This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/EU89lZ_vYQENwcJnsElMmPoNMFg.roa File: EU89lZ_vYQENwcJnsElMmPoNMFg.roa (raw, json) Hash identifier: 4PZPkH+k2x12f25lxMp/uxGyDUAAPAd70TU5oLORZ88= Subject key identifier: 11:4F:3D:95:9F:EF:61:01:0D:C1:C2:67:B0:49:4C:98:FA:0D:30:58 Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA7594575A5EB4263E0D9D8AF7EB032 Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/EU89lZ_vYQENwcJnsElMmPoNMFg.roa Signing time: Fri 02 Jan 2026 12:20:55 +0000 ROA not before: Fri 02 Jan 2026 12:20:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8997 IP address blocks: 89.109.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:59:45:75:a5:eb:42:63:e0:d9:d8:af:7e:b0:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:20:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=114f3d959fef61010dc1c267b0494c98fa0d3058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d3:07:43:87:55:af:f9:20:bc:9c:20:da:50: 98:82:47:db:ce:05:c2:b7:58:08:c9:4a:08:64:0e: 17:64:ae:8a:26:10:63:6b:6e:df:9a:36:7a:08:d7: 98:3a:21:0b:5f:c6:55:c2:21:3f:2c:e9:16:4d:4f: 52:e9:bf:c1:93:bd:51:7d:4d:26:ae:7a:3f:bf:a2: 0e:71:1f:2d:5c:a6:00:f1:6d:a9:40:fc:0b:a0:81: 95:0b:81:90:46:72:33:69:21:d8:ee:90:2f:44:03: d3:43:ff:7b:64:c8:a3:53:f4:69:bc:2a:09:ca:46: d1:80:9c:77:a8:8f:41:16:51:e5:8c:e6:d6:a0:74: 46:9d:03:98:bc:40:3c:4d:e2:4a:24:a5:25:bd:90: 80:46:3f:2b:26:6f:10:8a:f4:fe:1d:4c:cb:fb:5b: 27:a5:3a:14:15:0e:90:95:fb:bf:aa:84:50:f5:78: f1:90:69:01:09:ca:9e:55:ca:92:0c:81:69:d2:c1: 58:fe:88:6c:7f:74:66:f9:78:38:af:3d:2f:8b:1c: b0:b1:d6:07:38:24:a3:23:30:8b:45:63:6e:99:44: 83:ae:6b:04:b1:99:dd:61:46:8e:ab:c9:09:d8:19: d2:97:1a:00:63:82:b2:9b:d2:02:4f:54:b7:a6:4a: 4d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:4F:3D:95:9F:EF:61:01:0D:C1:C2:67:B0:49:4C:98:FA:0D:30:58 X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/EU89lZ_vYQENwcJnsElMmPoNMFg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.109.128.0/17 Signature Algorithm: sha256WithRSAEncryption 2d:10:c1:3f:95:3a:08:27:9b:46:e5:ce:06:1d:e8:70:21:60: d0:91:37:c7:d8:33:ea:7f:95:f7:f6:f2:09:69:07:8d:4f:d5: 5a:ee:cb:95:c1:58:02:ca:4a:9e:85:fa:32:6c:65:30:a2:05: bd:25:a3:b4:21:67:2a:00:2c:f1:42:c7:55:50:31:62:21:87: 1a:4d:dc:b6:e1:f8:a9:94:0a:e9:08:0f:ed:14:b9:b3:0d:25: 6b:55:ba:39:af:b1:ca:02:64:c6:ac:95:00:72:47:3a:d9:89: 38:84:c2:8a:7e:fa:ee:47:1d:f6:84:a3:75:27:20:9b:ba:2d: 5c:d7:d7:a5:91:8d:2d:4e:e6:03:b3:12:9b:0c:a0:26:e9:7a: 17:1d:ec:65:e1:76:9c:95:4c:ce:17:a9:0c:1e:19:bf:dd:e9: 37:03:b9:37:1e:77:35:cf:6d:c9:be:92:b1:03:ce:09:69:59: d2:84:14:58:68:c4:48:4c:b2:23:64:9b:a5:9c:11:b1:30:70: 8a:1b:5d:d7:67:97:1e:0c:a8:55:a0:94:8b:5c:b9:ce:37:d8: a3:dc:3a:a2:6e:a9:73:86:22:b9:dd:52:02:f0:fa:52:54:60: 50:e3:d8:17:ef:d9:27:5d:2d:16:9c:78:7a:cc:8a:b6:7c:2a: 4a:4c:49:87 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+p1lFdaXrQmPg2divfrAyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMDU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMTRmM2Q5NTlmZWY2MTAxMGRjMWMyNjdiMDQ5NGM5OGZhMGQzMDU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdMHQ4dVr/kgvJwg2lCYgkfbzgXC t1gIyUoIZA4XZK6KJhBja27fmjZ6CNeYOiELX8ZVwiE/LOkWTU9S6b/Bk71RfU0m rno/v6IOcR8tXKYA8W2pQPwLoIGVC4GQRnIzaSHY7pAvRAPTQ/97ZMijU/RpvCoJ ykbRgJx3qI9BFlHljObWoHRGnQOYvEA8TeJKJKUlvZCARj8rJm8QivT+HUzL+1sn pToUFQ6Qlfu/qoRQ9XjxkGkBCcqeVcqSDIFp0sFY/ohsf3Rm+Xg4rz0vixywsdYH OCSjIzCLRWNumUSDrmsEsZndYUaOq8kJ2BnSlxoAY4Kym9ICT1S3pkpNdwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBFPPZWf72EBDcHCZ7BJTJj6DTBYMB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvRVU4OWxaX3ZZUUVOd2NKbnNFbE1tUG9OTUZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHWW2AMA0G CSqGSIb3DQEBCwUAA4IBAQAtEME/lToIJ5tG5c4GHehwIWDQkTfH2DPqf5X39vIJ aQeNT9Va7suVwVgCykqehfoybGUwogW9JaO0IWcqACzxQsdVUDFiIYcaTdy24fip lArpCA/tFLmzDSVrVbo5r7HKAmTGrJUAckc62Yk4hMKKfvruRx32hKN1JyCbui1c 19elkY0tTuYDsxKbDKAm6XoXHexl4XaclUzOF6kMHhm/3ek3A7k3Hnc1z23JvpKx A84JaVnShBRYaMRITLIjZJulnBGxMHCKG13XZ5ceDKhVoJSLXLnON9ij3Dqibqlz hiK53VIC8PpSVGBQ49gX79knXS0WnHh6zIq2fCpKTEmH -----END CERTIFICATE-----Generated at Mon Jan 26 10:13:28 2026 by rpki-client