This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/wft2lmkTwJn2zA8HovMq-aZZEo0.roa File: wft2lmkTwJn2zA8HovMq-aZZEo0.roa (raw, json) Hash identifier: 8n63ihTkJmyvdTwg2Nksh4pD5qUkcOYQoGYd6pls9cY= Subject key identifier: C1:FB:76:96:69:13:C0:99:F6:CC:0F:07:A2:F3:2A:F9:A6:59:12:8D Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Certificate serial: 019B7AC859E99E5DEC36F008ABCCFA813F70 Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/wft2lmkTwJn2zA8HovMq-aZZEo0.roa Signing time: Thu 01 Jan 2026 18:18:29 +0000 ROA not before: Thu 01 Jan 2026 18:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 54252 IP address blocks: 89.106.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:59:e9:9e:5d:ec:36:f0:08:ab:cc:fa:81:3f:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Validity Not Before: Jan 1 18:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c1fb76966913c099f6cc0f07a2f32af9a659128d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b0:ff:27:2d:a0:fb:40:c6:3d:c1:47:21:13: 86:49:ab:cd:d2:1a:6c:e0:0e:45:cb:2f:48:9f:9c: d3:a3:7c:c5:bc:fa:de:8a:f6:d5:82:b3:99:99:c8: 75:58:f5:41:08:d2:07:d3:c8:bd:24:a1:38:85:bf: 6f:63:0f:e6:86:01:1e:cb:bf:bb:43:7f:94:1c:51: 8d:0f:09:62:a9:46:29:a6:4c:63:64:38:e6:67:43: ab:e8:5d:d3:0d:45:31:74:32:3c:b7:6f:13:64:fc: ae:71:61:07:61:76:76:c2:c0:c7:ea:a7:9e:82:db: ce:bd:b2:f1:d3:05:90:52:b1:9d:b2:c2:78:31:24: 13:98:68:e9:c8:2e:88:45:16:a0:42:10:15:f8:30: 19:50:98:f2:2c:7a:98:03:26:77:c5:54:c8:b6:34: 0e:52:9c:c6:d8:9c:e4:86:c0:8c:fc:a9:99:4a:52: 97:ff:ac:ed:ad:86:c2:d6:58:97:fd:e8:77:2d:81: 3d:55:db:70:2d:bf:5a:c5:b7:c4:e0:b7:85:62:46: 07:09:37:c7:c9:4d:f3:02:76:59:86:07:0a:f7:48: d6:b2:00:75:b8:53:69:26:ff:ba:85:7e:63:f7:5e: 3c:b4:86:9c:d0:c5:76:36:1b:6a:21:46:65:e9:11: 08:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:FB:76:96:69:13:C0:99:F6:CC:0F:07:A2:F3:2A:F9:A6:59:12:8D X509v3 Authority Key Identifier: keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/wft2lmkTwJn2zA8HovMq-aZZEo0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.106.26.0/24 Signature Algorithm: sha256WithRSAEncryption 69:68:4e:95:99:46:e8:45:c0:61:e3:72:b0:70:36:5c:72:51: 68:a7:e1:dc:45:d6:62:7a:00:3b:9f:6d:16:d9:d8:a9:6c:6b: 07:de:42:ce:68:9f:af:8c:47:de:6a:af:01:e0:35:09:27:20: 14:e6:75:04:fd:20:0f:2c:ff:01:d8:0c:50:6a:dc:a7:c7:e8: ef:f8:e2:c7:15:64:b1:ec:9e:56:8e:70:76:c9:36:a7:8b:00: cd:ad:71:e5:8e:a9:f6:cd:21:d3:80:27:98:ea:02:e3:19:f2: 99:4b:7c:9a:f6:f4:a9:07:82:d8:48:d3:35:43:31:0b:73:7b: 1b:6c:f3:e4:da:9f:31:f2:29:b6:b5:15:f8:3f:3a:c6:4a:e8: 6e:06:bb:bf:91:74:61:8e:7a:a2:bb:88:4b:19:85:fa:fb:f0: 2a:93:b4:e5:68:51:9b:58:a1:e3:20:dc:78:2a:97:7c:fd:13: cf:3a:3b:1a:18:c7:e1:bd:94:dc:a9:b7:23:25:6f:f3:cd:21: d2:c2:1b:6e:81:69:5d:9b:e8:16:12:46:59:07:ff:e6:9b:fd: b2:28:71:1e:e7:c0:d5:69:61:84:e5:76:29:07:75:ae:bc:5b: 78:22:0b:df:f3:5a:b9:d9:2e:bc:a6:15:ac:00:31:39:43:6c: d6:5d:e1:f3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yFnpnl3sNvAIq8z6gT9wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz MGNiNjMwHhcNMjYwMTAxMTgxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMWZiNzY5NjY5MTNjMDk5ZjZjYzBmMDdhMmYzMmFmOWE2NTkxMjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLD/Jy2g+0DGPcFHIROGSavN0hps 4A5Fyy9In5zTo3zFvPreivbVgrOZmch1WPVBCNIH08i9JKE4hb9vYw/mhgEey7+7 Q3+UHFGNDwliqUYppkxjZDjmZ0Or6F3TDUUxdDI8t28TZPyucWEHYXZ2wsDH6qee gtvOvbLx0wWQUrGdssJ4MSQTmGjpyC6IRRagQhAV+DAZUJjyLHqYAyZ3xVTItjQO UpzG2JzkhsCM/KmZSlKX/6ztrYbC1liX/eh3LYE9VdtwLb9axbfE4LeFYkYHCTfH yU3zAnZZhgcK90jWsgB1uFNpJv+6hX5j9148tIac0MV2NhtqIUZl6REIVwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMH7dpZpE8CZ9swPB6LzKvmmWRKNMB8GA1UdIwQY MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt YjRiOGRiMjBiMWZiLzEvd2Z0Mmxta1R3Sm4yekE4SG92TXEtYVpaRW8wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWWoaMA0G CSqGSIb3DQEBCwUAA4IBAQBpaE6VmUboRcBh43KwcDZcclFop+HcRdZiegA7n20W 2dipbGsH3kLOaJ+vjEfeaq8B4DUJJyAU5nUE/SAPLP8B2AxQatynx+jv+OLHFWSx 7J5WjnB2yTaniwDNrXHljqn2zSHTgCeY6gLjGfKZS3ya9vSpB4LYSNM1QzELc3sb bPPk2p8x8im2tRX4PzrGSuhuBru/kXRhjnqiu4hLGYX6+/Aqk7TlaFGbWKHjINx4 Kpd8/RPPOjsaGMfhvZTcqbcjJW/zzSHSwhtugWldm+gWEkZZB//mm/2yKHEe58DV aWGE5XYpB3WuvFt4Igvf81q52S68phWsADE5Q2zWXeHz -----END CERTIFICATE-----Generated at Sun Jan 25 10:08:15 2026 by rpki-client