This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/EeCtLuBTD9Vnd2ZnCvIwFMY3lbQ.roa File: EeCtLuBTD9Vnd2ZnCvIwFMY3lbQ.roa (raw, json) Hash identifier: xhrDK2dmq7qtYkf86RQax67dAPsbZo2ArZ5UCuQLz7I= Subject key identifier: 11:E0:AD:2E:E0:53:0F:D5:67:77:66:67:0A:F2:30:14:C6:37:95:B4 Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123 Certificate serial: 019B78A32F510B76460AA6C296E38312B1DC Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/EeCtLuBTD9Vnd2ZnCvIwFMY3lbQ.roa Signing time: Thu 01 Jan 2026 08:18:38 +0000 ROA not before: Thu 01 Jan 2026 08:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198602 IP address blocks: 213.135.92.0/24 maxlen: 24 213.135.94.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:2f:51:0b:76:46:0a:a6:c2:96:e3:83:12:b1:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123 Validity Not Before: Jan 1 08:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=11e0ad2ee0530fd5677766670af23014c63795b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f9:f6:1b:bb:1c:2a:d8:dd:54:f6:55:60:c7: 5a:d5:92:90:61:91:9a:7e:ed:40:45:43:92:02:0f: e6:93:ff:a4:3d:eb:49:42:e8:e0:11:3c:de:0b:e2: 88:00:73:0a:4c:ad:2e:92:7b:f1:4b:a7:a0:5f:8a: 75:8b:8d:7c:ba:df:f1:72:18:4d:e3:70:b4:bc:c2: 8c:a1:63:4d:f8:44:27:4e:58:56:06:f5:21:1b:5f: 38:a3:c7:5d:1f:ad:c2:06:f2:06:87:ef:aa:99:e3: 3b:3d:fe:fa:be:16:76:9f:e5:fa:6d:a8:d3:ef:f0: c6:f9:28:99:c1:e2:7a:b3:bd:03:67:79:7e:4f:72: ff:6a:f5:6b:dd:f6:20:31:db:1d:19:ce:71:54:a5: f6:d4:bd:31:c6:43:45:cb:f6:f9:44:61:fa:cc:3d: 0d:52:a9:6c:a0:a4:7d:64:88:8a:f0:1e:a9:0c:2e: 6d:21:00:28:63:af:b9:47:7b:22:cf:8c:af:61:0e: 66:e2:aa:d7:4f:f5:84:69:83:a1:7b:b8:6b:13:8e: cf:a2:c2:75:02:4a:62:16:e6:73:9e:e9:e2:ab:e4: 65:eb:b0:a4:60:4d:11:16:7a:8e:fb:03:42:10:5f: 4b:c7:1a:3c:77:fa:91:e6:7b:7a:ab:e5:64:f6:20: 82:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:E0:AD:2E:E0:53:0F:D5:67:77:66:67:0A:F2:30:14:C6:37:95:B4 X509v3 Authority Key Identifier: keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/EeCtLuBTD9Vnd2ZnCvIwFMY3lbQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.135.92.0/24 213.135.94.0/23 Signature Algorithm: sha256WithRSAEncryption a5:b9:b3:fe:1c:08:d6:46:4b:2d:f5:90:cc:8a:13:77:b0:57: 50:0f:0b:3d:9c:13:35:c2:b7:66:63:43:68:6a:b5:d7:42:a0: 4d:3f:b3:2c:92:24:d0:39:1b:94:3a:47:b5:73:d9:d0:3c:fd: ee:b6:17:f8:de:13:8f:2f:de:a4:6e:18:c3:50:cc:01:21:d6: 1f:b6:fb:4c:27:c0:4d:0e:78:d2:fc:84:bf:c2:cf:6f:d5:22: 25:d1:74:11:ce:3a:09:65:f9:b5:1c:f2:62:25:ec:c0:2a:b2: 4a:35:13:c5:e7:90:f3:c4:82:68:19:3a:c5:98:e6:7f:6c:a5: 81:de:0f:fe:8e:75:2c:ca:33:af:96:1a:d1:1f:63:cb:e8:e2: 37:a4:aa:ca:46:4e:1e:97:b6:b6:52:2f:93:43:ef:8f:09:b0: 1c:b5:24:26:29:a3:66:d4:6b:f2:62:3b:fe:85:ad:69:ea:79: b1:77:03:5b:01:cc:4f:05:51:26:42:66:20:d8:06:65:9b:e1: 20:ad:eb:7b:34:43:fc:a7:ee:f9:51:15:52:ea:2d:40:ad:d4: 33:ae:ea:02:d3:d7:b5:a6:83:0e:34:c3:8d:89:81:f5:70:98: df:cf:29:d0:bb:f8:e4:53:f5:4c:14:46:7a:7f:cf:cf:8b:34: 32:f5:40:97 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4oy9RC3ZGCqbCluODErHcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMzgxODU1NGE1MTgwOGVlZmI4MjllYzc0NjVhMzIyMmYy NzAxMjMwHhcNMjYwMTAxMDgxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMWUwYWQyZWUwNTMwZmQ1Njc3NzY2NjcwYWYyMzAxNGM2Mzc5NWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPn2G7scKtjdVPZVYMda1ZKQYZGa fu1ARUOSAg/mk/+kPetJQujgETzeC+KIAHMKTK0uknvxS6egX4p1i418ut/xchhN 43C0vMKMoWNN+EQnTlhWBvUhG184o8ddH63CBvIGh++qmeM7Pf76vhZ2n+X6bajT 7/DG+SiZweJ6s70DZ3l+T3L/avVr3fYgMdsdGc5xVKX21L0xxkNFy/b5RGH6zD0N UqlsoKR9ZIiK8B6pDC5tIQAoY6+5R3siz4yvYQ5m4qrXT/WEaYOhe7hrE47PosJ1 AkpiFuZznuniq+Rl67CkYE0RFnqO+wNCEF9Lxxo8d/qR5nt6q+Vk9iCCQwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBHgrS7gUw/VZ3dmZwryMBTGN5W0MB8GA1UdIwQY MBaAFI84GFVKUYCO77gp7HRloyIvJwEjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wOWRiYTQtMWM5My00OWQ2LTg4ODgt YmZiNGJhMzBlNDVhLzEvRWVDdEx1QlREOVZuZDJabkN2SXdGTVkzbGJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8wOWRiYTQtMWM5My00OWQ2LTg4ODgtYmZiNGJhMzBlNDVh LzEvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1YdcAwQB 1YdeMA0GCSqGSIb3DQEBCwUAA4IBAQClubP+HAjWRkst9ZDMihN3sFdQDws9nBM1 wrdmY0NoarXXQqBNP7MskiTQORuUOke1c9nQPP3uthf43hOPL96kbhjDUMwBIdYf tvtMJ8BNDnjS/IS/ws9v1SIl0XQRzjoJZfm1HPJiJezAKrJKNRPF55DzxIJoGTrF mOZ/bKWB3g/+jnUsyjOvlhrRH2PL6OI3pKrKRk4el7a2Ui+TQ++PCbActSQmKaNm 1GvyYjv+ha1p6nmxdwNbAcxPBVEmQmYg2AZlm+Egret7NEP8p+75URVS6i1ArdQz ruoC09e1poMONMONiYH1cJjfzynQu/jkU/VMFEZ6f8/PizQy9UCX -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:47 2026 by rpki-client