This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/_0EsaxZOC_EidYm5nqVbMGv-gwk.roa File: _0EsaxZOC_EidYm5nqVbMGv-gwk.roa (raw, json) Hash identifier: iTzRHJQiIkKsfX5vIK1gvYNgM5gQ+IPUGEhDEQTXUs8= Subject key identifier: FF:41:2C:6B:16:4E:0B:F1:22:75:89:B9:9E:A5:5B:30:6B:FE:83:09 Certificate issuer: /CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930 Certificate serial: 019B7EA6CAF7E47674C2B5EAF180FCD1BA43 Authority key identifier: DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/_0EsaxZOC_EidYm5nqVbMGv-gwk.roa Signing time: Fri 02 Jan 2026 12:20:18 +0000 ROA not before: Fri 02 Jan 2026 12:20:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21159 IP address blocks: 89.105.216.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:ca:f7:e4:76:74:c2:b5:ea:f1:80:fc:d1:ba:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930 Validity Not Before: Jan 2 12:20:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ff412c6b164e0bf1227589b99ea55b306bfe8309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5c:91:03:f6:86:bb:cd:e2:58:a3:d6:7e:02: a0:c7:ac:f9:ac:84:13:d0:44:c4:c8:e0:20:36:be: d7:18:d6:97:f9:33:a4:e3:1a:b0:56:4a:89:67:2d: 53:38:ba:20:62:d5:a0:c8:cc:b3:55:e2:f1:1d:b3: 19:57:6d:d7:40:9f:4c:12:bb:46:ec:8e:2b:f7:c7: 3e:74:6f:a6:1d:84:fe:3c:60:8b:6c:5c:6c:f7:91: 90:cb:61:07:29:24:ef:d5:da:a3:8f:e1:0a:37:60: 28:ef:80:fa:7a:0b:25:67:a0:46:be:b4:f4:bf:96: b7:76:9a:ab:45:7e:a3:07:82:01:7e:fa:59:51:a6: 2e:44:e0:5f:c7:48:19:3a:cd:db:fa:52:5d:e9:68: 09:c8:96:fc:10:58:ab:56:e0:6b:91:8a:86:30:9f: d0:97:de:73:ac:88:a6:56:60:16:5a:51:4c:7c:6a: ab:2c:cd:81:53:6d:9a:ea:d2:79:9e:3c:bc:06:25: bd:dc:79:1d:4a:15:c0:76:4b:9c:8a:83:f1:87:f8: be:fd:d9:e3:19:01:3d:72:84:04:cf:7f:7f:6f:e3: 23:bd:e3:0d:ac:60:44:c8:bb:2b:0f:ed:c0:3c:90: b7:15:ff:c9:d3:25:59:8a:7b:82:e8:39:4e:d0:a9: fd:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:41:2C:6B:16:4E:0B:F1:22:75:89:B9:9E:A5:5B:30:6B:FE:83:09 X509v3 Authority Key Identifier: keyid:DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/_0EsaxZOC_EidYm5nqVbMGv-gwk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.105.216.0/23 Signature Algorithm: sha256WithRSAEncryption 34:b1:49:d7:52:69:99:c0:d4:bd:18:74:e2:33:4f:3c:98:c7: ba:0a:62:4a:79:d9:90:48:36:80:16:47:9a:eb:7f:be:e7:5a: 99:cb:c6:db:a4:da:5f:d2:57:63:8a:0c:63:89:2b:fb:c9:52: 0d:26:f2:b1:84:bb:38:ff:fa:17:bf:73:9f:53:9d:e1:16:ce: 1d:ea:da:20:7f:80:29:b1:0b:85:fc:82:a2:2e:41:5d:84:47: c9:fa:41:d1:83:e0:00:17:9e:50:82:0b:23:1e:de:41:ba:43: 66:48:42:b3:48:70:6f:4b:90:60:1d:56:04:6e:15:8a:26:3e: 08:43:e4:8f:cc:8a:b5:7f:8e:c2:91:0c:7b:9b:41:4f:96:7f: f4:f6:01:73:ea:e0:e2:7e:4c:89:81:d2:9c:96:7c:5a:5f:34: 23:29:ab:36:63:7c:49:6a:69:62:91:a1:cd:3d:24:d2:bf:5f: 56:c4:a2:d6:7e:aa:81:1b:5e:a4:d9:f9:fd:c6:b3:c3:81:bd: 9b:32:29:7c:a4:9b:ae:8d:67:50:70:25:ed:33:ab:a4:ce:43: 14:eb:df:b2:02:29:ed:a3:7a:32:d0:8c:a9:f9:86:e7:88:d9: 4a:65:57:41:5c:e7:4e:98:fa:3b:84:13:e4:80:e0:95:68:d5: 7b:58:68:27 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+psr35HZ0wrXq8YD80bpDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjOTBlMGFlZTFlY2MzMTA2NmNiNzQ0ZjhhN2ZlZWRlZmIz Zjc5MzAwHhcNMjYwMTAyMTIyMDE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjQxMmM2YjE2NGUwYmYxMjI3NTg5Yjk5ZWE1NWIzMDZiZmU4MzA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVyRA/aGu83iWKPWfgKgx6z5rIQT 0ETEyOAgNr7XGNaX+TOk4xqwVkqJZy1TOLogYtWgyMyzVeLxHbMZV23XQJ9MErtG 7I4r98c+dG+mHYT+PGCLbFxs95GQy2EHKSTv1dqjj+EKN2Ao74D6egslZ6BGvrT0 v5a3dpqrRX6jB4IBfvpZUaYuROBfx0gZOs3b+lJd6WgJyJb8EFirVuBrkYqGMJ/Q l95zrIimVmAWWlFMfGqrLM2BU22a6tJ5njy8BiW93HkdShXAdkucioPxh/i+/dnj GQE9coQEz39/b+MjveMNrGBEyLsrD+3APJC3Ff/J0yVZinuC6DlO0Kn9ZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP9BLGsWTgvxInWJuZ6lWzBr/oMJMB8GA1UdIwQY MBaAFNyQ4K7h7MMQZst0T4p/7t77P3kwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0pEZ3J1SHN3eEJteTNSUGluX3UzdnNfZVRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi84N2IyNjctNDljMi00MjY5LTlmNjYt MDBiY2Q5YjkxYzFiLzEvXzBFc2F4Wk9DX0VpZFltNW5xVmJNR3YtZ3drLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi84N2IyNjctNDljMi00MjY5LTlmNjYtMDBiY2Q5YjkxYzFi LzEvM0pEZ3J1SHN3eEJteTNSUGluX3UzdnNfZVRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBWWnYMA0G CSqGSIb3DQEBCwUAA4IBAQA0sUnXUmmZwNS9GHTiM088mMe6CmJKedmQSDaAFkea 63++51qZy8bbpNpf0ldjigxjiSv7yVINJvKxhLs4//oXv3OfU53hFs4d6togf4Ap sQuF/IKiLkFdhEfJ+kHRg+AAF55QggsjHt5BukNmSEKzSHBvS5BgHVYEbhWKJj4I Q+SPzIq1f47CkQx7m0FPln/09gFz6uDifkyJgdKclnxaXzQjKas2Y3xJamlikaHN PSTSv19WxKLWfqqBG16k2fn9xrPDgb2bMil8pJuujWdQcCXtM6ukzkMU69+yAint o3oy0Iyp+YbniNlKZVdBXOdOmPo7hBPkgOCVaNV7WGgn -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:24 2026 by rpki-client