This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/DeogXDzZRmPJSPYVSlDpwy4Xvvk.roa File: DeogXDzZRmPJSPYVSlDpwy4Xvvk.roa (raw, json) Hash identifier: JII7bjZIcCFm4jHUC6Pe3tDHfW+Q/ttbgSmNRkHVd3U= Subject key identifier: 0D:EA:20:5C:3C:D9:46:63:C9:48:F6:15:4A:50:E9:C3:2E:17:BE:F9 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019BBC9E2576302F654D4A16A3248C4DA06E Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/DeogXDzZRmPJSPYVSlDpwy4Xvvk.roa Signing time: Wed 14 Jan 2026 13:07:19 +0000 ROA not before: Wed 14 Jan 2026 13:07:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57974 IP address blocks: 89.106.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:bc:9e:25:76:30:2f:65:4d:4a:16:a3:24:8c:4d:a0:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 14 13:07:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0dea205c3cd94663c948f6154a50e9c32e17bef9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6d:7f:de:19:36:4d:67:48:f0:31:0c:be:43: 5a:43:51:b8:cb:18:30:0c:e6:6f:37:bf:f2:15:d2: 02:12:80:ec:9e:f2:61:d4:05:19:56:2f:40:3d:a2: c8:cd:aa:d7:80:20:62:e0:9d:88:cb:fc:ff:58:43: 3d:c2:1b:46:42:75:23:6d:87:af:92:c7:c9:23:3e: 09:ae:d8:8c:ac:a3:27:86:97:f3:04:fa:01:fb:3e: 78:8a:5f:37:13:d0:11:98:07:73:c4:f6:da:97:b0: 0f:84:02:7d:e2:f3:11:be:c9:ca:ec:f7:18:6a:75: b9:a6:cf:f4:bb:c3:ee:98:93:b4:f6:67:bf:44:7b: 12:11:99:d9:61:53:1c:a7:b6:5f:49:2a:7d:ea:49: 0f:a1:1e:b5:77:68:c1:82:6b:69:1a:bb:3a:fb:65: e3:54:01:1e:7e:e6:21:09:ea:68:7b:f6:68:3e:cc: 2e:52:0a:26:68:2d:b6:6b:f4:bf:dc:41:af:9c:a3: 38:e8:dd:b4:cd:20:64:c8:c9:5a:a3:cd:03:cc:4c: fe:85:b2:7b:ba:8b:57:86:92:61:95:69:30:ff:dc: 55:c9:0f:ed:00:17:0a:03:30:e0:b0:28:f9:5c:a8: 02:e6:ed:ee:bf:aa:15:b1:e2:63:d6:c9:44:26:0f: b6:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:EA:20:5C:3C:D9:46:63:C9:48:F6:15:4A:50:E9:C3:2E:17:BE:F9 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/DeogXDzZRmPJSPYVSlDpwy4Xvvk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.106.84.0/24 Signature Algorithm: sha256WithRSAEncryption ad:de:c5:4b:43:72:cb:2e:f8:c7:bc:3b:19:fe:fe:bc:44:ef: dc:4b:9d:0d:a3:d3:f2:43:13:46:e8:69:e0:1a:d8:60:ce:a2: ea:73:d8:26:d9:59:67:75:12:f9:c4:ce:90:99:78:20:28:1c: 94:aa:5d:ac:00:4b:69:51:d8:24:c5:71:34:cd:31:00:89:5f: 14:4a:89:4f:32:6e:70:08:95:57:a0:26:5e:ef:c5:85:db:8e: e8:89:ae:a4:7c:cf:e5:56:49:32:3a:14:e1:49:d1:ae:c7:da: 2f:fe:9a:73:bf:57:71:53:ff:79:e4:02:26:4b:dc:9b:06:cf: b8:7b:e8:47:75:e9:e2:5f:68:b9:e2:d1:fe:f2:ed:51:24:56: 92:56:57:9d:1e:7f:2b:c7:70:f9:7d:56:b8:2f:c1:cc:48:d7: 71:69:f0:27:9b:36:71:4e:a3:cf:a3:57:7a:42:27:24:bf:b3: 90:2e:62:07:54:d5:e7:d8:22:27:75:bb:5f:17:d5:fa:b4:a0: 59:23:b2:cd:3e:41:97:52:2e:a0:10:4a:a6:8d:3e:ae:3d:88: 00:48:4c:3a:e7:3a:5f:03:e5:7e:75:db:2b:37:cb:94:ba:af: f7:f5:1b:b0:00:04:4a:ca:15:35:da:e8:58:8c:81:e8:4d:27: 1f:0c:84:32 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZu8niV2MC9lTUoWoySMTaBuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTE0MTMwNzE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZGVhMjA1YzNjZDk0NjYzYzk0OGY2MTU0YTUwZTljMzJlMTdiZWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0G1/3hk2TWdI8DEMvkNaQ1G4yxgw DOZvN7/yFdICEoDsnvJh1AUZVi9APaLIzarXgCBi4J2Iy/z/WEM9whtGQnUjbYev ksfJIz4JrtiMrKMnhpfzBPoB+z54il83E9ARmAdzxPbal7APhAJ94vMRvsnK7PcY anW5ps/0u8PumJO09me/RHsSEZnZYVMcp7ZfSSp96kkPoR61d2jBgmtpGrs6+2Xj VAEefuYhCepoe/ZoPswuUgomaC22a/S/3EGvnKM46N20zSBkyMlao80DzEz+hbJ7 uotXhpJhlWkw/9xVyQ/tABcKAzDgsCj5XKgC5u3uv6oVseJj1slEJg+2zwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA3qIFw82UZjyUj2FUpQ6cMuF775MB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvRGVvZ1hEelpSbVBKU1BZVlNsRHB3eTRYdnZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWWpUMA0G CSqGSIb3DQEBCwUAA4IBAQCt3sVLQ3LLLvjHvDsZ/v68RO/cS50No9PyQxNG6Gng GthgzqLqc9gm2VlndRL5xM6QmXggKByUql2sAEtpUdgkxXE0zTEAiV8USolPMm5w CJVXoCZe78WF247oia6kfM/lVkkyOhThSdGux9ov/ppzv1dxU/955AImS9ybBs+4 e+hHdeniX2i54tH+8u1RJFaSVledHn8rx3D5fVa4L8HMSNdxafAnmzZxTqPPo1d6 Qickv7OQLmIHVNXn2CIndbtfF9X6tKBZI7LNPkGXUi6gEEqmjT6uPYgASEw65zpf A+V+ddsrN8uUuq/39RuwAARKyhU12uhYjIHoTScfDIQy -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:37 2026 by rpki-client