This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/JEsWD0_sPZeR3nDP6LBcihehfnQ.roa File: JEsWD0_sPZeR3nDP6LBcihehfnQ.roa (raw, json) Hash identifier: q6r9n8Jhyw8OGJcuwwPP+sOyeoKFsYrXF9zzzZNNxbI= Subject key identifier: 24:4B:16:0F:4F:EC:3D:97:91:DE:70:CF:E8:B0:5C:8A:17:A1:7E:74 Certificate issuer: /CN=aa6d889041cb29aed1fe1ac380c794af7a42c7d1 Certificate serial: 019BD62F096E625EA383467A7F94F206E057 Authority key identifier: AA:6D:88:90:41:CB:29:AE:D1:FE:1A:C3:80:C7:94:AF:7A:42:C7:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/JEsWD0_sPZeR3nDP6LBcihehfnQ.roa Signing time: Mon 19 Jan 2026 12:16:05 +0000 ROA not before: Mon 19 Jan 2026 12:16:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9121 IP address blocks: 89.34.218.0/24 maxlen: 24 89.40.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d6:2f:09:6e:62:5e:a3:83:46:7a:7f:94:f2:06:e0:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa6d889041cb29aed1fe1ac380c794af7a42c7d1 Validity Not Before: Jan 19 12:16:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=244b160f4fec3d9791de70cfe8b05c8a17a17e74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2b:99:44:72:35:47:cb:fd:ca:20:1d:5e:e6: 8d:4b:d3:37:ff:01:6b:6a:09:22:7d:86:f9:09:85: d8:d9:b1:94:67:e7:bd:cf:24:5e:62:f0:00:04:a3: c5:37:9c:9f:13:89:db:b3:e4:7e:8e:62:bf:51:0f: 50:63:bb:43:75:2c:6b:0f:62:87:b4:13:3f:b3:2e: e1:e3:08:7e:1a:e4:6d:5e:b7:00:8d:50:73:9f:b3: b7:d9:85:9c:db:60:e1:15:98:d1:15:ea:c8:d2:23: 75:35:f9:74:80:53:83:ff:a2:17:6a:35:ea:c3:78: 5f:59:55:fc:f2:47:7d:7d:3f:2c:4c:d7:67:d5:e1: 89:a2:b9:07:d0:76:76:2b:84:15:f8:2d:42:74:02: eb:03:1e:70:a6:6d:ae:a7:f6:3d:4d:75:e1:5d:1e: 92:0a:9f:2a:77:58:78:0b:cd:36:9f:0f:b9:13:f6: 8c:9a:b3:21:f0:4d:6c:39:46:8d:85:b1:8f:e7:4f: c1:04:41:4c:b5:ac:e1:e8:e4:d6:72:c3:90:a0:20: 5d:82:81:84:56:81:1d:ef:95:3c:ef:e2:37:1f:18: 37:f6:ba:cb:fc:65:a9:98:f3:e1:4c:98:f8:13:e5: 0c:c6:85:d3:59:c2:b3:7e:ce:2f:30:bd:fb:c6:c8: 3d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:4B:16:0F:4F:EC:3D:97:91:DE:70:CF:E8:B0:5C:8A:17:A1:7E:74 X509v3 Authority Key Identifier: keyid:AA:6D:88:90:41:CB:29:AE:D1:FE:1A:C3:80:C7:94:AF:7A:42:C7:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/JEsWD0_sPZeR3nDP6LBcihehfnQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.34.218.0/24 89.40.68.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:fa:cc:77:9e:cb:b7:a1:b3:ba:6c:41:0c:4c:92:9e:ff:11: 2b:1c:62:6c:0e:ac:84:3f:c6:df:d3:f1:68:41:c9:79:e8:1c: a5:0e:09:6b:a8:fd:b8:f2:ea:5a:0e:76:3a:d9:a8:56:6e:94: af:b6:e4:b0:77:08:c0:e1:b8:5b:c9:1b:5a:b1:77:da:a0:1c: d8:88:b0:80:de:a5:78:0e:97:d6:60:ae:69:8c:5f:2c:1d:97: 3e:b0:f6:bb:79:9d:ec:27:66:17:5c:cd:f8:a4:b1:54:5f:8a: c8:dc:12:41:c3:11:8f:55:db:8a:aa:6c:6d:8d:bf:df:c3:e8: 68:d8:58:ba:08:10:f6:80:c2:f0:67:df:74:e5:6d:81:8b:fa: d8:fd:1f:75:91:cb:46:ba:9a:71:3f:f4:83:87:c9:de:c0:29: ec:ae:cb:69:92:65:1a:7d:62:72:44:77:1c:51:2f:dd:57:fb: 7d:81:94:c9:0c:c3:30:c8:0d:3d:cb:cf:e5:ad:c3:57:0e:f8: 30:f1:cb:f8:30:91:66:c7:cf:84:18:88:4a:bb:d5:f7:0d:df: fd:4f:20:27:cc:37:d1:26:51:0c:ee:58:0f:8c:f5:79:91:7c: 81:66:36:6b:3b:fd:73:c1:7b:b8:f9:dd:bf:c0:67:ad:df:34: b0:a4:cd:fa -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZvWLwluYl6jg0Z6f5TyBuBXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhNmQ4ODkwNDFjYjI5YWVkMWZlMWFjMzgwYzc5NGFmN2E0 MmM3ZDEwHhcNMjYwMTE5MTIxNjA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDRiMTYwZjRmZWMzZDk3OTFkZTcwY2ZlOGIwNWM4YTE3YTE3ZTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyuZRHI1R8v9yiAdXuaNS9M3/wFr agkifYb5CYXY2bGUZ+e9zyReYvAABKPFN5yfE4nbs+R+jmK/UQ9QY7tDdSxrD2KH tBM/sy7h4wh+GuRtXrcAjVBzn7O32YWc22DhFZjRFerI0iN1Nfl0gFOD/6IXajXq w3hfWVX88kd9fT8sTNdn1eGJorkH0HZ2K4QV+C1CdALrAx5wpm2up/Y9TXXhXR6S Cp8qd1h4C802nw+5E/aMmrMh8E1sOUaNhbGP50/BBEFMtazh6OTWcsOQoCBdgoGE VoEd75U87+I3Hxg39rrL/GWpmPPhTJj4E+UMxoXTWcKzfs4vML37xsg9VQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCRLFg9P7D2Xkd5wz+iwXIoXoX50MB8GA1UdIwQY MBaAFKptiJBByymu0f4aw4DHlK96QsfRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcW0ySWtFSExLYTdSX2hyRGdNZVVyM3BDeDlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi85MDUwNzktOWQ3Zi00OGM4LWEzMDYt ZTEzZDY5YTAwNDVlLzEvSkVzV0QwX3NQWmVSM25EUDZMQmNpaGVoZm5RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi85MDUwNzktOWQ3Zi00OGM4LWEzMDYtZTEzZDY5YTAwNDVl LzEvcW0ySWtFSExLYTdSX2hyRGdNZVVyM3BDeDlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWSLaAwQA WShEMA0GCSqGSIb3DQEBCwUAA4IBAQBa+sx3nsu3obO6bEEMTJKe/xErHGJsDqyE P8bf0/FoQcl56BylDglrqP248upaDnY62ahWbpSvtuSwdwjA4bhbyRtasXfaoBzY iLCA3qV4DpfWYK5pjF8sHZc+sPa7eZ3sJ2YXXM34pLFUX4rI3BJBwxGPVduKqmxt jb/fw+ho2Fi6CBD2gMLwZ9905W2Bi/rY/R91kctGuppxP/SDh8newCnsrstpkmUa fWJyRHccUS/dV/t9gZTJDMMwyA09y8/lrcNXDvgw8cv4MJFmx8+EGIhKu9X3Dd/9 TyAnzDfRJlEM7lgPjPV5kXyBZjZrO/1zwXu4+d2/wGet3zSwpM36 -----END CERTIFICATE-----Generated at Wed Jan 21 14:30:25 2026 by rpki-client