This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/PEm6S54U13MaQ71v1Rl3kDHGSuw.roa File: PEm6S54U13MaQ71v1Rl3kDHGSuw.roa (raw, json) Hash identifier: XFZVOEjHeDyAPzFdAiODpavr6Nt9yGr3hDVGBJwU18s= Subject key identifier: 3C:49:BA:4B:9E:14:D7:73:1A:43:BD:6F:D5:19:77:90:31:C6:4A:EC Certificate issuer: /CN=69226ceb40c671f30acf11fa36b8d7d1c6754704 Certificate serial: 019B76EB6C475844A1E964ABCF8DDBEB3C30 Authority key identifier: 69:22:6C:EB:40:C6:71:F3:0A:CF:11:FA:36:B8:D7:D1:C6:75:47:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/PEm6S54U13MaQ71v1Rl3kDHGSuw.roa Signing time: Thu 01 Jan 2026 00:18:18 +0000 ROA not before: Thu 01 Jan 2026 00:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 38968 IP address blocks: 89.28.216.0/21 maxlen: 21 89.28.216.0/24 maxlen: 24 89.28.217.0/24 maxlen: 24 89.28.218.0/24 maxlen: 24 89.28.219.0/24 maxlen: 24 89.28.220.0/24 maxlen: 24 89.28.221.0/24 maxlen: 24 89.28.222.0/24 maxlen: 24 89.28.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:6c:47:58:44:a1:e9:64:ab:cf:8d:db:eb:3c:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69226ceb40c671f30acf11fa36b8d7d1c6754704 Validity Not Before: Jan 1 00:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3c49ba4b9e14d7731a43bd6fd519779031c64aec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:87:53:5b:de:e1:bf:b3:44:9e:40:80:56:c4: c6:20:3f:c1:b6:a9:20:f1:61:1c:12:8f:60:76:5a: 4e:a0:ff:cc:00:b6:69:7b:35:10:e1:00:ce:f0:a7: 5e:d5:22:a6:70:b8:37:44:78:30:7f:d5:cf:af:bf: b7:37:e7:ad:f3:f3:69:45:7b:78:f3:d9:4a:c8:59: ca:ba:31:6a:d9:d9:10:dd:f8:23:38:bb:6f:4d:86: 86:3f:fe:ee:e2:f5:ce:04:63:8d:9f:a0:60:fd:23: 10:a2:71:c5:b5:22:dd:d1:43:82:db:04:64:29:dc: 52:f2:30:a2:2b:01:19:31:42:6e:16:43:c6:e5:db: c2:10:10:01:95:f7:ef:c4:3a:58:a9:d9:44:ba:f0: 55:bc:90:73:e4:f1:45:43:62:73:9c:b9:11:65:b8: 96:62:e9:48:e9:41:f3:87:e1:6b:4f:ab:3a:6d:87: be:c4:e6:6c:0e:62:6b:41:6f:fe:a7:ad:48:ae:24: de:b0:21:c2:8c:28:73:47:69:6a:fb:98:e4:e2:e3: 56:f8:00:ca:7a:b5:aa:3a:df:5b:5c:25:82:37:df: d2:cb:4d:f0:6a:25:d5:59:be:67:bd:34:aa:c4:2a: d4:d0:9e:37:a3:af:2a:9f:87:54:5d:85:00:0e:f6: 65:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:49:BA:4B:9E:14:D7:73:1A:43:BD:6F:D5:19:77:90:31:C6:4A:EC X509v3 Authority Key Identifier: keyid:69:22:6C:EB:40:C6:71:F3:0A:CF:11:FA:36:B8:D7:D1:C6:75:47:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/PEm6S54U13MaQ71v1Rl3kDHGSuw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fff1c7-cee1-4fa6-a99b-c9c8ab188853/1/aSJs60DGcfMKzxH6NrjX0cZ1RwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.28.216.0/21 Signature Algorithm: sha256WithRSAEncryption 0e:97:2d:b6:5c:ba:92:a3:86:e2:84:03:0b:b8:18:a7:95:de: a4:ab:24:4f:b4:fd:cd:9e:a8:78:6a:c6:e2:97:f8:bb:31:85: 64:6e:64:a7:72:1d:33:dd:db:d2:6c:4a:0a:bd:3c:21:d6:b5: 3c:ac:70:33:df:13:e0:06:68:21:bb:98:4b:57:2d:45:b9:0d: fa:cb:dd:78:8d:6b:84:62:8c:8f:bb:e1:b4:9c:78:04:86:00: 59:c7:dd:6f:51:70:00:11:95:69:de:55:ef:38:ef:3b:59:0d: 3b:53:16:0c:ab:cf:66:71:bd:11:ba:b9:44:35:bf:0c:ca:29: d6:06:b4:8a:42:90:4f:16:3e:d2:3a:d1:5f:e6:11:03:fe:5f: ea:a8:1b:b5:e1:3b:d6:fa:a5:90:88:2e:ab:6f:d6:d5:83:e1: f2:48:04:da:81:a5:df:a9:31:d1:8e:76:ca:98:89:d3:c2:7f: 70:0c:43:db:9a:74:0e:5b:68:d2:ca:1b:4d:4d:04:c2:89:d1: 42:20:12:0d:0c:09:27:03:c2:d8:9c:df:2b:44:c4:02:e2:bf: 99:7c:e0:61:6c:e4:23:bb:c4:89:e3:10:5a:b3:43:be:dc:43: 83:2c:12:35:b0:f3:f1:92:24:df:c2:ef:03:23:0f:1e:38:6b: c2:fa:e0:08 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt262xHWESh6WSrz43b6zwwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5MjI2Y2ViNDBjNjcxZjMwYWNmMTFmYTM2YjhkN2QxYzY3 NTQ3MDQwHhcNMjYwMTAxMDAxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzQ5YmE0YjllMTRkNzczMWE0M2JkNmZkNTE5Nzc5MDMxYzY0YWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYdTW97hv7NEnkCAVsTGID/Btqkg 8WEcEo9gdlpOoP/MALZpezUQ4QDO8Kde1SKmcLg3RHgwf9XPr7+3N+et8/NpRXt4 89lKyFnKujFq2dkQ3fgjOLtvTYaGP/7u4vXOBGONn6Bg/SMQonHFtSLd0UOC2wRk KdxS8jCiKwEZMUJuFkPG5dvCEBABlffvxDpYqdlEuvBVvJBz5PFFQ2JznLkRZbiW YulI6UHzh+FrT6s6bYe+xOZsDmJrQW/+p61IriTesCHCjChzR2lq+5jk4uNW+ADK erWqOt9bXCWCN9/Sy03waiXVWb5nvTSqxCrU0J43o68qn4dUXYUADvZlVwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDxJukueFNdzGkO9b9UZd5AxxkrsMB8GA1UdIwQY MBaAFGkibOtAxnHzCs8R+ja419HGdUcEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVNKczYwREdjZk1LenhINk5yalgwY1oxUndRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9mZmYxYzctY2VlMS00ZmE2LWE5OWIt YzljOGFiMTg4ODUzLzEvUEVtNlM1NFUxM01hUTcxdjFSbDNrREhHU3V3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy9mZmYxYzctY2VlMS00ZmE2LWE5OWItYzljOGFiMTg4ODUz LzEvYVNKczYwREdjZk1LenhINk5yalgwY1oxUndRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDWRzYMA0G CSqGSIb3DQEBCwUAA4IBAQAOly22XLqSo4bihAMLuBinld6kqyRPtP3Nnqh4asbi l/i7MYVkbmSnch0z3dvSbEoKvTwh1rU8rHAz3xPgBmghu5hLVy1FuQ36y914jWuE YoyPu+G0nHgEhgBZx91vUXAAEZVp3lXvOO87WQ07UxYMq89mcb0RurlENb8MyinW BrSKQpBPFj7SOtFf5hED/l/qqBu14TvW+qWQiC6rb9bVg+HySATagaXfqTHRjnbK mInTwn9wDEPbmnQOW2jSyhtNTQTCidFCIBINDAknA8LYnN8rRMQC4r+ZfOBhbOQj u8SJ4xBas0O+3EODLBI1sPPxkiTfwu8DIw8eOGvC+uAI -----END CERTIFICATE-----Generated at Mon Feb 9 22:37:10 2026 by rpki-client