This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/P9OSefOpCjlYaMd_hafVqp5DFwQ.roa File: P9OSefOpCjlYaMd_hafVqp5DFwQ.roa (raw, json) Hash identifier: 7W8Bmi8uJGtLtTj0Gnl8u+7X6tuDskcDr7M+uU+vOrE= Subject key identifier: 3F:D3:92:79:F3:A9:0A:39:58:68:C7:7F:85:A7:D5:AA:9E:43:17:04 Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Certificate serial: 019B7AC84D8EC62E2640C35DAB89DD1F165E Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/P9OSefOpCjlYaMd_hafVqp5DFwQ.roa Signing time: Thu 01 Jan 2026 18:18:25 +0000 ROA not before: Thu 01 Jan 2026 18:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 17497 IP address blocks: 89.106.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:4d:8e:c6:2e:26:40:c3:5d:ab:89:dd:1f:16:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Validity Not Before: Jan 1 18:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3fd39279f3a90a395868c77f85a7d5aa9e431704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b6:07:bc:d6:c8:0b:a8:ff:15:f1:05:21:1d: 13:82:d7:50:ab:16:73:0a:95:18:97:1b:36:a5:49: 2c:1b:b2:d2:50:17:fc:64:b7:81:65:b3:16:01:e2: b6:55:a2:4b:23:08:22:4a:39:34:26:d4:dc:ee:b0: 4b:c3:85:2f:fc:34:cf:8c:ec:f7:f3:ff:9c:ee:6a: 7f:e4:ec:40:27:6a:3d:d0:ce:68:f3:75:8c:db:24: df:a9:e7:e5:85:5a:49:e2:da:b2:4a:37:58:65:31: 30:0f:2f:9a:0c:63:6c:47:fb:90:d5:cf:a6:4f:6b: 2b:0b:c5:97:3c:78:85:86:12:08:4b:14:e8:8b:a5: be:97:5b:25:eb:39:69:5c:e5:06:d3:6a:f0:f6:04: 8f:93:a1:c4:41:a9:51:98:9a:b3:f1:06:4e:2c:c2: 03:68:c2:27:c8:c8:79:d7:ed:5c:b0:c5:2b:37:42: 1d:bf:66:9c:6b:81:30:d0:53:0b:52:e6:32:77:bf: 1c:25:1f:22:a3:b7:8a:af:f4:d5:60:cf:21:fa:4c: b5:96:22:af:54:23:00:6c:99:c5:93:15:4e:a2:5a: 43:c2:c4:23:8b:cd:90:b0:25:85:ac:b7:b0:7b:5d: aa:ab:45:1a:84:a1:6b:7d:7d:8b:42:38:3c:e9:3a: 16:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:D3:92:79:F3:A9:0A:39:58:68:C7:7F:85:A7:D5:AA:9E:43:17:04 X509v3 Authority Key Identifier: keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/P9OSefOpCjlYaMd_hafVqp5DFwQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.106.14.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:02:9d:0b:ee:df:7d:75:2c:14:34:29:0d:3b:5b:06:bd:d4: 68:74:38:8d:f7:9a:cb:89:b8:04:8b:3c:c9:3f:ab:e1:c3:54: 1d:b8:2e:e7:12:b1:cc:c9:4b:6b:b5:db:eb:a1:7a:1d:2d:a2: 98:25:34:24:64:8e:ec:25:28:f5:1d:ff:ff:3c:bf:22:2c:22: c6:41:14:b4:41:02:27:67:4a:4a:9b:4a:76:2d:08:a8:5f:dd: 63:8a:02:c1:7d:05:c8:6d:46:3c:49:53:6b:b8:11:11:df:4e: 7d:ea:0c:a5:4d:58:ab:1e:5e:e1:02:79:13:da:68:77:9e:4b: a5:fe:26:c4:6e:ee:55:bb:5c:25:6d:1f:d2:d9:16:21:84:5a: 2a:7e:a1:3f:07:89:46:de:62:2c:76:bd:fa:13:9e:83:07:d0: 6f:38:93:f1:02:a7:fa:5e:fe:67:5d:da:56:4b:53:d6:93:62: 7a:16:3c:96:3e:bf:f5:cc:5b:ae:6b:a0:fd:d9:b7:60:19:94: c6:4b:bf:62:f1:e5:be:7c:21:9b:94:0d:ab:e2:42:d9:ad:d8: 4a:97:8f:1f:7b:94:35:b0:dc:2a:49:a5:d9:98:23:c6:5e:81: af:9c:f9:98:0e:2d:80:43:48:cd:31:b1:8c:dd:38:aa:d1:a5: 92:13:b3:aa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yE2Oxi4mQMNdq4ndHxZeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz MGNiNjMwHhcNMjYwMTAxMTgxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZmQzOTI3OWYzYTkwYTM5NTg2OGM3N2Y4NWE3ZDVhYTllNDMxNzA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7YHvNbIC6j/FfEFIR0TgtdQqxZz CpUYlxs2pUksG7LSUBf8ZLeBZbMWAeK2VaJLIwgiSjk0JtTc7rBLw4Uv/DTPjOz3 8/+c7mp/5OxAJ2o90M5o83WM2yTfqeflhVpJ4tqySjdYZTEwDy+aDGNsR/uQ1c+m T2srC8WXPHiFhhIISxToi6W+l1sl6zlpXOUG02rw9gSPk6HEQalRmJqz8QZOLMID aMInyMh51+1csMUrN0Idv2aca4Ew0FMLUuYyd78cJR8io7eKr/TVYM8h+ky1liKv VCMAbJnFkxVOolpDwsQji82QsCWFrLewe12qq0UahKFrfX2LQjg86ToWjwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD/TknnzqQo5WGjHf4Wn1aqeQxcEMB8GA1UdIwQY MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt YjRiOGRiMjBiMWZiLzEvUDlPU2VmT3BDamxZYU1kX2hhZlZxcDVERndRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWWoOMA0G CSqGSIb3DQEBCwUAA4IBAQBtAp0L7t99dSwUNCkNO1sGvdRodDiN95rLibgEizzJ P6vhw1QduC7nErHMyUtrtdvroXodLaKYJTQkZI7sJSj1Hf//PL8iLCLGQRS0QQIn Z0pKm0p2LQioX91jigLBfQXIbUY8SVNruBER30596gylTVirHl7hAnkT2mh3nkul /ibEbu5Vu1wlbR/S2RYhhFoqfqE/B4lG3mIsdr36E56DB9BvOJPxAqf6Xv5nXdpW S1PWk2J6FjyWPr/1zFuua6D92bdgGZTGS79i8eW+fCGblA2r4kLZrdhKl48fe5Q1 sNwqSaXZmCPGXoGvnPmYDi2AQ0jNMbGM3Tiq0aWSE7Oq -----END CERTIFICATE-----Generated at Sun Jan 25 12:18:16 2026 by rpki-client