This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/CWGGe9R-JGzmO2HfGgb7n_SydAg.roa File: CWGGe9R-JGzmO2HfGgb7n_SydAg.roa (raw, json) Hash identifier: X92UUJXWgYTDBdZ4awbet3RLfN35aQybB8tsmaXyXJI= Subject key identifier: 09:61:86:7B:D4:7E:24:6C:E6:3B:61:DF:1A:06:FB:9F:F4:B2:74:08 Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16 Certificate serial: 019B7EA6EF3B6DBC1F472A6A4C3FFCDD016D Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/CWGGe9R-JGzmO2HfGgb7n_SydAg.roa Signing time: Fri 02 Jan 2026 12:20:27 +0000 ROA not before: Fri 02 Jan 2026 12:20:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64267 IP address blocks: 89.23.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 03:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:ef:3b:6d:bc:1f:47:2a:6a:4c:3f:fc:dd:01:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16 Validity Not Before: Jan 2 12:20:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0961867bd47e246ce63b61df1a06fb9ff4b27408 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:84:4d:5c:bd:1a:82:25:a7:32:c2:7a:2c:ff: 08:f2:90:3e:15:9b:22:35:c1:42:14:17:93:7a:67: f2:61:00:af:d8:8d:69:82:dd:75:76:40:eb:73:ba: 45:37:94:43:2c:55:8f:43:e3:9e:a0:bc:c5:00:68: 08:75:d3:c7:ad:e7:1e:9d:f7:6c:c6:58:d9:8a:74: 99:fc:2c:b3:07:81:19:2d:bb:68:d8:8e:c6:67:b9: fc:2f:55:ef:8b:bc:ed:6b:9d:92:c9:80:0a:f5:75: 40:0a:82:f1:9e:50:a1:2e:f5:05:04:25:e6:67:a9: 03:e4:d7:e0:4e:15:de:00:9f:7e:24:a2:7c:57:7c: 1b:d8:d7:9b:0b:d3:3d:af:36:d1:3b:e1:32:d4:cb: b8:ce:0b:78:ed:5e:f0:91:63:36:58:ab:28:a2:41: 21:bf:30:35:53:38:e2:bc:cf:38:95:78:e8:25:61: b8:bb:45:ff:65:e2:75:e7:9a:95:6f:43:96:d2:92: 99:27:40:0e:b6:79:05:83:6a:53:e9:ab:3b:05:10: 29:4f:1c:f9:3c:1f:80:f7:03:ed:c9:d1:46:88:f2: f0:45:f3:22:15:94:1f:98:e2:f3:cf:48:be:ca:ed: 2a:53:24:3a:06:7f:5c:cb:e7:51:55:46:c8:44:bc: b3:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:61:86:7B:D4:7E:24:6C:E6:3B:61:DF:1A:06:FB:9F:F4:B2:74:08 X509v3 Authority Key Identifier: keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/CWGGe9R-JGzmO2HfGgb7n_SydAg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.23.81.0/24 Signature Algorithm: sha256WithRSAEncryption 40:d7:d4:0d:c3:7b:55:da:2a:6e:4b:43:63:83:c7:fb:57:91: 03:ec:44:5b:07:95:15:f9:38:a2:a8:d4:cd:80:2b:55:88:e6: 57:a0:ae:ae:3b:59:b0:d5:a7:43:5a:7d:bb:ba:3a:70:d0:30: 5c:ea:7d:70:59:1d:2d:30:b9:d5:22:7e:d5:32:12:6f:a4:41: 99:e0:30:2a:3a:36:2d:bf:2b:8f:91:1f:9b:13:f5:e9:16:fa: 10:61:60:ad:b2:d9:8c:f2:b1:dc:8f:3b:75:bc:e7:46:cd:a6: b3:a2:51:56:57:a1:5b:dd:e7:2e:93:9d:aa:52:e7:82:cc:47: 62:e9:b0:5f:c1:d5:87:3c:2d:b3:2b:db:57:9e:64:50:d1:fe: 2c:48:67:5c:62:ed:0a:d5:6d:f5:25:40:67:71:56:5e:2c:04: 68:09:85:ea:21:d6:ff:0d:65:60:b0:67:85:18:1e:88:99:88: 4d:a7:65:57:97:cb:49:4c:b6:fe:c3:b2:fa:84:8c:a0:05:22: 9b:8c:aa:fd:2e:22:44:8a:80:22:9c:c0:fc:39:5b:94:c3:7e: 96:5d:91:4c:33:24:0b:27:b3:dc:51:24:b4:ab:cd:00:61:94: 13:21:01:9e:cb:82:78:03:bb:d3:92:8c:98:10:d2:07:12:ef: 1b:ca:c9:f9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pu87bbwfRypqTD/83QFtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NzEzZWYyNTI3N2UxM2RkNzNmNDQxOTZmZGE1Y2VjMGZk OWNlMTYwHhcNMjYwMTAyMTIyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOTYxODY3YmQ0N2UyNDZjZTYzYjYxZGYxYTA2ZmI5ZmY0YjI3NDA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4RNXL0agiWnMsJ6LP8I8pA+FZsi NcFCFBeTemfyYQCv2I1pgt11dkDrc7pFN5RDLFWPQ+OeoLzFAGgIddPHrecenfds xljZinSZ/CyzB4EZLbto2I7GZ7n8L1Xvi7zta52SyYAK9XVACoLxnlChLvUFBCXm Z6kD5NfgThXeAJ9+JKJ8V3wb2NebC9M9rzbRO+Ey1Mu4zgt47V7wkWM2WKsookEh vzA1UzjivM84lXjoJWG4u0X/ZeJ155qVb0OW0pKZJ0AOtnkFg2pT6as7BRApTxz5 PB+A9wPtydFGiPLwRfMiFZQfmOLzz0i+yu0qUyQ6Bn9cy+dRVUbIRLyzPQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAlhhnvUfiRs5jth3xoG+5/0snQIMB8GA1UdIwQY MBaAFOlxPvJSd+E91z9EGW/aXOwP2c4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEt MGY2NmMxODg3OTE2LzEvQ1dHR2U5Ui1KR3ptTzJIZkdnYjduX1N5ZEFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEtMGY2NmMxODg3OTE2 LzEvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWRdRMA0G CSqGSIb3DQEBCwUAA4IBAQBA19QNw3tV2ipuS0Njg8f7V5ED7ERbB5UV+TiiqNTN gCtViOZXoK6uO1mw1adDWn27ujpw0DBc6n1wWR0tMLnVIn7VMhJvpEGZ4DAqOjYt vyuPkR+bE/XpFvoQYWCtstmM8rHcjzt1vOdGzaazolFWV6Fb3ecuk52qUueCzEdi 6bBfwdWHPC2zK9tXnmRQ0f4sSGdcYu0K1W31JUBncVZeLARoCYXqIdb/DWVgsGeF GB6ImYhNp2VXl8tJTLb+w7L6hIygBSKbjKr9LiJEioAinMD8OVuUw36WXZFMMyQL J7PcUSS0q80AYZQTIQGey4J4A7vTkoyYENIHEu8bysn5 -----END CERTIFICATE-----Generated at Mon Jan 19 10:37:04 2026 by rpki-client