This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/FAEbHhLRRaDRbR_4ejpb1QHrGsk.roa File: FAEbHhLRRaDRbR_4ejpb1QHrGsk.roa (raw, json) Hash identifier: EK6RNwivTo0ew9QPDVu62GQI3mFybABhS1y9MjMOYEw= Subject key identifier: 14:01:1B:1E:12:D1:45:A0:D1:6D:1F:F8:7A:3A:5B:D5:01:EB:1A:C9 Certificate issuer: /CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac Certificate serial: 019B76EB9899595DC4FF343AE8BEE5386F44 Authority key identifier: B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/FAEbHhLRRaDRbR_4ejpb1QHrGsk.roa Signing time: Thu 01 Jan 2026 00:18:29 +0000 ROA not before: Thu 01 Jan 2026 00:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207168 IP address blocks: 178.236.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:98:99:59:5d:c4:ff:34:3a:e8:be:e5:38:6f:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac Validity Not Before: Jan 1 00:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=14011b1e12d145a0d16d1ff87a3a5bd501eb1ac9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3b:0a:db:da:03:46:1e:13:ec:10:c8:a7:94: 1b:08:ff:46:53:1a:4c:3d:5e:57:d7:58:6b:2c:d4: 61:0a:05:64:1d:40:03:9f:de:2c:3f:8d:35:2c:d3: b2:af:3d:05:2f:48:12:32:ab:54:7a:93:44:d3:24: 2f:3e:3f:af:d2:43:90:0a:a6:1a:e9:30:a2:b2:bf: 64:7d:b3:61:86:d2:44:a7:ec:19:4f:55:19:7f:87: 69:4f:8c:0f:06:5e:bb:a8:0b:0b:85:8a:0e:5e:e9: 5b:10:be:2a:b5:be:96:60:b6:07:bb:fd:a4:96:a0: e8:c7:ac:e6:77:e5:61:56:ae:f9:51:48:45:54:19: f3:f9:32:f4:c2:e9:60:7d:83:08:24:ad:88:f7:91: 26:b8:4c:a1:33:25:a5:bf:0c:7a:10:a9:4f:70:11: 2b:61:12:7f:16:50:c6:ea:46:69:c6:3d:78:c5:3c: 47:5b:e5:e1:54:cb:3e:61:d6:5e:b9:e1:46:c5:50: e9:fc:5c:1e:9d:3b:43:85:33:20:3f:3a:66:73:2f: 16:40:06:c4:ca:ac:9c:6e:d0:e8:6d:6c:5c:4a:22: d7:76:2d:d4:81:6b:77:a4:b2:81:c5:68:f1:08:1d: b1:e8:fe:88:95:49:99:8b:1e:77:fa:9b:03:a9:55: 04:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:01:1B:1E:12:D1:45:A0:D1:6D:1F:F8:7A:3A:5B:D5:01:EB:1A:C9 X509v3 Authority Key Identifier: keyid:B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/FAEbHhLRRaDRbR_4ejpb1QHrGsk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.236.139.0/24 Signature Algorithm: sha256WithRSAEncryption 80:50:64:16:9d:78:b0:ae:ac:96:82:47:84:8b:5a:0a:93:5f: da:ba:2a:8b:02:53:f5:d0:1a:08:ac:c6:98:5c:d9:05:42:a5: 4f:ea:3a:8e:c4:25:c6:f2:6b:23:08:62:58:1f:84:2f:4c:3b: db:d5:59:94:00:6d:9d:4c:0d:53:e4:dc:67:0b:18:c0:76:73: 72:b2:16:b8:0c:31:ea:55:84:d7:96:27:a7:a3:f1:59:36:7f: f3:20:e4:9c:6e:63:55:46:3e:54:35:70:4d:31:3e:28:5e:5b: 81:06:4f:3b:84:b7:e4:64:05:58:e1:30:5e:2b:d1:a4:5d:80: e8:96:5b:45:e8:38:d8:50:c2:ba:24:49:2b:52:9b:3c:60:0c: fe:02:0d:10:f3:71:96:59:12:b5:c3:5c:a2:94:a7:17:a0:98: 33:79:13:96:62:70:6f:bb:05:1e:66:f8:ae:2b:89:0b:6b:c3: 82:1b:92:4c:9c:52:11:59:fa:7b:76:8f:bd:dd:64:99:a2:4b: fa:48:88:b1:06:09:80:70:a5:b4:fb:a6:bb:c0:cf:94:4a:95: 83:23:cf:43:71:4f:ae:4b:ed:ba:5f:7f:f7:cb:6e:c3:ac:66: 21:86:a6:5c:ce:74:92:e3:96:14:f2:a4:83:c9:93:0b:6d:72: 42:e3:eb:12 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt265iZWV3E/zQ66L7lOG9EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3MjU4OGMwMGVlZjcxNTgwOWViNWZkZDZkNjcxN2NjMjhj MGRmYWMwHhcNMjYwMTAxMDAxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNDAxMWIxZTEyZDE0NWEwZDE2ZDFmZjg3YTNhNWJkNTAxZWIxYWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTsK29oDRh4T7BDIp5QbCP9GUxpM PV5X11hrLNRhCgVkHUADn94sP401LNOyrz0FL0gSMqtUepNE0yQvPj+v0kOQCqYa 6TCisr9kfbNhhtJEp+wZT1UZf4dpT4wPBl67qAsLhYoOXulbEL4qtb6WYLYHu/2k lqDox6zmd+VhVq75UUhFVBnz+TL0wulgfYMIJK2I95EmuEyhMyWlvwx6EKlPcBEr YRJ/FlDG6kZpxj14xTxHW+XhVMs+YdZeueFGxVDp/FwenTtDhTMgPzpmcy8WQAbE yqycbtDobWxcSiLXdi3UgWt3pLKBxWjxCB2x6P6IlUmZix53+psDqVUEUwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBQBGx4S0UWg0W0f+Ho6W9UB6xrJMB8GA1UdIwQY MBaAFLcliMAO73FYCetf3W1nF8wowN+sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUt N2E0MTI1NGVhYWNhLzEvRkFFYkhoTFJSYURSYlJfNGVqcGIxUUhyR3NrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUtN2E0MTI1NGVhYWNh LzEvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsuyLMA0G CSqGSIb3DQEBCwUAA4IBAQCAUGQWnXiwrqyWgkeEi1oKk1/auiqLAlP10BoIrMaY XNkFQqVP6jqOxCXG8msjCGJYH4QvTDvb1VmUAG2dTA1T5NxnCxjAdnNysha4DDHq VYTXlieno/FZNn/zIOScbmNVRj5UNXBNMT4oXluBBk87hLfkZAVY4TBeK9GkXYDo lltF6DjYUMK6JEkrUps8YAz+Ag0Q83GWWRK1w1yilKcXoJgzeROWYnBvuwUeZviu K4kLa8OCG5JMnFIRWfp7do+93WSZokv6SIixBgmAcKW0+6a7wM+USpWDI89DcU+u S+26X3/3y27DrGYhhqZcznSS45YU8qSDyZMLbXJC4+sS -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:43 2026 by rpki-client