This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/eac997-ce1e-459b-9436-ed7067f987d9/1/89T2d-p1rI_t7zp4IKHTzVRe72U.roa File: 89T2d-p1rI_t7zp4IKHTzVRe72U.roa (raw, json) Hash identifier: u5qDexFa1LR5cVSk1zIhT1bruMwSgtsKPW6k4/CBkvI= Subject key identifier: F3:D4:F6:77:EA:75:AC:8F:ED:EF:3A:78:20:A1:D3:CD:54:5E:EF:65 Certificate issuer: /CN=9e0de4f26275ea5fc2f23c8b4d7e06d72b3b73c7 Certificate serial: 019B78A22776CF17AD52461EFFFCFAD3D574 Authority key identifier: 9E:0D:E4:F2:62:75:EA:5F:C2:F2:3C:8B:4D:7E:06:D7:2B:3B:73:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ng3k8mJ16l_C8jyLTX4G1ys7c8c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/eac997-ce1e-459b-9436-ed7067f987d9/1/89T2d-p1rI_t7zp4IKHTzVRe72U.roa Signing time: Thu 01 Jan 2026 08:17:31 +0000 ROA not before: Thu 01 Jan 2026 08:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216428 IP address blocks: 2001:67c:11e4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/eac997-ce1e-459b-9436-ed7067f987d9/1/ng3k8mJ16l_C8jyLTX4G1ys7c8c.crl rsync://rpki.ripe.net/repository/DEFAULT/01/eac997-ce1e-459b-9436-ed7067f987d9/1/ng3k8mJ16l_C8jyLTX4G1ys7c8c.mft rsync://rpki.ripe.net/repository/DEFAULT/ng3k8mJ16l_C8jyLTX4G1ys7c8c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:27:76:cf:17:ad:52:46:1e:ff:fc:fa:d3:d5:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e0de4f26275ea5fc2f23c8b4d7e06d72b3b73c7 Validity Not Before: Jan 1 08:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f3d4f677ea75ac8fedef3a7820a1d3cd545eef65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:0a:9a:17:d1:7f:c1:da:75:2e:2b:cd:07:ce: 00:b6:1a:ae:a5:bf:fe:e3:dc:4e:8e:d7:50:ae:a7: 1e:a9:73:91:ab:bf:0f:be:ac:68:1a:0c:bc:82:4d: 93:0a:0d:5f:66:d0:66:5f:1a:48:a8:27:6f:a9:74: df:6f:c5:b4:a0:27:6c:aa:fd:cf:eb:93:ae:bf:ac: 08:0d:33:09:ef:5a:e9:3b:06:0b:44:29:6e:91:a0: 4c:96:87:d5:b9:e3:07:7c:5b:a9:6f:e7:3d:1e:d1: 47:41:0d:ce:18:7e:08:f2:f5:e5:ae:95:36:b1:c9: 92:5f:ca:11:c9:c4:57:71:b0:92:53:14:34:0d:88: 98:ae:92:a6:f7:76:9f:0e:98:b5:0b:27:01:23:f3: 44:94:32:15:cb:4f:54:41:08:4f:7d:7c:43:d4:98: 3a:53:99:32:de:23:7f:43:27:2a:1a:e3:da:7e:02: 26:07:14:a2:00:d6:ee:5b:11:39:c5:7d:5a:1d:2b: 04:6b:82:12:a1:07:50:f0:c5:03:7f:76:0d:e1:05: 09:ef:95:b7:69:1e:89:eb:c0:17:3c:46:a5:be:77: d1:85:10:b7:d7:79:25:78:a9:c6:71:86:57:ff:cf: 73:59:0b:cc:81:5f:ad:4d:98:0a:a1:62:45:e2:aa: 14:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:D4:F6:77:EA:75:AC:8F:ED:EF:3A:78:20:A1:D3:CD:54:5E:EF:65 X509v3 Authority Key Identifier: keyid:9E:0D:E4:F2:62:75:EA:5F:C2:F2:3C:8B:4D:7E:06:D7:2B:3B:73:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ng3k8mJ16l_C8jyLTX4G1ys7c8c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/eac997-ce1e-459b-9436-ed7067f987d9/1/89T2d-p1rI_t7zp4IKHTzVRe72U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/eac997-ce1e-459b-9436-ed7067f987d9/1/ng3k8mJ16l_C8jyLTX4G1ys7c8c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:11e4::/48 Signature Algorithm: sha256WithRSAEncryption ae:40:4a:7c:dc:34:ae:46:b0:e3:ea:33:82:72:f2:a4:7d:40: a9:0d:ce:18:7d:9d:bd:f6:33:85:6e:dd:c0:f1:d9:3a:40:cb: 5e:f4:9b:33:e8:3e:7a:6a:72:84:6f:5a:73:a4:6c:ca:c7:ce: e3:fd:5c:af:73:7e:39:1a:c8:9d:82:4f:75:1d:b8:b9:98:a5: 90:4a:eb:80:24:90:f1:9e:7f:b9:44:d1:9b:42:75:59:16:d0: 3a:c0:0f:8c:11:cf:ee:64:09:96:c6:80:80:5a:c2:9a:8b:f4: e1:ad:d9:a4:e8:c0:97:60:0b:61:29:c2:b1:72:09:bb:44:25: f2:e2:38:e9:00:aa:b8:6c:6c:a4:41:99:58:31:bf:21:a0:eb: 99:e3:4e:ad:bc:f2:32:ee:05:3f:2e:90:64:4a:05:49:92:35: 64:19:62:65:46:07:23:47:aa:ab:2d:13:4f:cd:fc:31:50:b9: 53:5e:42:fd:7c:80:c9:0c:b3:4e:a1:be:62:f7:7c:fc:86:07: ca:26:02:a5:3f:21:05:50:b9:03:d9:e0:a4:6e:81:37:83:82: 68:0f:0c:6b:d1:ab:9e:21:b4:e6:ba:05:9a:d2:ea:ca:6e:2f: 69:7c:fa:d9:84:ee:48:64:07:52:cc:94:51:01:32:19:97:ed: f5:4c:aa:ed -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt4oid2zxetUkYe//z609V0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllMGRlNGYyNjI3NWVhNWZjMmYyM2M4YjRkN2UwNmQ3MmIz YjczYzcwHhcNMjYwMTAxMDgxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmM2Q0ZjY3N2VhNzVhYzhmZWRlZjNhNzgyMGExZDNjZDU0NWVlZjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowqaF9F/wdp1LivNB84Athqupb/+ 49xOjtdQrqceqXORq78PvqxoGgy8gk2TCg1fZtBmXxpIqCdvqXTfb8W0oCdsqv3P 65Ouv6wIDTMJ71rpOwYLRClukaBMlofVueMHfFupb+c9HtFHQQ3OGH4I8vXlrpU2 scmSX8oRycRXcbCSUxQ0DYiYrpKm93afDpi1CycBI/NElDIVy09UQQhPfXxD1Jg6 U5ky3iN/QycqGuPafgImBxSiANbuWxE5xX1aHSsEa4ISoQdQ8MUDf3YN4QUJ75W3 aR6J68AXPEalvnfRhRC313kleKnGcYZX/89zWQvMgV+tTZgKoWJF4qoUcwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPPU9nfqdayP7e86eCCh081UXu9lMB8GA1UdIwQY MBaAFJ4N5PJidepfwvI8i01+BtcrO3PHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmczazhtSjE2bF9DOGp5TFRYNEcxeXM3YzhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9lYWM5OTctY2UxZS00NTliLTk0MzYt ZWQ3MDY3Zjk4N2Q5LzEvODlUMmQtcDFySV90N3pwNElLSFR6VlJlNzJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9lYWM5OTctY2UxZS00NTliLTk0MzYtZWQ3MDY3Zjk4N2Q5 LzEvbmczazhtSjE2bF9DOGp5TFRYNEcxeXM3YzhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfBHk MA0GCSqGSIb3DQEBCwUAA4IBAQCuQEp83DSuRrDj6jOCcvKkfUCpDc4YfZ299jOF bt3A8dk6QMte9Jsz6D56anKEb1pzpGzKx87j/Vyvc345Gsidgk91Hbi5mKWQSuuA JJDxnn+5RNGbQnVZFtA6wA+MEc/uZAmWxoCAWsKai/Thrdmk6MCXYAthKcKxcgm7 RCXy4jjpAKq4bGykQZlYMb8hoOuZ406tvPIy7gU/LpBkSgVJkjVkGWJlRgcjR6qr LRNPzfwxULlTXkL9fIDJDLNOob5i93z8hgfKJgKlPyEFULkD2eCkboE3g4JoDwxr 0aueIbTmugWa0urKbi9pfPrZhO5IZAdSzJRRATIZl+31TKrt -----END CERTIFICATE-----Generated at Tue Feb 10 02:54:35 2026 by rpki-client