This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/eOukcSE4vv2_C-0yT3bFz9tAp8Q.roa File: eOukcSE4vv2_C-0yT3bFz9tAp8Q.roa (raw, json) Hash identifier: ni8P4L+TMFDjolGG4Odq13TtGL18OXau4ZR/dJyb4Yk= Subject key identifier: 78:EB:A4:71:21:38:BE:FD:BF:0B:ED:32:4F:76:C5:CF:DB:40:A7:C4 Certificate issuer: /CN=dfd8641e328aa5d19c960d4891cf8677ce1289e7 Certificate serial: 019BC6FF00C81145B794796FF453A21B59C9 Authority key identifier: DF:D8:64:1E:32:8A:A5:D1:9C:96:0D:48:91:CF:86:77:CE:12:89:E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39hkHjKKpdGclg1Ikc-Gd84Siec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/eOukcSE4vv2_C-0yT3bFz9tAp8Q.roa Signing time: Fri 16 Jan 2026 13:29:19 +0000 ROA not before: Fri 16 Jan 2026 13:29:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60042 IP address blocks: 176.118.208.0/22 maxlen: 24 176.118.209.0/24 maxlen: 24 176.118.213.0/24 maxlen: 24 176.118.214.0/23 maxlen: 23 176.118.216.0/22 maxlen: 22 176.118.220.0/22 maxlen: 22 176.118.222.0/24 maxlen: 24 185.42.228.0/22 maxlen: 24 185.42.228.0/23 maxlen: 23 185.42.229.0/24 maxlen: 24 185.42.230.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.crl rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.mft rsync://rpki.ripe.net/repository/DEFAULT/39hkHjKKpdGclg1Ikc-Gd84Siec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c6:ff:00:c8:11:45:b7:94:79:6f:f4:53:a2:1b:59:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfd8641e328aa5d19c960d4891cf8677ce1289e7 Validity Not Before: Jan 16 13:29:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=78eba4712138befdbf0bed324f76c5cfdb40a7c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7d:02:fb:5d:72:81:38:a0:af:44:81:2f:3d: 0a:d9:a1:7a:55:55:8a:4c:63:f9:2f:7f:c5:32:67: bc:87:58:ac:dc:10:de:17:81:de:7c:fd:03:5c:a4: ec:00:92:cc:7e:6e:fa:15:5a:17:ef:44:b2:29:c0: b2:7b:e2:bd:4a:3a:d8:91:4d:a8:50:88:f5:c6:7b: c4:f6:f6:ad:6d:14:3c:20:e1:a0:b8:6d:31:f2:e5: bd:85:55:30:51:9e:3b:10:fe:11:1d:59:fb:93:8f: 9c:e6:dc:fe:40:38:22:45:35:23:51:8f:da:e2:20: ad:cf:13:f9:2b:22:94:56:0f:7b:87:f8:71:0a:d7: 7c:69:a9:54:ad:25:cc:7d:d6:fc:08:a2:d0:3b:81: b1:f5:ab:e2:ee:83:84:6a:19:08:6d:89:93:24:1b: db:d4:e2:f5:d8:a9:4a:09:99:3c:8e:2f:fa:5f:b7: 9d:f0:98:2e:22:ef:21:2f:aa:25:89:af:09:79:6c: 4d:34:8e:6e:2e:d5:47:ac:ab:d3:f3:b3:8e:32:17: 7b:ee:40:9f:13:5b:fb:90:46:fa:89:98:8b:4a:96: 37:a6:af:e1:2b:31:6c:2f:e8:88:98:f4:ff:96:13: 60:04:b5:08:10:be:6f:e7:b3:0b:3e:28:12:b0:d8: df:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:EB:A4:71:21:38:BE:FD:BF:0B:ED:32:4F:76:C5:CF:DB:40:A7:C4 X509v3 Authority Key Identifier: keyid:DF:D8:64:1E:32:8A:A5:D1:9C:96:0D:48:91:CF:86:77:CE:12:89:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39hkHjKKpdGclg1Ikc-Gd84Siec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/eOukcSE4vv2_C-0yT3bFz9tAp8Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1e3eb4-5dcf-47d9-bc46-e3fc53791490/1/39hkHjKKpdGclg1Ikc-Gd84Siec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.118.208.0/22 176.118.213.0-176.118.223.255 185.42.228.0/22 Signature Algorithm: sha256WithRSAEncryption 03:86:21:7f:ff:d9:4c:4d:c9:0d:18:ad:7a:c9:56:ff:86:fd: 7d:29:1b:56:a7:0a:31:81:e8:3f:07:64:63:7c:45:74:37:a8: d3:6f:94:9e:e9:71:db:31:b0:e9:36:4d:18:d0:2d:4b:2b:f3: 1e:8b:54:1a:8e:2d:36:d5:31:a7:29:ff:32:2b:2c:a2:20:54: 76:98:b2:16:39:d5:92:e0:ef:c1:2d:44:fd:6f:52:59:6c:80: 20:4a:d9:81:88:3f:91:c8:53:42:61:79:c6:9c:cd:11:d6:3e: 42:c8:13:d7:0f:83:c2:f4:e8:42:66:5c:00:d1:42:7e:27:eb: 1d:f2:09:78:e7:c6:20:be:e5:e7:7e:76:26:0c:2e:81:57:98: d6:f4:1f:52:f6:f2:7d:ce:4d:0f:6f:3e:78:a9:f8:5e:99:14: 01:44:b7:be:74:2d:5a:ce:52:a7:4f:ff:df:90:2d:ed:67:03: f4:a4:8c:76:66:06:71:6b:22:0e:61:ac:39:aa:04:19:63:08: ce:3a:cc:00:0b:79:3f:cf:c8:fb:b8:32:25:f0:82:51:14:67: fc:52:5c:1a:1b:1f:0b:a8:a7:9a:69:1f:39:d7:4c:14:bb:02: 00:51:92:5d:18:e3:b9:4b:ae:84:0d:20:76:2b:46:72:95:1d: 57:4d:e6:82 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZvG/wDIEUW3lHlv9FOiG1nJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmZDg2NDFlMzI4YWE1ZDE5Yzk2MGQ0ODkxY2Y4Njc3Y2Ux Mjg5ZTcwHhcNMjYwMTE2MTMyOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OGViYTQ3MTIxMzhiZWZkYmYwYmVkMzI0Zjc2YzVjZmRiNDBhN2M0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzH0C+11ygTigr0SBLz0K2aF6VVWK TGP5L3/FMme8h1is3BDeF4HefP0DXKTsAJLMfm76FVoX70SyKcCye+K9SjrYkU2o UIj1xnvE9vatbRQ8IOGguG0x8uW9hVUwUZ47EP4RHVn7k4+c5tz+QDgiRTUjUY/a 4iCtzxP5KyKUVg97h/hxCtd8aalUrSXMfdb8CKLQO4Gx9avi7oOEahkIbYmTJBvb 1OL12KlKCZk8ji/6X7ed8JguIu8hL6olia8JeWxNNI5uLtVHrKvT87OOMhd77kCf E1v7kEb6iZiLSpY3pq/hKzFsL+iImPT/lhNgBLUIEL5v57MLPigSsNjfJwIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFHjrpHEhOL79vwvtMk92xc/bQKfEMB8GA1UdIwQY MBaAFN/YZB4yiqXRnJYNSJHPhnfOEonnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzloa0hqS0twZEdjbGcxSWtjLUdkODRTaWVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8xZTNlYjQtNWRjZi00N2Q5LWJjNDYt ZTNmYzUzNzkxNDkwLzEvZU91a2NTRTR2djJfQy0weVQzYkZ6OXRBcDhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi8xZTNlYjQtNWRjZi00N2Q5LWJjNDYtZTNmYzUzNzkxNDkw LzEvMzloa0hqS0twZEdjbGcxSWtjLUdkODRTaWVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQCsHbQMAwD BACwdtUDBAWwdsADBAK5KuQwDQYJKoZIhvcNAQELBQADggEBAAOGIX//2UxNyQ0Y rXrJVv+G/X0pG1anCjGB6D8HZGN8RXQ3qNNvlJ7pcdsxsOk2TRjQLUsr8x6LVBqO LTbVMacp/zIrLKIgVHaYshY51ZLg78EtRP1vUllsgCBK2YGIP5HIU0JhecaczRHW PkLIE9cPg8L06EJmXADRQn4n6x3yCXjnxiC+5ed+diYMLoFXmNb0H1L28n3OTQ9v Pnip+F6ZFAFEt750LVrOUqdP/9+QLe1nA/SkjHZmBnFrIg5hrDmqBBljCM46zAAL eT/PyPu4MiXwglEUZ/xSXBobHwuop5ppHznXTBS7AgBRkl0Y47lLroQNIHYrRnKV HVdN5oI= -----END CERTIFICATE-----Generated at Mon Jan 26 05:49:44 2026 by rpki-client