This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/eKfYhAdXZm4QBxrRp-Jb19IhjKA.roa File: eKfYhAdXZm4QBxrRp-Jb19IhjKA.roa (raw, json) Hash identifier: IW6hoy0lnAYpEm6NvMoOrfkrhinHm5CYNAqE2SF2Y3g= Subject key identifier: 78:A7:D8:84:07:57:66:6E:10:07:1A:D1:A7:E2:5B:D7:D2:21:8C:A0 Certificate issuer: /CN=ab8c6c58b607ff23ae7175a61682c75480f1e214 Certificate serial: 019B7C805D0B50C7D3AF56CF530E16E3F9B5 Authority key identifier: AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/eKfYhAdXZm4QBxrRp-Jb19IhjKA.roa Signing time: Fri 02 Jan 2026 02:19:05 +0000 ROA not before: Fri 02 Jan 2026 02:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31554 IP address blocks: 188.247.160.0/22 maxlen: 22 188.247.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:5d:0b:50:c7:d3:af:56:cf:53:0e:16:e3:f9:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8c6c58b607ff23ae7175a61682c75480f1e214 Validity Not Before: Jan 2 02:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=78a7d8840757666e10071ad1a7e25bd7d2218ca0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f6:99:44:c1:34:29:69:f7:8b:be:a5:32:5e: 3e:61:56:eb:13:d3:78:19:75:36:0a:1a:ce:fa:ac: 82:a3:29:75:fa:c3:56:c4:04:96:da:6f:e9:2a:9f: 2a:f5:00:ae:18:c0:5d:98:51:18:0e:15:e1:9a:84: 82:f6:47:d4:fb:39:49:8b:44:32:0e:83:65:2e:c4: 09:ea:58:82:b0:23:d4:f9:d9:47:5d:75:11:62:35: a7:7e:42:52:b1:15:bf:c8:11:2c:41:b2:8c:2c:e4: 5c:67:14:09:4e:1e:1e:1f:b4:e8:41:e6:f4:66:93: a4:b6:98:c4:0e:67:f6:f9:38:f1:34:74:38:93:a6: 02:d0:29:12:a4:ee:df:9c:e1:ad:b0:45:b9:de:88: 1e:09:73:14:45:f5:ce:ac:3f:3a:39:03:d1:49:26: ca:2a:6d:bc:52:1d:59:90:9b:99:38:7c:13:f3:ab: 3e:b2:20:eb:2a:4c:8d:06:01:f1:3b:cb:72:fc:1c: 16:65:35:d9:36:a5:cc:ef:c5:39:80:95:1f:71:8d: c6:08:27:6e:cb:fd:e3:ae:24:21:c8:06:1d:7f:80: 9b:d2:ba:98:7b:d4:89:78:60:fd:5f:37:f6:44:81: 8b:9d:4f:cf:54:b1:64:f9:95:29:fc:a0:76:af:9c: bb:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:A7:D8:84:07:57:66:6E:10:07:1A:D1:A7:E2:5B:D7:D2:21:8C:A0 X509v3 Authority Key Identifier: keyid:AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/eKfYhAdXZm4QBxrRp-Jb19IhjKA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.247.160.0/22 188.247.237.0/24 Signature Algorithm: sha256WithRSAEncryption 77:ae:98:36:8b:94:3a:3f:23:a5:56:fa:21:91:01:75:8e:6f: 3e:96:b6:89:3a:ea:2a:74:b3:82:23:9e:bd:a5:09:bc:d0:b5: c4:22:fe:a9:63:28:ec:83:6d:0f:3b:a7:44:e4:36:7a:77:56: 21:8a:22:47:cd:e9:88:5b:a6:13:4d:28:02:8b:9c:ff:c8:8a: 75:3b:12:b9:3b:89:02:58:aa:30:72:98:fc:cd:3b:d1:0c:26: 8e:41:1b:be:97:03:18:b2:e2:52:69:bf:98:5e:05:fc:d4:bd: 96:95:07:a0:21:a2:ff:f9:03:e4:09:aa:5c:37:5a:25:4a:49: ee:7a:0e:53:93:e7:86:0f:6b:10:15:8f:0e:3e:99:20:b4:e1: 9e:f0:9d:24:f5:3e:0c:da:d3:68:6c:c7:0f:c0:a5:ea:d8:97: 8d:de:65:85:9f:04:ec:b2:3b:1a:19:fb:15:9d:89:40:4b:b6: 41:f6:51:8b:8c:df:12:de:c1:84:33:e9:97:d6:75:64:1f:55: ae:a8:34:00:af:d3:a7:a8:6d:ca:b3:bb:cc:62:1e:37:55:a2: 23:e8:34:35:2e:3a:07:70:b8:8d:55:4d:61:8c:30:85:e4:12: 5b:60:e5:04:13:c1:e3:3a:e5:b3:4f:01:4c:f9:45:0e:76:6e: 2c:8f:6d:48 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8gF0LUMfTr1bPUw4W4/m1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiOGM2YzU4YjYwN2ZmMjNhZTcxNzVhNjE2ODJjNzU0ODBm MWUyMTQwHhcNMjYwMTAyMDIxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OGE3ZDg4NDA3NTc2NjZlMTAwNzFhZDFhN2UyNWJkN2QyMjE4Y2EwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvaZRME0KWn3i76lMl4+YVbrE9N4 GXU2ChrO+qyCoyl1+sNWxASW2m/pKp8q9QCuGMBdmFEYDhXhmoSC9kfU+zlJi0Qy DoNlLsQJ6liCsCPU+dlHXXURYjWnfkJSsRW/yBEsQbKMLORcZxQJTh4eH7ToQeb0 ZpOktpjEDmf2+TjxNHQ4k6YC0CkSpO7fnOGtsEW53ogeCXMURfXOrD86OQPRSSbK Km28Uh1ZkJuZOHwT86s+siDrKkyNBgHxO8ty/BwWZTXZNqXM78U5gJUfcY3GCCdu y/3jriQhyAYdf4Cb0rqYe9SJeGD9Xzf2RIGLnU/PVLFk+ZUp/KB2r5y7BQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHin2IQHV2ZuEAca0afiW9fSIYygMB8GA1UdIwQY MBaAFKuMbFi2B/8jrnF1phaCx1SA8eIUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTR4c1dMWUhfeU91Y1hXbUZvTEhWSUR4NGhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9lZmI4ZWUtYzVjNC00NDY3LWEwY2Mt ODhhM2M0MWZhZWUyLzEvZUtmWWhBZFhabTRRQnhyUnAtSmIxOUloaktBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9lZmI4ZWUtYzVjNC00NDY3LWEwY2MtODhhM2M0MWZhZWUy LzEvcTR4c1dMWUhfeU91Y1hXbUZvTEhWSUR4NGhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCvPegAwQA vPftMA0GCSqGSIb3DQEBCwUAA4IBAQB3rpg2i5Q6PyOlVvohkQF1jm8+lraJOuoq dLOCI569pQm80LXEIv6pYyjsg20PO6dE5DZ6d1YhiiJHzemIW6YTTSgCi5z/yIp1 OxK5O4kCWKowcpj8zTvRDCaOQRu+lwMYsuJSab+YXgX81L2WlQegIaL/+QPkCapc N1olSknueg5Tk+eGD2sQFY8OPpkgtOGe8J0k9T4M2tNobMcPwKXq2JeN3mWFnwTs sjsaGfsVnYlAS7ZB9lGLjN8S3sGEM+mX1nVkH1WuqDQAr9OnqG3Ks7vMYh43VaIj 6DQ1LjoHcLiNVU1hjDCF5BJbYOUEE8HjOuWzTwFM+UUOdm4sj21I -----END CERTIFICATE-----Generated at Sun Jan 25 15:13:04 2026 by rpki-client