This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/e89SBhBBaL18qejVEfgQtSemlB0.roa File: e89SBhBBaL18qejVEfgQtSemlB0.roa (raw, json) Hash identifier: Gc/uVJGxURscBi9WA9foLpSF+kUOEix1bWq345u58KA= Subject key identifier: 7B:CF:52:06:10:41:68:BD:7C:A9:E8:D5:11:F8:10:B5:27:A6:94:1D Certificate issuer: /CN=3ead19096b0ee080fe43810500b718a947fed229 Certificate serial: 019B7D5CF2D4F2B52D4C17137B4400C88005 Authority key identifier: 3E:AD:19:09:6B:0E:E0:80:FE:43:81:05:00:B7:18:A9:47:FE:D2:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/e89SBhBBaL18qejVEfgQtSemlB0.roa Signing time: Fri 02 Jan 2026 06:20:02 +0000 ROA not before: Fri 02 Jan 2026 06:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1299 IP address blocks: 193.108.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.crl rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft rsync://rpki.ripe.net/repository/DEFAULT/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:f2:d4:f2:b5:2d:4c:17:13:7b:44:00:c8:80:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ead19096b0ee080fe43810500b718a947fed229 Validity Not Before: Jan 2 06:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7bcf5206104168bd7ca9e8d511f810b527a6941d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fa:07:53:d3:fd:36:dc:7a:ca:1a:ac:83:f4: 09:12:7b:9d:20:ab:80:fa:1d:e1:cd:2d:c4:d9:dc: c0:5c:0e:9b:cf:56:9d:e1:98:2d:42:17:19:be:f5: c3:0a:b4:6d:7e:f7:08:9e:ad:b0:9f:b2:75:48:86: 2b:e9:cc:ea:8c:4e:dd:aa:36:87:ba:6c:b1:49:18: 88:53:fb:d2:d5:8b:c5:d5:83:73:23:ae:4c:0d:59: 7b:19:fc:1a:af:4a:6e:03:e6:d2:f4:58:bd:fe:94: 01:3c:97:5c:91:52:3a:5e:e9:d6:a8:6e:88:1f:bd: 84:f4:a2:4c:58:2a:7c:1e:42:74:f9:3c:56:fb:60: 9a:3a:01:27:2b:a3:08:5d:55:3a:03:52:c9:11:53: 2b:54:f5:4c:4d:01:fe:cb:ce:43:59:55:1c:6f:cc: af:b0:dd:be:d8:e9:53:9e:c6:0d:8e:10:ab:8b:30: 66:d5:a4:30:5c:e8:ca:2d:73:ac:b7:05:db:f5:36: f7:92:91:f2:2d:18:9a:4c:f4:77:eb:a7:8a:0e:4d: 60:60:3d:26:29:5a:d3:6d:6a:72:f4:c9:c9:36:e8: d8:97:dd:c5:ea:10:02:87:7f:68:f7:07:d6:a1:e0: a6:8b:94:e8:99:72:d8:a3:38:ec:0f:c3:bd:c5:7b: b0:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:CF:52:06:10:41:68:BD:7C:A9:E8:D5:11:F8:10:B5:27:A6:94:1D X509v3 Authority Key Identifier: keyid:3E:AD:19:09:6B:0E:E0:80:FE:43:81:05:00:B7:18:A9:47:FE:D2:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/e89SBhBBaL18qejVEfgQtSemlB0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.108.136.0/23 Signature Algorithm: sha256WithRSAEncryption 04:f1:f8:f2:7f:a0:f2:6d:0b:f3:b3:1e:f3:b9:ac:49:6e:9f: e9:79:08:56:17:12:35:93:31:75:f7:ab:a0:a7:2a:7b:bd:ab: cd:a6:f3:f9:5b:83:3d:0a:20:4b:0b:aa:4e:92:ed:c5:54:94: f0:79:6c:e3:ce:13:d5:ed:07:39:5f:f2:92:1b:ea:6d:d6:45: 28:73:70:95:a7:8e:7e:a9:b6:76:b5:71:00:4c:3d:31:67:3a: f8:2e:01:9f:21:53:ed:42:ab:9a:49:ff:5b:97:ba:a3:a0:58: fa:5f:f2:ff:9d:4e:09:3e:9e:a3:c2:49:db:8c:91:7b:2b:6d: a8:93:1c:ac:52:0a:3e:8a:ce:65:66:f1:94:80:8f:6d:71:3b: 02:7e:83:65:8b:06:79:13:66:35:0c:9f:bd:2f:7d:f5:05:b5: 81:ab:f4:fa:ea:90:d6:9b:16:36:6a:43:cd:c5:b0:55:4c:89: b0:c9:e3:f1:41:d3:10:31:7d:81:16:83:23:ae:e0:70:69:e7: 7c:6c:3d:0e:ad:4d:25:63:dc:2d:80:0f:09:9a:61:8c:d7:23: 66:7f:32:7b:21:b6:29:9e:1a:4c:b8:3d:6a:b9:90:1a:29:54: 6a:b4:00:75:8a:85:cc:b5:cd:fa:43:6e:17:b8:81:93:e7:bd: bc:48:e6:8d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XPLU8rUtTBcTe0QAyIAFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlYWQxOTA5NmIwZWUwODBmZTQzODEwNTAwYjcxOGE5NDdm ZWQyMjkwHhcNMjYwMTAyMDYyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YmNmNTIwNjEwNDE2OGJkN2NhOWU4ZDUxMWY4MTBiNTI3YTY5NDFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfoHU9P9Ntx6yhqsg/QJEnudIKuA +h3hzS3E2dzAXA6bz1ad4ZgtQhcZvvXDCrRtfvcInq2wn7J1SIYr6czqjE7dqjaH umyxSRiIU/vS1YvF1YNzI65MDVl7Gfwar0puA+bS9Fi9/pQBPJdckVI6XunWqG6I H72E9KJMWCp8HkJ0+TxW+2CaOgEnK6MIXVU6A1LJEVMrVPVMTQH+y85DWVUcb8yv sN2+2OlTnsYNjhCrizBm1aQwXOjKLXOstwXb9Tb3kpHyLRiaTPR366eKDk1gYD0m KVrTbWpy9MnJNujYl93F6hACh39o9wfWoeCmi5TomXLYozjsD8O9xXuw4wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHvPUgYQQWi9fKno1RH4ELUnppQdMB8GA1UdIwQY MBaAFD6tGQlrDuCA/kOBBQC3GKlH/tIpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHEwWkNXc080SUQtUTRFRkFMY1lxVWYtMGlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy82M2JiNzktOTNiMC00OTlmLTk3OGQt MTBmZTQ0NzI2OTA4LzEvZTg5U0JoQkJhTDE4cWVqVkVmZ1F0U2VtbEIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy82M2JiNzktOTNiMC00OTlmLTk3OGQtMTBmZTQ0NzI2OTA4 LzEvUHEwWkNXc080SUQtUTRFRkFMY1lxVWYtMGlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwWyIMA0G CSqGSIb3DQEBCwUAA4IBAQAE8fjyf6DybQvzsx7zuaxJbp/peQhWFxI1kzF196ug pyp7vavNpvP5W4M9CiBLC6pOku3FVJTweWzjzhPV7Qc5X/KSG+pt1kUoc3CVp45+ qbZ2tXEATD0xZzr4LgGfIVPtQquaSf9bl7qjoFj6X/L/nU4JPp6jwknbjJF7K22o kxysUgo+is5lZvGUgI9tcTsCfoNliwZ5E2Y1DJ+9L331BbWBq/T66pDWmxY2akPN xbBVTImwyePxQdMQMX2BFoMjruBwaed8bD0OrU0lY9wtgA8JmmGM1yNmfzJ7IbYp nhpMuD1quZAaKVRqtAB1ioXMtc36Q24XuIGT5728SOaN -----END CERTIFICATE-----Generated at Wed Jan 21 07:23:23 2026 by rpki-client