This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_eeMcGX9lqAHV3eL-W8-Qe7b8vA.roa File: _eeMcGX9lqAHV3eL-W8-Qe7b8vA.roa (raw, json) Hash identifier: HRJnjzl+NuQsRqoxdH1jn7EhpyCtuk2vZ0QxFUk67G8= Subject key identifier: FD:E7:8C:70:65:FD:96:A0:07:57:77:8B:F9:6F:3E:41:EE:DB:F2:F0 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019BAB7168751AA3215ABCBA7A262ED70313 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_eeMcGX9lqAHV3eL-W8-Qe7b8vA.roa Signing time: Sun 11 Jan 2026 05:04:54 +0000 ROA not before: Sun 11 Jan 2026 05:04:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58087 IP address blocks: 89.144.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ab:71:68:75:1a:a3:21:5a:bc:ba:7a:26:2e:d7:03:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 11 05:04:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fde78c7065fd96a00757778bf96f3e41eedbf2f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:06:73:92:63:b9:de:73:ac:03:f5:19:e3:94: e4:48:2b:97:94:d2:ed:8d:c2:95:23:8e:f2:65:4a: 95:9a:ba:3c:6a:25:db:57:12:5f:79:05:a6:b0:1a: 6b:1d:9f:be:26:b9:4d:d9:9c:22:b6:a2:67:33:4a: 5b:14:97:e2:6f:ac:11:d2:57:04:ca:d4:55:22:be: 0f:82:e8:7b:8e:db:89:65:a5:f1:0e:cb:a4:d1:dd: 2e:c6:62:44:9c:09:f6:93:7a:bd:d1:05:ad:65:30: e6:34:28:a6:c4:83:f8:ea:92:00:90:70:67:96:45: 2f:93:7f:dd:4c:19:37:eb:45:34:8d:af:d9:51:c9: 88:49:fa:b8:41:4d:ee:ea:30:a0:b8:66:e2:70:29: dc:0f:3a:2b:fa:bd:88:35:55:65:01:05:af:21:23: 42:c0:72:3b:c5:d1:fd:70:92:36:9e:48:4d:16:0b: e6:f4:3f:1f:b2:4b:de:7c:5f:4c:5a:15:f3:33:7e: 92:6d:4e:24:b3:55:98:67:85:6d:06:72:42:ee:ed: 0c:d4:d1:30:5a:4b:85:26:15:a8:32:87:d7:2f:20: 79:95:15:38:ee:2f:c6:d6:31:d4:61:c8:db:d4:49: fb:38:d9:00:c7:be:b6:a6:7d:54:cf:14:9b:d8:c2: 9f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:E7:8C:70:65:FD:96:A0:07:57:77:8B:F9:6F:3E:41:EE:DB:F2:F0 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/_eeMcGX9lqAHV3eL-W8-Qe7b8vA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.144.37.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:ea:88:7f:fc:ab:86:ec:ff:88:c9:d6:f2:ea:21:41:b8:e8: 49:bb:10:e2:62:60:fe:92:f3:59:bb:5d:b4:8d:e6:6d:2d:1f: 51:15:6d:d2:f7:6a:65:47:40:d0:45:72:83:82:e0:06:6a:f3: ff:aa:b1:5a:2f:2a:be:32:78:1c:7a:19:42:45:2e:26:72:14: cf:0d:66:20:d0:dd:31:68:9b:12:8b:a2:5e:c0:74:53:34:22: b4:3e:31:5b:c7:10:91:f5:3f:0f:71:b8:9e:bc:38:e8:65:17: 61:ce:8b:34:de:f3:82:53:f4:b8:5f:32:81:9e:29:0a:c5:26: 3c:2a:48:0e:aa:9e:cd:d5:f5:f7:ff:c4:47:6b:a8:a4:63:8c: dc:df:86:92:f4:b6:d4:1b:31:c8:81:37:70:52:fe:b5:e7:4e: ff:fd:01:01:36:b8:0a:cf:42:77:08:13:d6:d6:9a:b7:c7:0e: 2c:12:85:d7:92:3b:90:48:33:a6:4f:e6:04:0b:2e:3d:b9:ef: ac:af:ec:6f:a6:f5:07:d3:6d:9f:36:8c:b5:44:4e:9c:61:f3: 65:16:ea:2b:71:1b:46:7d:e6:d8:d3:99:ff:be:3b:13:a2:f2: 9a:88:35:a1:90:07:78:2e:1e:f6:8f:be:a9:0f:01:36:f8:6e: b9:26:b9:a2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZurcWh1GqMhWry6eiYu1wMTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTExMDUwNDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZGU3OGM3MDY1ZmQ5NmEwMDc1Nzc3OGJmOTZmM2U0MWVlZGJmMmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggZzkmO53nOsA/UZ45TkSCuXlNLt jcKVI47yZUqVmro8aiXbVxJfeQWmsBprHZ++JrlN2ZwitqJnM0pbFJfib6wR0lcE ytRVIr4Pguh7jtuJZaXxDsuk0d0uxmJEnAn2k3q90QWtZTDmNCimxIP46pIAkHBn lkUvk3/dTBk360U0ja/ZUcmISfq4QU3u6jCguGbicCncDzor+r2INVVlAQWvISNC wHI7xdH9cJI2nkhNFgvm9D8fskvefF9MWhXzM36SbU4ks1WYZ4VtBnJC7u0M1NEw WkuFJhWoMofXLyB5lRU47i/G1jHUYcjb1En7ONkAx762pn1UzxSb2MKfMwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP3njHBl/ZagB1d3i/lvPkHu2/LwMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvX2VlTWNHWDlscUFIVjNlTC1XOC1RZTdiOHZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWZAlMA0G CSqGSIb3DQEBCwUAA4IBAQBc6oh//KuG7P+Iydby6iFBuOhJuxDiYmD+kvNZu120 jeZtLR9RFW3S92plR0DQRXKDguAGavP/qrFaLyq+MngcehlCRS4mchTPDWYg0N0x aJsSi6JewHRTNCK0PjFbxxCR9T8PcbievDjoZRdhzos03vOCU/S4XzKBnikKxSY8 KkgOqp7N1fX3/8RHa6ikY4zc34aS9LbUGzHIgTdwUv61507//QEBNrgKz0J3CBPW 1pq3xw4sEoXXkjuQSDOmT+YECy49ue+sr+xvpvUH022fNoy1RE6cYfNlFuorcRtG febY05n/vjsTovKaiDWhkAd4Lh72j76pDwE2+G65Jrmi -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:39 2026 by rpki-client