This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ebNLIOnuTtwtk6YdRazfX8fp2AU.roa File: ebNLIOnuTtwtk6YdRazfX8fp2AU.roa (raw, json) Hash identifier: zuCAQP9Y5cnppg0EJx+ucmQTj+VqRGe+9MzFGiU2Mew= Subject key identifier: 79:B3:4B:20:E9:EE:4E:DC:2D:93:A6:1D:45:AC:DF:5F:C7:E9:D8:05 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84C04523D64CB6A8CBC7E062CEEBD2 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ebNLIOnuTtwtk6YdRazfX8fp2AU.roa Signing time: Fri 02 Jan 2026 16:22:44 +0000 ROA not before: Fri 02 Jan 2026 16:22:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51340 IP address blocks: 95.47.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:c0:45:23:d6:4c:b6:a8:cb:c7:e0:62:ce:eb:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=79b34b20e9ee4edc2d93a61d45acdf5fc7e9d805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5f:ce:66:86:6d:2c:32:ed:6a:76:20:90:65: ab:f4:f7:db:3c:1b:34:ea:34:51:4a:29:96:58:cd: 85:f2:90:b1:6b:35:ab:c5:67:b0:98:53:2c:d8:9a: 40:8d:c8:0b:f3:11:a4:9a:32:d3:bc:01:3a:b5:96: 29:c9:62:65:6e:b2:f3:5a:ad:71:98:78:cf:a4:33: b0:fd:27:c3:97:f1:25:e3:79:af:5d:3a:75:b8:20: 2e:9b:18:1a:5a:7a:1b:ad:a6:86:d9:85:24:81:dc: 85:49:ca:40:17:77:ae:96:60:b9:04:a4:85:b6:5f: 69:ff:a7:b3:ea:b5:d2:1d:00:5b:a2:a3:ff:99:98: 52:6c:0e:f3:a4:2e:0b:22:78:96:b4:b0:f5:c0:1a: 22:ab:01:cf:86:28:ca:27:23:93:5f:c3:42:18:58: 8d:64:8a:b9:fb:c1:30:95:ff:a8:a3:40:b1:b3:1e: 1a:db:7b:c7:fe:86:f4:1d:32:52:5e:58:81:9a:01: ba:a6:d1:6f:b7:59:c4:47:b6:75:95:97:80:2b:7c: a4:16:45:33:63:40:90:37:39:98:e2:fa:cd:6d:4e: f9:8a:5a:98:a3:a2:85:a9:47:f8:2f:e0:52:0c:67: 54:83:77:5d:e9:1e:bc:36:0e:40:81:16:97:18:79: 64:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:B3:4B:20:E9:EE:4E:DC:2D:93:A6:1D:45:AC:DF:5F:C7:E9:D8:05 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ebNLIOnuTtwtk6YdRazfX8fp2AU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.47.58.0/24 Signature Algorithm: sha256WithRSAEncryption 29:ec:b2:dd:6c:2c:dc:40:31:8f:05:39:4d:07:59:bf:21:16: 31:c6:2d:7d:e1:ed:35:e4:6f:80:e3:0b:a8:41:f1:1a:62:c0: dc:2f:24:c6:50:89:b3:97:a5:c1:b7:20:a0:e9:07:c8:1d:9e: 51:06:45:bd:0a:23:66:57:ca:45:54:cc:7b:cc:39:4b:91:41: 33:5d:d1:4d:0d:00:ad:e2:9e:23:8a:4c:b5:00:90:fd:f9:e6: 07:fa:a2:10:c6:0f:a9:73:25:de:e5:d3:f1:eb:3e:37:44:da: 0c:99:93:fa:f2:ce:cf:be:ea:08:37:c5:82:b2:55:6c:df:75: fa:f2:33:91:28:2d:14:5e:09:49:bb:28:be:7e:6a:a8:2b:32: c4:19:20:ce:f3:1e:b1:31:8b:e5:bd:8e:c4:f2:58:cb:c4:26: 82:9f:f2:c3:e1:25:98:69:56:16:d3:5b:ce:11:22:22:4a:29: d1:39:22:99:05:08:74:f4:42:f6:7c:af:d8:5b:9b:3f:a5:4a: e5:78:9a:c3:91:e7:e0:55:b1:0e:ad:b2:f8:f1:14:7d:a4:07: e5:14:b1:9a:ff:79:63:f4:c3:23:02:07:55:3c:d4:63:d5:40: 7a:61:7f:0a:bc:5c:db:44:be:97:91:20:e9:24:90:22:2c:12: 61:6e:b3:c7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hMBFI9ZMtqjLx+BizuvSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OWIzNGIyMGU5ZWU0ZWRjMmQ5M2E2MWQ0NWFjZGY1ZmM3ZTlkODA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1/OZoZtLDLtanYgkGWr9PfbPBs0 6jRRSimWWM2F8pCxazWrxWewmFMs2JpAjcgL8xGkmjLTvAE6tZYpyWJlbrLzWq1x mHjPpDOw/SfDl/El43mvXTp1uCAumxgaWnobraaG2YUkgdyFScpAF3eulmC5BKSF tl9p/6ez6rXSHQBboqP/mZhSbA7zpC4LIniWtLD1wBoiqwHPhijKJyOTX8NCGFiN ZIq5+8Ewlf+oo0Cxsx4a23vH/ob0HTJSXliBmgG6ptFvt1nER7Z1lZeAK3ykFkUz Y0CQNzmY4vrNbU75ilqYo6KFqUf4L+BSDGdUg3dd6R68Ng5AgRaXGHlkwwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHmzSyDp7k7cLZOmHUWs31/H6dgFMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvZWJOTElPbnVUdHd0azZZZFJhemZYOGZwMkFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXy86MA0G CSqGSIb3DQEBCwUAA4IBAQAp7LLdbCzcQDGPBTlNB1m/IRYxxi194e015G+A4wuo QfEaYsDcLyTGUImzl6XBtyCg6QfIHZ5RBkW9CiNmV8pFVMx7zDlLkUEzXdFNDQCt 4p4jiky1AJD9+eYH+qIQxg+pcyXe5dPx6z43RNoMmZP68s7PvuoIN8WCslVs33X6 8jORKC0UXglJuyi+fmqoKzLEGSDO8x6xMYvlvY7E8ljLxCaCn/LD4SWYaVYW01vO ESIiSinROSKZBQh09EL2fK/YW5s/pUrleJrDkefgVbEOrbL48RR9pAflFLGa/3lj 9MMjAgdVPNRj1UB6YX8KvFzbRL6XkSDpJJAiLBJhbrPH -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:14 2026 by rpki-client