This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/eZHVoZbOsH400BVI1RK4I58Fbq0.roa File: eZHVoZbOsH400BVI1RK4I58Fbq0.roa (raw, json) Hash identifier: Y42FvaYCS4jH9SKAkhnWbCojSilwGY4l6KWGAw/foTQ= Subject key identifier: 79:91:D5:A1:96:CE:B0:7E:34:D0:15:48:D5:12:B8:23:9F:05:6E:AD Certificate issuer: /CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf Certificate serial: 019B7B3573DB041448A65CF1A1DD253329F3 Authority key identifier: 24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/eZHVoZbOsH400BVI1RK4I58Fbq0.roa Signing time: Thu 01 Jan 2026 20:17:39 +0000 ROA not before: Thu 01 Jan 2026 20:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29386 IP address blocks: 46.213.0.0/21 maxlen: 21 46.213.8.0/21 maxlen: 21 46.213.16.0/21 maxlen: 21 46.213.24.0/21 maxlen: 21 46.213.32.0/21 maxlen: 21 46.213.40.0/21 maxlen: 21 46.213.48.0/21 maxlen: 21 46.213.56.0/21 maxlen: 21 46.213.64.0/21 maxlen: 21 46.213.72.0/21 maxlen: 21 46.213.80.0/21 maxlen: 21 46.213.88.0/21 maxlen: 21 46.213.96.0/21 maxlen: 21 46.213.104.0/21 maxlen: 21 46.213.112.0/21 maxlen: 21 46.213.120.0/21 maxlen: 21 46.213.128.0/21 maxlen: 21 46.213.136.0/21 maxlen: 21 46.213.144.0/21 maxlen: 21 46.213.152.0/21 maxlen: 21 46.213.160.0/21 maxlen: 21 46.213.168.0/21 maxlen: 21 46.213.176.0/21 maxlen: 21 46.213.184.0/21 maxlen: 21 46.213.192.0/21 maxlen: 21 46.213.200.0/21 maxlen: 21 46.213.208.0/21 maxlen: 21 46.213.216.0/21 maxlen: 21 46.213.224.0/21 maxlen: 21 46.213.232.0/21 maxlen: 21 46.213.240.0/21 maxlen: 21 46.213.248.0/21 maxlen: 21 94.252.183.0/24 maxlen: 24 185.136.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.crl rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.mft rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:73:db:04:14:48:a6:5c:f1:a1:dd:25:33:29:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf Validity Not Before: Jan 1 20:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7991d5a196ceb07e34d01548d512b8239f056ead Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:aa:8d:7e:98:6a:97:d9:0f:de:99:7a:b9:bc: 19:4b:c6:d4:07:79:59:d0:33:98:16:f6:24:cd:fb: 99:4e:fc:62:10:82:43:f8:87:89:b9:a0:c7:6d:f6: 8b:78:50:7e:2a:d3:11:05:e5:d8:17:c3:a8:af:95: de:0d:8b:66:c3:f3:f2:35:11:91:26:eb:d6:32:97: 3e:75:c7:12:2f:3e:c2:cd:3f:d2:81:7f:43:e0:0c: 36:d9:ff:82:23:71:c0:9a:26:75:d5:c3:ac:02:10: ca:2f:67:92:d0:68:c1:00:30:fd:ab:9b:01:ac:69: 25:19:88:f7:f1:98:7a:0e:53:9e:0e:d4:c7:92:98: 08:7c:02:2a:41:ea:bf:b0:9b:17:73:f3:7c:96:ad: f0:38:4c:a1:19:ea:c4:ef:b9:4e:38:68:62:15:7a: e5:a7:29:1f:26:d1:0c:5c:19:85:1a:4b:09:e7:92: 8d:ea:6b:69:af:26:49:0c:c4:12:38:99:9e:6c:76: 72:90:a2:cc:7a:9c:9d:7f:ed:a1:4e:98:37:78:cc: e4:48:89:68:44:85:10:43:f7:fc:83:8c:e4:32:e9: e0:17:c3:88:d8:1e:21:18:fc:a2:a1:f7:eb:17:53: 07:f1:87:b9:f4:a2:e0:be:76:a4:ac:93:1d:ae:08: ff:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:91:D5:A1:96:CE:B0:7E:34:D0:15:48:D5:12:B8:23:9F:05:6E:AD X509v3 Authority Key Identifier: keyid:24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/eZHVoZbOsH400BVI1RK4I58Fbq0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.213.0.0/16 94.252.183.0/24 185.136.144.0/22 Signature Algorithm: sha256WithRSAEncryption 51:44:59:c4:c6:bd:12:18:57:43:94:62:a6:2e:92:76:7c:d2: 6e:96:8b:54:c1:a2:bb:87:ce:a2:68:b2:17:be:38:44:2c:80: 77:c6:0a:cb:ab:43:e3:eb:ff:86:f1:73:c7:da:3d:2e:d9:8f: e6:58:a2:02:2b:e9:7f:96:26:8d:db:b6:27:2b:27:33:08:6c: 2e:4a:02:b8:9a:3c:32:85:95:93:0e:8e:59:f2:39:36:77:51: 3c:2c:9f:03:f8:4a:58:51:05:60:a8:ca:b2:37:df:18:a7:8c: f8:6c:59:66:51:c1:cc:6a:94:da:73:e4:90:f5:4f:7f:66:3f: 39:93:44:3e:b1:8f:70:a5:2d:c2:21:08:b9:21:28:39:9c:37: e8:10:4f:f8:ed:ba:ab:3a:8c:a5:1e:94:ab:b6:f9:fe:e8:98: 7a:7e:7d:ee:a8:e6:1f:96:3d:ae:3d:9f:11:77:63:fc:81:c7: dd:cf:6a:8c:dd:02:aa:bb:9e:cb:26:14:0e:ee:42:f9:87:ed: d7:7c:8d:d4:31:99:9b:97:ac:db:8d:9a:1b:1a:6c:e9:7f:1e: 65:ba:22:83:6c:dd:62:eb:eb:0b:3b:64:76:04:b4:a3:00:3f: a7:f8:44:e0:ab:6e:65:1e:ba:3d:ef:30:40:4a:d8:37:d8:28: 1d:bd:8f:b2 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgISAZt7NXPbBBRIplzxod0lMynzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0ZDlkYTRmZmIxYmI2ZDI3M2RlMWJhZDVkYmJmMGQxZmY0 N2YwY2YwHhcNMjYwMTAxMjAxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OTkxZDVhMTk2Y2ViMDdlMzRkMDE1NDhkNTEyYjgyMzlmMDU2ZWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKqNfphql9kP3pl6ubwZS8bUB3lZ 0DOYFvYkzfuZTvxiEIJD+IeJuaDHbfaLeFB+KtMRBeXYF8Oor5XeDYtmw/PyNRGR JuvWMpc+dccSLz7CzT/SgX9D4Aw22f+CI3HAmiZ11cOsAhDKL2eS0GjBADD9q5sB rGklGYj38Zh6DlOeDtTHkpgIfAIqQeq/sJsXc/N8lq3wOEyhGerE77lOOGhiFXrl pykfJtEMXBmFGksJ55KN6mtpryZJDMQSOJmebHZykKLMepydf+2hTpg3eMzkSIlo RIUQQ/f8g4zkMungF8OI2B4hGPyioffrF1MH8Ye59KLgvnakrJMdrgj/6QIDAQAB o4ICFDCCAhAwHQYDVR0OBBYEFHmR1aGWzrB+NNAVSNUSuCOfBW6tMB8GA1UdIwQY MBaAFCTZ2k/7G7bSc94brV278NH/R/DPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSk5uYVRfc2J0dEp6M2h1dFhidncwZjlIOE04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8xZWIxMjAtNjg3Yy00OTkzLTg1N2Yt OGEwM2E3YzFmZTliLzEvZVpIVm9aYk9zSDQwMEJWSTFSSzRJNThGYnEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny8xZWIxMjAtNjg3Yy00OTkzLTg1N2YtOGEwM2E3YzFmZTli LzEvSk5uYVRfc2J0dEp6M2h1dFhidncwZjlIOE04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAATARAwMALtUDBABe /LcDBAK5iJAwDQYJKoZIhvcNAQELBQADggEBAFFEWcTGvRIYV0OUYqYuknZ80m6W i1TBoruHzqJoshe+OEQsgHfGCsurQ+Pr/4bxc8faPS7Zj+ZYogIr6X+WJo3bticr JzMIbC5KAriaPDKFlZMOjlnyOTZ3UTwsnwP4SlhRBWCoyrI33xinjPhsWWZRwcxq lNpz5JD1T39mPzmTRD6xj3ClLcIhCLkhKDmcN+gQT/jtuqs6jKUelKu2+f7omHp+ fe6o5h+WPa49nxF3Y/yBx93PaozdAqq7nssmFA7uQvmH7dd8jdQxmZuXrNuNmhsa bOl/HmW6IoNs3WLr6ws7ZHYEtKMAP6f4ROCrbmUeuj3vMEBK2DfYKB29j7I= -----END CERTIFICATE-----Generated at Mon Jan 26 05:48:53 2026 by rpki-client