This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/yOwMqiu-OwX3L_R6s_9t_h-uVPk.roa File: yOwMqiu-OwX3L_R6s_9t_h-uVPk.roa (raw, json) Hash identifier: S6Whbu6eeojGhXQMA54eE6Smk0fW1pwnZ4M4z+1Vn9I= Subject key identifier: C8:EC:0C:AA:2B:BE:3B:05:F7:2F:F4:7A:B3:FF:6D:FE:1F:AE:54:F9 Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16 Certificate serial: 019B7EA6F6E7CF463936EA8728711DD4D20E Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/yOwMqiu-OwX3L_R6s_9t_h-uVPk.roa Signing time: Fri 02 Jan 2026 12:20:30 +0000 ROA not before: Fri 02 Jan 2026 12:20:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 401838 IP address blocks: 89.23.80.0/24 maxlen: 24 89.23.87.0/24 maxlen: 24 89.23.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:f6:e7:cf:46:39:36:ea:87:28:71:1d:d4:d2:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16 Validity Not Before: Jan 2 12:20:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c8ec0caa2bbe3b05f72ff47ab3ff6dfe1fae54f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d5:9a:c9:9a:17:bb:a6:ae:2a:97:69:bd:d7: c5:23:15:da:2c:b4:58:21:9a:2d:aa:9c:9a:78:00: 07:c5:7b:67:04:b6:9d:90:69:40:fe:fc:ca:e7:1b: 99:1e:26:b2:99:5d:08:02:53:3d:c9:14:00:bb:a1: 33:c2:a6:c1:ab:1b:f4:be:0a:5b:ff:e3:d2:1a:19: d9:38:7b:1d:0b:51:7a:f5:81:a0:2a:17:32:b2:05: db:63:3c:f4:53:da:f5:30:b4:0e:c2:96:ca:e1:a3: 40:d9:9d:b3:99:ec:b4:99:08:06:d4:49:35:10:07: 3f:3c:62:0a:d1:8a:5a:ec:bf:89:f2:c7:ff:3a:37: a9:b7:b1:00:bc:64:d3:13:31:cf:b6:bd:e1:61:97: eb:68:0e:d0:84:1c:73:17:c2:ba:57:c2:a5:58:c2: e9:8a:2d:58:88:b1:72:a6:de:fa:8e:13:b9:08:7e: 8a:03:82:fc:06:27:2b:20:6d:30:49:8e:69:c0:d9: db:46:75:9f:0e:24:a1:c7:8e:67:93:98:6c:41:b6: d3:b7:40:75:28:1d:89:27:2a:44:14:67:d3:6a:5f: 94:19:65:a8:05:01:33:00:de:6e:1a:3f:72:73:54: 40:76:75:c5:c2:f9:25:ab:03:98:c7:f3:3e:8a:62: b1:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:EC:0C:AA:2B:BE:3B:05:F7:2F:F4:7A:B3:FF:6D:FE:1F:AE:54:F9 X509v3 Authority Key Identifier: keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/yOwMqiu-OwX3L_R6s_9t_h-uVPk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.23.80.0/24 89.23.87.0/24 89.23.92.0/24 Signature Algorithm: sha256WithRSAEncryption 52:10:4c:f3:a0:73:03:dd:9a:53:2e:55:40:ca:3c:fa:5f:e6: c7:72:56:e6:27:4a:b9:be:8c:61:4e:fc:6b:09:3b:25:bf:2c: 14:0c:68:1c:50:d7:c6:0b:56:59:73:d4:54:2a:9b:a0:e1:7b: 92:49:90:03:ff:4f:96:bd:95:bd:44:cd:23:6b:aa:a5:91:e8: 5f:ce:17:f1:af:24:21:96:49:65:fe:76:12:b6:8b:79:ae:e2: 03:4d:b0:7a:e4:a8:70:0f:b2:ec:b7:4a:4e:5c:ac:6a:8f:ed: d5:56:ca:d6:99:84:3b:ab:4a:6e:c4:b8:bb:78:6e:61:0a:81: 22:21:d7:be:bb:5f:9a:14:3a:94:54:cc:f4:de:bf:51:81:d0: 8d:2e:59:c2:63:7b:97:7a:03:f4:0d:ed:33:be:87:fd:63:c5: 1a:88:b9:62:13:2a:7a:37:0a:0e:b6:db:f6:fc:39:6e:fb:5c: 83:26:e6:58:c9:c5:32:a6:39:a8:f8:5d:76:1a:2a:a4:33:bd: c4:06:25:9a:eb:f9:6e:15:6a:29:53:24:1b:ff:04:7b:5e:39: ff:7b:89:1f:8b:ff:a6:d9:52:16:d5:52:e1:fa:cd:ab:b0:50: 88:22:78:18:2d:46:10:c5:39:99:8c:61:2f:51:2d:52:6c:af: d3:de:29:a5 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+pvbnz0Y5NuqHKHEd1NIOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NzEzZWYyNTI3N2UxM2RkNzNmNDQxOTZmZGE1Y2VjMGZk OWNlMTYwHhcNMjYwMTAyMTIyMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOGVjMGNhYTJiYmUzYjA1ZjcyZmY0N2FiM2ZmNmRmZTFmYWU1NGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndWayZoXu6auKpdpvdfFIxXaLLRY IZotqpyaeAAHxXtnBLadkGlA/vzK5xuZHiaymV0IAlM9yRQAu6EzwqbBqxv0vgpb /+PSGhnZOHsdC1F69YGgKhcysgXbYzz0U9r1MLQOwpbK4aNA2Z2zmey0mQgG1Ek1 EAc/PGIK0Ypa7L+J8sf/Ojept7EAvGTTEzHPtr3hYZfraA7QhBxzF8K6V8KlWMLp ii1YiLFypt76jhO5CH6KA4L8BicrIG0wSY5pwNnbRnWfDiShx45nk5hsQbbTt0B1 KB2JJypEFGfTal+UGWWoBQEzAN5uGj9yc1RAdnXFwvklqwOYx/M+imKxIwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMjsDKorvjsF9y/0erP/bf4frlT5MB8GA1UdIwQY MBaAFOlxPvJSd+E91z9EGW/aXOwP2c4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEt MGY2NmMxODg3OTE2LzEveU93TXFpdS1Pd1gzTF9SNnNfOXRfaC11VlBrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEtMGY2NmMxODg3OTE2 LzEvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAWRdQAwQA WRdXAwQAWRdcMA0GCSqGSIb3DQEBCwUAA4IBAQBSEEzzoHMD3ZpTLlVAyjz6X+bH clbmJ0q5voxhTvxrCTslvywUDGgcUNfGC1ZZc9RUKpug4XuSSZAD/0+WvZW9RM0j a6qlkehfzhfxryQhlkll/nYStot5ruIDTbB65KhwD7Lst0pOXKxqj+3VVsrWmYQ7 q0puxLi7eG5hCoEiIde+u1+aFDqUVMz03r9RgdCNLlnCY3uXegP0De0zvof9Y8Ua iLliEyp6NwoOttv2/Dlu+1yDJuZYycUypjmo+F12GiqkM73EBiWa6/luFWopUyQb /wR7Xjn/e4kfi/+m2VIW1VLh+s2rsFCIIngYLUYQxTmZjGEvUS1SbK/T3iml -----END CERTIFICATE-----Generated at Wed Jan 21 05:21:20 2026 by rpki-client