This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/ExGpRunqaEGx1C87iYbOQskR5uw.roa File: ExGpRunqaEGx1C87iYbOQskR5uw.roa (raw, json) Hash identifier: RiaEfvnW4XKOfGx9ToOnBoSA9Vrw+toQDu46/ctYlAQ= Subject key identifier: 13:11:A9:46:E9:EA:68:41:B1:D4:2F:3B:89:86:CE:42:C9:11:E6:EC Certificate issuer: /CN=b53005619688efbaffd06e108a43bdf20643e0d6 Certificate serial: 019B797ECECCC87AB6B355857878A5FE5C97 Authority key identifier: B5:30:05:61:96:88:EF:BA:FF:D0:6E:10:8A:43:BD:F2:06:43:E0:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/ExGpRunqaEGx1C87iYbOQskR5uw.roa Signing time: Thu 01 Jan 2026 12:18:32 +0000 ROA not before: Thu 01 Jan 2026 12:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 89.186.51.0/24 maxlen: 24 89.186.52.0/24 maxlen: 24 89.186.53.0/24 maxlen: 24 89.186.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.crl rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:ce:cc:c8:7a:b6:b3:55:85:78:78:a5:fe:5c:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b53005619688efbaffd06e108a43bdf20643e0d6 Validity Not Before: Jan 1 12:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1311a946e9ea6841b1d42f3b8986ce42c911e6ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:71:2b:15:63:b4:de:87:36:c7:7b:3c:0c:69: 77:a9:53:00:14:d5:23:ae:c3:6a:61:cd:6e:64:a0: 9d:77:71:ed:7b:91:84:64:ec:a3:0d:34:3a:69:a4: 16:47:23:b3:33:c0:86:df:88:d6:a2:89:21:dc:71: 6a:95:64:0b:52:ac:f3:26:93:c3:85:f3:12:eb:03: dc:5b:a3:6a:8c:06:1a:7c:a2:b7:ce:19:ba:56:c7: a8:42:f1:52:16:3b:e9:1b:08:46:e3:36:f6:c5:2b: 69:6b:6e:e6:a8:f6:8c:20:08:88:4f:4e:50:92:f3: 02:bc:ca:3c:a8:34:9e:46:c0:9e:a4:55:fa:00:22: 55:69:f6:5a:35:b3:82:98:e6:4e:45:b4:e2:9a:66: 08:26:7a:d5:cb:ae:5a:ea:11:26:e0:3b:42:ad:f4: ef:c8:ee:a9:bd:3b:9f:cc:1f:d0:d8:3a:91:6b:25: 81:27:73:94:d6:b0:dc:c1:82:e0:48:db:93:ac:09: 8a:b2:ff:8e:bd:ee:24:9a:3c:67:2e:d6:5f:62:31: 6c:12:f5:aa:97:78:b3:b6:6d:e1:16:f6:9e:79:44: f7:5e:a1:1e:99:69:34:94:49:55:4e:25:f3:63:b3: 6c:66:7c:4c:64:7a:47:6b:23:09:36:94:0b:a3:72: e6:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:11:A9:46:E9:EA:68:41:B1:D4:2F:3B:89:86:CE:42:C9:11:E6:EC X509v3 Authority Key Identifier: keyid:B5:30:05:61:96:88:EF:BA:FF:D0:6E:10:8A:43:BD:F2:06:43:E0:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/ExGpRunqaEGx1C87iYbOQskR5uw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.186.51.0-89.186.54.255 Signature Algorithm: sha256WithRSAEncryption 64:15:36:76:1c:30:05:ae:32:59:20:3f:47:22:e8:88:56:46: 80:c9:5c:70:ba:f1:bc:77:d2:31:71:16:74:a1:c5:7b:0b:d5: d7:f4:18:4b:3c:fa:83:6e:04:6b:62:de:20:2b:e6:0d:0f:32: a1:e8:75:8f:ac:2c:90:c9:29:66:37:7a:8f:0d:3f:88:81:fc: f8:1a:8f:55:36:3c:6d:6c:c2:96:34:22:2e:44:a9:6c:d1:be: 62:03:e3:7c:85:72:59:b1:2f:aa:c0:ef:08:6a:2b:2c:33:36: 7d:b7:7f:18:f3:a6:e7:ca:c7:e4:8b:73:a3:26:f1:ef:0e:17: 4e:bd:c7:a4:67:8c:3c:e1:74:e2:69:68:ae:5e:3f:3d:16:6a: 67:99:52:24:7d:1e:df:33:9a:78:01:29:38:02:b6:fa:39:be: 88:3a:68:e1:23:e4:c7:e1:74:18:67:e4:7b:5e:f9:bd:b4:3f: 76:92:4d:96:00:6a:9f:49:74:e2:78:a9:ed:72:ee:60:be:56: f2:83:80:25:bd:f4:04:7a:38:3c:65:f4:99:f4:b3:80:40:ff: 0b:8d:81:14:f1:6b:2c:3c:2d:da:fa:38:8e:ba:75:d2:21:c1: 5f:d5:fd:23:8e:16:f0:5d:c4:4e:6a:fb:75:b4:f7:9e:b5:f2: 9c:31:99:fa -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt5fs7MyHq2s1WFeHil/lyXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1MzAwNTYxOTY4OGVmYmFmZmQwNmUxMDhhNDNiZGYyMDY0 M2UwZDYwHhcNMjYwMTAxMTIxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzExYTk0NmU5ZWE2ODQxYjFkNDJmM2I4OTg2Y2U0MmM5MTFlNmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznErFWO03oc2x3s8DGl3qVMAFNUj rsNqYc1uZKCdd3Hte5GEZOyjDTQ6aaQWRyOzM8CG34jWookh3HFqlWQLUqzzJpPD hfMS6wPcW6NqjAYafKK3zhm6VseoQvFSFjvpGwhG4zb2xStpa27mqPaMIAiIT05Q kvMCvMo8qDSeRsCepFX6ACJVafZaNbOCmOZORbTimmYIJnrVy65a6hEm4DtCrfTv yO6pvTufzB/Q2DqRayWBJ3OU1rDcwYLgSNuTrAmKsv+Ove4kmjxnLtZfYjFsEvWq l3iztm3hFvaeeUT3XqEemWk0lElVTiXzY7NsZnxMZHpHayMJNpQLo3LmPQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFBMRqUbp6mhBsdQvO4mGzkLJEebsMB8GA1UdIwQY MBaAFLUwBWGWiO+6/9BuEIpDvfIGQ+DWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFRBRllaYUk3N3JfMEc0UWlrTzk4Z1pENE5ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy85OTVmYmQtOTFmYi00M2JiLThmMjYt Y2Q0YmQ0NDI3NWM1LzEvRXhHcFJ1bnFhRUd4MUM4N2lZYk9Rc2tSNXV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy85OTVmYmQtOTFmYi00M2JiLThmMjYtY2Q0YmQ0NDI3NWM1 LzEvdFRBRllaYUk3N3JfMEc0UWlrTzk4Z1pENE5ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABZujMD BABZujYwDQYJKoZIhvcNAQELBQADggEBAGQVNnYcMAWuMlkgP0ci6IhWRoDJXHC6 8bx30jFxFnShxXsL1df0GEs8+oNuBGti3iAr5g0PMqHodY+sLJDJKWY3eo8NP4iB /Pgaj1U2PG1swpY0Ii5EqWzRvmID43yFclmxL6rA7whqKywzNn23fxjzpufKx+SL c6Mm8e8OF069x6RnjDzhdOJpaK5ePz0WameZUiR9Ht8zmngBKTgCtvo5vog6aOEj 5MfhdBhn5Hte+b20P3aSTZYAap9JdOJ4qe1y7mC+VvKDgCW99AR6ODxl9Jn0s4BA /wuNgRTxayw8Ldr6OI66ddIhwV/V/SOOFvBdxE5q+3W095618pwxmfo= -----END CERTIFICATE-----Generated at Fri Jan 2 11:03:59 2026 by rpki-client