This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/IjNc4JYn76d3WIyISr0428moUmE.roa File: IjNc4JYn76d3WIyISr0428moUmE.roa (raw, json) Hash identifier: sXFrXmA2Z6AJsEILtcCTtDMBdoybOsCpi39EEwe26G4= Subject key identifier: 22:33:5C:E0:96:27:EF:A7:77:58:8C:88:4A:BD:38:DB:C9:A8:52:61 Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Certificate serial: 019B7AC84BD5A9024EC2CA2ADFB1040E1E94 Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/IjNc4JYn76d3WIyISr0428moUmE.roa Signing time: Thu 01 Jan 2026 18:18:25 +0000 ROA not before: Thu 01 Jan 2026 18:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16125 IP address blocks: 89.106.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 17:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:4b:d5:a9:02:4e:c2:ca:2a:df:b1:04:0e:1e:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Validity Not Before: Jan 1 18:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=22335ce09627efa777588c884abd38dbc9a85261 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fb:0a:5c:1c:84:f8:d6:06:cb:3a:f6:e0:5c: f5:97:b7:87:06:03:90:cc:f7:4d:0b:19:3e:06:53: 41:f9:75:38:34:4a:24:c8:1d:4d:d9:2f:c9:dd:72: 08:29:55:e8:5d:81:d8:7f:7e:8c:cf:d2:8c:e3:86: d7:48:3c:0e:10:65:1d:0a:d6:6a:40:48:9d:ff:09: 6d:cc:23:75:31:bd:90:07:5f:ed:18:63:d4:ed:69: 12:c3:ba:75:9f:80:9d:f0:8e:1a:6d:c5:2a:37:eb: 84:90:f8:0e:bc:98:9b:56:c6:10:23:a6:96:7c:25: 87:7d:4b:8f:a7:11:79:db:88:e9:ff:22:ec:2a:ef: 83:95:61:5b:b5:5e:a1:40:06:22:94:22:b7:e9:05: 69:15:e9:dd:5e:3a:b6:bb:1d:28:df:de:99:be:5a: 6f:01:1f:1e:7f:8c:9e:9d:40:b2:28:69:61:3d:1e: cc:4f:78:6e:36:48:2f:5e:cd:1e:0f:67:01:ec:0a: 8a:35:a9:9f:9d:2e:b1:80:c2:bd:b3:19:eb:73:eb: 03:26:23:55:b6:13:8f:3a:48:16:bb:b0:25:2f:be: 1f:55:94:82:75:f6:ac:dd:f7:9b:b3:27:0c:38:48: e0:a5:dd:69:27:a3:60:6d:59:74:6a:a7:75:de:e1: 9a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:33:5C:E0:96:27:EF:A7:77:58:8C:88:4A:BD:38:DB:C9:A8:52:61 X509v3 Authority Key Identifier: keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/IjNc4JYn76d3WIyISr0428moUmE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.106.4.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:fc:21:ac:19:d4:d7:c2:ac:2d:78:6d:6e:ce:81:42:e3:bb: 60:7d:18:5b:69:e9:65:61:6d:a9:e9:72:59:70:e3:97:fe:20: d2:79:84:8b:31:77:08:ad:6d:b9:19:56:28:69:b2:3f:76:59: 7c:da:f9:95:be:6e:be:11:6d:e3:9e:ac:0d:10:5b:ad:5b:80: 8f:e5:c9:f2:6a:45:fd:a1:d9:2f:23:d8:28:ee:a1:35:b0:e8: ba:04:6b:05:98:01:68:1e:b8:bc:95:d8:b2:0c:2c:fe:92:31: 3a:55:9f:97:3c:26:68:c6:e5:ac:70:8d:c1:5e:32:5f:93:6b: 0b:c2:c7:56:6f:f5:d8:2b:0f:41:17:af:a5:77:2f:ec:27:57: ff:16:80:b7:b7:a6:bb:94:a9:5c:27:4d:fa:40:0e:09:0a:b2: ad:09:f1:87:6c:9a:fa:fb:6e:8c:fe:30:35:dd:27:1c:79:8e: 1c:2a:2a:03:1c:fa:62:a7:65:01:ec:52:3d:36:f8:4c:eb:67: c7:69:33:64:f9:33:d2:77:ed:ad:70:6c:06:4b:b9:d0:f6:db: 5f:6a:64:fb:3a:b5:76:25:c7:cf:0e:55:2b:0d:f7:2f:50:61: db:85:9c:29:08:b0:3b:34:d2:d7:6f:42:b7:99:d1:9f:4d:9e: 0b:f6:8c:ce -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yEvVqQJOwsoq37EEDh6UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz MGNiNjMwHhcNMjYwMTAxMTgxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMjMzNWNlMDk2MjdlZmE3Nzc1ODhjODg0YWJkMzhkYmM5YTg1MjYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfsKXByE+NYGyzr24Fz1l7eHBgOQ zPdNCxk+BlNB+XU4NEokyB1N2S/J3XIIKVXoXYHYf36Mz9KM44bXSDwOEGUdCtZq QEid/wltzCN1Mb2QB1/tGGPU7WkSw7p1n4Cd8I4abcUqN+uEkPgOvJibVsYQI6aW fCWHfUuPpxF524jp/yLsKu+DlWFbtV6hQAYilCK36QVpFendXjq2ux0o396Zvlpv AR8ef4yenUCyKGlhPR7MT3huNkgvXs0eD2cB7AqKNamfnS6xgMK9sxnrc+sDJiNV thOPOkgWu7AlL74fVZSCdfas3febsycMOEjgpd1pJ6NgbVl0aqd13uGaFQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCIzXOCWJ++nd1iMiEq9ONvJqFJhMB8GA1UdIwQY MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt YjRiOGRiMjBiMWZiLzEvSWpOYzRKWW43NmQzV0l5SVNyMDQyOG1vVW1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWWoEMA0G CSqGSIb3DQEBCwUAA4IBAQAO/CGsGdTXwqwteG1uzoFC47tgfRhbaellYW2p6XJZ cOOX/iDSeYSLMXcIrW25GVYoabI/dll82vmVvm6+EW3jnqwNEFutW4CP5cnyakX9 odkvI9go7qE1sOi6BGsFmAFoHri8ldiyDCz+kjE6VZ+XPCZoxuWscI3BXjJfk2sL wsdWb/XYKw9BF6+ldy/sJ1f/FoC3t6a7lKlcJ036QA4JCrKtCfGHbJr6+26M/jA1 3ScceY4cKioDHPpip2UB7FI9NvhM62fHaTNk+TPSd+2tcGwGS7nQ9ttfamT7OrV2 JcfPDlUrDfcvUGHbhZwpCLA7NNLXb0K3mdGfTZ4L9ozO -----END CERTIFICATE-----Generated at Wed Jan 21 03:04:02 2026 by rpki-client