This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/wBJDHnM1WpUvTgt8FnDuIQpDAAE.roa File: wBJDHnM1WpUvTgt8FnDuIQpDAAE.roa (raw, json) Hash identifier: PaTEHFJ5m6wbY9R0ziUcrEWGg6nFAk5KziHVBz+xLhk= Subject key identifier: C0:12:43:1E:73:35:5A:95:2F:4E:0B:7C:16:70:EE:21:0A:43:00:01 Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16 Certificate serial: 019B7EA6E8DF24C9AECC57D366BF07C55819 Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/wBJDHnM1WpUvTgt8FnDuIQpDAAE.roa Signing time: Fri 02 Jan 2026 12:20:26 +0000 ROA not before: Fri 02 Jan 2026 12:20:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7029 IP address blocks: 89.23.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 23:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:e8:df:24:c9:ae:cc:57:d3:66:bf:07:c5:58:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16 Validity Not Before: Jan 2 12:20:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c012431e73355a952f4e0b7c1670ee210a430001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:82:29:01:c8:11:c7:5d:3f:40:9d:06:f2:34: a9:52:72:ff:19:22:df:47:10:6f:92:79:0c:88:37: 90:75:b8:61:2f:b1:3d:e4:05:17:9b:25:6e:34:9e: 9c:a3:8b:f6:fd:19:64:a5:91:9f:9b:06:fc:9b:4e: 67:86:ca:6e:d8:96:6f:fe:93:4f:ad:2d:34:cf:1a: 95:ae:6d:64:af:c1:1b:3f:a3:71:81:ef:43:be:c4: 16:9c:03:a5:2c:55:d2:33:d3:ed:d9:e1:9c:15:dc: e1:f8:b5:6a:18:2b:be:97:4e:d6:d5:c1:3e:ec:6e: 74:ca:cd:63:26:c6:49:4e:3b:ed:f0:c4:9a:64:18: c2:f3:f1:7b:7b:3d:34:51:83:6e:7e:fb:eb:e2:c9: 73:f6:39:17:d6:8b:93:01:bc:e6:63:db:72:d9:d3: 4d:33:f5:5d:9a:dc:22:a7:53:03:52:67:87:33:d5: 45:a1:2a:c0:ad:7a:1f:94:a8:a1:b7:09:99:78:1a: 92:a3:5f:98:ed:f7:aa:27:47:f8:47:27:df:e3:f3: 23:19:55:e2:84:ec:50:f6:cb:7d:3c:10:e0:ec:ca: ad:fe:75:be:31:54:24:b6:15:d5:a5:22:c8:ce:ff: ed:8c:ea:3c:3e:7c:bb:be:b9:e3:81:39:c9:3a:33: 93:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:12:43:1E:73:35:5A:95:2F:4E:0B:7C:16:70:EE:21:0A:43:00:01 X509v3 Authority Key Identifier: keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/wBJDHnM1WpUvTgt8FnDuIQpDAAE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.23.81.0/24 Signature Algorithm: sha256WithRSAEncryption 20:fe:07:b8:fd:00:8d:97:d6:e0:a3:06:4f:7c:52:b9:db:b7: 9e:45:ea:e9:52:ed:3c:03:39:88:fc:46:70:21:d8:bb:b0:4b: af:cb:34:27:4a:c6:0a:e4:ac:a5:40:ad:46:4d:b5:b6:d2:71: b0:a7:c2:ad:a4:8f:65:2b:3a:84:9f:95:dd:97:86:80:35:43: e6:5c:69:d7:e5:99:a3:b6:8e:9b:ca:03:ae:92:ee:07:d8:1e: ca:02:b2:9d:f2:17:84:c8:d5:cc:78:ff:f8:92:98:02:bd:be: 67:64:88:e9:c0:b8:b6:ca:b2:e6:a8:45:1d:f5:bb:b2:25:40: c6:c0:76:2f:81:7d:91:ce:2c:b2:cf:8c:d6:05:d9:8a:08:f1: 5a:1b:b0:b9:6f:da:ce:ee:d5:e3:26:13:1e:7b:c4:af:52:ca: e9:64:aa:13:13:90:82:4f:df:02:fb:06:45:1c:4f:15:95:d7: 8d:8c:44:b6:1b:65:8b:eb:17:d8:11:a0:13:8e:bb:c0:6b:b0: 4d:9d:a3:50:60:56:cf:e0:5d:86:bf:28:10:b2:95:bf:57:d8: ba:74:d1:6b:28:9d:d4:b2:8b:54:bc:d0:cd:bb:b2:90:80:50: 6b:e7:b2:f1:8c:d9:22:a1:09:95:a3:57:b3:52:c0:b4:f7:c9: ad:7e:df:67 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pujfJMmuzFfTZr8HxVgZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NzEzZWYyNTI3N2UxM2RkNzNmNDQxOTZmZGE1Y2VjMGZk OWNlMTYwHhcNMjYwMTAyMTIyMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDEyNDMxZTczMzU1YTk1MmY0ZTBiN2MxNjcwZWUyMTBhNDMwMDAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4IpAcgRx10/QJ0G8jSpUnL/GSLf RxBvknkMiDeQdbhhL7E95AUXmyVuNJ6co4v2/RlkpZGfmwb8m05nhspu2JZv/pNP rS00zxqVrm1kr8EbP6Nxge9DvsQWnAOlLFXSM9Pt2eGcFdzh+LVqGCu+l07W1cE+ 7G50ys1jJsZJTjvt8MSaZBjC8/F7ez00UYNufvvr4slz9jkX1ouTAbzmY9ty2dNN M/Vdmtwip1MDUmeHM9VFoSrArXoflKihtwmZeBqSo1+Y7feqJ0f4Ryff4/MjGVXi hOxQ9st9PBDg7Mqt/nW+MVQkthXVpSLIzv/tjOo8Pny7vrnjgTnJOjOTtwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMASQx5zNVqVL04LfBZw7iEKQwABMB8GA1UdIwQY MBaAFOlxPvJSd+E91z9EGW/aXOwP2c4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEt MGY2NmMxODg3OTE2LzEvd0JKREhuTTFXcFV2VGd0OEZuRHVJUXBEQUFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEtMGY2NmMxODg3OTE2 LzEvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWRdRMA0G CSqGSIb3DQEBCwUAA4IBAQAg/ge4/QCNl9bgowZPfFK527eeRerpUu08AzmI/EZw Idi7sEuvyzQnSsYK5KylQK1GTbW20nGwp8KtpI9lKzqEn5Xdl4aANUPmXGnX5Zmj to6bygOuku4H2B7KArKd8heEyNXMeP/4kpgCvb5nZIjpwLi2yrLmqEUd9buyJUDG wHYvgX2Rziyyz4zWBdmKCPFaG7C5b9rO7tXjJhMee8SvUsrpZKoTE5CCT98C+wZF HE8VldeNjES2G2WL6xfYEaATjrvAa7BNnaNQYFbP4F2GvygQspW/V9i6dNFrKJ3U sotUvNDNu7KQgFBr57LxjNkioQmVo1ezUsC098mtft9n -----END CERTIFICATE-----Generated at Sun Jan 18 08:54:51 2026 by rpki-client