This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/eBHffMc_OQgLVRhR9CGd779MAbw.roa File: eBHffMc_OQgLVRhR9CGd779MAbw.roa (raw, json) Hash identifier: qhXCq6p6fkTw8jwxWPhjXqKYMhPmkunhkqWsFwzUDmY= Subject key identifier: 78:11:DF:7C:C7:3F:39:08:0B:55:18:51:F4:21:9D:EF:BF:4C:01:BC Certificate issuer: /CN=26a5aa918cbfeb3e12997f33890feb258907b343 Certificate serial: 019B7C12141B5188FB1AA52030A1CD7BA2AF Authority key identifier: 26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/eBHffMc_OQgLVRhR9CGd779MAbw.roa Signing time: Fri 02 Jan 2026 00:18:38 +0000 ROA not before: Fri 02 Jan 2026 00:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34360 IP address blocks: 93.157.96.0/21 maxlen: 24 213.108.56.0/21 maxlen: 24 2a01:4660::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.mft rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:14:1b:51:88:fb:1a:a5:20:30:a1:cd:7b:a2:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26a5aa918cbfeb3e12997f33890feb258907b343 Validity Not Before: Jan 2 00:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7811df7cc73f39080b551851f4219defbf4c01bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:bd:a8:6e:32:7b:13:ed:3b:c8:5a:de:ad:c3: 46:47:a6:db:a6:09:90:74:ef:4a:c1:e6:3e:d6:a4: 32:f3:e0:92:10:30:45:90:38:df:a1:66:7d:37:c7: 17:35:20:96:26:e4:f1:0b:56:31:37:8a:85:2d:19: 40:31:4e:17:d5:14:45:73:28:33:5b:16:8e:18:6b: 22:5d:8c:8f:78:50:2c:3c:56:6a:ca:45:44:a3:e3: 86:8f:7b:24:58:97:2e:6f:c9:0d:40:79:66:b0:7c: ea:89:b6:d9:95:62:24:dc:0d:c5:5b:72:a1:0d:19: 02:1f:cb:7d:74:28:ae:21:90:bb:78:8c:e2:e9:e5: 9b:30:c8:6e:59:f5:d1:e6:99:78:5c:f9:04:d7:cd: bd:36:c2:6a:12:82:70:56:89:f9:2b:1f:aa:d1:06: f7:54:4f:e3:90:90:a2:84:85:19:36:75:5e:fd:a7: 93:91:de:01:04:70:62:b4:c3:18:6f:47:4b:dd:ad: 70:5f:1a:e5:dc:24:c0:af:df:98:f6:cd:02:92:5d: cf:cb:25:7f:d9:5d:fd:bb:7d:59:ab:fd:cf:d6:29: 68:94:cb:bc:35:35:3b:78:23:0b:e2:bb:9e:2c:c6: 9b:2a:bb:a7:9e:4e:c5:77:9c:4b:4b:67:72:6a:e2: 7b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:11:DF:7C:C7:3F:39:08:0B:55:18:51:F4:21:9D:EF:BF:4C:01:BC X509v3 Authority Key Identifier: keyid:26:A5:AA:91:8C:BF:EB:3E:12:99:7F:33:89:0F:EB:25:89:07:B3:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/eBHffMc_OQgLVRhR9CGd779MAbw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1433ea-1080-46e5-b612-297e282d66a8/1/JqWqkYy_6z4SmX8ziQ_rJYkHs0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.157.96.0/21 213.108.56.0/21 IPv6: 2a01:4660::/32 Signature Algorithm: sha256WithRSAEncryption 23:72:b7:b8:c0:a3:50:56:b7:72:56:17:5c:69:ea:59:51:5a: c4:c8:ec:f6:3b:92:5d:a5:ff:64:1f:11:f7:ef:5e:7f:72:26: 7c:7e:83:fd:0c:38:0c:0c:c3:02:2a:a9:80:6a:8c:0d:9c:17: 54:32:92:e1:42:ad:a3:2f:3d:84:44:3c:6a:9f:47:93:ad:65: ec:d2:d9:a6:9c:ee:de:23:5c:dc:f8:1a:26:8a:c2:80:3d:d6: c8:3f:81:2f:56:5a:bb:23:9d:be:d3:c1:3f:99:49:53:05:5d: 6d:11:43:77:11:5a:78:36:ae:d8:fd:6d:18:38:80:3b:31:96: bb:af:cb:5b:22:43:83:ed:2e:76:77:0c:45:7a:90:b6:01:01: cb:75:3d:16:24:fe:6c:ac:0d:cb:9a:34:b5:9f:a8:62:6c:fc: a1:69:e0:d4:6b:69:75:8d:c3:5a:1e:b2:24:67:f1:0e:97:68: 41:96:8a:61:46:79:b3:c7:1f:bb:23:75:65:f3:bc:4b:a4:9c: d9:96:ee:2d:dd:57:e2:11:13:e6:0e:a8:67:9a:3c:1c:ec:22: 01:39:58:06:83:4e:ea:a1:33:ea:9c:f6:85:fc:c2:68:33:28: 19:1d:88:f6:2c:47:c4:77:65:2d:58:0f:e0:ee:24:60:35:4e: 04:16:c1:58 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt8EhQbUYj7GqUgMKHNe6KvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2YTVhYTkxOGNiZmViM2UxMjk5N2YzMzg5MGZlYjI1ODkw N2IzNDMwHhcNMjYwMTAyMDAxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODExZGY3Y2M3M2YzOTA4MGI1NTE4NTFmNDIxOWRlZmJmNGMwMWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl72objJ7E+07yFrercNGR6bbpgmQ dO9KweY+1qQy8+CSEDBFkDjfoWZ9N8cXNSCWJuTxC1YxN4qFLRlAMU4X1RRFcygz WxaOGGsiXYyPeFAsPFZqykVEo+OGj3skWJcub8kNQHlmsHzqibbZlWIk3A3FW3Kh DRkCH8t9dCiuIZC7eIzi6eWbMMhuWfXR5pl4XPkE1829NsJqEoJwVon5Kx+q0Qb3 VE/jkJCihIUZNnVe/aeTkd4BBHBitMMYb0dL3a1wXxrl3CTAr9+Y9s0Ckl3PyyV/ 2V39u31Zq/3P1ilolMu8NTU7eCML4rueLMabKrunnk7Fd5xLS2dyauJ7xwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFHgR33zHPzkIC1UYUfQhne+/TAG8MB8GA1UdIwQY MBaAFCalqpGMv+s+Epl/M4kP6yWJB7NDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSnFXcWtZeV82ejRTbVg4emlRX3JKWWtIczBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8xNDMzZWEtMTA4MC00NmU1LWI2MTIt Mjk3ZTI4MmQ2NmE4LzEvZUJIZmZNY19PUWdMVlJoUjlDR2Q3NzlNQWJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC8xNDMzZWEtMTA4MC00NmU1LWI2MTItMjk3ZTI4MmQ2NmE4 LzEvSnFXcWtZeV82ejRTbVg4emlRX3JKWWtIczBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDXZ1gAwQD 1Ww4MA0EAgACMAcDBQAqAUZgMA0GCSqGSIb3DQEBCwUAA4IBAQAjcre4wKNQVrdy VhdcaepZUVrEyOz2O5Jdpf9kHxH3715/ciZ8foP9DDgMDMMCKqmAaowNnBdUMpLh Qq2jLz2ERDxqn0eTrWXs0tmmnO7eI1zc+BomisKAPdbIP4EvVlq7I52+08E/mUlT BV1tEUN3EVp4Nq7Y/W0YOIA7MZa7r8tbIkOD7S52dwxFepC2AQHLdT0WJP5srA3L mjS1n6hibPyhaeDUa2l1jcNaHrIkZ/EOl2hBlophRnmzxx+7I3Vl87xLpJzZlu4t 3VfiERPmDqhnmjwc7CIBOVgGg07qoTPqnPaF/MJoMygZHYj2LEfEd2UtWA/g7iRg NU4EFsFY -----END CERTIFICATE-----Generated at Mon Jan 26 12:37:15 2026 by rpki-client