This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/6JgmEKDGlYfzHxrPWMbCBHvEv10.roa File: 6JgmEKDGlYfzHxrPWMbCBHvEv10.roa (raw, json) Hash identifier: O2i0/jw0uO+3EKrKnGSgKnk++IC3F7+eUGLyqXW46bc= Subject key identifier: E8:98:26:10:A0:C6:95:87:F3:1F:1A:CF:58:C6:C2:04:7B:C4:BF:5D Certificate issuer: /CN=23607105955c764a813fd9524a7e41b940c56832 Certificate serial: 019B7F80B71C19DE7E07458D6CD58D7B7DF6 Authority key identifier: 23:60:71:05:95:5C:76:4A:81:3F:D9:52:4A:7E:41:B9:40:C5:68:32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I2BxBZVcdkqBP9lSSn5BuUDFaDI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/6JgmEKDGlYfzHxrPWMbCBHvEv10.roa Signing time: Fri 02 Jan 2026 16:18:20 +0000 ROA not before: Fri 02 Jan 2026 16:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51041 IP address blocks: 89.22.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.mft rsync://rpki.ripe.net/repository/DEFAULT/I2BxBZVcdkqBP9lSSn5BuUDFaDI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:b7:1c:19:de:7e:07:45:8d:6c:d5:8d:7b:7d:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23607105955c764a813fd9524a7e41b940c56832 Validity Not Before: Jan 2 16:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e8982610a0c69587f31f1acf58c6c2047bc4bf5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:3d:ff:34:52:d5:68:27:72:40:43:85:7a:39: 0a:68:bd:7c:d6:d9:14:44:f2:cd:a4:d9:22:34:b8: 6e:12:fc:bb:3c:3b:05:81:85:f1:74:63:53:e7:8a: 68:d3:ee:92:4a:96:3e:3e:26:01:5d:5e:55:45:60: a6:11:24:bd:08:57:57:fb:c9:0d:0b:2d:79:61:cd: 18:ab:81:02:cc:bc:70:a3:aa:c5:df:8a:52:6c:a0: c4:f4:5c:d6:20:17:73:89:5a:ad:e9:25:ec:8e:cf: c3:61:07:f7:5e:b2:5f:eb:47:b2:6b:80:ca:ff:42: 73:e9:67:7d:c0:4c:d1:a0:9e:67:b1:45:10:ee:71: 89:8a:52:07:2e:a4:dc:5c:cc:87:3a:50:26:10:c7: 9b:c9:07:78:f5:89:38:87:3d:18:fc:99:3f:dc:55: d9:8d:93:12:1c:f1:95:17:ff:83:a3:b5:2a:9f:8c: 01:68:a2:7d:cc:47:a2:9e:b9:aa:9d:b5:e6:c5:5f: c0:81:24:99:85:ae:f7:15:d0:6e:a3:b1:77:d0:af: 73:2d:b8:8a:2f:12:b5:84:11:37:56:11:e6:63:c5: 1d:88:11:d4:29:3a:0d:18:d1:29:34:95:7d:13:8f: ea:d1:38:8a:eb:c6:c3:9e:4c:12:9f:18:3e:75:0e: fd:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:98:26:10:A0:C6:95:87:F3:1F:1A:CF:58:C6:C2:04:7B:C4:BF:5D X509v3 Authority Key Identifier: keyid:23:60:71:05:95:5C:76:4A:81:3F:D9:52:4A:7E:41:B9:40:C5:68:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2BxBZVcdkqBP9lSSn5BuUDFaDI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/6JgmEKDGlYfzHxrPWMbCBHvEv10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.22.216.0/21 Signature Algorithm: sha256WithRSAEncryption 40:10:14:6d:e2:7f:ab:7a:12:30:9a:a9:cb:ab:8a:5c:15:98: 15:64:0d:ad:e0:fd:77:4a:52:2d:81:f0:e1:4a:c1:a5:a6:3a: 7e:0b:b2:9e:e8:9b:43:04:ac:15:e8:7e:0c:ca:85:cf:4a:23: eb:09:e2:bd:5d:47:79:87:55:3f:ff:f3:f6:b4:cb:cf:f3:4f: 0d:be:52:c7:38:b3:02:3f:47:07:f6:ed:b8:bd:c9:d1:1c:d8: 26:fa:68:ed:09:34:c5:8a:05:3f:28:8a:dd:62:41:5b:9f:41: 9e:de:7a:1b:43:34:51:50:c0:b0:cd:51:af:d2:81:30:fd:7e: b0:d4:8a:cb:26:5b:9e:d1:dd:26:29:01:46:65:93:b1:de:64: 65:98:d6:54:7b:c5:db:90:df:5e:4e:d0:a8:ff:4a:9e:f4:8b: af:5a:c7:ce:e5:82:89:8a:51:dc:96:17:6d:79:31:8f:f4:f1: 1f:81:a0:1b:e2:4b:01:51:b4:98:15:89:a2:9f:73:a7:c4:e9: 84:cb:a6:c5:6a:93:c5:5b:fb:84:b4:21:8e:22:ac:ab:98:68: 86:c9:24:43:d9:af:33:ae:f7:1c:47:7a:11:f4:4b:8b:cb:d1: d3:f2:c8:89:00:07:d1:76:65:15:8d:8f:2d:b9:12:59:56:68: ad:a6:1a:de -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gLccGd5+B0WNbNWNe332MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNjA3MTA1OTU1Yzc2NGE4MTNmZDk1MjRhN2U0MWI5NDBj NTY4MzIwHhcNMjYwMTAyMTYxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlODk4MjYxMGEwYzY5NTg3ZjMxZjFhY2Y1OGM2YzIwNDdiYzRiZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlT3/NFLVaCdyQEOFejkKaL181tkU RPLNpNkiNLhuEvy7PDsFgYXxdGNT54po0+6SSpY+PiYBXV5VRWCmESS9CFdX+8kN Cy15Yc0Yq4ECzLxwo6rF34pSbKDE9FzWIBdziVqt6SXsjs/DYQf3XrJf60eya4DK /0Jz6Wd9wEzRoJ5nsUUQ7nGJilIHLqTcXMyHOlAmEMebyQd49Yk4hz0Y/Jk/3FXZ jZMSHPGVF/+Do7Uqn4wBaKJ9zEeinrmqnbXmxV/AgSSZha73FdBuo7F30K9zLbiK LxK1hBE3VhHmY8UdiBHUKToNGNEpNJV9E4/q0TiK68bDnkwSnxg+dQ79vQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOiYJhCgxpWH8x8az1jGwgR7xL9dMB8GA1UdIwQY MBaAFCNgcQWVXHZKgT/ZUkp+QblAxWgyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTJCeEJaVmNka3FCUDlsU1NuNUJ1VURGYURJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8yYTI5NjktZDVkZS00ZWUwLTkzOTkt NDg0NzBmNjlkNzlkLzEvNkpnbUVLREdsWWZ6SHhyUFdNYkNCSHZFdjEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS8yYTI5NjktZDVkZS00ZWUwLTkzOTktNDg0NzBmNjlkNzlk LzEvSTJCeEJaVmNka3FCUDlsU1NuNUJ1VURGYURJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDWRbYMA0G CSqGSIb3DQEBCwUAA4IBAQBAEBRt4n+rehIwmqnLq4pcFZgVZA2t4P13SlItgfDh SsGlpjp+C7Ke6JtDBKwV6H4MyoXPSiPrCeK9XUd5h1U///P2tMvP808NvlLHOLMC P0cH9u24vcnRHNgm+mjtCTTFigU/KIrdYkFbn0Ge3nobQzRRUMCwzVGv0oEw/X6w 1IrLJlue0d0mKQFGZZOx3mRlmNZUe8XbkN9eTtCo/0qe9IuvWsfO5YKJilHclhdt eTGP9PEfgaAb4ksBUbSYFYmin3OnxOmEy6bFapPFW/uEtCGOIqyrmGiGySRD2a8z rvccR3oR9EuLy9HT8siJAAfRdmUVjY8tuRJZVmitphre -----END CERTIFICATE-----Generated at Mon Feb 9 18:38:51 2026 by rpki-client