This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/exelqTABb1BkgK98EPINMZO5DjY.roa File: exelqTABb1BkgK98EPINMZO5DjY.roa (raw, json) Hash identifier: IW6UchChDjCym5z0Oj8p3JZz5ytyOdaxqqIuTf0LMiw= Subject key identifier: 7B:17:A5:A9:30:01:6F:50:64:80:AF:7C:10:F2:0D:31:93:B9:0E:36 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B7C12D42A1241595B09511108BA99083B Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/exelqTABb1BkgK98EPINMZO5DjY.roa Signing time: Fri 02 Jan 2026 00:19:27 +0000 ROA not before: Fri 02 Jan 2026 00:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47277 IP address blocks: 89.106.78.0/24 maxlen: 24 2a02:2fc0:18::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:d4:2a:12:41:59:5b:09:51:11:08:ba:99:08:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 2 00:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7b17a5a930016f506480af7c10f20d3193b90e36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:62:07:6c:9e:31:c8:d5:23:1f:90:14:6e:fd: 34:bf:00:00:77:a3:bc:58:6c:28:9a:c0:69:a1:bc: 51:7a:47:c3:8c:85:c2:aa:ad:7f:06:e1:ff:ac:97: d8:a1:42:92:af:98:dc:ed:c4:8f:5b:d0:d7:8c:b0: d9:53:c3:b7:4e:40:16:91:08:e0:21:4a:4a:d3:f6: e8:c6:0d:41:33:cb:cb:b3:5d:93:31:b7:de:83:79: 19:ea:1f:ae:6b:d7:57:db:c4:cb:db:64:40:0c:95: c7:ae:4d:82:37:9d:05:e8:dd:1b:71:f4:ef:61:12: ff:e0:e4:e4:6a:91:8c:3d:81:6b:36:32:0f:c4:f4: 74:9c:85:51:1e:95:0a:cf:44:68:72:5a:b4:70:c4: 93:ab:9c:f3:ab:67:81:6e:c4:c5:63:c0:01:27:77: ec:78:88:3f:77:ec:b0:46:c8:c7:11:07:4b:17:68: cc:ce:ea:c7:97:ab:1a:db:8e:18:5e:d4:16:03:c1: e3:5e:11:a2:50:4f:9f:a6:ed:f7:db:44:e0:d2:88: 24:70:fa:94:e9:da:ea:be:01:5d:0d:a3:40:ab:8d: 5a:09:bf:30:4d:26:7c:e6:df:86:59:ad:f6:60:c8: 2f:d9:38:00:0b:b2:16:3f:2c:7b:1b:f6:7c:04:11: 74:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:17:A5:A9:30:01:6F:50:64:80:AF:7C:10:F2:0D:31:93:B9:0E:36 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/exelqTABb1BkgK98EPINMZO5DjY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.106.78.0/24 IPv6: 2a02:2fc0:18::/48 Signature Algorithm: sha256WithRSAEncryption 8f:fb:ce:77:18:64:2c:1b:33:a5:8f:e8:6b:01:2a:6f:28:b6: 5a:c4:8b:73:fb:55:d7:9f:f1:95:70:20:21:3a:6f:0d:93:59: fd:de:64:cb:eb:37:bf:17:3e:81:b1:01:b2:1d:c0:9b:ab:94: 9a:15:d8:ce:59:26:eb:36:f4:64:93:72:d6:61:b8:a4:87:ce: 5e:1f:7f:f7:b9:38:62:fc:68:ca:e2:9c:fc:2a:5d:eb:5a:f3: 0b:e8:45:1a:8f:49:96:65:6f:8a:ef:ad:35:e7:38:3c:12:7a: 96:ae:f9:cf:8d:c7:51:f6:89:5f:3b:0a:0c:12:18:75:66:d8: 01:93:e0:3e:dc:9f:27:dc:4a:3a:10:50:ae:f8:d2:fa:83:7e: 50:30:da:79:d4:4f:65:37:ba:2d:af:5b:6b:7d:3b:e1:51:f1: 08:6c:99:75:13:90:b8:5f:5c:66:ee:cf:b1:30:b8:d5:27:e7: 7a:b5:d5:fb:ba:d3:18:64:2e:2b:db:aa:11:62:6e:dd:29:d4: 2d:cf:5e:be:23:a1:0e:a4:dd:32:c6:8b:73:4d:ae:4d:92:02: 85:1b:79:2d:53:6d:80:0e:3d:52:b2:44:c5:76:91:46:9c:a1: 2d:de:92:97:55:dc:9a:bf:37:2d:de:da:f7:7b:23:44:3a:56: 20:ba:c5:f9 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt8EtQqEkFZWwlREQi6mQg7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTAyMDAxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YjE3YTVhOTMwMDE2ZjUwNjQ4MGFmN2MxMGYyMGQzMTkzYjkwZTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmIHbJ4xyNUjH5AUbv00vwAAd6O8 WGwomsBpobxRekfDjIXCqq1/BuH/rJfYoUKSr5jc7cSPW9DXjLDZU8O3TkAWkQjg IUpK0/boxg1BM8vLs12TMbfeg3kZ6h+ua9dX28TL22RADJXHrk2CN50F6N0bcfTv YRL/4OTkapGMPYFrNjIPxPR0nIVRHpUKz0Roclq0cMSTq5zzq2eBbsTFY8ABJ3fs eIg/d+ywRsjHEQdLF2jMzurHl6sa244YXtQWA8HjXhGiUE+fpu3320Tg0ogkcPqU 6drqvgFdDaNAq41aCb8wTSZ85t+GWa32YMgv2TgAC7IWPyx7G/Z8BBF0owIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFHsXpakwAW9QZICvfBDyDTGTuQ42MB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvZXhlbHFUQUJiMUJrZ0s5OEVQSU5NWk81RGpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAWWpOMA8E AgACMAkDBwAqAi/AABgwDQYJKoZIhvcNAQELBQADggEBAI/7zncYZCwbM6WP6GsB Km8otlrEi3P7Vdef8ZVwICE6bw2TWf3eZMvrN78XPoGxAbIdwJurlJoV2M5ZJus2 9GSTctZhuKSHzl4ff/e5OGL8aMrinPwqXeta8wvoRRqPSZZlb4rvrTXnODwSepau +c+Nx1H2iV87CgwSGHVm2AGT4D7cnyfcSjoQUK740vqDflAw2nnUT2U3ui2vW2t9 O+FR8QhsmXUTkLhfXGbuz7EwuNUn53q11fu60xhkLivbqhFibt0p1C3PXr4joQ6k 3TLGi3NNrk2SAoUbeS1TbYAOPVKyRMV2kUacoS3ekpdV3Jq/Ny3e2vd7I0Q6ViC6 xfk= -----END CERTIFICATE-----Generated at Mon Jan 19 19:58:16 2026 by rpki-client