This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/eTOJ7MLge9B1l_Z4b-hB-R0L0Rk.roa File: eTOJ7MLge9B1l_Z4b-hB-R0L0Rk.roa (raw, json) Hash identifier: a9rSyG/cenb0O///tgbKrAU6dphPReUWhc0dalzA1Ik= Subject key identifier: 79:33:89:EC:C2:E0:7B:D0:75:97:F6:78:6F:E8:41:F9:1D:0B:D1:19 Certificate issuer: /CN=9e459aa4602bffa2d2650ba66818458c89fc4582 Certificate serial: 019C047A618CFD0769A5D4FE9EF3719371CC Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/eTOJ7MLge9B1l_Z4b-hB-R0L0Rk.roa Signing time: Wed 28 Jan 2026 12:00:55 +0000 ROA not before: Wed 28 Jan 2026 12:00:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 84.247.75.0/24 maxlen: 24 84.247.113.0/24 maxlen: 24 89.149.18.0/24 maxlen: 24 89.149.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 09:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:04:7a:61:8c:fd:07:69:a5:d4:fe:9e:f3:71:93:71:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582 Validity Not Before: Jan 28 12:00:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=793389ecc2e07bd07597f6786fe841f91d0bd119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7f:7e:19:a4:df:c4:ca:96:45:f9:56:41:42: 45:31:43:a0:c8:97:41:e8:a1:9a:bf:5e:8d:40:c9: 1b:81:d7:9b:d4:b6:65:f3:cb:f2:db:1e:59:ba:83: b4:b0:06:0b:d8:3e:8d:b3:8b:6d:d1:88:b0:b2:c1: f1:88:9d:ad:c7:e9:1d:5c:29:9b:d1:18:1c:d6:3a: 56:ce:94:dc:9d:2a:19:e6:12:ce:d2:5e:b8:d8:33: 0f:f3:c1:d6:c3:58:a4:77:0a:bb:e9:ec:bb:4f:28: 2e:16:27:4f:28:7b:95:d0:e7:54:89:7e:5f:3f:12: 74:13:fa:ca:4e:ae:7c:19:6a:e6:c9:77:be:bf:56: 6d:37:ed:d8:4c:14:29:07:70:13:74:3e:e0:16:91: a7:3a:49:2e:54:fd:d7:4a:37:d3:12:58:80:18:64: d7:16:33:a8:53:78:14:fc:61:93:24:0f:f9:0f:95: 51:79:a5:ff:7e:e5:36:f9:5a:f7:26:a9:08:15:1d: 7f:44:a3:05:af:9b:97:af:f9:2f:1c:53:e9:af:17: 45:c8:ba:9c:39:49:7a:5d:e1:35:65:0d:d2:d9:47: d6:0c:0b:7d:cf:da:8d:3c:3d:1f:3a:dc:6f:3a:ca: 72:5e:2e:56:e7:f3:cf:77:2c:ca:d3:3f:8b:26:04: b2:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:33:89:EC:C2:E0:7B:D0:75:97:F6:78:6F:E8:41:F9:1D:0B:D1:19 X509v3 Authority Key Identifier: keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/eTOJ7MLge9B1l_Z4b-hB-R0L0Rk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.247.75.0/24 84.247.113.0/24 89.149.18.0/24 89.149.63.0/24 Signature Algorithm: sha256WithRSAEncryption 92:b0:06:98:c1:ba:4d:b5:37:b7:92:f5:6c:6d:61:22:69:65: 4e:0a:2c:39:c0:ff:c6:b3:8c:90:cf:c5:d8:00:83:5c:93:c7: d3:ae:62:a7:34:3b:93:6a:a3:41:50:a7:a2:7a:b7:cd:66:1b: bf:4e:0d:44:1b:18:dd:69:27:01:e3:78:d0:1b:b9:75:c6:ac: 1f:b6:64:26:75:b6:bf:61:b8:e6:5d:dc:78:7b:cf:92:fa:62: e9:53:9e:21:ef:e6:71:c8:20:da:2a:1a:5d:94:60:c3:5f:99: 46:01:5f:af:5a:1e:3f:33:38:94:6a:7b:70:a7:ea:2c:2a:ce: 30:ef:1c:4d:df:e1:83:55:85:f8:83:04:ad:ac:1f:36:cc:69: aa:46:cf:a1:fe:38:02:3f:74:b7:30:0c:b8:f6:9e:84:6e:55: 41:b9:ed:a1:89:2e:50:97:7f:de:fc:12:9a:7a:77:11:17:b6: 9c:2c:c3:18:0d:23:d8:75:a2:7a:02:1f:f6:3b:62:69:e0:7f: 21:85:32:0a:07:70:a1:26:0b:3b:42:4d:94:64:1a:71:ee:ed: 20:c9:c5:4f:fa:c6:c7:fb:b4:05:40:72:9a:b6:70:c5:83:a0: 54:f9:87:3b:55:50:d4:88:98:4a:61:a3:52:e1:c9:f1:c4:54: 76:49:c1:ec -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZwEemGM/QdppdT+nvNxk3HMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNDU5YWE0NjAyYmZmYTJkMjY1MGJhNjY4MTg0NThjODlm YzQ1ODIwHhcNMjYwMTI4MTIwMDU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OTMzODllY2MyZTA3YmQwNzU5N2Y2Nzg2ZmU4NDFmOTFkMGJkMTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzn9+GaTfxMqWRflWQUJFMUOgyJdB 6KGav16NQMkbgdeb1LZl88vy2x5ZuoO0sAYL2D6Ns4tt0YiwssHxiJ2tx+kdXCmb 0Rgc1jpWzpTcnSoZ5hLO0l642DMP88HWw1ikdwq76ey7TyguFidPKHuV0OdUiX5f PxJ0E/rKTq58GWrmyXe+v1ZtN+3YTBQpB3ATdD7gFpGnOkkuVP3XSjfTEliAGGTX FjOoU3gU/GGTJA/5D5VReaX/fuU2+Vr3JqkIFR1/RKMFr5uXr/kvHFPprxdFyLqc OUl6XeE1ZQ3S2UfWDAt9z9qNPD0fOtxvOspyXi5W5/PPdyzK0z+LJgSyzQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFHkziezC4HvQdZf2eG/oQfkdC9EZMB8GA1UdIwQY MBaAFJ5FmqRgK/+i0mULpmgYRYyJ/EWCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi85Y2MzMzMtNjhkNS00NjkyLTljNWIt MjhhODQxZGEwYmZkLzEvZVRPSjdNTGdlOUIxbF9aNGItaEItUjBMMFJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi85Y2MzMzMtNjhkNS00NjkyLTljNWItMjhhODQxZGEwYmZk LzEvbmtXYXBHQXJfNkxTWlF1bWFCaEZqSW44UllJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAVPdLAwQA VPdxAwQAWZUSAwQAWZU/MA0GCSqGSIb3DQEBCwUAA4IBAQCSsAaYwbpNtTe3kvVs bWEiaWVOCiw5wP/Gs4yQz8XYAINck8fTrmKnNDuTaqNBUKeierfNZhu/Tg1EGxjd aScB43jQG7l1xqwftmQmdba/YbjmXdx4e8+S+mLpU54h7+ZxyCDaKhpdlGDDX5lG AV+vWh4/MziUantwp+osKs4w7xxN3+GDVYX4gwStrB82zGmqRs+h/jgCP3S3MAy4 9p6EblVBue2hiS5Ql3/e/BKaencRF7acLMMYDSPYdaJ6Ah/2O2Jp4H8hhTIKB3Ch Jgs7Qk2UZBpx7u0gycVP+sbH+7QFQHKatnDFg6BU+Yc7VVDUiJhKYaNS4cnxxFR2 ScHs -----END CERTIFICATE-----Generated at Sat Feb 14 17:24:13 2026 by rpki-client