This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/6rWzroD3N7hgAXbNo3yuEEQJsfI.roa File: 6rWzroD3N7hgAXbNo3yuEEQJsfI.roa (raw, json) Hash identifier: E8YwvFkIVbhynhPsVej9fShdrkMGkyiT775U87D7jFU= Subject key identifier: EA:B5:B3:AE:80:F7:37:B8:60:01:76:CD:A3:7C:AE:10:44:09:B1:F2 Certificate issuer: /CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d Certificate serial: 019B7C1315A73B24E4DB2789C03757EC57B6 Authority key identifier: EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/6rWzroD3N7hgAXbNo3yuEEQJsfI.roa Signing time: Fri 02 Jan 2026 00:19:44 +0000 ROA not before: Fri 02 Jan 2026 00:19:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207713 IP address blocks: 89.185.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:15:a7:3b:24:e4:db:27:89:c0:37:57:ec:57:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d Validity Not Before: Jan 2 00:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eab5b3ae80f737b8600176cda37cae104409b1f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c2:c7:a9:3f:a9:78:94:36:42:71:0a:9e:95: 4a:40:97:a6:bb:4e:96:ed:38:ea:19:0f:be:7c:ea: 35:8e:c2:ae:89:26:dd:a4:eb:d4:29:a1:de:ee:c2: 8e:ef:cc:71:e8:d7:61:c5:8c:b7:09:16:c7:49:53: 77:e4:d1:38:41:4c:48:4a:87:11:1a:7c:73:ce:a9: c1:f1:a5:1e:8d:c8:04:58:24:f9:a6:47:ec:29:46: a3:d6:54:f0:fa:71:65:fb:ea:e2:26:7d:35:78:a9: 08:9c:16:f8:91:e8:38:47:8d:e7:fa:a0:83:e3:6a: da:60:1e:6c:5f:9a:4b:d5:e2:4a:3d:6c:a7:58:ce: 65:78:87:c0:cc:43:50:fa:b4:6f:a1:e2:b1:b2:0c: 9d:4e:78:32:2c:8f:db:29:50:85:1b:67:5a:55:22: 4f:90:19:23:8f:da:22:fa:7a:2d:53:26:31:6e:41: e9:25:bb:7a:6a:5f:0b:ed:7a:6b:05:81:44:3d:3e: 0d:1b:43:3c:9f:42:0f:49:4d:ee:e1:48:b8:66:ca: 1f:64:9c:36:f4:fd:1d:72:94:25:a5:d9:9e:21:4c: 92:57:4b:4d:c1:84:c5:dd:3b:ff:59:a0:ee:43:68: ee:d8:dd:fa:01:2d:7e:13:52:ec:fd:25:ed:56:df: f2:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:B5:B3:AE:80:F7:37:B8:60:01:76:CD:A3:7C:AE:10:44:09:B1:F2 X509v3 Authority Key Identifier: keyid:EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/6rWzroD3N7hgAXbNo3yuEEQJsfI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.185.84.0/24 Signature Algorithm: sha256WithRSAEncryption 44:e1:56:ef:da:05:83:d0:68:d7:03:0e:43:f0:89:cd:ff:4e: 9e:2f:10:6e:a1:74:ea:bc:1b:b4:6c:24:16:d5:13:f6:1e:d6: aa:37:be:38:9b:26:11:12:15:f2:56:54:21:ee:c8:2c:28:85: e4:89:26:9a:e1:db:22:04:34:52:bc:55:73:ab:77:ba:50:99: 3c:e2:bd:57:9e:02:ea:6c:aa:be:e5:5b:16:4e:3c:23:8b:58: 99:68:0c:76:a8:9f:a2:41:49:71:44:68:94:0b:d9:43:b6:b9: 23:dd:5c:62:23:09:e9:b1:2d:3b:16:3e:4b:39:65:ce:07:be: 89:40:4a:d2:b4:e8:25:f5:78:10:16:38:ef:41:c9:58:0a:60: 0b:62:41:25:e5:3d:84:d4:fe:26:50:26:8d:ee:b3:a3:46:d4: 11:10:22:56:04:86:7e:0b:af:39:b7:95:c2:5e:32:48:2f:da: 6b:6f:77:a9:ac:d5:1a:d9:e7:0b:b2:10:cd:29:9c:c2:d6:3c: 3c:f0:ee:6d:b4:e9:ec:25:17:54:a4:d2:67:6c:91:1b:61:68: a0:e5:0d:22:cf:48:d7:f4:1c:7a:22:00:2e:67:48:f4:29:7a: 17:84:bf:ec:dd:c8:4a:73:f2:b5:bc:82:f8:3e:fa:f6:05:9b: 66:b7:d1:6f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8ExWnOyTk2yeJwDdX7Fe2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNTdjMmQ5ZDkzYWM3Y2Y5YjJmMTdjYWE3ODU5YjY5ODVi MzliOWQwHhcNMjYwMTAyMDAxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYWI1YjNhZTgwZjczN2I4NjAwMTc2Y2RhMzdjYWUxMDQ0MDliMWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMLHqT+peJQ2QnEKnpVKQJemu06W 7TjqGQ++fOo1jsKuiSbdpOvUKaHe7sKO78xx6NdhxYy3CRbHSVN35NE4QUxISocR GnxzzqnB8aUejcgEWCT5pkfsKUaj1lTw+nFl++riJn01eKkInBb4keg4R43n+qCD 42raYB5sX5pL1eJKPWynWM5leIfAzENQ+rRvoeKxsgydTngyLI/bKVCFG2daVSJP kBkjj9oi+notUyYxbkHpJbt6al8L7XprBYFEPT4NG0M8n0IPSU3u4Ui4ZsofZJw2 9P0dcpQlpdmeIUySV0tNwYTF3Tv/WaDuQ2ju2N36AS1+E1Ls/SXtVt/ygwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOq1s66A9ze4YAF2zaN8rhBECbHyMB8GA1UdIwQY MBaAFO9XwtnZOsfPmy8XyqeFm2mFs5udMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2Njct OGU2Zjg3OGRiNWY0LzEvNnJXenJvRDNON2hnQVhiTm8zeXVFRVFKc2ZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2NjctOGU2Zjg3OGRiNWY0 LzEvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWblUMA0G CSqGSIb3DQEBCwUAA4IBAQBE4Vbv2gWD0GjXAw5D8InN/06eLxBuoXTqvBu0bCQW 1RP2HtaqN744myYREhXyVlQh7sgsKIXkiSaa4dsiBDRSvFVzq3e6UJk84r1XngLq bKq+5VsWTjwji1iZaAx2qJ+iQUlxRGiUC9lDtrkj3VxiIwnpsS07Fj5LOWXOB76J QErStOgl9XgQFjjvQclYCmALYkEl5T2E1P4mUCaN7rOjRtQRECJWBIZ+C685t5XC XjJIL9prb3eprNUa2ecLshDNKZzC1jw88O5ttOnsJRdUpNJnbJEbYWig5Q0iz0jX 9Bx6IgAuZ0j0KXoXhL/s3chKc/K1vIL4Pvr2BZtmt9Fv -----END CERTIFICATE-----Generated at Sat Jan 10 03:17:01 2026 by rpki-client