:41:64:14:5f:b7:2c:31:cd:7c:60:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Validity Not Before: Jan 1 18:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=00592279a77242569f56aacaa2b557a4f952c5e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2e:6c:a8:0d:2a:46:c7:6b:ba:b3:a1:a2:22: 9e:13:d2:04:bd:2b:b9:fb:fc:f5:b4:3f:34:8c:85: 89:55:3b:6f:f0:3b:98:be:1b:c0:2b:b1:ae:19:cf: f6:21:d6:d0:05:e6:bb:12:41:ee:d6:ac:55:9d:19: d9:2e:2b:c3:b8:b5:35:0e:67:a1:fe:0c:b7:3a:3b: c9:58:6f:11:64:b2:2c:4a:86:70:85:61:83:79:1a: ee:2c:84:29:1d:96:ca:d4:f3:97:06:73:9f:9d:87: f4:64:64:3e:0e:37:a3:03:08:09:1e:99:a6:f7:f1: 81:8c:1c:0c:64:52:1b:2d:31:88:94:8b:b6:1e:8c: ed:33:75:dc:b2:80:9d:37:db:f3:73:ac:41:a2:dc: 3e:9d:8e:c5:e0:55:53:4c:f8:a2:3a:4f:81:6e:b5: 44:7d:ce:0a:ac:14:ef:ef:48:09:4b:f7:1f:9e:29: 27:12:3c:76:78:53:09:fd:a7:b1:88:44:dc:a2:97: 9b:83:aa:0c:ee:82:bb:17:e3:52:26:bf:c8:4d:1f: 58:fe:db:e2:0a:ab:65:6d:40:67:64:0a:89:57:39: ca:04:25:e0:9b:75:42:07:6e:06:a9:e7:69:69:81: 2a:00:20:5f:33:5a:28:8b:90:29:ea:1d:36:25:47: 59:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:59:22:79:A7:72:42:56:9F:56:AA:CA:A2:B5:57:A4:F9:52:C5:E2 X509v3 Authority Key Identifier: keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/AFkieadyQlafVqrKorVXpPlSxeI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.106.6.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:75:7b:5f:84:8d:77:45:ac:dd:37:d2:ef:9f:ad:b0:46:b8: 08:c7:39:52:23:ef:1e:52:2e:05:7a:a7:9d:7d:df:53:fe:db: ee:e8:c0:84:09:83:2a:58:e1:f7:be:bd:79:a0:53:ac:96:08: e1:f0:b8:55:3d:ae:9a:4c:ec:5f:cc:9d:f7:34:46:39:85:f9: c9:1d:81:b0:c8:59:0c:21:e0:a0:45:7f:c8:87:df:b5:90:cd: ed:1f:d2:e6:1b:16:ae:84:7f:42:bd:bf:8d:54:68:a5:6e:3a: 08:cb:4a:6e:22:ec:7a:3a:6d:58:5a:ba:f4:e8:52:bf:2b:f1: d4:a1:71:eb:d9:8c:f7:39:2f:31:f2:cb:e3:19:a3:26:25:e9: 58:ea:07:36:1e:3f:a8:b7:a9:8f:84:71:c8:10:1c:ab:85:d3: 05:0b:35:0e:26:63:d0:75:a4:8f:0d:60:98:87:c2:6d:00:34: 54:52:82:ff:1b:1f:d1:db:62:94:9d:dc:3b:8a:21:60:34:4d: a3:a4:90:43:a7:04:75:94:93:a6:d6:35:6c:77:3e:d0:dc:1a: 4e:c6:23:41:40:e4:72:e3:9e:f1:52:dc:c2:94:66:24:ee:2f: df:49:d6:4c:0c:b4:df:00:12:c6:17:53:dd:03:53:ba:ae:14: ca:08:7a:f4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yF6/3kFkFF+3LDHNfGCgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz MGNiNjMwHhcNMjYwMTAxMTgxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDU5MjI3OWE3NzI0MjU2OWY1NmFhY2FhMmI1NTdhNGY5NTJjNWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqy5sqA0qRsdrurOhoiKeE9IEvSu5 +/z1tD80jIWJVTtv8DuYvhvAK7GuGc/2IdbQBea7EkHu1qxVnRnZLivDuLU1Dmeh /gy3OjvJWG8RZLIsSoZwhWGDeRruLIQpHZbK1POXBnOfnYf0ZGQ+DjejAwgJHpmm 9/GBjBwMZFIbLTGIlIu2HoztM3XcsoCdN9vzc6xBotw+nY7F4FVTTPiiOk+BbrVE fc4KrBTv70gJS/cfniknEjx2eFMJ/aexiETcopebg6oM7oK7F+NSJr/ITR9Y/tvi CqtlbUBnZAqJVznKBCXgm3VCB24GqedpaYEqACBfM1ooi5Ap6h02JUdZ6wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFABZInmnckJWn1aqyqK1V6T5UsXiMB8GA1UdIwQY MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt YjRiOGRiMjBiMWZiLzEvQUZraWVhZHlRbGFmVnFyS29yVlhwUGxTeGVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWWoGMA0G CSqGSIb3DQEBCwUAA4IBAQA6dXtfhI13RazdN9Lvn62wRrgIxzlSI+8eUi4Feqed fd9T/tvu6MCECYMqWOH3vr15oFOslgjh8LhVPa6aTOxfzJ33NEY5hfnJHYGwyFkM IeCgRX/Ih9+1kM3tH9LmGxauhH9Cvb+NVGilbjoIy0puIux6Om1YWrr06FK/K/HU oXHr2Yz3OS8x8svjGaMmJelY6gc2Hj+ot6mPhHHIEByrhdMFCzUOJmPQdaSPDWCY h8JtADRUUoL/Gx/R22KUndw7iiFgNE2jpJBDpwR1lJOm1jVsdz7Q3BpOxiNBQORy 457xUtzClGYk7i/fSdZMDLTfABLGF1PdA1O6rhTKCHr0 -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:08 2026 by rpki-client