This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/eepL3sgisZ_Fx8M8tpCcWXgBN7A.roa File: eepL3sgisZ_Fx8M8tpCcWXgBN7A.roa (raw, json) Hash identifier: NVQN39kYTzlIkkaImPxSDYfZQOL0uEHUr7pCGoDxD0s= Subject key identifier: 79:EA:4B:DE:C8:22:B1:9F:C5:C7:C3:3C:B6:90:9C:59:78:01:37:B0 Certificate issuer: /CN=c0e549fdceeb02912c8a8741c816806bbe19c448 Certificate serial: 019BCB241904E12C844E92BD696B3B6ECC3E Authority key identifier: C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/eepL3sgisZ_Fx8M8tpCcWXgBN7A.roa Signing time: Sat 17 Jan 2026 08:48:18 +0000 ROA not before: Sat 17 Jan 2026 08:48:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 272988 IP address blocks: 185.240.88.0/23 maxlen: 23 185.240.88.0/24 maxlen: 24 185.240.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.mft rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:cb:24:19:04:e1:2c:84:4e:92:bd:69:6b:3b:6e:cc:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0e549fdceeb02912c8a8741c816806bbe19c448 Validity Not Before: Jan 17 08:48:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=79ea4bdec822b19fc5c7c33cb6909c59780137b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:af:b7:fc:cd:84:00:de:aa:1e:f4:85:e8:56: 37:ef:86:e6:ef:2a:8d:68:0c:81:b1:fc:4c:ef:47: 3b:cf:e1:78:fb:3d:3c:78:c5:30:bf:07:4d:b6:fa: 1d:0d:03:93:4b:7c:92:cb:85:41:d8:1e:a3:8e:1b: fc:ee:cf:36:4e:e8:55:0c:0c:f3:4b:15:10:8f:15: 10:7e:83:95:e9:72:23:47:8b:28:c7:e5:71:f7:d0: 9c:9b:ed:6b:0b:11:15:d9:ba:f0:ad:3c:2a:3e:de: 42:da:d5:9b:0c:a3:0b:d7:1a:f9:26:ba:63:53:07: b4:94:71:67:14:79:2f:3c:ac:06:dc:8a:ab:02:f3: 2c:02:33:bf:e6:87:56:80:ae:c2:10:a8:cd:14:24: f9:3d:2f:61:3e:c2:01:a5:5d:e5:47:fe:38:88:00: 13:f5:f3:b5:cd:e3:33:0e:3c:07:83:8a:7e:c0:e0: 36:79:21:33:a4:a8:f3:12:14:da:d2:f9:f8:f7:98: e5:2f:01:d9:ca:5d:bf:22:0a:0f:55:7d:91:94:e5: 6c:fb:22:c8:a1:ac:9b:35:80:75:3d:72:0d:08:7a: 4a:50:1d:35:1a:09:b8:82:ba:4d:ee:22:a8:c2:ca: ab:7b:2c:27:f2:7b:73:5c:66:e0:04:bb:59:31:32: d0:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:EA:4B:DE:C8:22:B1:9F:C5:C7:C3:3C:B6:90:9C:59:78:01:37:B0 X509v3 Authority Key Identifier: keyid:C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/eepL3sgisZ_Fx8M8tpCcWXgBN7A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.240.88.0/23 Signature Algorithm: sha256WithRSAEncryption 75:9d:f2:2d:38:2c:2d:15:c4:9e:90:fc:f7:10:6a:45:d3:c4: 3b:a2:b7:56:64:f2:2e:cc:10:ce:26:d8:d7:52:fa:17:53:9f: a7:1e:fd:ff:79:18:e2:35:a3:60:9d:70:c7:d3:9d:36:77:c1: 26:81:c4:b3:48:bf:2b:9a:e7:79:63:d8:7f:f3:65:53:6c:41: f9:46:ca:1b:98:9b:92:d5:3a:22:99:e2:b7:2b:5f:8c:2a:af: 52:77:3c:ee:aa:5d:0b:1c:f2:2f:d5:a5:36:b6:da:f1:52:3f: 93:37:8f:f8:8d:7e:00:c2:cd:a5:1a:c2:b3:09:21:88:cb:3a: a3:48:90:76:fd:0d:b4:8f:fc:3a:de:c4:07:a3:7e:47:95:67: 57:f2:44:31:3c:08:49:a4:3c:98:7b:41:22:df:2d:3a:a2:43: a4:a2:db:41:e7:70:19:71:46:08:45:e8:c1:a2:40:2f:c0:2a: 66:95:18:fb:d6:4e:6c:89:25:1f:b3:20:7a:bd:a3:49:52:02: d5:7b:54:34:6f:7c:74:3a:1d:2b:49:d3:8b:7f:37:85:dc:0d: 95:ea:85:50:02:07:db:0d:55:f7:39:ab:3d:27:59:1b:e8:da: 52:37:dd:1c:d6:f0:53:73:08:ce:d2:65:e9:3a:6c:48:5a:40: 30:e2:7a:84 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvLJBkE4SyETpK9aWs7bsw+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwZTU0OWZkY2VlYjAyOTEyYzhhODc0MWM4MTY4MDZiYmUx OWM0NDgwHhcNMjYwMTE3MDg0ODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OWVhNGJkZWM4MjJiMTlmYzVjN2MzM2NiNjkwOWM1OTc4MDEzN2IwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsK+3/M2EAN6qHvSF6FY374bm7yqN aAyBsfxM70c7z+F4+z08eMUwvwdNtvodDQOTS3ySy4VB2B6jjhv87s82TuhVDAzz SxUQjxUQfoOV6XIjR4sox+Vx99Ccm+1rCxEV2brwrTwqPt5C2tWbDKML1xr5Jrpj Uwe0lHFnFHkvPKwG3IqrAvMsAjO/5odWgK7CEKjNFCT5PS9hPsIBpV3lR/44iAAT 9fO1zeMzDjwHg4p+wOA2eSEzpKjzEhTa0vn495jlLwHZyl2/IgoPVX2RlOVs+yLI oaybNYB1PXINCHpKUB01Ggm4grpN7iKowsqreywn8ntzXGbgBLtZMTLQxwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHnqS97IIrGfxcfDPLaQnFl4ATewMB8GA1UdIwQY MBaAFMDlSf3O6wKRLIqHQcgWgGu+GcRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd09WSl9jN3JBcEVzaW9kQnlCYUFhNzRaeEVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xNjBmOGYtZGJhYi00ODJkLWIzOWMt YWQyZmRhNDc5ODhlLzEvZWVwTDNzZ2lzWl9GeDhNOHRwQ2NXWGdCTjdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8xNjBmOGYtZGJhYi00ODJkLWIzOWMtYWQyZmRhNDc5ODhl LzEvd09WSl9jN3JBcEVzaW9kQnlCYUFhNzRaeEVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBufBYMA0G CSqGSIb3DQEBCwUAA4IBAQB1nfItOCwtFcSekPz3EGpF08Q7ordWZPIuzBDOJtjX UvoXU5+nHv3/eRjiNaNgnXDH0502d8EmgcSzSL8rmud5Y9h/82VTbEH5RsobmJuS 1ToimeK3K1+MKq9Sdzzuql0LHPIv1aU2ttrxUj+TN4/4jX4Aws2lGsKzCSGIyzqj SJB2/Q20j/w63sQHo35HlWdX8kQxPAhJpDyYe0Ei3y06okOkottB53AZcUYIRejB okAvwCpmlRj71k5siSUfsyB6vaNJUgLVe1Q0b3x0Oh0rSdOLfzeF3A2V6oVQAgfb DVX3Oas9J1kb6NpSN90c1vBTcwjO0mXpOmxIWkAw4nqE -----END CERTIFICATE-----Generated at Mon Jan 26 10:23:33 2026 by rpki-client