This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/xPOq5JDTpXGLia2BrjOa6C75oEY.roa File: xPOq5JDTpXGLia2BrjOa6C75oEY.roa (raw, json) Hash identifier: APbvkqel/JZqGfVakMZvZys8KjCkPn3P3PUOe7eZixQ= Subject key identifier: C4:F3:AA:E4:90:D3:A5:71:8B:89:AD:81:AE:33:9A:E8:2E:F9:A0:46 Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Certificate serial: 019B7AC867221C82A7864977602D1E17A226 Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/xPOq5JDTpXGLia2BrjOa6C75oEY.roa Signing time: Thu 01 Jan 2026 18:18:32 +0000 ROA not before: Thu 01 Jan 2026 18:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 393942 IP address blocks: 89.106.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:67:22:1c:82:a7:86:49:77:60:2d:1e:17:a2:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Validity Not Before: Jan 1 18:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c4f3aae490d3a5718b89ad81ae339ae82ef9a046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f2:d1:1f:e0:c5:89:51:5b:23:95:14:45:2d: bf:d2:10:c3:b9:6f:8e:5a:b5:0c:fa:a1:0d:77:67: 99:4a:b9:3a:3b:e7:d0:82:20:ce:4e:74:6d:f5:c3: 9c:99:1b:42:db:71:ac:87:15:62:72:c9:fc:e8:ab: d0:00:1d:61:67:3e:b3:34:19:d1:0d:b5:49:1b:fe: 15:99:d0:56:d9:4e:3d:21:7a:a2:8e:dd:f8:58:cc: 76:51:66:a4:a5:5c:74:c4:73:78:fa:dc:08:dd:bc: af:3e:33:54:44:58:e7:fc:47:1f:d1:eb:05:70:ca: 9c:d1:e9:17:f6:14:1d:c5:cf:1e:b1:0c:18:e7:30: 27:af:b2:62:06:3c:28:52:a6:72:6d:59:57:48:f0: da:b0:1e:7c:de:3d:87:04:87:a0:e8:ad:cd:f2:88: 19:03:e4:26:5b:d4:53:4d:3b:04:05:05:af:02:f3: f1:c7:60:3e:2d:d3:1e:80:7d:5d:dd:1d:57:e5:41: 8b:3f:19:fb:61:87:ad:41:49:90:c3:13:eb:28:c4: 7e:80:52:fd:5d:08:dd:b6:82:16:ba:e1:1f:4c:b9: 78:d0:fd:58:76:0b:e5:40:34:8e:98:9d:87:f3:68: 55:63:87:84:29:51:a3:78:74:8b:19:49:ee:9c:57: 8e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:F3:AA:E4:90:D3:A5:71:8B:89:AD:81:AE:33:9A:E8:2E:F9:A0:46 X509v3 Authority Key Identifier: keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/xPOq5JDTpXGLia2BrjOa6C75oEY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.106.15.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:2f:94:35:22:56:75:56:7c:35:f2:18:c5:46:4d:39:5e:9f: 59:c4:6e:b7:54:87:4d:1c:3e:22:db:ca:72:56:58:02:5f:47: a8:be:8d:31:86:38:64:eb:63:93:2b:af:c4:79:52:80:19:3e: 92:46:21:54:f9:0f:46:b8:ba:1b:e1:8e:b0:1d:88:63:b1:79: 55:f5:c5:0c:a0:91:d1:3c:46:e1:a6:de:e0:39:fc:1c:cc:c9: c5:f9:74:89:42:c3:04:cf:2c:84:5c:1b:b8:6c:5a:00:3b:54: 39:7c:b7:d6:31:4c:b5:50:75:14:b3:07:9a:ea:f4:0a:f3:73: a5:86:27:34:e2:65:cc:5f:4c:8c:c1:5f:20:dc:c2:d4:35:16: 0a:66:51:1b:35:0e:04:f5:a6:fd:e0:60:7a:c5:18:4c:1b:c7: db:4b:db:0c:83:c7:b7:06:39:4e:60:0c:4b:bd:56:90:7f:23: 5e:12:fc:6e:6e:6a:b1:03:da:b5:cc:8a:5c:32:8f:e0:76:a6: 34:b7:f0:8c:a5:38:fb:53:d0:46:6e:e3:f2:72:e9:7e:74:94: 1f:7d:4e:3c:f5:80:82:8b:92:c2:46:04:f1:75:67:bb:c7:e7: cd:20:aa:f9:2a:94:3c:db:ae:db:2e:b8:d4:62:43:2c:2a:01: 5d:79:0b:3f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yGciHIKnhkl3YC0eF6ImMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz MGNiNjMwHhcNMjYwMTAxMTgxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNGYzYWFlNDkwZDNhNTcxOGI4OWFkODFhZTMzOWFlODJlZjlhMDQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfLRH+DFiVFbI5UURS2/0hDDuW+O WrUM+qENd2eZSrk6O+fQgiDOTnRt9cOcmRtC23GshxVicsn86KvQAB1hZz6zNBnR DbVJG/4VmdBW2U49IXqijt34WMx2UWakpVx0xHN4+twI3byvPjNURFjn/Ecf0esF cMqc0ekX9hQdxc8esQwY5zAnr7JiBjwoUqZybVlXSPDasB583j2HBIeg6K3N8ogZ A+QmW9RTTTsEBQWvAvPxx2A+LdMegH1d3R1X5UGLPxn7YYetQUmQwxPrKMR+gFL9 XQjdtoIWuuEfTLl40P1YdgvlQDSOmJ2H82hVY4eEKVGjeHSLGUnunFeObQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMTzquSQ06Vxi4mtga4zmugu+aBGMB8GA1UdIwQY MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt YjRiOGRiMjBiMWZiLzEveFBPcTVKRFRwWEdMaWEyQnJqT2E2Qzc1b0VZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWWoPMA0G CSqGSIb3DQEBCwUAA4IBAQAdL5Q1IlZ1Vnw18hjFRk05Xp9ZxG63VIdNHD4i28py VlgCX0eovo0xhjhk62OTK6/EeVKAGT6SRiFU+Q9GuLob4Y6wHYhjsXlV9cUMoJHR PEbhpt7gOfwczMnF+XSJQsMEzyyEXBu4bFoAO1Q5fLfWMUy1UHUUswea6vQK83Ol hic04mXMX0yMwV8g3MLUNRYKZlEbNQ4E9ab94GB6xRhMG8fbS9sMg8e3BjlOYAxL vVaQfyNeEvxubmqxA9q1zIpcMo/gdqY0t/CMpTj7U9BGbuPycul+dJQffU489YCC i5LCRgTxdWe7x+fNIKr5KpQ8267bLrjUYkMsKgFdeQs/ -----END CERTIFICATE-----Generated at Mon Jan 19 16:52:58 2026 by rpki-client