This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/eBl3NCQejuv5Tc1igKBNGKe5voQ.roa File: eBl3NCQejuv5Tc1igKBNGKe5voQ.roa (raw, json) Hash identifier: UNr76JS1ka6TrTRYH82jsWLmgOoA1zl37HjuRYXxkSs= Subject key identifier: 78:19:77:34:24:1E:8E:EB:F9:4D:CD:62:80:A0:4D:18:A7:B9:BE:84 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F849F0515EFA989CEA3F7D2DA3BA36E Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/eBl3NCQejuv5Tc1igKBNGKe5voQ.roa Signing time: Fri 02 Jan 2026 16:22:36 +0000 ROA not before: Fri 02 Jan 2026 16:22:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42146 IP address blocks: 95.46.76.0/24 maxlen: 24 2a02:128:40c0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:9f:05:15:ef:a9:89:ce:a3:f7:d2:da:3b:a3:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=78197734241e8eebf94dcd6280a04d18a7b9be84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:16:a8:34:94:38:c0:31:85:bc:7a:64:33:4a: 3e:9c:49:16:a3:8c:83:b4:08:ab:f6:25:d7:21:c5: 3a:75:bd:65:d3:02:b1:18:e5:76:50:75:66:e7:64: 8e:1b:86:81:9a:1e:a1:e8:e5:2e:bf:48:4a:c5:f9: c7:d8:1b:79:fa:ba:06:ea:53:e7:3a:dc:6d:26:fd: 1f:04:ad:1e:3e:ae:d4:01:a2:a0:88:38:82:22:47: 5a:d3:26:b2:9a:7a:a2:73:65:9d:0e:07:20:60:ba: 73:94:c8:16:7d:5a:f7:a5:2c:7f:d1:89:2b:96:8c: f8:7d:a1:40:45:e5:ee:a4:d0:90:85:63:63:39:72: c9:09:99:81:c8:66:79:69:34:ca:63:53:0a:97:f7: c1:ae:c7:05:07:9d:aa:db:a7:fc:34:b3:98:eb:2f: d2:f3:47:6f:b5:2a:0d:c4:69:a9:50:f1:c9:33:60: 38:2d:a1:d0:bd:90:e5:5c:d6:8d:e8:15:05:12:45: ea:09:95:46:d8:b2:16:aa:62:ac:3b:5a:bf:5f:d9: a5:88:73:87:54:53:d2:83:11:9c:9d:f7:98:55:99: cd:8e:cd:47:ab:f1:36:6a:d4:c2:72:0e:48:27:a3: 3e:8c:ef:27:52:15:f5:cc:73:ee:7a:90:6d:95:89: 2d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:19:77:34:24:1E:8E:EB:F9:4D:CD:62:80:A0:4D:18:A7:B9:BE:84 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/eBl3NCQejuv5Tc1igKBNGKe5voQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.46.76.0/24 IPv6: 2a02:128:40c0::/44 Signature Algorithm: sha256WithRSAEncryption 8f:81:66:6e:7f:f4:b1:0a:10:8e:fe:e9:8b:73:ce:ad:f2:53: 1c:cb:bc:f5:ac:94:91:63:8c:4f:5f:24:0a:d8:0e:80:db:74: 39:7d:c2:54:a3:e6:1b:ef:21:76:0f:95:0a:a7:c0:9a:4f:c8: 50:09:5e:a3:e7:38:22:cb:23:6d:b3:95:67:d2:8a:78:11:d5: 20:5d:6a:61:dc:46:22:c9:84:48:d3:48:15:8c:e7:d1:af:3a: fc:4e:2b:bb:43:95:3f:61:80:e5:7b:5c:58:b5:51:f8:fe:e6: c9:29:14:c8:88:3d:e8:87:fd:b2:f7:96:f9:af:04:69:c6:a1: d9:df:47:a9:bb:a1:52:f6:b4:ce:54:88:b0:be:85:46:14:fc: ae:04:ff:84:27:25:01:12:a1:f2:be:fc:0d:db:9a:8e:cb:ca: ee:c4:96:8a:43:f5:f1:a6:ff:7d:ec:c7:a5:10:23:7f:20:80: 33:a0:1a:96:84:f9:9e:bf:4c:98:e9:c3:4b:ac:54:58:57:2f: f4:b7:75:fb:c3:69:06:2b:b0:cb:ea:54:d4:8b:61:24:d4:f7: ac:2b:2c:d7:dd:09:de:8d:05:ea:55:68:5f:a0:11:73:78:71: f4:2e:90:8f:86:79:40:52:5a:1a:3e:70:47:a4:ad:75:ee:dc: 7f:d1:92:eb -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/hJ8FFe+pic6j99LaO6NuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODE5NzczNDI0MWU4ZWViZjk0ZGNkNjI4MGEwNGQxOGE3YjliZTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshaoNJQ4wDGFvHpkM0o+nEkWo4yD tAir9iXXIcU6db1l0wKxGOV2UHVm52SOG4aBmh6h6OUuv0hKxfnH2Bt5+roG6lPn OtxtJv0fBK0ePq7UAaKgiDiCIkda0yaymnqic2WdDgcgYLpzlMgWfVr3pSx/0Ykr loz4faFAReXupNCQhWNjOXLJCZmByGZ5aTTKY1MKl/fBrscFB52q26f8NLOY6y/S 80dvtSoNxGmpUPHJM2A4LaHQvZDlXNaN6BUFEkXqCZVG2LIWqmKsO1q/X9mliHOH VFPSgxGcnfeYVZnNjs1Hq/E2atTCcg5IJ6M+jO8nUhX1zHPuepBtlYkt7wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFHgZdzQkHo7r+U3NYoCgTRinub6EMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvZUJsM05DUWVqdXY1VGMxaWdLQk5HS2U1dm9RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAXy5MMA8E AgACMAkDBwQqAgEoQMAwDQYJKoZIhvcNAQELBQADggEBAI+BZm5/9LEKEI7+6Ytz zq3yUxzLvPWslJFjjE9fJArYDoDbdDl9wlSj5hvvIXYPlQqnwJpPyFAJXqPnOCLL I22zlWfSingR1SBdamHcRiLJhEjTSBWM59GvOvxOK7tDlT9hgOV7XFi1Ufj+5skp FMiIPeiH/bL3lvmvBGnGodnfR6m7oVL2tM5UiLC+hUYU/K4E/4QnJQESofK+/A3b mo7Lyu7ElopD9fGm/33sx6UQI38ggDOgGpaE+Z6/TJjpw0usVFhXL/S3dfvDaQYr sMvqVNSLYSTU96wrLNfdCd6NBepVaF+gEXN4cfQukI+GeUBSWho+cEekrXXu3H/R kus= -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:10 2026 by rpki-client