This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/ezjdknW8yKvW_oPzf0czr_SHPos.roa File: ezjdknW8yKvW_oPzf0czr_SHPos.roa (raw, json) Hash identifier: Ke5tCHtNlbJY4VFVoI0K+8QDexK6VL6V1j/4AYy554g= Subject key identifier: 7B:38:DD:92:75:BC:C8:AB:D6:FE:83:F3:7F:47:33:AF:F4:87:3E:8B Certificate issuer: /CN=b27261d715348bfd73ce9dbb72488656993ba2f1 Certificate serial: 019B7B35526821E12D6E8644EFB7733B53A4 Authority key identifier: B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/ezjdknW8yKvW_oPzf0czr_SHPos.roa Signing time: Thu 01 Jan 2026 20:17:30 +0000 ROA not before: Thu 01 Jan 2026 20:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59584 IP address blocks: 193.26.122.0/24 maxlen: 24 193.178.215.0/24 maxlen: 24 2a0e:e6c0:4000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:52:68:21:e1:2d:6e:86:44:ef:b7:73:3b:53:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b27261d715348bfd73ce9dbb72488656993ba2f1 Validity Not Before: Jan 1 20:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7b38dd9275bcc8abd6fe83f37f4733aff4873e8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f9:ad:3e:6c:c2:dd:c1:c3:c8:1f:f6:90:6e: f5:bd:dd:e5:d6:71:34:38:ae:ee:61:c2:e0:37:0e: 4e:8a:f6:c6:03:5c:ae:e2:93:bb:ea:04:1c:ec:d6: d4:53:63:a2:a6:4d:74:ce:ae:11:d1:e4:d0:42:87: 4a:93:df:b0:82:fe:e7:dd:31:bc:ae:12:61:88:7a: 4e:77:bb:fe:0f:67:55:15:88:7a:6a:97:4c:91:af: 01:c1:c4:be:21:7e:34:ee:58:4a:6f:15:69:3f:d3: 7d:62:ab:22:f6:a1:1a:97:ee:8f:ed:f0:e8:72:60: 56:9b:4d:0c:b0:3e:9a:f3:8b:65:70:1f:4e:58:db: 15:f2:a0:66:ae:66:c6:1a:22:aa:01:85:3b:26:a8: 18:3e:f7:98:a2:ac:3a:fc:a6:1d:64:68:92:17:cd: 0d:4a:1c:45:26:76:58:66:6c:aa:1d:29:74:41:5b: 4b:a0:b4:e0:03:ec:67:c1:1e:71:fb:62:72:eb:1e: b1:db:72:ad:e7:c1:22:3d:e2:35:e4:df:5a:1b:64: d8:c5:d8:23:9b:e4:f9:80:9b:19:f1:2d:8e:c8:62: 89:be:45:36:9f:b1:9f:0f:a7:a1:e8:7f:d5:80:2d: 20:b6:bd:d5:c6:11:94:36:1e:38:43:71:89:58:ce: 0d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:38:DD:92:75:BC:C8:AB:D6:FE:83:F3:7F:47:33:AF:F4:87:3E:8B X509v3 Authority Key Identifier: keyid:B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/ezjdknW8yKvW_oPzf0czr_SHPos.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.26.122.0/24 193.178.215.0/24 IPv6: 2a0e:e6c0:4000::/36 Signature Algorithm: sha256WithRSAEncryption 21:43:c5:f2:3b:fc:b9:e9:ac:92:c2:ec:b3:3f:3e:e2:e5:0e: 21:d5:27:d3:dd:cf:01:62:48:82:6e:67:71:23:e0:b6:29:3c: 4f:a8:a9:b0:a1:48:b2:30:0f:14:f5:05:e3:d9:88:5e:ab:20: c5:c2:c2:eb:2a:23:b0:99:ab:c9:75:1b:cf:ca:56:61:15:4f: 76:db:81:d0:b6:94:cf:7c:10:9e:ac:66:aa:f6:96:f6:e4:70: 69:16:44:04:b0:57:4c:41:40:47:2f:dc:cc:c4:0d:67:40:07: 6b:82:b1:51:80:3e:87:c0:ce:5d:90:ae:1a:72:fd:77:33:b9: 21:09:81:fa:af:78:52:bd:d2:65:69:31:ce:c5:d8:85:19:bf: 96:57:99:da:91:36:6e:a3:59:dc:72:07:cf:ec:a2:21:d9:c5: 3d:76:6b:ea:81:60:b4:f9:50:19:fc:ea:55:86:69:af:44:27: f3:22:95:46:33:4b:94:6e:e6:02:2a:6a:61:91:68:d3:ce:1b: 4f:12:34:cf:91:72:2b:aa:78:7e:cb:f6:85:10:e4:a1:5c:ce: d3:0f:59:b6:6d:bb:d6:6f:85:1c:89:db:ea:47:6a:8f:41:2a: 17:68:f8:35:c3:cd:2c:57:e1:f6:46:b9:65:d0:de:63:d9:bf: 2e:14:c1:cb -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt7NVJoIeEtboZE77dzO1OkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyNzI2MWQ3MTUzNDhiZmQ3M2NlOWRiYjcyNDg4NjU2OTkz YmEyZjEwHhcNMjYwMTAxMjAxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YjM4ZGQ5Mjc1YmNjOGFiZDZmZTgzZjM3ZjQ3MzNhZmY0ODczZThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfmtPmzC3cHDyB/2kG71vd3l1nE0 OK7uYcLgNw5OivbGA1yu4pO76gQc7NbUU2Oipk10zq4R0eTQQodKk9+wgv7n3TG8 rhJhiHpOd7v+D2dVFYh6apdMka8BwcS+IX407lhKbxVpP9N9Yqsi9qEal+6P7fDo cmBWm00MsD6a84tlcB9OWNsV8qBmrmbGGiKqAYU7JqgYPveYoqw6/KYdZGiSF80N ShxFJnZYZmyqHSl0QVtLoLTgA+xnwR5x+2Jy6x6x23Kt58EiPeI15N9aG2TYxdgj m+T5gJsZ8S2OyGKJvkU2n7GfD6eh6H/VgC0gtr3VxhGUNh44Q3GJWM4NUQIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFHs43ZJ1vMir1v6D839HM6/0hz6LMB8GA1UdIwQY MBaAFLJyYdcVNIv9c86du3JIhlaZO6LxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hYmE1MDItZDE5MS00ZmQ3LWE3Y2Yt NTA0ZjI3NjY3NjBmLzEvZXpqZGtuVzh5S3ZXX29QemYwY3pyX1NIUG9zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9hYmE1MDItZDE5MS00ZmQ3LWE3Y2YtNTA0ZjI3NjY3NjBm LzEvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAwRp6AwQA wbLXMA4EAgACMAgDBgQqDubAQDANBgkqhkiG9w0BAQsFAAOCAQEAIUPF8jv8uems ksLssz8+4uUOIdUn093PAWJIgm5ncSPgtik8T6ipsKFIsjAPFPUF49mIXqsgxcLC 6yojsJmryXUbz8pWYRVPdtuB0LaUz3wQnqxmqvaW9uRwaRZEBLBXTEFARy/czMQN Z0AHa4KxUYA+h8DOXZCuGnL9dzO5IQmB+q94Ur3SZWkxzsXYhRm/lleZ2pE2bqNZ 3HIHz+yiIdnFPXZr6oFgtPlQGfzqVYZpr0Qn8yKVRjNLlG7mAipqYZFo084bTxI0 z5FyK6p4fsv2hRDkoVzO0w9Ztm271m+FHInb6kdqj0EqF2j4NcPNLFfh9ka5ZdDe Y9m/LhTByw== -----END CERTIFICATE-----Generated at Sun Jan 25 16:12:31 2026 by rpki-client