This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/EJHxB1GLWplOW3z3bo1s_8nmTaI.roa File: EJHxB1GLWplOW3z3bo1s_8nmTaI.roa (raw, json) Hash identifier: ftB3dkBT/a3WbmxEm7Jkp+Xb7szOwGLtS0kCu7rqfck= Subject key identifier: 10:91:F1:07:51:8B:5A:99:4E:5B:7C:F7:6E:8D:6C:FF:C9:E6:4D:A2 Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464 Certificate serial: 019B7E37ED8A1CB81E790CFCB23FA28B7071 Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/EJHxB1GLWplOW3z3bo1s_8nmTaI.roa Signing time: Fri 02 Jan 2026 10:19:12 +0000 ROA not before: Fri 02 Jan 2026 10:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210392 IP address blocks: 178.239.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:ed:8a:1c:b8:1e:79:0c:fc:b2:3f:a2:8b:70:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464 Validity Not Before: Jan 2 10:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1091f107518b5a994e5b7cf76e8d6cffc9e64da2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:89:99:ac:6c:21:0d:35:34:4e:fe:ff:0a:fd: 2f:cb:d2:d2:29:29:b6:e1:44:8d:14:83:7e:95:be: 83:12:84:95:1a:82:6f:9a:d9:c7:9a:b8:61:3b:11: 60:a9:a8:0b:75:d4:15:80:ff:fa:09:42:e2:81:bc: ff:94:a9:1e:f4:26:6f:81:32:7b:a1:e7:ed:77:5b: ac:49:8f:1e:4f:bd:94:14:e0:8b:03:ac:42:d4:7c: 7f:69:93:27:74:ce:d2:21:c0:42:b9:16:b0:fb:f0: b4:49:ac:2e:40:ba:5f:73:84:05:12:c8:aa:97:f8: 1a:f0:9e:63:8e:19:81:40:03:07:8a:7d:e8:8d:74: f3:7a:35:a7:b7:75:d9:7c:5e:5b:6f:2f:d0:a9:73: 65:48:4c:8b:1d:c2:df:f4:5f:8c:8a:ec:32:dc:2a: 7f:5f:34:00:a3:b3:6e:38:77:d4:77:6b:5b:90:32: 1e:a8:4c:a2:49:25:65:92:4d:92:60:c3:84:ed:c3: 05:3a:7f:a0:0c:7d:51:ae:54:54:32:61:06:95:2a: f5:9f:f8:53:da:3c:99:6b:43:c4:bc:62:b3:9d:f0: 31:9a:86:43:f0:1c:71:85:97:e6:00:9c:50:81:eb: 24:4a:63:33:d3:c1:1a:61:f1:c5:d2:a6:fc:09:88: 63:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:91:F1:07:51:8B:5A:99:4E:5B:7C:F7:6E:8D:6C:FF:C9:E6:4D:A2 X509v3 Authority Key Identifier: keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/EJHxB1GLWplOW3z3bo1s_8nmTaI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.239.152.0/24 Signature Algorithm: sha256WithRSAEncryption 20:c9:eb:b5:e9:d7:bf:85:1a:3b:a0:18:e8:d0:be:9b:c5:ee: 7d:d9:90:8b:25:59:53:c6:ca:dc:35:0d:94:b2:d8:fd:ca:af: 85:97:75:d2:13:44:5c:6c:60:71:86:29:50:47:b1:d9:44:83: c6:bb:ee:24:07:8c:9e:d7:cb:8e:28:e9:c0:5a:a6:78:79:a4: 3a:8b:54:46:74:a2:d3:cf:69:3d:2c:4c:4c:22:95:43:fb:79: 92:47:70:ae:6e:dd:fd:45:6e:83:a2:8b:5c:aa:5a:22:3b:af: 33:11:9e:2e:1d:9d:13:c0:9b:e8:d6:3a:79:c0:36:6d:09:56: 9f:cd:f6:a6:4b:9f:2c:dc:42:76:9c:8a:15:8a:1e:66:86:9c: 13:78:67:43:d6:ce:8e:9e:62:60:ba:b0:d9:4f:b8:eb:42:72: 04:57:da:e7:4b:51:46:0e:01:e0:01:a8:47:6e:18:4a:35:72: d0:73:dd:b8:86:0b:41:20:58:13:db:01:b6:a5:72:e2:dc:39: a5:62:be:e2:e3:7f:77:34:21:59:23:10:98:91:37:2f:68:48: c6:88:50:7b:79:c9:b2:c4:4c:95:07:76:fb:2c:32:8c:c2:42: 75:d5:5a:c6:60:89:59:c2:f4:96:65:8a:ca:95:b6:a5:46:94: 4a:d9:cc:ef -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N+2KHLgeeQz8sj+ii3BxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxMzUzMzM5OWY1NWViNTJlNmIyMjAwYzdjYWU0MjcyYjc0 ZDY0NjQwHhcNMjYwMTAyMTAxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDkxZjEwNzUxOGI1YTk5NGU1YjdjZjc2ZThkNmNmZmM5ZTY0ZGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4mZrGwhDTU0Tv7/Cv0vy9LSKSm2 4USNFIN+lb6DEoSVGoJvmtnHmrhhOxFgqagLddQVgP/6CULigbz/lKke9CZvgTJ7 oeftd1usSY8eT72UFOCLA6xC1Hx/aZMndM7SIcBCuRaw+/C0SawuQLpfc4QFEsiq l/ga8J5jjhmBQAMHin3ojXTzejWnt3XZfF5bby/QqXNlSEyLHcLf9F+Miuwy3Cp/ XzQAo7NuOHfUd2tbkDIeqEyiSSVlkk2SYMOE7cMFOn+gDH1RrlRUMmEGlSr1n/hT 2jyZa0PEvGKznfAxmoZD8BxxhZfmAJxQgeskSmMz08EaYfHF0qb8CYhjyQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBCR8QdRi1qZTlt8926NbP/J5k2iMB8GA1UdIwQY MBaAFPE1MzmfVetS5rIgDHyuQnK3TWRkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEt OTg5MTY2ODgxOTY5LzEvRUpIeEIxR0xXcGxPVzN6M2JvMXNfOG5tVGFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEtOTg5MTY2ODgxOTY5 LzEvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsu+YMA0G CSqGSIb3DQEBCwUAA4IBAQAgyeu16de/hRo7oBjo0L6bxe592ZCLJVlTxsrcNQ2U stj9yq+Fl3XSE0RcbGBxhilQR7HZRIPGu+4kB4ye18uOKOnAWqZ4eaQ6i1RGdKLT z2k9LExMIpVD+3mSR3Cubt39RW6DootcqloiO68zEZ4uHZ0TwJvo1jp5wDZtCVaf zfamS58s3EJ2nIoVih5mhpwTeGdD1s6OnmJgurDZT7jrQnIEV9rnS1FGDgHgAahH bhhKNXLQc924hgtBIFgT2wG2pXLi3DmlYr7i4393NCFZIxCYkTcvaEjGiFB7ecmy xEyVB3b7LDKMwkJ11VrGYIlZwvSWZYrKlbalRpRK2czv -----END CERTIFICATE-----Generated at Sun Jan 25 23:49:11 2026 by rpki-client