This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/ti7bPeHvjZr74P5AX8xhgt4EPEQ.roa File: ti7bPeHvjZr74P5AX8xhgt4EPEQ.roa (raw, json) Hash identifier: eVY7BIMaC5K37OTehz4aGSdkgJfotwmNYaS0DnArTLM= Subject key identifier: B6:2E:DB:3D:E1:EF:8D:9A:FB:E0:FE:40:5F:CC:61:82:DE:04:3C:44 Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1 Certificate serial: 019B7E380D2B48A06B6B40EE9593D664C41F Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/ti7bPeHvjZr74P5AX8xhgt4EPEQ.roa Signing time: Fri 02 Jan 2026 10:19:21 +0000 ROA not before: Fri 02 Jan 2026 10:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207713 IP address blocks: 89.221.203.0/24 maxlen: 24 94.103.2.0/24 maxlen: 24 94.103.3.0/24 maxlen: 24 95.215.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 19:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:0d:2b:48:a0:6b:6b:40:ee:95:93:d6:64:c4:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1 Validity Not Before: Jan 2 10:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b62edb3de1ef8d9afbe0fe405fcc6182de043c44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b1:72:3d:66:4c:1f:e5:a7:57:99:d7:44:18: d8:c9:4c:45:49:5e:60:93:77:5a:68:72:56:a9:6e: 58:7f:de:92:b3:aa:2d:46:65:a8:a4:b7:b1:ac:0f: cc:57:a0:90:40:49:6c:9e:e9:fb:96:3e:f5:e0:db: fa:f1:93:7b:7b:66:54:ba:8a:44:4c:96:8e:1f:ed: e9:9d:5f:e9:47:31:bf:f6:70:d1:7d:54:78:8b:91: 83:ba:bf:6a:dd:47:8d:fe:3e:bc:64:bb:fe:5e:20: 56:37:22:56:4f:c6:0a:61:99:fc:c4:c3:f1:4e:0c: 44:66:e0:a4:f9:48:36:57:09:39:91:fa:96:e7:64: 95:85:db:44:eb:f3:01:be:a7:6d:54:68:57:5e:bc: 76:bd:0b:b3:db:cd:7d:39:f8:9f:51:b7:53:23:4a: 22:53:cb:b8:46:76:b6:c5:45:1e:c8:d3:ec:b4:d4: 97:b9:68:3f:00:63:36:49:58:15:be:a4:3e:cb:f2: 15:cd:5f:4e:84:a0:0b:31:93:cb:bd:56:fa:7a:a3: 67:90:db:0d:49:c5:e2:5a:4f:50:78:1a:47:fd:2c: fa:2d:b8:fe:6b:48:45:a2:26:e5:3b:5d:ae:af:83: 3f:cd:a1:7c:49:e3:0a:33:80:88:35:d4:e2:3d:77: 81:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:2E:DB:3D:E1:EF:8D:9A:FB:E0:FE:40:5F:CC:61:82:DE:04:3C:44 X509v3 Authority Key Identifier: keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/ti7bPeHvjZr74P5AX8xhgt4EPEQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.221.203.0/24 94.103.2.0/23 95.215.108.0/24 Signature Algorithm: sha256WithRSAEncryption 05:c7:3b:c7:75:7d:70:6d:81:c0:66:b8:95:ac:94:bd:6a:88: 85:be:be:c0:65:85:17:dd:cc:cb:d4:ef:9e:3f:3b:54:e4:d9: df:e2:bc:dc:42:a6:72:24:f1:75:c8:92:0a:10:72:b4:c6:8f: 9d:4f:33:55:8e:8c:8f:f6:b9:7b:aa:56:74:1a:e5:37:e3:b3: ef:50:1e:13:39:2e:c8:df:ea:3c:ea:23:c8:5c:54:26:43:cb: f3:f6:af:06:11:14:8d:9d:f6:39:70:90:55:7d:cb:13:5a:2c: 82:03:39:b4:cd:9a:25:59:2b:68:70:14:68:a7:fd:71:f3:da: 7c:c8:ce:05:a4:4f:97:f7:04:79:cd:0f:29:45:59:15:ac:39: 2b:fa:e7:9d:c6:82:fb:41:62:d7:d1:51:91:68:f4:55:b6:d2: 7e:8a:f1:75:af:06:8f:49:0d:76:88:23:21:bd:f6:c3:2b:ec: 5a:ad:d4:95:5a:e3:d1:71:3e:68:a1:c3:16:6e:b4:8e:4d:59: 79:1b:75:b6:19:2b:2d:8b:fc:5e:56:ef:89:10:91:c5:9e:c1: a3:78:d8:e0:3d:0f:64:d7:94:80:ab:ba:58:9d:f9:48:c2:d3: 02:ac:e4:60:73:61:61:6c:ed:72:1b:2a:01:f2:29:d9:bd:be: 92:d1:47:78 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+OA0rSKBra0DulZPWZMQfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NTllYzJhNWZkNTM5MDljNTIzOWY0Y2M4ZDZkMzI5YTI3 NzliYjEwHhcNMjYwMTAyMTAxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjJlZGIzZGUxZWY4ZDlhZmJlMGZlNDA1ZmNjNjE4MmRlMDQzYzQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLFyPWZMH+WnV5nXRBjYyUxFSV5g k3daaHJWqW5Yf96Ss6otRmWopLexrA/MV6CQQElsnun7lj714Nv68ZN7e2ZUuopE TJaOH+3pnV/pRzG/9nDRfVR4i5GDur9q3UeN/j68ZLv+XiBWNyJWT8YKYZn8xMPx TgxEZuCk+Ug2Vwk5kfqW52SVhdtE6/MBvqdtVGhXXrx2vQuz2819OfifUbdTI0oi U8u4Rna2xUUeyNPstNSXuWg/AGM2SVgVvqQ+y/IVzV9OhKALMZPLvVb6eqNnkNsN ScXiWk9QeBpH/Sz6Lbj+a0hFoiblO12ur4M/zaF8SeMKM4CINdTiPXeBkQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFLYu2z3h742a++D+QF/MYYLeBDxEMB8GA1UdIwQY MBaAFERZ7Cpf1TkJxSOfTMjW0ymid5uxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTkt NmI0MzcyNjAyMDk2LzEvdGk3YlBlSHZqWnI3NFA1QVg4eGhndDRFUEVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTktNmI0MzcyNjAyMDk2 LzEvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAWd3LAwQB XmcCAwQAX9dsMA0GCSqGSIb3DQEBCwUAA4IBAQAFxzvHdX1wbYHAZriVrJS9aoiF vr7AZYUX3czL1O+ePztU5Nnf4rzcQqZyJPF1yJIKEHK0xo+dTzNVjoyP9rl7qlZ0 GuU347PvUB4TOS7I3+o86iPIXFQmQ8vz9q8GERSNnfY5cJBVfcsTWiyCAzm0zZol WStocBRop/1x89p8yM4FpE+X9wR5zQ8pRVkVrDkr+uedxoL7QWLX0VGRaPRVttJ+ ivF1rwaPSQ12iCMhvfbDK+xardSVWuPRcT5oocMWbrSOTVl5G3W2GSsti/xeVu+J EJHFnsGjeNjgPQ9k15SAq7pYnflIwtMCrORgc2FhbO1yGyoB8inZvb6S0Ud4 -----END CERTIFICATE-----Generated at Sat Jan 10 03:16:10 2026 by rpki-client