This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/E9zZAnLobJdxCJ_CMObNo6B0tg0.roa File: E9zZAnLobJdxCJ_CMObNo6B0tg0.roa (raw, json) Hash identifier: gKx/4RJ8SdZlVgi0Sh6XpvjZo+kkGJvfp88hpXTMS3s= Subject key identifier: 13:DC:D9:02:72:E8:6C:97:71:08:9F:C2:30:E6:CD:A3:A0:74:B6:0D Certificate issuer: /CN=84bbaeb70b3f1d06716358ad9a2ecfef7d2126fb Certificate serial: 019B7D5AC7EDD7F79C4E4A2403E4F087B1C5 Authority key identifier: 84:BB:AE:B7:0B:3F:1D:06:71:63:58:AD:9A:2E:CF:EF:7D:21:26:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLuutws_HQZxY1itmi7P730hJvs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/E9zZAnLobJdxCJ_CMObNo6B0tg0.roa Signing time: Fri 02 Jan 2026 06:17:39 +0000 ROA not before: Fri 02 Jan 2026 06:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59674 IP address blocks: 185.179.24.0/24 maxlen: 24 185.179.25.0/24 maxlen: 24 185.179.26.0/24 maxlen: 24 185.179.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.crl rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.mft rsync://rpki.ripe.net/repository/DEFAULT/hLuutws_HQZxY1itmi7P730hJvs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:c7:ed:d7:f7:9c:4e:4a:24:03:e4:f0:87:b1:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84bbaeb70b3f1d06716358ad9a2ecfef7d2126fb Validity Not Before: Jan 2 06:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=13dcd90272e86c9771089fc230e6cda3a074b60d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:28:36:a1:9a:b2:53:4e:41:7c:d4:a6:f0:4f: de:8d:10:68:5f:1f:33:1a:bf:e7:4a:99:dc:fb:89: 64:8d:ab:32:ef:b5:a1:5d:f6:64:b5:bb:ed:f9:68: 71:1f:cc:11:3d:1e:45:7e:ff:bc:a9:95:a0:33:c2: b7:c9:79:ab:9c:73:2e:e3:a9:9b:57:ea:8c:2a:7d: 58:ce:f3:6c:ee:c6:10:c2:20:9a:e9:9d:65:9c:ad: 80:20:49:64:a1:d5:a3:9b:e2:74:17:5c:65:f3:64: 5d:94:6f:84:55:c2:d8:b5:14:d2:1d:ae:21:69:c4: 7b:53:b4:c3:01:39:4d:76:ce:51:89:ee:95:c0:eb: 15:04:40:56:38:a3:6d:4b:67:f2:9d:ed:23:bf:9d: 3a:d3:b5:bb:45:d0:4c:5e:4e:67:c8:ed:80:7d:9f: 7b:53:c1:b5:62:ba:17:07:6b:b7:fd:25:27:58:ac: aa:d6:5d:f4:14:59:b9:aa:ad:50:73:e9:8f:1e:16: da:20:d5:72:d2:02:da:ee:bd:b4:e3:bc:00:38:8f: 8b:8d:10:57:ed:af:38:f5:34:69:44:10:07:89:ad: 04:10:87:a9:2b:ce:fd:45:41:28:7d:ee:bb:4b:5f: ec:09:c8:d2:b5:64:ff:d3:27:55:b7:56:03:d4:98: 63:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:DC:D9:02:72:E8:6C:97:71:08:9F:C2:30:E6:CD:A3:A0:74:B6:0D X509v3 Authority Key Identifier: keyid:84:BB:AE:B7:0B:3F:1D:06:71:63:58:AD:9A:2E:CF:EF:7D:21:26:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLuutws_HQZxY1itmi7P730hJvs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/E9zZAnLobJdxCJ_CMObNo6B0tg0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b67eb7-e496-4c31-9f67-97902d8a7fa6/1/hLuutws_HQZxY1itmi7P730hJvs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.179.24.0/22 Signature Algorithm: sha256WithRSAEncryption 29:82:9c:34:3f:e2:5a:66:b6:85:a0:a8:64:df:bc:dc:0e:b9: 0e:8e:d6:57:20:c5:11:3d:0e:6c:0b:b5:76:ec:6d:ef:d5:bb: 48:f1:e7:a8:c5:d0:66:42:f6:32:63:7f:6f:a5:cf:72:33:fc: b1:c3:0a:4f:73:dc:9a:1f:e3:d4:e4:9d:4a:91:a5:2b:22:1f: dd:0b:6f:55:22:a4:6f:50:bb:bf:61:a6:a3:0f:1a:c1:4d:99: f4:4e:60:86:a0:33:3a:29:3e:9f:12:5d:e1:9b:5b:55:c7:e2: a6:62:c5:4b:86:37:08:f1:d8:c7:77:f9:31:93:7e:a8:dc:23: 77:72:75:f5:be:26:f3:08:49:f4:2c:40:bd:31:c7:59:f3:ca: 4d:83:13:be:24:3f:ee:72:32:54:7a:dc:9a:b3:ce:95:7a:d9: 59:0c:3c:ed:c1:45:a8:43:fd:46:c4:84:ed:13:cf:9d:3a:f2: 42:75:e9:47:73:3a:e2:d2:dc:fe:49:f5:49:02:3c:1c:9b:54: 4f:fc:c3:ff:7b:74:d9:06:12:cc:15:ec:23:a0:43:d9:83:85: 8c:b9:40:b2:9d:c7:e0:83:b3:79:83:fd:93:79:b5:0b:74:9f: bd:04:73:09:bd:f5:63:83:b0:b5:01:d9:94:12:52:2c:be:10: ea:0d:3b:8c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9Wsft1/ecTkokA+Twh7HFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0YmJhZWI3MGIzZjFkMDY3MTYzNThhZDlhMmVjZmVmN2Qy MTI2ZmIwHhcNMjYwMTAyMDYxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxM2RjZDkwMjcyZTg2Yzk3NzEwODlmYzIzMGU2Y2RhM2EwNzRiNjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqig2oZqyU05BfNSm8E/ejRBoXx8z Gr/nSpnc+4lkjasy77WhXfZktbvt+WhxH8wRPR5Ffv+8qZWgM8K3yXmrnHMu46mb V+qMKn1YzvNs7sYQwiCa6Z1lnK2AIElkodWjm+J0F1xl82RdlG+EVcLYtRTSHa4h acR7U7TDATlNds5Rie6VwOsVBEBWOKNtS2fyne0jv50607W7RdBMXk5nyO2AfZ97 U8G1YroXB2u3/SUnWKyq1l30FFm5qq1Qc+mPHhbaINVy0gLa7r2047wAOI+LjRBX 7a849TRpRBAHia0EEIepK879RUEofe67S1/sCcjStWT/0ydVt1YD1JhjCQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBPc2QJy6GyXcQifwjDmzaOgdLYNMB8GA1UdIwQY MBaAFIS7rrcLPx0GcWNYrZouz+99ISb7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEx1dXR3c19IUVp4WTFpdG1pN1A3MzBoSnZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9iNjdlYjctZTQ5Ni00YzMxLTlmNjct OTc5MDJkOGE3ZmE2LzEvRTl6WkFuTG9iSmR4Q0pfQ01PYk5vNkIwdGcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9iNjdlYjctZTQ5Ni00YzMxLTlmNjctOTc5MDJkOGE3ZmE2 LzEvaEx1dXR3c19IUVp4WTFpdG1pN1A3MzBoSnZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCubMYMA0G CSqGSIb3DQEBCwUAA4IBAQApgpw0P+JaZraFoKhk37zcDrkOjtZXIMURPQ5sC7V2 7G3v1btI8eeoxdBmQvYyY39vpc9yM/yxwwpPc9yaH+PU5J1KkaUrIh/dC29VIqRv ULu/YaajDxrBTZn0TmCGoDM6KT6fEl3hm1tVx+KmYsVLhjcI8djHd/kxk36o3CN3 cnX1vibzCEn0LEC9McdZ88pNgxO+JD/ucjJUetyas86VetlZDDztwUWoQ/1GxITt E8+dOvJCdelHczri0tz+SfVJAjwcm1RP/MP/e3TZBhLMFewjoEPZg4WMuUCyncfg g7N5g/2TebULdJ+9BHMJvfVjg7C1AdmUElIsvhDqDTuM -----END CERTIFICATE-----Generated at Sun Jan 25 22:49:24 2026 by rpki-client