This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/_-6JSjmUimh08CjqKCxWw4-rHNE.roa File: _-6JSjmUimh08CjqKCxWw4-rHNE.roa (raw, json) Hash identifier: +nCDi9UjpJd+hQvMDC1IUEgJRdQMfkefNt0DA5Y2kVs= Subject key identifier: FF:EE:89:4A:39:94:8A:68:74:F0:28:EA:28:2C:56:C3:8F:AB:1C:D1 Certificate issuer: /CN=e92c415d1775ae9993e900a7536b46ab144a9aa2 Certificate serial: 019B7F158466F215E712DC0B9709CEC7DA96 Authority key identifier: E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/_-6JSjmUimh08CjqKCxWw4-rHNE.roa Signing time: Fri 02 Jan 2026 14:21:15 +0000 ROA not before: Fri 02 Jan 2026 14:21:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60807 IP address blocks: 89.29.206.0/23 maxlen: 23 89.29.225.0/24 maxlen: 24 185.250.196.0/24 maxlen: 24 213.181.89.0/24 maxlen: 24 213.181.90.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.mft rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:84:66:f2:15:e7:12:dc:0b:97:09:ce:c7:da:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e92c415d1775ae9993e900a7536b46ab144a9aa2 Validity Not Before: Jan 2 14:21:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ffee894a39948a6874f028ea282c56c38fab1cd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a4:c3:95:1f:a0:9e:ec:4c:c6:2d:37:3b:b5: 8b:e7:c2:7e:63:4a:8b:50:42:bf:d2:94:75:61:44: 54:24:cd:d2:50:6b:f8:71:fa:1c:79:eb:92:aa:23: 04:23:d8:bd:ac:01:b3:69:fc:b2:77:09:1e:ec:c2: 2a:8f:c4:e3:29:43:6c:86:cf:60:11:64:64:67:4f: 41:0e:44:10:89:8e:d5:84:fd:db:43:28:0a:e2:4e: c9:87:73:51:b0:cb:15:95:4f:e6:cf:a0:d1:c8:ec: a3:47:ed:bd:9b:d8:ee:3e:fc:a3:81:2c:ab:41:42: 62:aa:68:b2:6a:a9:bd:47:ca:bc:d0:93:61:a7:96: d7:83:34:e7:c8:a7:1e:6d:0b:33:25:0d:b4:cf:f2: 78:ec:7d:4c:5a:1d:10:27:b2:35:f8:b2:ac:14:41: b1:d5:ae:80:93:3a:06:3c:2c:40:c1:ab:32:82:5c: 87:8a:a6:c3:9f:e6:64:7c:39:67:f5:90:ed:0a:87: 24:a1:9c:fa:24:22:67:4d:03:2e:41:3d:24:ff:2b: b6:05:02:94:5f:fa:35:77:93:b3:d3:b9:ca:79:bd: 8a:41:81:9f:cd:af:60:51:11:11:4b:99:67:7a:01: ed:c1:8a:37:be:cf:60:3c:3f:27:36:98:9e:20:07: 5a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:EE:89:4A:39:94:8A:68:74:F0:28:EA:28:2C:56:C3:8F:AB:1C:D1 X509v3 Authority Key Identifier: keyid:E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/_-6JSjmUimh08CjqKCxWw4-rHNE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.29.206.0/23 89.29.225.0/24 185.250.196.0/24 213.181.89.0-213.181.91.255 Signature Algorithm: sha256WithRSAEncryption 89:71:5f:63:02:57:76:71:32:ef:02:b6:11:a5:1c:75:57:69: 9c:83:d3:44:86:b1:13:aa:6a:e6:e6:61:12:9a:e3:db:9a:5f: 70:77:e8:a9:84:be:ad:e9:17:15:dc:35:94:80:f4:ac:a9:f1: 90:60:2e:9f:51:e2:41:3e:95:00:6e:d6:a3:cb:68:55:0b:94: 75:60:1b:7b:d3:80:bc:c5:01:ba:69:e4:14:1b:d4:87:1c:98: 5f:63:19:38:f6:7b:b5:bf:ad:61:5d:4e:86:fe:b3:46:5b:27: b7:43:da:17:cb:a4:c2:40:2a:4a:3f:1c:7e:6f:ea:2f:48:70: 90:70:be:67:32:ac:32:1c:9d:0f:d7:59:10:47:a5:73:74:dd: 3a:3b:70:11:10:d6:e3:51:09:e5:37:10:6d:cd:04:bf:38:c9: ff:9a:92:5c:2f:36:32:e4:74:88:07:e0:e5:0d:cd:9f:a2:03: 73:b9:6f:fc:27:73:7c:8c:f1:66:ab:39:c2:94:81:df:4d:c5: 3e:90:ce:d7:c8:e2:27:4a:5c:f8:6c:ea:4d:81:29:b4:a0:cb: f6:0e:68:8d:00:4e:92:8a:a2:78:6a:a7:42:74:e8:3f:61:4c: 10:37:32:72:60:a8:a1:c8:6d:70:47:a0:98:a8:ea:52:68:83: 8c:ea:b8:58 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt/FYRm8hXnEtwLlwnOx9qWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5MmM0MTVkMTc3NWFlOTk5M2U5MDBhNzUzNmI0NmFiMTQ0 YTlhYTIwHhcNMjYwMTAyMTQyMTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZmVlODk0YTM5OTQ4YTY4NzRmMDI4ZWEyODJjNTZjMzhmYWIxY2QxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqTDlR+gnuxMxi03O7WL58J+Y0qL UEK/0pR1YURUJM3SUGv4cfoceeuSqiMEI9i9rAGzafyydwke7MIqj8TjKUNshs9g EWRkZ09BDkQQiY7VhP3bQygK4k7Jh3NRsMsVlU/mz6DRyOyjR+29m9juPvyjgSyr QUJiqmiyaqm9R8q80JNhp5bXgzTnyKcebQszJQ20z/J47H1MWh0QJ7I1+LKsFEGx 1a6AkzoGPCxAwasyglyHiqbDn+ZkfDln9ZDtCockoZz6JCJnTQMuQT0k/yu2BQKU X/o1d5Oz07nKeb2KQYGfza9gURERS5lnegHtwYo3vs9gPD8nNpieIAdaVQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFP/uiUo5lIpodPAo6igsVsOPqxzRMB8GA1UdIwQY MBaAFOksQV0Xda6Zk+kAp1NrRqsUSpqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlN4QlhSZDFycG1UNlFDblUydEdxeFJLbXFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wODk4YmUtYjAzNy00MjlmLWI1MDQt MWQ5MzRhMDQ4NDc0LzEvXy02SlNqbVVpbWgwOENqcUtDeFd3NC1ySE5FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8wODk4YmUtYjAzNy00MjlmLWI1MDQtMWQ5MzRhMDQ4NDc0 LzEvNlN4QlhSZDFycG1UNlFDblUydEdxeFJLbXFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQBWR3OAwQA WR3hAwQAufrEMAwDBADVtVkDBALVtVgwDQYJKoZIhvcNAQELBQADggEBAIlxX2MC V3ZxMu8CthGlHHVXaZyD00SGsROqaubmYRKa49uaX3B36KmEvq3pFxXcNZSA9Kyp 8ZBgLp9R4kE+lQBu1qPLaFULlHVgG3vTgLzFAbpp5BQb1IccmF9jGTj2e7W/rWFd Tob+s0ZbJ7dD2hfLpMJAKko/HH5v6i9IcJBwvmcyrDIcnQ/XWRBHpXN03To7cBEQ 1uNRCeU3EG3NBL84yf+aklwvNjLkdIgH4OUNzZ+iA3O5b/wnc3yM8WarOcKUgd9N xT6QztfI4idKXPhs6k2BKbSgy/YOaI0ATpKKonhqp0J06D9hTBA3MnJgqKHIbXBH oJio6lJog4zquFg= -----END CERTIFICATE-----Generated at Sat Jan 3 06:26:49 2026 by rpki-client