This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/7u4rgz4l09r-eJqaQbI2EBriaRA.roa File: 7u4rgz4l09r-eJqaQbI2EBriaRA.roa (raw, json) Hash identifier: zlTV4eAW718JNR0mXym0vLWTb030NL8qDVFSJoistdw= Subject key identifier: EE:EE:2B:83:3E:25:D3:DA:FE:78:9A:9A:41:B2:36:10:1A:E2:69:10 Certificate issuer: /CN=dcef58d4cfa35543f8488a2756e6924e647b4589 Certificate serial: 019B76EB7E7FFF9D97ABF08C9AB2FE71069F Authority key identifier: DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/7u4rgz4l09r-eJqaQbI2EBriaRA.roa Signing time: Thu 01 Jan 2026 00:18:23 +0000 ROA not before: Thu 01 Jan 2026 00:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9050 IP address blocks: 89.39.0.0/24 maxlen: 24 89.39.1.0/24 maxlen: 24 89.39.2.0/24 maxlen: 24 89.39.3.0/24 maxlen: 24 89.39.4.0/24 maxlen: 24 89.39.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:7e:7f:ff:9d:97:ab:f0:8c:9a:b2:fe:71:06:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcef58d4cfa35543f8488a2756e6924e647b4589 Validity Not Before: Jan 1 00:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eeee2b833e25d3dafe789a9a41b236101ae26910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:06:30:92:05:d0:7e:e6:81:0b:f6:4b:f6:ac: 20:51:ba:84:f8:75:53:3a:0c:14:3d:f7:93:b4:67: e0:a7:23:1b:0b:ea:7c:58:ba:c8:d7:e0:ce:82:93: 22:8e:81:c5:2e:b0:c3:e4:b3:d0:d5:84:71:7d:d4: 4b:ad:a3:11:34:c2:0a:68:7e:21:ff:d7:e9:8a:64: 15:d7:f6:5a:f6:d1:03:85:9a:db:18:1b:fd:c3:db: 93:35:87:0d:ed:cc:91:5e:49:7f:9f:42:3c:ed:f7: 72:00:4a:be:a3:55:05:36:10:cf:15:b3:13:24:82: 63:29:ac:3e:f4:d5:9c:f7:2d:1b:ab:d2:1d:e7:bb: 58:8c:6e:57:c8:e7:1d:9e:03:8a:3d:ed:cb:c4:2e: a2:7e:e7:41:08:5f:4f:7a:c1:18:91:43:7c:62:f0: 05:42:85:15:58:33:0f:f9:84:e5:b5:00:72:fe:99: 9d:0d:6a:da:01:d6:bd:1c:92:fc:fe:36:a3:94:32: 2a:a7:9b:f9:6c:76:b7:fc:fa:47:45:c6:3c:4f:77: bd:8b:a8:4a:29:74:39:41:18:89:f9:80:f3:4e:3d: f8:57:aa:0a:57:a1:49:2e:4e:22:70:7f:11:2f:86: 15:8e:f1:b7:d8:32:5d:ec:85:5a:88:6e:46:b5:a0: 7e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:EE:2B:83:3E:25:D3:DA:FE:78:9A:9A:41:B2:36:10:1A:E2:69:10 X509v3 Authority Key Identifier: keyid:DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/7u4rgz4l09r-eJqaQbI2EBriaRA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.39.0.0-89.39.5.255 Signature Algorithm: sha256WithRSAEncryption 4c:d5:03:d6:b3:06:82:bd:5e:6a:fc:7b:e4:4f:a3:f7:87:37: 45:29:5a:e6:9a:d9:e8:d9:f1:a7:79:19:e2:58:a4:0a:90:91: 62:e8:6a:b4:ae:b6:27:d4:3c:15:a3:65:99:f9:4f:1c:01:36: 4a:6b:6e:d9:2f:d6:db:e4:5d:1f:0d:e2:a0:2b:f0:f0:84:2d: e2:6f:f3:13:31:20:ab:43:f9:ac:f1:8d:06:66:df:e2:b8:e5: 32:45:9a:24:b1:fe:c0:f3:04:52:14:da:c3:cc:d7:fc:e9:bd: 8b:18:9e:29:d6:14:3d:17:b7:03:10:23:8c:68:25:8d:9c:f2: a8:6f:27:90:a6:bd:e4:7f:77:ae:65:7f:69:8d:40:11:99:f9: 09:fe:20:eb:4f:f9:d5:58:ff:48:3d:1a:11:e2:de:ff:d9:d6: 09:51:0c:e4:fb:bd:a9:52:87:f0:5c:85:de:c6:56:6f:19:ba: 6d:41:4d:5b:63:80:15:89:9b:5e:82:2b:b3:dc:59:b0:5f:df: b1:a1:c5:ca:25:7f:d6:7d:66:e9:2e:08:b8:e6:33:9f:f5:3c: cc:73:f6:63:72:96:a8:6b:40:8a:f5:71:94:05:2b:85:7f:67: 31:0c:b2:06:dd:34:02:0d:b8:01:a9:dc:56:71:30:94:95:28: e1:ff:18:bb -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgISAZt2635//52Xq/CMmrL+cQafMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZWY1OGQ0Y2ZhMzU1NDNmODQ4OGEyNzU2ZTY5MjRlNjQ3 YjQ1ODkwHhcNMjYwMTAxMDAxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZWVlMmI4MzNlMjVkM2RhZmU3ODlhOWE0MWIyMzYxMDFhZTI2OTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAYwkgXQfuaBC/ZL9qwgUbqE+HVT OgwUPfeTtGfgpyMbC+p8WLrI1+DOgpMijoHFLrDD5LPQ1YRxfdRLraMRNMIKaH4h /9fpimQV1/Za9tEDhZrbGBv9w9uTNYcN7cyRXkl/n0I87fdyAEq+o1UFNhDPFbMT JIJjKaw+9NWc9y0bq9Id57tYjG5XyOcdngOKPe3LxC6ifudBCF9PesEYkUN8YvAF QoUVWDMP+YTltQBy/pmdDWraAda9HJL8/jajlDIqp5v5bHa3/PpHRcY8T3e9i6hK KXQ5QRiJ+YDzTj34V6oKV6FJLk4icH8RL4YVjvG32DJd7IVaiG5GtaB+BwIDAQAB o4ICEDCCAgwwHQYDVR0OBBYEFO7uK4M+JdPa/niamkGyNhAa4mkQMB8GA1UdIwQY MBaAFNzvWNTPo1VD+EiKJ1bmkk5ke0WJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMt MmVjZTA0ZTE4NWMyLzEvN3U0cmd6NGwwOXItZUpxYVFiSTJFQnJpYVJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMtMmVjZTA0ZTE4NWMy LzEvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDAwBZJwME AVknBDANBgkqhkiG9w0BAQsFAAOCAQEATNUD1rMGgr1eavx75E+j94c3RSla5prZ 6Nnxp3kZ4likCpCRYuhqtK62J9Q8FaNlmflPHAE2Smtu2S/W2+RdHw3ioCvw8IQt 4m/zEzEgq0P5rPGNBmbf4rjlMkWaJLH+wPMEUhTaw8zX/Om9ixieKdYUPRe3AxAj jGgljZzyqG8nkKa95H93rmV/aY1AEZn5Cf4g60/51Vj/SD0aEeLe/9nWCVEM5Pu9 qVKH8FyF3sZWbxm6bUFNW2OAFYmbXoIrs9xZsF/fsaHFyiV/1n1m6S4IuOYzn/U8 zHP2Y3KWqGtAivVxlAUrhX9nMQyyBt00Ag24AancVnEwlJUo4f8Yuw== -----END CERTIFICATE-----Generated at Wed Jan 21 11:06:52 2026 by rpki-client