This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/40EThboBSEVGFMmXd89FK4WaTNo.roa File: 40EThboBSEVGFMmXd89FK4WaTNo.roa (raw, json) Hash identifier: ohel7RKT+QSonvsuuV4gvqAOjnxAWjb8zzBfZRnvIeI= Subject key identifier: E3:41:13:85:BA:01:48:45:46:14:C9:97:77:CF:45:2B:85:9A:4C:DA Certificate issuer: /CN=73ff4b1cbeaf9dd75d3b5ef3ee9a75d5799f7280 Certificate serial: 019B7910446603C781A94504DFF519EB089A Authority key identifier: 73:FF:4B:1C:BE:AF:9D:D7:5D:3B:5E:F3:EE:9A:75:D5:79:9F:72:80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_9LHL6vndddO17z7pp11XmfcoA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/40EThboBSEVGFMmXd89FK4WaTNo.roa Signing time: Thu 01 Jan 2026 10:17:47 +0000 ROA not before: Thu 01 Jan 2026 10:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13030 IP address blocks: 185.242.62.0/23 maxlen: 23 2a09:a7c4::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.crl rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft rsync://rpki.ripe.net/repository/DEFAULT/c_9LHL6vndddO17z7pp11XmfcoA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:44:66:03:c7:81:a9:45:04:df:f5:19:eb:08:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73ff4b1cbeaf9dd75d3b5ef3ee9a75d5799f7280 Validity Not Before: Jan 1 10:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e3411385ba0148454614c99777cf452b859a4cda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3e:88:b9:71:dd:ee:39:6e:3c:95:b8:e4:b9: cc:b1:7a:8b:87:cc:90:9d:f8:d3:a8:9a:23:2a:0d: 0a:00:83:a0:da:db:05:15:ee:7b:7b:5a:60:c1:6a: 41:59:5e:f6:9c:e1:b9:c5:6a:e2:b1:89:77:5b:68: ea:d4:68:24:84:03:eb:dd:05:7f:41:b2:8a:be:8a: 27:5a:f3:c2:2f:fc:03:7b:c7:a8:0f:06:ed:07:6e: d9:e9:f2:67:b3:15:a8:64:a7:73:49:ba:4a:58:fa: 64:d5:64:06:9b:d3:73:6f:ae:f5:62:9b:ee:c4:88: 43:75:47:9a:ab:67:99:6c:15:1b:6c:e3:39:1f:08: 32:ca:13:db:02:76:46:db:10:f7:7c:73:af:fc:9d: 0a:c5:74:41:93:f8:71:0a:92:c5:fa:2c:24:c9:db: fd:82:45:36:31:53:b5:63:d0:19:ea:7c:8b:15:b7: c4:cf:c4:f6:aa:f6:70:ef:38:d3:5e:67:d4:4b:f7: 03:26:f0:28:6b:4d:ad:19:0d:74:98:bc:92:66:5e: 1e:fc:86:12:43:68:de:a6:63:f9:62:25:e8:29:a4: 06:2c:1d:e2:78:0c:80:ef:8c:d0:67:d1:3a:49:4b: ff:b6:2d:bc:0e:29:98:52:ae:cb:2a:29:e7:3d:06: 00:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:41:13:85:BA:01:48:45:46:14:C9:97:77:CF:45:2B:85:9A:4C:DA X509v3 Authority Key Identifier: keyid:73:FF:4B:1C:BE:AF:9D:D7:5D:3B:5E:F3:EE:9A:75:D5:79:9F:72:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_9LHL6vndddO17z7pp11XmfcoA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/40EThboBSEVGFMmXd89FK4WaTNo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.242.62.0/23 IPv6: 2a09:a7c4::/30 Signature Algorithm: sha256WithRSAEncryption 36:71:c9:69:ef:db:d1:86:31:5b:7f:88:99:b2:1e:76:20:ea: 96:50:25:2a:7a:19:4e:95:26:a0:4d:87:d9:16:01:1f:fe:93: c9:30:f0:87:74:d1:46:95:55:46:89:48:d7:00:97:7f:6e:ba: eb:5d:23:9e:ad:bf:f8:9e:7c:87:4e:17:3b:f5:96:9a:6e:be: 51:a1:f2:1e:46:24:e7:9b:c1:a9:3b:cf:52:9b:8f:e2:54:58: c3:ca:5d:cc:7a:39:51:89:86:a0:14:32:59:ac:f8:91:df:08: c3:78:c0:2f:b9:ce:48:0e:db:36:a4:14:65:40:10:54:e1:2b: 30:5f:bf:a6:95:15:cb:e0:8a:65:18:c9:7f:8b:05:e5:77:73: 78:aa:4a:1e:31:9b:88:ca:db:19:ad:40:38:bc:2d:0c:9c:01: 72:b5:cb:54:65:2c:eb:63:c8:47:3e:97:8e:a2:a1:20:5b:8d: 25:f0:a6:77:e8:f5:99:e2:52:5d:92:1b:60:d8:c7:36:0d:43: 60:cd:ad:81:c2:17:0f:29:14:59:58:47:55:da:a1:e9:e8:be: 53:cf:08:9d:88:4f:02:68:11:4e:b4:02:13:f4:4a:bd:04:53: 41:71:7b:32:31:f1:ee:99:76:39:f1:14:9a:17:70:87:cf:a4: ba:da:02:70 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5EERmA8eBqUUE3/UZ6wiaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczZmY0YjFjYmVhZjlkZDc1ZDNiNWVmM2VlOWE3NWQ1Nzk5 ZjcyODAwHhcNMjYwMTAxMTAxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzQxMTM4NWJhMDE0ODQ1NDYxNGM5OTc3N2NmNDUyYjg1OWE0Y2RhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsD6IuXHd7jluPJW45LnMsXqLh8yQ nfjTqJojKg0KAIOg2tsFFe57e1pgwWpBWV72nOG5xWrisYl3W2jq1GgkhAPr3QV/ QbKKvoonWvPCL/wDe8eoDwbtB27Z6fJnsxWoZKdzSbpKWPpk1WQGm9Nzb671Ypvu xIhDdUeaq2eZbBUbbOM5HwgyyhPbAnZG2xD3fHOv/J0KxXRBk/hxCpLF+iwkydv9 gkU2MVO1Y9AZ6nyLFbfEz8T2qvZw7zjTXmfUS/cDJvAoa02tGQ10mLySZl4e/IYS Q2jepmP5YiXoKaQGLB3ieAyA74zQZ9E6SUv/ti28DimYUq7LKinnPQYAjwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFONBE4W6AUhFRhTJl3fPRSuFmkzaMB8GA1UdIwQY MBaAFHP/Sxy+r53XXTte8+6addV5n3KAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY185TEhMNnZuZGRkTzE3ejdwcDExWG1mY29BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yNmY0NGEtYWU1My00NzI3LTkwNzUt NDM3YTM0NmIyMmY3LzEvNDBFVGhib0JTRVZHRk1tWGQ4OUZLNFdhVE5vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8yNmY0NGEtYWU1My00NzI3LTkwNzUtNDM3YTM0NmIyMmY3 LzEvY185TEhMNnZuZGRkTzE3ejdwcDExWG1mY29BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBufI+MA0E AgACMAcDBQIqCafEMA0GCSqGSIb3DQEBCwUAA4IBAQA2cclp79vRhjFbf4iZsh52 IOqWUCUqehlOlSagTYfZFgEf/pPJMPCHdNFGlVVGiUjXAJd/brrrXSOerb/4nnyH Thc79Zaabr5RofIeRiTnm8GpO89Sm4/iVFjDyl3MejlRiYagFDJZrPiR3wjDeMAv uc5IDts2pBRlQBBU4SswX7+mlRXL4IplGMl/iwXld3N4qkoeMZuIytsZrUA4vC0M nAFytctUZSzrY8hHPpeOoqEgW40l8KZ36PWZ4lJdkhtg2Mc2DUNgza2BwhcPKRRZ WEdV2qHp6L5TzwidiE8CaBFOtAIT9Eq9BFNBcXsyMfHumXY58RSaF3CHz6S62gJw -----END CERTIFICATE-----Generated at Sun Jan 25 23:32:41 2026 by rpki-client