This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/eEv6Dzp18N3mnwft_tpFzD3jA9s.roa File: eEv6Dzp18N3mnwft_tpFzD3jA9s.roa (raw, json) Hash identifier: Bu5vlAgH4Sy8ybAbPwvMy42MlBplqri0XGE/ouWApbI= Subject key identifier: 78:4B:FA:0F:3A:75:F0:DD:E6:9F:07:ED:FE:DA:45:CC:3D:E3:03:DB Certificate issuer: /CN=aeb66ec5e8f2405f6f8d486e73fb82b8de0dee0f Certificate serial: 019B76EB212F2ADA7EECD5FD8E9C25D1DF94 Authority key identifier: AE:B6:6E:C5:E8:F2:40:5F:6F:8D:48:6E:73:FB:82:B8:DE:0D:EE:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/eEv6Dzp18N3mnwft_tpFzD3jA9s.roa Signing time: Thu 01 Jan 2026 00:17:59 +0000 ROA not before: Thu 01 Jan 2026 00:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34587 IP address blocks: 5.226.176.0/21 maxlen: 24 81.94.208.0/20 maxlen: 24 81.94.213.0/24 maxlen: 24 81.94.214.0/24 maxlen: 24 178.237.160.0/23 maxlen: 24 178.237.163.0/24 maxlen: 24 178.237.164.0/24 maxlen: 24 178.237.165.0/24 maxlen: 24 178.237.170.0/24 maxlen: 24 178.237.172.0/24 maxlen: 24 178.237.173.0/24 maxlen: 24 178.237.174.0/24 maxlen: 24 178.237.175.0/24 maxlen: 24 2a03:a860:10::/44 maxlen: 48 2a03:a860:a00::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.crl rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.mft rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:21:2f:2a:da:7e:ec:d5:fd:8e:9c:25:d1:df:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aeb66ec5e8f2405f6f8d486e73fb82b8de0dee0f Validity Not Before: Jan 1 00:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=784bfa0f3a75f0dde69f07edfeda45cc3de303db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:dc:ae:3b:5f:ee:3c:71:80:4e:29:1d:e3:5e: b0:8f:9c:3c:c2:16:23:a9:aa:cd:74:ef:68:5b:da: f1:51:8a:68:a1:aa:2e:ed:87:19:28:a4:d2:a6:4f: a9:81:24:e7:e7:2c:74:37:2b:7d:13:0e:a3:47:e6: cf:a2:11:96:10:23:03:a4:4e:40:7e:2b:b0:f3:38: ca:fc:6c:e3:7f:16:8f:b9:27:80:75:f5:09:21:88: 94:09:5c:7a:b3:6b:fb:e4:1a:a5:6e:8b:50:c4:7b: 27:23:64:13:5e:df:a8:f2:e3:69:e2:9e:43:a1:51: 61:72:46:02:e3:ef:38:39:10:18:4e:5d:25:97:23: 43:91:c3:d7:3a:bf:5a:cc:d5:1f:a6:84:07:a1:16: 7d:b5:66:28:d0:90:0b:00:1b:87:8c:66:97:01:24: b4:9a:3f:d1:35:ee:5c:35:6f:95:0f:b5:3e:96:d8: 03:61:18:3d:79:02:30:cb:33:67:54:9e:7a:88:f5: 1a:b0:a8:81:99:61:ce:30:a4:26:df:64:f8:8d:f1: c7:71:b5:94:48:08:49:61:61:97:3e:59:77:66:98: ba:85:e9:2a:92:6a:60:74:b7:16:b7:88:54:ca:29: 0e:2e:ea:8f:cc:96:24:18:7a:ba:14:89:15:4b:ee: a5:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:4B:FA:0F:3A:75:F0:DD:E6:9F:07:ED:FE:DA:45:CC:3D:E3:03:DB X509v3 Authority Key Identifier: keyid:AE:B6:6E:C5:E8:F2:40:5F:6F:8D:48:6E:73:FB:82:B8:DE:0D:EE:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/eEv6Dzp18N3mnwft_tpFzD3jA9s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.226.176.0/21 81.94.208.0/20 178.237.160.0/23 178.237.163.0-178.237.165.255 178.237.170.0/24 178.237.172.0/22 IPv6: 2a03:a860:10::/44 2a03:a860:a00::/40 Signature Algorithm: sha256WithRSAEncryption 2f:d1:7d:1a:a1:67:bd:13:82:ce:2f:77:ef:0f:2c:f0:97:93: 16:fa:57:ac:4a:dd:86:f2:bb:82:77:28:e1:a6:9d:85:3e:21: d3:83:72:01:9f:fe:6f:01:28:a4:8a:0f:de:28:b0:87:02:46: fd:56:63:36:14:2d:bd:f6:0a:60:33:37:c9:b6:1e:f9:5d:73: bf:39:a8:9b:3e:c6:49:ac:45:3d:e4:74:37:8f:e0:5c:b9:f6: 3b:b2:9f:e2:45:95:5b:3e:7f:ff:20:71:30:92:57:be:de:b4: 8c:8e:16:9a:4e:ee:3b:c8:e9:64:ff:da:6b:c3:36:62:a4:6e: 69:0c:3b:44:54:72:cc:21:68:42:f1:2c:35:da:a8:dc:b3:c3: 1d:91:d5:45:c1:4c:c2:27:8b:c6:e6:4d:85:01:49:18:84:ee: b3:01:dc:9d:ef:a9:ca:d2:ef:d4:11:dd:25:d4:a3:50:34:16: 4c:55:bf:8a:fa:28:56:a1:e5:21:6f:7a:8e:39:e9:ce:b1:7b: 9e:91:78:09:8b:f4:d3:9c:48:32:ea:f7:dd:52:3d:d6:b1:d9: 6c:28:69:14:c5:b7:47:72:a2:e3:ce:0e:31:6d:84:a5:eb:dd: 94:c3:98:44:a6:a8:22:37:0e:f6:59:ae:93:93:15:24:3c:26: 1e:cc:6e:e9 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgISAZt26yEvKtp+7NX9jpwl0d+UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYjY2ZWM1ZThmMjQwNWY2ZjhkNDg2ZTczZmI4MmI4ZGUw ZGVlMGYwHhcNMjYwMTAxMDAxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODRiZmEwZjNhNzVmMGRkZTY5ZjA3ZWRmZWRhNDVjYzNkZTMwM2RiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5NyuO1/uPHGATikd416wj5w8whYj qarNdO9oW9rxUYpooaou7YcZKKTSpk+pgSTn5yx0Nyt9Ew6jR+bPohGWECMDpE5A fiuw8zjK/GzjfxaPuSeAdfUJIYiUCVx6s2v75BqlbotQxHsnI2QTXt+o8uNp4p5D oVFhckYC4+84ORAYTl0llyNDkcPXOr9azNUfpoQHoRZ9tWYo0JALABuHjGaXASS0 mj/RNe5cNW+VD7U+ltgDYRg9eQIwyzNnVJ56iPUasKiBmWHOMKQm32T4jfHHcbWU SAhJYWGXPll3Zpi6hekqkmpgdLcWt4hUyikOLuqPzJYkGHq6FIkVS+6lDQIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFHhL+g86dfDd5p8H7f7aRcw94wPbMB8GA1UdIwQY MBaAFK62bsXo8kBfb41IbnP7grjeDe4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnJadXhlanlRRjl2alVodWNfdUN1TjRON2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8xNTM3ODgtMTRiNy00NTUxLTlhZGUt NmFlYTkwNTdjODAwLzEvZUV2NkR6cDE4TjNtbndmdF90cEZ6RDNqQTlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi8xNTM3ODgtMTRiNy00NTUxLTlhZGUtNmFlYTkwNTdjODAw LzEvcnJadXhlanlRRjl2alVodWNfdUN1TjRON2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF4GCCsGAQUFBwEHAQH/BE8wTTAyBAIAATAsAwQDBeKwAwQE UV7QAwQBsu2gMAwDBACy7aMDBAGy7aQDBACy7aoDBAKy7awwFwQCAAIwEQMHBCoD qGAAEAMGACoDqGAKMA0GCSqGSIb3DQEBCwUAA4IBAQAv0X0aoWe9E4LOL3fvDyzw l5MW+lesSt2G8ruCdyjhpp2FPiHTg3IBn/5vASikig/eKLCHAkb9VmM2FC299gpg MzfJth75XXO/OaibPsZJrEU95HQ3j+BcufY7sp/iRZVbPn//IHEwkle+3rSMjhaa Tu47yOlk/9prwzZipG5pDDtEVHLMIWhC8Sw12qjcs8MdkdVFwUzCJ4vG5k2FAUkY hO6zAdyd76nK0u/UEd0l1KNQNBZMVb+K+ihWoeUhb3qOOenOsXuekXgJi/TTnEgy 6vfdUj3WsdlsKGkUxbdHcqLjzg4xbYSl692Uw5hEpqgiNw72Wa6TkxUkPCYezG7p -----END CERTIFICATE-----Generated at Sun Jan 25 20:34:50 2026 by rpki-client