This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/eiBp3riEsH_TyOBVbVUiHplY4Jk.roa File: eiBp3riEsH_TyOBVbVUiHplY4Jk.roa (raw, json) Hash identifier: PI2KpI5NcyEngDeDOYyNH/V6GDpxw4GW3kFlPalkcBU= Subject key identifier: 7A:20:69:DE:B8:84:B0:7F:D3:C8:E0:55:6D:55:22:1E:99:58:E0:99 Certificate issuer: /CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b Certificate serial: 019B7C807AA3FFF0565C60D2509F0D4637F8 Authority key identifier: B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/eiBp3riEsH_TyOBVbVUiHplY4Jk.roa Signing time: Fri 02 Jan 2026 02:19:13 +0000 ROA not before: Fri 02 Jan 2026 02:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15704 IP address blocks: 185.187.183.0/24 maxlen: 24 185.224.78.0/24 maxlen: 24 193.34.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.mft rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:7a:a3:ff:f0:56:5c:60:d2:50:9f:0d:46:37:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b Validity Not Before: Jan 2 02:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a2069deb884b07fd3c8e0556d55221e9958e099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:00:b0:29:73:81:18:2b:25:88:e3:1d:fe:bd: b8:33:1a:e6:a3:c8:03:22:09:cd:b2:19:d7:38:e0: 11:79:53:83:23:1c:31:2d:9c:3a:4f:1f:ec:02:a8: be:0d:99:80:64:31:b4:ff:d8:e0:74:4b:34:40:1e: 73:47:19:2d:d7:34:90:10:74:9b:c3:de:63:b8:53: 7f:e1:ae:6e:cb:d3:69:88:00:87:f8:6a:b4:4b:a7: ed:bc:9a:ab:a7:8b:94:87:1a:80:09:f3:a7:2f:8d: 11:0d:68:1c:db:9e:ee:fd:f2:0e:01:01:15:1c:6d: 5c:5e:fd:38:53:2b:b4:31:7c:22:11:aa:07:ff:cc: 10:8a:ed:85:51:4e:b3:6e:0d:75:d8:d2:1d:4b:f4: c3:a5:76:9e:62:8a:8c:bc:17:4c:c7:d4:62:77:27: fc:ed:57:08:98:b5:ec:7d:54:50:01:24:db:5e:b3: f6:7e:03:e1:aa:27:0a:fe:31:1e:98:58:57:79:d7: b2:f7:9a:db:34:48:1c:17:44:03:2c:1f:a2:35:53: ee:44:c4:f3:77:3d:da:1f:55:0f:48:b4:b4:db:32: 5c:ba:e6:25:4e:fa:40:0f:c4:ec:60:5c:18:08:c7: ad:fc:d8:ab:4b:4b:85:5f:5f:a2:83:47:ea:b2:73: 23:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:20:69:DE:B8:84:B0:7F:D3:C8:E0:55:6D:55:22:1E:99:58:E0:99 X509v3 Authority Key Identifier: keyid:B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/eiBp3riEsH_TyOBVbVUiHplY4Jk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.187.183.0/24 185.224.78.0/24 193.34.242.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:a4:3d:3f:51:d2:f8:10:c9:ff:16:3e:3a:a0:0f:b3:91:c0: f6:34:02:a1:32:14:66:68:62:6a:5b:0a:48:a8:54:5f:de:5c: 7e:6e:33:bf:d0:a7:4b:d5:eb:a5:98:6e:79:5a:97:f3:2b:70: 20:1d:a8:af:02:c5:fe:09:76:3a:bb:a6:a3:7b:be:fa:56:91: c7:9c:99:26:49:54:34:82:25:36:24:39:ac:0a:05:fe:cc:cc: 49:bf:a7:77:df:4b:87:72:c0:1b:8d:23:7d:93:05:fe:4d:4e: 59:6b:1d:4a:57:d8:bb:d7:38:db:a8:94:6f:c4:bf:51:e4:0f: f9:c8:e0:14:ca:73:d0:79:5c:53:85:76:05:60:7e:77:1d:25: b3:32:5e:31:9d:1b:ea:ae:5e:2f:79:b4:b5:ac:88:3b:06:47: 78:ae:60:64:4f:e3:a3:f3:9c:db:f2:41:65:05:6a:40:90:17: 5b:7b:9a:85:82:b3:27:0f:e5:09:0a:5e:f6:40:9c:fb:68:0e: 34:50:86:e5:1d:f4:4d:2c:66:7f:3b:07:e2:92:d1:23:db:91: b3:d3:60:6f:01:b4:31:3c:63:4a:83:a4:5c:b5:f9:3d:ab:59: 47:8a:dd:b1:c2:d3:7a:a5:57:a0:ca:73:cb:7c:09:8e:46:27: c7:5b:e1:e3 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8gHqj//BWXGDSUJ8NRjf4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MTQ5NjFmNjdmMjJjNjFlODRhNjZjOGFkOWMxYThjZTUx ZDA5OWIwHhcNMjYwMTAyMDIxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTIwNjlkZWI4ODRiMDdmZDNjOGUwNTU2ZDU1MjIxZTk5NThlMDk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigCwKXOBGCsliOMd/r24Mxrmo8gD IgnNshnXOOAReVODIxwxLZw6Tx/sAqi+DZmAZDG0/9jgdEs0QB5zRxkt1zSQEHSb w95juFN/4a5uy9NpiACH+Gq0S6ftvJqrp4uUhxqACfOnL40RDWgc257u/fIOAQEV HG1cXv04Uyu0MXwiEaoH/8wQiu2FUU6zbg112NIdS/TDpXaeYoqMvBdMx9Ridyf8 7VcImLXsfVRQASTbXrP2fgPhqicK/jEemFhXedey95rbNEgcF0QDLB+iNVPuRMTz dz3aH1UPSLS02zJcuuYlTvpAD8TsYFwYCMet/NirS0uFX1+ig0fqsnMj5wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFHogad64hLB/08jgVW1VIh6ZWOCZMB8GA1UdIwQY MBaAFLkUlh9n8ixh6EpmyK2cGozlHQmbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJTV0gyZnlMR0hvU21iSXJad2FqT1VkQ1pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8wOTE3YTctOWViZC00NWI5LTlkZTIt Mjc0NzNjYTYxMmRlLzEvZWlCcDNyaUVzSF9UeU9CVmJWVWlIcGxZNEprLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8wOTE3YTctOWViZC00NWI5LTlkZTItMjc0NzNjYTYxMmRl LzEvdVJTV0gyZnlMR0hvU21iSXJad2FqT1VkQ1pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAubu3AwQA ueBOAwQAwSLyMA0GCSqGSIb3DQEBCwUAA4IBAQArpD0/UdL4EMn/Fj46oA+zkcD2 NAKhMhRmaGJqWwpIqFRf3lx+bjO/0KdL1eulmG55WpfzK3AgHaivAsX+CXY6u6aj e776VpHHnJkmSVQ0giU2JDmsCgX+zMxJv6d330uHcsAbjSN9kwX+TU5Zax1KV9i7 1zjbqJRvxL9R5A/5yOAUynPQeVxThXYFYH53HSWzMl4xnRvqrl4vebS1rIg7Bkd4 rmBkT+Oj85zb8kFlBWpAkBdbe5qFgrMnD+UJCl72QJz7aA40UIblHfRNLGZ/Owfi ktEj25Gz02BvAbQxPGNKg6Rctfk9q1lHit2xwtN6pVegynPLfAmORifHW+Hj -----END CERTIFICATE-----Generated at Sun Jan 25 16:17:30 2026 by rpki-client