This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/e8A6sXBGduUCZGJ5-6Y7kMDswOw.roa File: e8A6sXBGduUCZGJ5-6Y7kMDswOw.roa (raw, json) Hash identifier: FM6aG3gkOk8roOMZ1iwyahhjRPg2yzj4NPtQ7Gqvp50= Subject key identifier: 7B:C0:3A:B1:70:46:76:E5:02:64:62:79:FB:A6:3B:90:C0:EC:C0:EC Certificate issuer: /CN=0ecabe061f2d890a8c8b4181adbca6ca943bd222 Certificate serial: 019C004F69973B578D658FCAE14F3151F4A9 Authority key identifier: 0E:CA:BE:06:1F:2D:89:0A:8C:8B:41:81:AD:BC:A6:CA:94:3B:D2:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dsq-Bh8tiQqMi0GBrbymypQ70iI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/e8A6sXBGduUCZGJ5-6Y7kMDswOw.roa Signing time: Tue 27 Jan 2026 16:35:30 +0000 ROA not before: Tue 27 Jan 2026 16:35:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204949 IP address blocks: 89.23.125.0/24 maxlen: 24 176.53.145.0/24 maxlen: 24 185.193.243.0/24 maxlen: 24 185.219.168.0/22 maxlen: 22 213.134.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft rsync://rpki.ripe.net/repository/DEFAULT/Dsq-Bh8tiQqMi0GBrbymypQ70iI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:00:4f:69:97:3b:57:8d:65:8f:ca:e1:4f:31:51:f4:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ecabe061f2d890a8c8b4181adbca6ca943bd222 Validity Not Before: Jan 27 16:35:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7bc03ab1704676e502646279fba63b90c0ecc0ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3c:7b:b7:2e:a2:40:6b:f5:1a:93:90:4f:41: 91:8a:c4:bd:c4:aa:a3:40:25:f3:2e:98:a5:30:d0: cc:30:76:72:09:81:1f:15:75:a5:5d:53:76:b9:2e: 63:e0:2d:79:a8:fb:5b:d2:e1:b1:db:42:d2:d2:b7: e7:42:38:00:8a:c1:9a:be:fd:45:49:8f:c9:c5:5a: 67:64:4c:e5:66:44:e8:4f:61:fa:b6:da:15:b9:d7: 5b:e9:7a:c4:5c:10:2c:5c:5a:9c:2f:59:8a:f1:3b: 57:c6:d7:ac:87:6a:2a:83:96:5a:c8:bc:98:61:b8: 56:c9:a0:30:ad:be:6c:a7:85:ce:66:7f:92:a7:95: c4:ad:48:47:26:af:63:91:70:af:90:f2:19:13:93: af:1c:f9:42:c7:8a:bc:e0:52:04:9b:c7:e1:7c:9a: bf:61:4f:43:4c:e5:1f:1e:23:3a:0a:02:c1:44:40: 24:9d:53:c9:57:20:1f:c5:23:b5:ab:e0:91:68:be: 70:3b:6b:69:70:66:5c:f3:0a:95:02:cf:5a:7b:04: 49:9d:24:50:72:9d:f0:cb:17:53:40:84:4f:33:d9: 2a:ab:18:7c:b1:74:be:39:ee:1c:cb:a5:18:f9:70: ed:ca:8d:29:e9:14:24:86:d1:cb:54:dc:fe:e2:48: 62:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:C0:3A:B1:70:46:76:E5:02:64:62:79:FB:A6:3B:90:C0:EC:C0:EC X509v3 Authority Key Identifier: keyid:0E:CA:BE:06:1F:2D:89:0A:8C:8B:41:81:AD:BC:A6:CA:94:3B:D2:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dsq-Bh8tiQqMi0GBrbymypQ70iI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/e8A6sXBGduUCZGJ5-6Y7kMDswOw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.23.125.0/24 176.53.145.0/24 185.193.243.0/24 185.219.168.0/22 213.134.10.0/24 Signature Algorithm: sha256WithRSAEncryption 56:e6:b2:df:f9:4a:d2:05:60:a5:32:98:75:e7:b4:f1:15:21: ff:37:f0:15:09:d1:62:34:b4:02:0b:f6:91:3a:8b:bb:e8:5b: 42:ce:9e:f0:45:94:ae:89:b8:75:71:cc:0b:44:50:19:5c:d8: 50:e2:82:fd:45:af:7f:53:a0:91:8f:0c:84:47:23:ba:72:8b: 3e:58:d9:47:60:1d:a1:ee:80:60:aa:da:d3:d3:70:1b:89:a9: 3e:91:6f:a2:ce:c2:53:e1:2f:25:90:45:18:14:10:9f:95:7c: cd:b3:ed:d9:13:74:86:08:09:a8:e9:09:7f:57:e8:76:71:cf: 2a:98:ac:09:a9:86:bf:c0:6d:93:fb:d0:94:f3:e9:75:b6:64: 2c:cc:78:39:e7:70:03:a5:2b:f8:33:7b:90:c3:70:2d:d1:14: ae:80:92:26:e3:18:20:8e:2f:03:36:9e:05:da:02:91:03:c0: c1:ef:85:97:65:55:b5:77:f4:36:81:ef:f8:ff:d7:ee:81:55: 54:ba:59:e1:e4:ed:31:dc:91:36:fd:f0:6c:53:58:ff:49:6b: 41:79:58:e5:fe:a5:74:e6:1b:da:be:e1:c3:bb:4c:c6:64:81: 31:2d:ce:1a:08:81:fc:96:e8:88:0a:62:f9:8c:3f:35:39:75: 86:cb:d3:93 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZwAT2mXO1eNZY/K4U8xUfSpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlY2FiZTA2MWYyZDg5MGE4YzhiNDE4MWFkYmNhNmNhOTQz YmQyMjIwHhcNMjYwMTI3MTYzNTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YmMwM2FiMTcwNDY3NmU1MDI2NDYyNzlmYmE2M2I5MGMwZWNjMGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozx7ty6iQGv1GpOQT0GRisS9xKqj QCXzLpilMNDMMHZyCYEfFXWlXVN2uS5j4C15qPtb0uGx20LS0rfnQjgAisGavv1F SY/JxVpnZEzlZkToT2H6ttoVuddb6XrEXBAsXFqcL1mK8TtXxtesh2oqg5ZayLyY YbhWyaAwrb5sp4XOZn+Sp5XErUhHJq9jkXCvkPIZE5OvHPlCx4q84FIEm8fhfJq/ YU9DTOUfHiM6CgLBREAknVPJVyAfxSO1q+CRaL5wO2tpcGZc8wqVAs9aewRJnSRQ cp3wyxdTQIRPM9kqqxh8sXS+Oe4cy6UY+XDtyo0p6RQkhtHLVNz+4khiwwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFHvAOrFwRnblAmRiefumO5DA7MDsMB8GA1UdIwQY MBaAFA7KvgYfLYkKjItBga28psqUO9IiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHNxLUJoOHRpUXFNaTBHQnJieW15cFE3MGlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yZmQwMTktNzczZC00Yzk5LWFjZjUt MDRhMWY5NTQxM2Y3LzEvZThBNnNYQkdkdVVDWkdKNS02WTdrTURzd093LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8yZmQwMTktNzczZC00Yzk5LWFjZjUtMDRhMWY5NTQxM2Y3 LzEvRHNxLUJoOHRpUXFNaTBHQnJieW15cFE3MGlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAWRd9AwQA sDWRAwQAucHzAwQCuduoAwQA1YYKMA0GCSqGSIb3DQEBCwUAA4IBAQBW5rLf+UrS BWClMph157TxFSH/N/AVCdFiNLQCC/aROou76FtCzp7wRZSuibh1ccwLRFAZXNhQ 4oL9Ra9/U6CRjwyERyO6cos+WNlHYB2h7oBgqtrT03Abiak+kW+izsJT4S8lkEUY FBCflXzNs+3ZE3SGCAmo6Ql/V+h2cc8qmKwJqYa/wG2T+9CU8+l1tmQszHg553AD pSv4M3uQw3At0RSugJIm4xggji8DNp4F2gKRA8DB74WXZVW1d/Q2ge/4/9fugVVU ulnh5O0x3JE2/fBsU1j/SWtBeVjl/qV05hvavuHDu0zGZIExLc4aCIH8luiICmL5 jD81OXWGy9OT -----END CERTIFICATE-----Generated at Mon Feb 9 18:43:51 2026 by rpki-client