This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/Eb64F3v1oYAj-E_RQC6TCD6A0Qo.roa File: Eb64F3v1oYAj-E_RQC6TCD6A0Qo.roa (raw, json) Hash identifier: 5S7unqujHWRwDHCe4gkQrhEC290D97kkFboUxzuHNTk= Subject key identifier: 11:BE:B8:17:7B:F5:A1:80:23:F8:4F:D1:40:2E:93:08:3E:80:D1:0A Certificate issuer: /CN=1c390bff65dcedca813d7a10d7ec328c2f6eac34 Certificate serial: 019B7EA71EF3A88EF3DDABF2AD8A90B0238C Authority key identifier: 1C:39:0B:FF:65:DC:ED:CA:81:3D:7A:10:D7:EC:32:8C:2F:6E:AC:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/Eb64F3v1oYAj-E_RQC6TCD6A0Qo.roa Signing time: Fri 02 Jan 2026 12:20:40 +0000 ROA not before: Fri 02 Jan 2026 12:20:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201612 IP address blocks: 193.46.128.0/24 maxlen: 24 193.46.129.0/24 maxlen: 24 193.46.130.0/24 maxlen: 24 193.46.131.0/24 maxlen: 24 193.46.132.0/24 maxlen: 24 193.46.133.0/24 maxlen: 24 193.46.134.0/24 maxlen: 24 193.46.135.0/24 maxlen: 24 194.0.24.0/24 maxlen: 24 194.0.25.0/24 maxlen: 24 194.0.26.0/24 maxlen: 24 2001:678:20::/48 maxlen: 48 2001:678:24::/48 maxlen: 48 2001:67c:1bc::/48 maxlen: 48 2a02:850:ffe0::/48 maxlen: 48 2a02:850:ffe1::/48 maxlen: 48 2a02:850:ffe2::/48 maxlen: 48 2a02:850:ffe3::/48 maxlen: 48 2a02:850:ffe4::/48 maxlen: 48 2a02:850:ffe5::/48 maxlen: 48 2a02:850:ffe6::/48 maxlen: 48 2a02:850:ffe7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 21:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:1e:f3:a8:8e:f3:dd:ab:f2:ad:8a:90:b0:23:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c390bff65dcedca813d7a10d7ec328c2f6eac34 Validity Not Before: Jan 2 12:20:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=11beb8177bf5a18023f84fd1402e93083e80d10a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:5e:5c:3c:5e:77:dc:96:e5:bf:3f:9e:fc:b9: cf:16:98:51:12:6f:ac:65:e2:a9:8f:6e:96:e2:78: 80:fd:e8:8c:1e:cf:73:83:f9:71:c5:0c:7e:59:9f: 7c:13:c0:42:e4:5c:71:6a:b1:9e:63:bc:95:02:f1: 3f:8a:34:e6:eb:e5:60:a5:86:7f:19:f0:40:e5:50: 31:b1:64:a9:96:4d:a0:2d:8d:fc:be:fc:e8:56:69: 4a:d4:ec:ba:66:a7:13:8a:02:f6:86:99:27:70:10: 51:aa:04:a7:a0:f0:b9:c0:fd:70:0b:8e:bb:eb:70: ed:94:81:ae:e4:12:ab:cf:75:db:de:db:73:29:56: 78:63:22:88:da:0e:a6:e2:6f:2f:15:c1:51:49:e0: c5:b2:d2:65:1c:36:40:8f:49:1d:4c:0a:90:d0:15: ad:88:54:57:34:f8:7f:c4:7f:f1:f3:00:cb:fe:e2: a3:7d:15:3a:e1:d9:7a:c4:34:2b:26:07:a8:25:34: 9f:36:d1:5b:bd:db:01:99:47:61:7c:af:d5:a8:50: 31:5e:2b:da:78:66:63:0d:b0:66:8d:dd:0d:7a:6f: 42:5c:1e:05:76:75:f3:95:aa:a4:77:3d:07:e5:bf: b4:0a:53:09:7a:f9:43:f1:b9:87:77:5f:3c:4c:64: 38:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:BE:B8:17:7B:F5:A1:80:23:F8:4F:D1:40:2E:93:08:3E:80:D1:0A X509v3 Authority Key Identifier: keyid:1C:39:0B:FF:65:DC:ED:CA:81:3D:7A:10:D7:EC:32:8C:2F:6E:AC:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/Eb64F3v1oYAj-E_RQC6TCD6A0Qo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.46.128.0/21 194.0.24.0-194.0.26.255 IPv6: 2001:678:20::/48 2001:678:24::/48 2001:67c:1bc::/48 2a02:850:ffe0::/45 Signature Algorithm: sha256WithRSAEncryption 74:00:2a:4c:ea:66:aa:a9:23:d0:28:0e:dd:1a:3d:ee:ba:21: ed:d3:4e:ff:2f:45:a3:52:47:a3:01:66:b7:cd:01:9b:bb:20: c9:b7:fd:17:26:4e:8c:6a:3a:83:36:c6:6f:72:b4:2d:c8:f8: ce:f4:4e:e0:15:75:7d:99:f2:97:8d:98:6d:61:20:91:91:ac: ae:b8:55:12:a2:22:d1:82:62:59:ec:7b:72:67:42:26:74:c5: 94:e8:09:91:2d:0b:5b:6c:aa:2a:8f:75:84:85:df:65:82:97: 0e:1c:5f:38:08:ce:1c:63:b2:b2:30:b2:da:57:82:16:1a:d2: 90:58:ac:8d:0e:ce:4b:d6:ae:30:20:1c:8d:5b:fd:d4:18:02: 1c:18:3c:c0:62:1e:84:49:22:c1:cc:90:58:4e:1b:00:9a:c7: ca:4b:c1:37:4c:bb:ed:01:07:08:3a:bc:01:8a:c2:6a:bc:09: ba:68:90:12:1c:c2:ee:10:39:31:b3:9f:5a:b6:1a:7f:4b:b1: 84:47:15:a5:f2:32:a1:27:4b:17:d3:56:05:8f:00:64:4f:b6: e2:dc:99:39:6f:8f:b3:a8:35:6b:37:2f:2e:07:8f:8c:da:fd: 12:de:60:b4:e1:24:81:aa:77:ef:cd:c0:97:8f:0b:48:4d:03: e6:ef:12:71 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgISAZt+px7zqI7z3avyrYqQsCOMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjMzkwYmZmNjVkY2VkY2E4MTNkN2ExMGQ3ZWMzMjhjMmY2 ZWFjMzQwHhcNMjYwMTAyMTIyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMWJlYjgxNzdiZjVhMTgwMjNmODRmZDE0MDJlOTMwODNlODBkMTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0V5cPF533Jblvz+e/LnPFphREm+s ZeKpj26W4niA/eiMHs9zg/lxxQx+WZ98E8BC5FxxarGeY7yVAvE/ijTm6+VgpYZ/ GfBA5VAxsWSplk2gLY38vvzoVmlK1Oy6ZqcTigL2hpkncBBRqgSnoPC5wP1wC467 63DtlIGu5BKrz3Xb3ttzKVZ4YyKI2g6m4m8vFcFRSeDFstJlHDZAj0kdTAqQ0BWt iFRXNPh/xH/x8wDL/uKjfRU64dl6xDQrJgeoJTSfNtFbvdsBmUdhfK/VqFAxXiva eGZjDbBmjd0Nem9CXB4FdnXzlaqkdz0H5b+0ClMJevlD8bmHd188TGQ4aQIDAQAB o4ICQzCCAj8wHQYDVR0OBBYEFBG+uBd79aGAI/hP0UAukwg+gNEKMB8GA1UdIwQY MBaAFBw5C/9l3O3KgT16ENfsMowvbqw0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSERrTF8yWGM3Y3FCUFhvUTEtd3lqQzl1ckRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8zNDgxMDQtOGE0MS00OTQ5LTg1NTIt YTk3NjVlZGM3OTVjLzEvRWI2NEYzdjFvWUFqLUVfUlFDNlRDRDZBMFFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi8zNDgxMDQtOGE0MS00OTQ5LTg1NTItYTk3NjVlZGM3OTVj LzEvSERrTF8yWGM3Y3FCUFhvUTEtd3lqQzl1ckRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDAaBAIAATAUAwQDwS6AMAwD BAPCABgDBADCABowKgQCAAIwJAMHACABBngAIAMHACABBngAJAMHACABBnwBvAMH AyoCCFD/4DANBgkqhkiG9w0BAQsFAAOCAQEAdAAqTOpmqqkj0CgO3Ro97roh7dNO /y9Fo1JHowFmt80Bm7sgybf9FyZOjGo6gzbGb3K0Lcj4zvRO4BV1fZnyl42YbWEg kZGsrrhVEqIi0YJiWex7cmdCJnTFlOgJkS0LW2yqKo91hIXfZYKXDhxfOAjOHGOy sjCy2leCFhrSkFisjQ7OS9auMCAcjVv91BgCHBg8wGIehEkiwcyQWE4bAJrHykvB N0y77QEHCDq8AYrCarwJumiQEhzC7hA5MbOfWrYaf0uxhEcVpfIyoSdLF9NWBY8A ZE+24tyZOW+Ps6g1azcvLgePjNr9Et5gtOEkgap3783Al48LSE0D5u8ScQ== -----END CERTIFICATE-----Generated at Tue Jan 27 07:12:43 2026 by rpki-client