This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/eKcVeXq2wt0SKbLGS84_xIQwRyI.roa File: eKcVeXq2wt0SKbLGS84_xIQwRyI.roa (raw, json) Hash identifier: o/AvUkqirZcVTc0Fj5CZijcSI6/NhaqXETyeyP//FGQ= Subject key identifier: 78:A7:15:79:7A:B6:C2:DD:12:29:B2:C6:4B:CE:3F:C4:84:30:47:22 Certificate issuer: /CN=64f873adb6a1f3e81b3343c74998947526c43dcf Certificate serial: 019B78A33D85EC14CE9C71773710CE8B5484 Authority key identifier: 64:F8:73:AD:B6:A1:F3:E8:1B:33:43:C7:49:98:94:75:26:C4:3D:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPhzrbah8-gbM0PHSZiUdSbEPc8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/eKcVeXq2wt0SKbLGS84_xIQwRyI.roa Signing time: Thu 01 Jan 2026 08:18:42 +0000 ROA not before: Thu 01 Jan 2026 08:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59657 IP address blocks: 194.37.255.0/24 maxlen: 24 195.190.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/ZPhzrbah8-gbM0PHSZiUdSbEPc8.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/ZPhzrbah8-gbM0PHSZiUdSbEPc8.mft rsync://rpki.ripe.net/repository/DEFAULT/ZPhzrbah8-gbM0PHSZiUdSbEPc8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:3d:85:ec:14:ce:9c:71:77:37:10:ce:8b:54:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64f873adb6a1f3e81b3343c74998947526c43dcf Validity Not Before: Jan 1 08:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=78a715797ab6c2dd1229b2c64bce3fc484304722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:16:27:81:0b:04:8c:7a:b0:aa:94:87:fc:3e: 74:4a:64:2b:34:2c:15:88:14:74:1e:7b:63:e0:9b: fe:49:81:ed:20:53:f4:75:2f:72:9e:71:75:53:23: 14:02:35:9f:d6:7d:e5:a6:36:fc:f9:f7:80:17:b8: c4:4d:61:58:b5:6e:36:52:c2:b1:ba:99:79:8f:26: ba:70:b4:87:d2:fc:93:14:93:08:b1:9e:d9:f2:ce: 7a:00:e5:93:25:25:a3:fd:11:7a:94:d8:8c:4a:1b: 21:d9:6d:16:d4:87:ae:d2:13:7d:19:6b:f6:30:51: 11:7a:92:82:5b:85:80:fe:67:ad:ed:0c:4a:d2:c6: f0:ab:ec:cc:cb:ff:0a:01:ad:d9:89:e4:60:c6:a4: f5:20:6d:2c:1c:31:79:b7:1f:2e:28:e2:c5:04:4d: 91:da:c0:fb:b4:e3:c1:ea:aa:b6:ca:fe:e5:a7:f8: ba:0c:2d:04:76:d4:0b:3f:fc:a7:ed:80:07:b4:62: 3a:e3:86:2c:bf:5c:1f:04:4d:cc:2f:b2:e9:cb:8a: 14:ce:56:d3:97:56:91:da:18:91:11:22:f3:4b:ac: 75:93:cb:d6:0d:19:2c:bf:5f:c5:64:a4:3a:f6:5f: c4:71:c9:44:73:43:50:e1:03:fc:ab:a6:20:75:22: 6e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:A7:15:79:7A:B6:C2:DD:12:29:B2:C6:4B:CE:3F:C4:84:30:47:22 X509v3 Authority Key Identifier: keyid:64:F8:73:AD:B6:A1:F3:E8:1B:33:43:C7:49:98:94:75:26:C4:3D:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPhzrbah8-gbM0PHSZiUdSbEPc8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/eKcVeXq2wt0SKbLGS84_xIQwRyI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/ZPhzrbah8-gbM0PHSZiUdSbEPc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.37.255.0/24 195.190.135.0/24 Signature Algorithm: sha256WithRSAEncryption ea:11:d2:b2:2d:ea:57:6e:c9:61:63:dd:d9:26:ad:c7:2d:e7: 2a:fc:14:23:c8:bc:ff:85:cf:ef:ba:84:d8:3a:6e:6a:85:9c: 3b:a4:4e:52:8d:15:8a:41:4c:8c:a2:72:d5:0e:4e:5f:cc:e4: f5:51:ae:fc:03:d1:45:a6:80:05:50:a0:f3:f4:e2:7c:11:14: 59:25:e5:fc:0e:0b:d9:89:07:e2:55:e1:f2:eb:54:89:da:9f: 7d:b0:6d:05:82:fd:8d:ea:9c:67:ba:90:ff:d7:b4:f9:b3:29: c5:b6:c5:d5:4e:a4:70:cf:b8:cd:94:30:ed:81:c2:11:97:39: fb:ff:9b:b0:02:d6:07:8b:c2:c4:cf:15:b5:4a:08:e8:25:5f: ed:9f:fa:13:66:1f:94:d8:ce:4b:a4:13:ec:8f:ba:a0:3f:76: fe:fe:de:b2:f9:1c:38:b3:85:d1:a9:97:e0:fe:3f:53:1a:a6: 00:d6:33:0a:24:d0:50:c3:01:06:6a:b8:b5:d5:96:88:ca:42: 02:f1:8e:6e:d4:0f:39:9c:18:2b:ea:07:f6:46:4a:2e:c2:95: 68:60:82:f9:24:12:bb:30:d4:0a:4f:d4:9d:b3:0c:16:38:5e: de:e9:bc:b0:04:ce:64:08:66:bc:21:43:34:b8:a7:7c:79:ed: 8f:ae:6a:68 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4oz2F7BTOnHF3NxDOi1SEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0Zjg3M2FkYjZhMWYzZTgxYjMzNDNjNzQ5OTg5NDc1MjZj NDNkY2YwHhcNMjYwMTAxMDgxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OGE3MTU3OTdhYjZjMmRkMTIyOWIyYzY0YmNlM2ZjNDg0MzA0NzIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxYngQsEjHqwqpSH/D50SmQrNCwV iBR0Hntj4Jv+SYHtIFP0dS9ynnF1UyMUAjWf1n3lpjb8+feAF7jETWFYtW42UsKx upl5jya6cLSH0vyTFJMIsZ7Z8s56AOWTJSWj/RF6lNiMShsh2W0W1Ieu0hN9GWv2 MFERepKCW4WA/met7QxK0sbwq+zMy/8KAa3ZieRgxqT1IG0sHDF5tx8uKOLFBE2R 2sD7tOPB6qq2yv7lp/i6DC0EdtQLP/yn7YAHtGI644Ysv1wfBE3ML7Lpy4oUzlbT l1aR2hiRESLzS6x1k8vWDRksv1/FZKQ69l/EcclEc0NQ4QP8q6YgdSJuBQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHinFXl6tsLdEimyxkvOP8SEMEciMB8GA1UdIwQY MBaAFGT4c622ofPoGzNDx0mYlHUmxD3PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlBoenJiYWg4LWdiTTBQSFNaaVVkU2JFUGM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9iOWU0YzQtYTNkYy00NmU4LWFhM2Ut Mzk3ZjM2YzkxOTgyLzEvZUtjVmVYcTJ3dDBTS2JMR1M4NF94SVF3UnlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9iOWU0YzQtYTNkYy00NmU4LWFhM2UtMzk3ZjM2YzkxOTgy LzEvWlBoenJiYWg4LWdiTTBQSFNaaVVkU2JFUGM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwiX/AwQA w76HMA0GCSqGSIb3DQEBCwUAA4IBAQDqEdKyLepXbslhY93ZJq3HLecq/BQjyLz/ hc/vuoTYOm5qhZw7pE5SjRWKQUyMonLVDk5fzOT1Ua78A9FFpoAFUKDz9OJ8ERRZ JeX8DgvZiQfiVeHy61SJ2p99sG0Fgv2N6pxnupD/17T5synFtsXVTqRwz7jNlDDt gcIRlzn7/5uwAtYHi8LEzxW1SgjoJV/tn/oTZh+U2M5LpBPsj7qgP3b+/t6y+Rw4 s4XRqZfg/j9TGqYA1jMKJNBQwwEGari11ZaIykIC8Y5u1A85nBgr6gf2RkouwpVo YIL5JBK7MNQKT9SdswwWOF7e6bywBM5kCGa8IUM0uKd8ee2Prmpo -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:50 2026 by rpki-client