This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/96i-W8uHQfELumiyoD8KgUwjEqk.roa File: 96i-W8uHQfELumiyoD8KgUwjEqk.roa (raw, json) Hash identifier: okWOkWFs1Dluipq3KfyuSGfnv1ZB6ULtQt87WU+u/6M= Subject key identifier: F7:A8:BE:5B:CB:87:41:F1:0B:BA:68:B2:A0:3F:0A:81:4C:23:12:A9 Certificate issuer: /CN=e92c415d1775ae9993e900a7536b46ab144a9aa2 Certificate serial: 019B7F15800024928E0AADC31FC7E40D6E01 Authority key identifier: E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/96i-W8uHQfELumiyoD8KgUwjEqk.roa Signing time: Fri 02 Jan 2026 14:21:14 +0000 ROA not before: Fri 02 Jan 2026 14:21:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35394 IP address blocks: 89.29.160.0/20 maxlen: 20 89.29.176.0/21 maxlen: 21 89.29.184.0/23 maxlen: 23 89.29.244.0/23 maxlen: 23 89.29.248.0/23 maxlen: 23 176.57.97.0/24 maxlen: 24 185.64.242.0/24 maxlen: 24 213.181.74.0/24 maxlen: 24 213.181.75.0/24 maxlen: 24 213.181.76.0/24 maxlen: 24 213.181.80.0/23 maxlen: 23 213.181.84.0/23 maxlen: 23 213.181.86.0/23 maxlen: 23 213.181.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.mft rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:80:00:24:92:8e:0a:ad:c3:1f:c7:e4:0d:6e:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e92c415d1775ae9993e900a7536b46ab144a9aa2 Validity Not Before: Jan 2 14:21:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f7a8be5bcb8741f10bba68b2a03f0a814c2312a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:55:e7:e7:96:7d:f7:7b:4b:b3:31:c7:06:9b: 19:b3:6a:8c:d0:54:e8:43:b7:ef:16:75:ea:a2:92: 9f:9f:d3:ca:53:50:bd:07:ca:3a:f2:14:44:1e:bd: e9:7c:09:b0:08:34:8b:a7:c5:1b:ff:28:92:a4:e3: e8:a6:a0:cb:79:e3:65:e5:27:9a:c7:82:19:fb:e8: 5e:01:31:a3:9c:25:5b:d9:a3:64:c3:2e:e1:89:18: 2a:4f:33:43:a2:67:f9:22:c8:08:5a:24:93:12:76: d4:e4:7b:92:38:ea:80:6a:a4:2d:88:c8:75:5d:b1: 28:95:fa:74:b0:c1:ab:bd:fe:2d:b9:e1:4e:d4:4b: dd:af:0e:66:f4:0b:9b:7b:23:4b:2d:e5:d7:29:a6: 54:e9:62:c6:f7:01:7d:b0:f4:47:d5:ee:87:0a:71: 97:f9:87:de:db:1e:5c:4d:c0:1a:99:6a:60:0e:47: 6e:bf:93:60:e6:f7:78:51:68:c5:20:63:56:d8:d3: 2c:3a:b9:5e:53:ee:ea:51:3a:75:0d:2d:b0:38:2e: 9e:b9:e1:7d:31:16:52:16:00:a3:00:d2:f5:74:f6: 60:59:ea:fc:f4:af:65:3b:f6:19:e7:f0:15:63:1e: db:be:62:d1:21:29:3c:98:77:6f:72:7d:28:fc:31: 85:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:A8:BE:5B:CB:87:41:F1:0B:BA:68:B2:A0:3F:0A:81:4C:23:12:A9 X509v3 Authority Key Identifier: keyid:E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/96i-W8uHQfELumiyoD8KgUwjEqk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.29.160.0-89.29.185.255 89.29.244.0/23 89.29.248.0/23 176.57.97.0/24 185.64.242.0/24 213.181.74.0-213.181.76.255 213.181.80.0/23 213.181.84.0-213.181.88.255 Signature Algorithm: sha256WithRSAEncryption 5a:59:c9:cc:0e:d8:16:43:ca:ea:d7:a9:bb:47:c1:cc:17:86: 33:da:a3:53:41:95:f1:73:e0:76:01:11:10:17:6a:24:7e:69: de:32:52:38:5e:fe:6d:26:f8:7d:d7:d0:d2:04:3f:81:1b:82: 7d:23:09:67:1e:6f:69:1f:26:5f:ff:9e:8a:5c:70:78:39:6e: 1b:75:24:c5:99:0d:19:c7:58:00:37:fe:ba:a9:49:5e:c4:22: b1:7d:8c:75:1e:bf:4a:15:e2:32:c8:7b:17:12:88:8b:75:8c: 51:da:35:87:32:76:ee:18:1d:3b:fb:5a:55:79:76:a9:cd:63: cc:5d:df:9f:83:30:66:13:ad:2c:43:98:cc:dc:4a:17:e0:8f: ea:1a:a5:de:0a:b8:ee:bd:a5:32:6d:94:c6:a7:a4:ad:f2:81: e6:77:2d:db:02:79:ad:0a:d0:b8:4d:00:a7:47:08:ac:a1:33: d9:9f:94:9e:82:6c:df:ee:c8:aa:14:dc:ba:ba:11:79:8c:03: 41:53:ff:c1:61:bc:15:d0:45:97:18:37:24:ad:a0:94:ba:03: 27:a5:de:46:3b:79:9e:78:d2:03:32:89:02:ee:5d:c9:80:83: 96:58:9e:2b:af:36:cb:5f:9c:38:72:e0:b3:e3:e8:5f:20:9c: 55:c6:06:5e -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgISAZt/FYAAJJKOCq3DH8fkDW4BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5MmM0MTVkMTc3NWFlOTk5M2U5MDBhNzUzNmI0NmFiMTQ0 YTlhYTIwHhcNMjYwMTAyMTQyMTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmN2E4YmU1YmNiODc0MWYxMGJiYTY4YjJhMDNmMGE4MTRjMjMxMmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylXn55Z993tLszHHBpsZs2qM0FTo Q7fvFnXqopKfn9PKU1C9B8o68hREHr3pfAmwCDSLp8Ub/yiSpOPopqDLeeNl5Sea x4IZ++heATGjnCVb2aNkwy7hiRgqTzNDomf5IsgIWiSTEnbU5HuSOOqAaqQtiMh1 XbEolfp0sMGrvf4tueFO1Evdrw5m9AubeyNLLeXXKaZU6WLG9wF9sPRH1e6HCnGX +Yfe2x5cTcAamWpgDkduv5Ng5vd4UWjFIGNW2NMsOrleU+7qUTp1DS2wOC6eueF9 MRZSFgCjANL1dPZgWer89K9lO/YZ5/AVYx7bvmLRISk8mHdvcn0o/DGF4QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFPeovlvLh0HxC7posqA/CoFMIxKpMB8GA1UdIwQY MBaAFOksQV0Xda6Zk+kAp1NrRqsUSpqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlN4QlhSZDFycG1UNlFDblUydEdxeFJLbXFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wODk4YmUtYjAzNy00MjlmLWI1MDQt MWQ5MzRhMDQ4NDc0LzEvOTZpLVc4dUhRZkVMdW1peW9EOEtnVXdqRXFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8wODk4YmUtYjAzNy00MjlmLWI1MDQtMWQ5MzRhMDQ4NDc0 LzEvNlN4QlhSZDFycG1UNlFDblUydEdxeFJLbXFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIMAwDBAVZHaAD BAFZHbgDBAFZHfQDBAFZHfgDBACwOWEDBAC5QPIwDAMEAdW1SgMEANW1TAMEAdW1 UDAMAwQC1bVUAwQA1bVYMA0GCSqGSIb3DQEBCwUAA4IBAQBaWcnMDtgWQ8rq16m7 R8HMF4Yz2qNTQZXxc+B2AREQF2okfmneMlI4Xv5tJvh919DSBD+BG4J9IwlnHm9p HyZf/56KXHB4OW4bdSTFmQ0Zx1gAN/66qUlexCKxfYx1Hr9KFeIyyHsXEoiLdYxR 2jWHMnbuGB07+1pVeXapzWPMXd+fgzBmE60sQ5jM3EoX4I/qGqXeCrjuvaUybZTG p6St8oHmdy3bAnmtCtC4TQCnRwisoTPZn5Segmzf7siqFNy6uhF5jANBU//BYbwV 0EWXGDckraCUugMnpd5GO3meeNIDMokC7l3JgIOWWJ4rrzbLX5w4cuCz4+hfIJxV xgZe -----END CERTIFICATE-----Generated at Sat Jan 3 06:28:21 2026 by rpki-client