This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/ehALNgmvDMXOCz1qDVIzrXU9qPs.roa File: ehALNgmvDMXOCz1qDVIzrXU9qPs.roa (raw, json) Hash identifier: dn6QOi6y7D3WWFMRmemHXTmqvY1tGOW3y/+Az1xAbxM= Subject key identifier: 7A:10:0B:36:09:AF:0C:C5:CE:0B:3D:6A:0D:52:33:AD:75:3D:A8:FB Certificate issuer: /CN=819b97b20ccb4f696518e47c437259a8913e72ae Certificate serial: 019B7AC7C4E402B9C4043E0511150FCA2902 Authority key identifier: 81:9B:97:B2:0C:CB:4F:69:65:18:E4:7C:43:72:59:A8:91:3E:72:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZuXsgzLT2llGOR8Q3JZqJE-cq4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/ehALNgmvDMXOCz1qDVIzrXU9qPs.roa Signing time: Thu 01 Jan 2026 18:17:50 +0000 ROA not before: Thu 01 Jan 2026 18:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29423 IP address blocks: 185.88.147.0/24 maxlen: 24 2a02:ba8:a147::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.mft rsync://rpki.ripe.net/repository/DEFAULT/gZuXsgzLT2llGOR8Q3JZqJE-cq4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 03:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:c4:e4:02:b9:c4:04:3e:05:11:15:0f:ca:29:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=819b97b20ccb4f696518e47c437259a8913e72ae Validity Not Before: Jan 1 18:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a100b3609af0cc5ce0b3d6a0d5233ad753da8fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:aa:b1:13:fe:d8:36:03:c3:57:7f:1d:88:16: 82:05:4a:68:09:65:8e:07:16:d0:81:1e:44:2b:2f: 45:68:08:f5:51:af:2d:d3:ac:3a:e7:9d:6b:06:bc: a4:84:a4:51:ef:d8:39:39:3a:2f:44:ef:57:1c:59: 56:30:ff:46:b9:4e:59:91:bd:80:5e:5b:cb:0f:b0: 5d:f9:c0:53:e7:ce:e0:ff:3e:ec:f9:ec:28:89:9f: d7:95:97:bc:26:cb:b9:2e:76:32:6f:77:c4:27:c4: 4c:07:40:e9:fa:88:0a:88:d9:25:b5:24:60:67:4c: 54:31:c3:5d:98:99:f5:01:f8:48:0e:ff:2b:68:7f: 10:1f:f2:d7:a5:b6:f7:8a:23:bd:64:11:5c:4b:59: 76:27:d3:16:ae:8e:7b:03:f8:d3:ac:15:fa:2d:09: 6a:da:3e:11:00:39:b1:17:d0:6d:48:95:f3:55:c6: 8d:14:91:b4:ce:59:7d:25:b1:98:b2:c3:17:f5:a3: c7:fa:07:48:b8:15:0e:02:f2:d9:39:2f:35:1f:90: 82:7c:46:78:e0:db:f5:fb:2c:2a:a4:a5:9b:30:73: 79:8e:98:1a:fc:c2:e6:81:ce:99:f6:11:8b:2b:57: 0a:94:53:71:ee:b4:7d:4f:b6:c4:50:96:be:6d:ab: 03:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:10:0B:36:09:AF:0C:C5:CE:0B:3D:6A:0D:52:33:AD:75:3D:A8:FB X509v3 Authority Key Identifier: keyid:81:9B:97:B2:0C:CB:4F:69:65:18:E4:7C:43:72:59:A8:91:3E:72:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZuXsgzLT2llGOR8Q3JZqJE-cq4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/ehALNgmvDMXOCz1qDVIzrXU9qPs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/774f37-0e57-49e6-8865-a64ba4b8fa19/1/gZuXsgzLT2llGOR8Q3JZqJE-cq4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.88.147.0/24 IPv6: 2a02:ba8:a147::/48 Signature Algorithm: sha256WithRSAEncryption 6d:ea:b1:e3:44:7a:74:91:11:8e:43:e8:1f:af:d8:ee:4c:49: 00:29:b0:7a:af:c4:77:1f:2a:fd:e9:98:6b:05:10:72:11:47: cd:8c:3f:6d:33:ba:8b:f9:2b:a8:53:98:4e:e2:ca:fe:4d:9e: 4c:fc:a6:f4:3a:8b:46:d7:f9:f4:b1:df:47:3b:e3:28:7d:cd: f6:9a:cf:92:ea:17:a5:d3:bc:bd:28:cd:fa:ac:68:fd:8a:c9: 15:dd:a4:13:67:3a:97:d5:d9:12:44:97:37:da:95:14:d5:2a: f3:57:c0:f3:1f:0e:13:21:ce:89:ed:f8:ac:f5:cd:66:c5:02: 42:0d:f6:e7:18:e6:40:28:8a:f0:31:47:48:4b:3b:f4:9a:83: bd:e3:f0:b9:07:86:d0:ec:af:e1:40:8c:71:6b:ed:cb:7b:53: 3f:5c:3d:aa:c2:37:00:fd:23:38:64:34:90:c2:af:04:d0:ea: 9f:f2:27:33:94:aa:f3:cc:5c:4b:5e:3f:a3:82:e9:8a:ad:69: f5:71:3a:d8:59:73:61:b9:b9:0a:6a:6d:e2:bb:30:ad:5e:aa: 48:d7:b6:df:f7:40:10:82:8e:1a:77:3d:25:be:cd:4a:e7:8c: 47:70:87:23:37:7b:fe:50:84:95:e8:cf:7c:a3:c7:fc:e2:70: b2:14:00:6c -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt6x8TkArnEBD4FERUPyikCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxOWI5N2IyMGNjYjRmNjk2NTE4ZTQ3YzQzNzI1OWE4OTEz ZTcyYWUwHhcNMjYwMTAxMTgxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTEwMGIzNjA5YWYwY2M1Y2UwYjNkNmEwZDUyMzNhZDc1M2RhOGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6qxE/7YNgPDV38diBaCBUpoCWWO BxbQgR5EKy9FaAj1Ua8t06w6551rBrykhKRR79g5OTovRO9XHFlWMP9GuU5Zkb2A XlvLD7Bd+cBT587g/z7s+ewoiZ/XlZe8Jsu5LnYyb3fEJ8RMB0Dp+ogKiNkltSRg Z0xUMcNdmJn1AfhIDv8raH8QH/LXpbb3iiO9ZBFcS1l2J9MWro57A/jTrBX6LQlq 2j4RADmxF9BtSJXzVcaNFJG0zll9JbGYssMX9aPH+gdIuBUOAvLZOS81H5CCfEZ4 4Nv1+ywqpKWbMHN5jpga/MLmgc6Z9hGLK1cKlFNx7rR9T7bEUJa+basD5wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFHoQCzYJrwzFzgs9ag1SM611Paj7MB8GA1UdIwQY MBaAFIGbl7IMy09pZRjkfENyWaiRPnKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1p1WHNnekxUMmxsR09SOFEzSlpxSkUtY3E0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy83NzRmMzctMGU1Ny00OWU2LTg4NjUt YTY0YmE0YjhmYTE5LzEvZWhBTE5nbXZETVhPQ3oxcURWSXpyWFU5cVBzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy83NzRmMzctMGU1Ny00OWU2LTg4NjUtYTY0YmE0YjhmYTE5 LzEvZ1p1WHNnekxUMmxsR09SOFEzSlpxSkUtY3E0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuViTMA8E AgACMAkDBwAqAguooUcwDQYJKoZIhvcNAQELBQADggEBAG3qseNEenSREY5D6B+v 2O5MSQApsHqvxHcfKv3pmGsFEHIRR82MP20zuov5K6hTmE7iyv5Nnkz8pvQ6i0bX +fSx30c74yh9zfaaz5LqF6XTvL0ozfqsaP2KyRXdpBNnOpfV2RJElzfalRTVKvNX wPMfDhMhzont+Kz1zWbFAkIN9ucY5kAoivAxR0hLO/Sag73j8LkHhtDsr+FAjHFr 7ct7Uz9cParCNwD9IzhkNJDCrwTQ6p/yJzOUqvPMXEteP6OC6YqtafVxOthZc2G5 uQpqbeK7MK1eqkjXtt/3QBCCjhp3PSW+zUrnjEdwhyM3e/5QhJXoz3yjx/zicLIU AGw= -----END CERTIFICATE-----Generated at Mon Jan 26 13:11:05 2026 by rpki-client