This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/TPhQNuZoNwZocKhp9yvEZfVXmdE.roa File: TPhQNuZoNwZocKhp9yvEZfVXmdE.roa (raw, json) Hash identifier: h7CAPAhfGs1ZFrBPIhrStmJuP7p3xigxJ/dzGfBrlvI= Subject key identifier: 4C:F8:50:36:E6:68:37:06:68:70:A8:69:F7:2B:C4:65:F5:57:99:D1 Certificate issuer: /CN=ebbc91cccab016d3b9128761a9c4e553976121c8 Certificate serial: 019B78A26EC7ECABB7A00F89F98941FC3B51 Authority key identifier: EB:BC:91:CC:CA:B0:16:D3:B9:12:87:61:A9:C4:E5:53:97:61:21:C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67yRzMqwFtO5EodhqcTlU5dhIcg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/TPhQNuZoNwZocKhp9yvEZfVXmdE.roa Signing time: Thu 01 Jan 2026 08:17:49 +0000 ROA not before: Thu 01 Jan 2026 08:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212166 IP address blocks: 89.39.245.0/24 maxlen: 24 2a04:7080:800::/42 maxlen: 48 2a04:7080:840::/42 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.crl rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.mft rsync://rpki.ripe.net/repository/DEFAULT/67yRzMqwFtO5EodhqcTlU5dhIcg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:6e:c7:ec:ab:b7:a0:0f:89:f9:89:41:fc:3b:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebbc91cccab016d3b9128761a9c4e553976121c8 Validity Not Before: Jan 1 08:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4cf85036e66837066870a869f72bc465f55799d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ed:5c:0a:59:1b:08:b7:f3:77:e8:91:78:f5: 9d:ee:fc:10:7a:a7:15:63:5b:31:96:7c:29:05:dc: 39:82:52:8e:47:26:a2:e7:8a:5c:62:c9:78:a4:7e: 88:ef:53:52:ba:c1:51:51:94:38:42:a3:d2:7b:8d: 70:a9:f6:1a:7a:f1:2e:65:88:02:44:25:1a:1f:4d: b9:6e:8d:3b:4e:dc:16:c4:f1:4e:45:f4:49:73:88: b5:3a:52:50:65:20:67:df:fc:46:1f:81:b2:dc:f0: d0:7c:bb:60:53:8e:1b:32:55:96:b4:96:8c:da:97: 06:79:43:2f:69:ad:69:98:e2:c3:44:43:40:6d:00: 2f:29:92:3f:ee:9e:69:2b:e7:4c:ed:9d:d7:1c:a3: 6b:0d:5b:ac:ea:4c:b7:25:97:01:77:9d:94:91:3b: 7d:9e:26:e4:3b:b2:b7:4a:86:26:07:6e:54:62:74: 95:0e:91:46:02:40:dc:be:64:c2:98:e4:9e:37:80: 84:c4:31:2e:04:97:8f:47:30:cb:51:3a:e9:31:03: 97:f4:73:b6:40:c2:7b:42:f3:c3:5e:27:22:e6:f2: 6e:76:06:7a:84:ec:74:4f:8d:5b:9e:72:85:f9:27: b5:8d:04:91:fa:68:51:94:26:99:cd:36:07:c8:86: 58:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:F8:50:36:E6:68:37:06:68:70:A8:69:F7:2B:C4:65:F5:57:99:D1 X509v3 Authority Key Identifier: keyid:EB:BC:91:CC:CA:B0:16:D3:B9:12:87:61:A9:C4:E5:53:97:61:21:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67yRzMqwFtO5EodhqcTlU5dhIcg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/TPhQNuZoNwZocKhp9yvEZfVXmdE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.39.245.0/24 IPv6: 2a04:7080:800::/41 Signature Algorithm: sha256WithRSAEncryption de:6b:7d:f8:b8:27:8c:40:86:67:c2:3e:6e:de:20:8a:cd:df: c0:ed:35:ae:a2:f1:30:c8:cf:46:20:7e:f8:4b:11:9a:87:d6: b9:a9:53:e1:68:b3:34:d8:84:43:d0:3e:1b:59:30:36:97:b6: 33:b1:8d:de:dc:3f:74:7e:a6:1a:2e:a1:76:52:18:1f:bf:80: 61:a2:c7:a6:05:f2:1b:f4:4b:9b:84:99:6c:01:e4:40:25:c0: 64:9e:c2:9b:a8:11:e0:8b:7b:a0:b5:14:7b:ca:c2:22:6c:ad: 9b:8b:fc:e6:48:b0:54:8a:58:5f:24:06:7e:38:fb:f1:a0:b8: a1:7e:58:94:93:e1:52:29:8e:de:ab:28:aa:a4:98:ad:09:52: 36:0d:20:45:59:d7:63:08:64:a7:15:34:a8:2d:83:48:1e:c1: 88:d5:b4:b1:16:b9:f5:80:67:1b:4b:88:7b:f5:c6:27:f7:b4: be:3c:6e:2d:5a:a9:1c:c1:9c:2d:57:04:5c:fa:2f:4d:f5:f1: 88:3d:cc:62:a5:57:69:b0:f9:4e:f5:e8:77:3f:7e:1c:ee:3c: c5:97:f2:ad:6e:2c:d6:73:10:de:50:e5:9f:21:7c:e4:df:6d: 5c:9a:47:69:9e:e3:d4:69:fc:24:25:29:fb:31:94:93:49:85: 72:14:6e:fe -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt4om7H7Ku3oA+J+YlB/DtRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViYmM5MWNjY2FiMDE2ZDNiOTEyODc2MWE5YzRlNTUzOTc2 MTIxYzgwHhcNMjYwMTAxMDgxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Y2Y4NTAzNmU2NjgzNzA2Njg3MGE4NjlmNzJiYzQ2NWY1NTc5OWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+1cClkbCLfzd+iRePWd7vwQeqcV Y1sxlnwpBdw5glKORyai54pcYsl4pH6I71NSusFRUZQ4QqPSe41wqfYaevEuZYgC RCUaH025bo07TtwWxPFORfRJc4i1OlJQZSBn3/xGH4Gy3PDQfLtgU44bMlWWtJaM 2pcGeUMvaa1pmOLDRENAbQAvKZI/7p5pK+dM7Z3XHKNrDVus6ky3JZcBd52UkTt9 nibkO7K3SoYmB25UYnSVDpFGAkDcvmTCmOSeN4CExDEuBJePRzDLUTrpMQOX9HO2 QMJ7QvPDXici5vJudgZ6hOx0T41bnnKF+Se1jQSR+mhRlCaZzTYHyIZYzwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFEz4UDbmaDcGaHCoafcrxGX1V5nRMB8GA1UdIwQY MBaAFOu8kczKsBbTuRKHYanE5VOXYSHIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjd5UnpNcXdGdE81RW9kaHFjVGxVNWRoSWNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9lYWRkYWUtMzc4My00ZmRiLWEzMDEt YTAwMWEyOWMyM2YwLzEvVFBoUU51Wm9Od1pvY0tocDl5dkVaZlZYbWRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC9lYWRkYWUtMzc4My00ZmRiLWEzMDEtYTAwMWEyOWMyM2Yw LzEvNjd5UnpNcXdGdE81RW9kaHFjVGxVNWRoSWNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAWSf1MA8E AgACMAkDBwcqBHCACAAwDQYJKoZIhvcNAQELBQADggEBAN5rffi4J4xAhmfCPm7e IIrN38DtNa6i8TDIz0YgfvhLEZqH1rmpU+FoszTYhEPQPhtZMDaXtjOxjd7cP3R+ phouoXZSGB+/gGGix6YF8hv0S5uEmWwB5EAlwGSewpuoEeCLe6C1FHvKwiJsrZuL /OZIsFSKWF8kBn44+/GguKF+WJST4VIpjt6rKKqkmK0JUjYNIEVZ12MIZKcVNKgt g0gewYjVtLEWufWAZxtLiHv1xif3tL48bi1aqRzBnC1XBFz6L0318Yg9zGKlV2mw +U716Hc/fhzuPMWX8q1uLNZzEN5Q5Z8hfOTfbVyaR2me49Rp/CQlKfsxlJNJhXIU bv4= -----END CERTIFICATE-----Generated at Mon Feb 9 20:11:13 2026 by rpki-client