This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/Ge-rFXvoQMvJ19A1KaJc_IM4oUc.roa File: Ge-rFXvoQMvJ19A1KaJc_IM4oUc.roa (raw, json) Hash identifier: X7ptSGD8hMEh9qW7Py0+45xWZLrj3NoOhUjyiTrtyQc= Subject key identifier: 19:EF:AB:15:7B:E8:40:CB:C9:D7:D0:35:29:A2:5C:FC:83:38:A1:47 Certificate issuer: /CN=7bd5997ed075c2298b461225e1060f577b1d7d4d Certificate serial: 019B7EA64884D7835C0F26286DAEE90F514A Authority key identifier: 7B:D5:99:7E:D0:75:C2:29:8B:46:12:25:E1:06:0F:57:7B:1D:7D:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e9WZftB1wimLRhIl4QYPV3sdfU0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/Ge-rFXvoQMvJ19A1KaJc_IM4oUc.roa Signing time: Fri 02 Jan 2026 12:19:45 +0000 ROA not before: Fri 02 Jan 2026 12:19:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47709 IP address blocks: 89.249.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.mft rsync://rpki.ripe.net/repository/DEFAULT/e9WZftB1wimLRhIl4QYPV3sdfU0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:48:84:d7:83:5c:0f:26:28:6d:ae:e9:0f:51:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bd5997ed075c2298b461225e1060f577b1d7d4d Validity Not Before: Jan 2 12:19:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=19efab157be840cbc9d7d03529a25cfc8338a147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d1:dc:bc:45:66:b2:bb:71:ab:94:31:7c:31: 2b:80:2d:2b:6c:db:a7:1d:70:6f:e1:ec:39:56:e2: cd:18:a3:d8:06:34:ac:b8:e0:b6:b2:c5:44:c3:bd: 4f:30:c9:54:61:79:46:82:4b:e8:84:e7:06:dd:89: f1:94:5b:5c:4c:ad:3b:da:8e:43:73:0b:1c:b9:36: 16:79:7c:62:13:6a:aa:d9:9d:ec:e4:d8:68:6d:cf: ca:e5:bd:c4:a9:60:9a:6b:2d:19:af:f9:a2:3f:8d: 6f:3c:7e:ba:b4:9f:4b:c1:e4:9a:db:be:b3:6d:84: 71:83:cc:82:cd:92:a0:54:f5:8b:05:1d:b9:cb:fe: 3e:56:21:fa:3f:a1:a1:16:59:67:6a:5a:ca:9f:82: 8c:62:da:2e:55:a0:8a:9d:ec:4c:b5:8b:36:d0:dd: 7f:69:8f:6a:2e:18:ab:c2:5e:0d:07:0c:10:e4:a6: 80:05:9c:5d:a1:36:ac:5a:04:95:f0:ed:37:74:15: b0:65:bb:cf:6b:d6:1d:6f:16:b6:a7:1e:5f:3f:38: fe:88:7c:46:50:2c:02:cc:e1:db:10:61:1e:f8:5f: ed:e1:46:61:75:af:52:14:93:ed:18:dc:2d:53:4e: 2b:f0:ea:7e:30:b1:90:ae:cb:14:a5:7a:94:e9:89: a7:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:EF:AB:15:7B:E8:40:CB:C9:D7:D0:35:29:A2:5C:FC:83:38:A1:47 X509v3 Authority Key Identifier: keyid:7B:D5:99:7E:D0:75:C2:29:8B:46:12:25:E1:06:0F:57:7B:1D:7D:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9WZftB1wimLRhIl4QYPV3sdfU0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/Ge-rFXvoQMvJ19A1KaJc_IM4oUc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4d7f40-49ec-4ce2-882e-5ac7f066230b/1/e9WZftB1wimLRhIl4QYPV3sdfU0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.249.239.0/24 Signature Algorithm: sha256WithRSAEncryption 76:28:4c:94:a2:ae:b0:54:2e:37:6f:15:a6:49:7e:67:2f:7f: 73:73:4a:91:a9:78:8e:68:0e:02:f1:39:35:8a:65:d1:5d:d2: 21:ce:74:01:46:21:a8:02:2a:6e:71:90:ef:26:f8:f2:5d:74: 3f:e0:1a:5b:05:ea:2b:66:9f:de:9b:f3:52:c8:2a:1d:84:0f: c4:6a:ee:de:a4:6f:11:fe:93:d1:2c:27:9a:6c:70:c5:25:d6: 87:de:d4:45:3f:26:89:74:66:88:fd:fa:e5:1f:eb:0b:2c:c2: 28:de:20:93:51:cd:a4:b9:3f:52:c4:09:de:4a:dd:b4:bc:65: 62:c4:0f:a9:f8:bf:8a:5a:d8:d6:2a:1e:0d:47:0a:a4:af:e4: d2:dd:ff:7b:45:fc:5f:76:2e:9d:2a:93:f1:9a:d2:ed:9c:f9: 1a:21:67:c6:1a:a6:65:f3:d5:9b:cd:5e:35:d4:35:a2:fa:0e: 3f:f7:11:32:31:08:51:dc:12:e2:0f:c1:71:df:8b:c6:32:dc: c0:6b:89:80:aa:95:bb:30:41:4a:a4:da:77:f6:67:db:ed:21: bd:22:88:66:d0:de:12:ef:89:c5:80:12:5a:ee:18:b6:b4:ac: 59:8e:f4:f5:dc:0a:7c:9d:5e:80:cb:d8:ee:8a:60:0b:53:a7: d4:3c:64:de -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pkiE14NcDyYoba7pD1FKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiZDU5OTdlZDA3NWMyMjk4YjQ2MTIyNWUxMDYwZjU3N2Ix ZDdkNGQwHhcNMjYwMTAyMTIxOTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOWVmYWIxNTdiZTg0MGNiYzlkN2QwMzUyOWEyNWNmYzgzMzhhMTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdHcvEVmsrtxq5QxfDErgC0rbNun HXBv4ew5VuLNGKPYBjSsuOC2ssVEw71PMMlUYXlGgkvohOcG3YnxlFtcTK072o5D cwscuTYWeXxiE2qq2Z3s5Nhobc/K5b3EqWCaay0Zr/miP41vPH66tJ9LweSa276z bYRxg8yCzZKgVPWLBR25y/4+ViH6P6GhFllnalrKn4KMYtouVaCKnexMtYs20N1/ aY9qLhirwl4NBwwQ5KaABZxdoTasWgSV8O03dBWwZbvPa9Ydbxa2px5fPzj+iHxG UCwCzOHbEGEe+F/t4UZhda9SFJPtGNwtU04r8Op+MLGQrssUpXqU6YmnTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBnvqxV76EDLydfQNSmiXPyDOKFHMB8GA1UdIwQY MBaAFHvVmX7QdcIpi0YSJeEGD1d7HX1NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTlXWmZ0QjF3aW1MUmhJbDRRWVBWM3NkZlUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS80ZDdmNDAtNDllYy00Y2UyLTg4MmUt NWFjN2YwNjYyMzBiLzEvR2UtckZYdm9RTXZKMTlBMUthSmNfSU00b1VjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS80ZDdmNDAtNDllYy00Y2UyLTg4MmUtNWFjN2YwNjYyMzBi LzEvZTlXWmZ0QjF3aW1MUmhJbDRRWVBWM3NkZlUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWfnvMA0G CSqGSIb3DQEBCwUAA4IBAQB2KEyUoq6wVC43bxWmSX5nL39zc0qRqXiOaA4C8Tk1 imXRXdIhznQBRiGoAipucZDvJvjyXXQ/4BpbBeorZp/em/NSyCodhA/Eau7epG8R /pPRLCeabHDFJdaH3tRFPyaJdGaI/frlH+sLLMIo3iCTUc2kuT9SxAneSt20vGVi xA+p+L+KWtjWKh4NRwqkr+TS3f97Rfxfdi6dKpPxmtLtnPkaIWfGGqZl89WbzV41 1DWi+g4/9xEyMQhR3BLiD8Fx34vGMtzAa4mAqpW7MEFKpNp39mfb7SG9Iohm0N4S 74nFgBJa7hi2tKxZjvT13Ap8nV6Ay9juimALU6fUPGTe -----END CERTIFICATE-----Generated at Mon Feb 9 22:32:12 2026 by rpki-client