This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/ekiBmXa0RGSr4fmLj-IxxPgeiEM.roa File: ekiBmXa0RGSr4fmLj-IxxPgeiEM.roa (raw, json) Hash identifier: eWX+tVgJTLF60b66uE6DtiWXS3La4MG/eQB2P2txTgI= Subject key identifier: 7A:48:81:99:76:B4:44:64:AB:E1:F9:8B:8F:E2:31:C4:F8:1E:88:43 Certificate issuer: /CN=9367965e2834f1893cfa8631a484071e6a2d45b7 Certificate serial: 019B7FF185E0CAE00E3A8D67C3789DAE1DFD Authority key identifier: 93:67:96:5E:28:34:F1:89:3C:FA:86:31:A4:84:07:1E:6A:2D:45:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2eWXig08Yk8-oYxpIQHHmotRbc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/ekiBmXa0RGSr4fmLj-IxxPgeiEM.roa Signing time: Fri 02 Jan 2026 18:21:33 +0000 ROA not before: Fri 02 Jan 2026 18:21:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28709 IP address blocks: 95.142.201.0/24 maxlen: 24 95.142.202.0/24 maxlen: 24 95.142.203.0/24 maxlen: 24 185.32.249.0/24 maxlen: 24 185.32.251.0/24 maxlen: 24 2a00:bdc0:e003::/48 maxlen: 48 2a00:bdc0:e004::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/k2eWXig08Yk8-oYxpIQHHmotRbc.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/k2eWXig08Yk8-oYxpIQHHmotRbc.mft rsync://rpki.ripe.net/repository/DEFAULT/k2eWXig08Yk8-oYxpIQHHmotRbc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:85:e0:ca:e0:0e:3a:8d:67:c3:78:9d:ae:1d:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9367965e2834f1893cfa8631a484071e6a2d45b7 Validity Not Before: Jan 2 18:21:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a48819976b44464abe1f98b8fe231c4f81e8843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:86:c1:f7:bd:f3:46:ec:1b:6d:f1:ab:c9:93: d7:ef:1b:25:c2:cb:c5:85:d9:15:8a:69:01:0e:7e: db:d8:1f:20:9a:25:68:5b:ba:e4:12:69:0d:b1:06: 74:22:8b:6a:99:8f:2a:03:90:45:0e:4b:fb:11:68: 51:01:2e:0e:93:73:0d:69:a4:49:3d:8c:e2:4e:78: df:85:dd:9a:8e:40:91:b5:05:d2:81:81:d0:5a:71: 3e:89:90:66:9b:20:08:d8:5a:a7:1b:89:15:57:a3: 06:a7:f3:4c:07:72:58:67:65:86:92:3b:63:e9:4a: f1:59:dd:f9:3a:bd:a1:d6:af:d1:09:33:88:10:bc: b7:68:ba:c6:b0:7d:df:e4:28:ca:3c:22:b3:81:d6: 5f:61:dd:ed:44:42:05:41:51:6c:8a:b0:66:66:67: ed:50:71:16:8b:46:60:84:a8:9a:db:04:e4:12:d4: b1:64:36:4f:b6:0d:f0:8b:94:4c:23:53:d8:05:f8: 5e:a6:94:a2:7d:0f:69:a1:1d:80:c8:64:bf:4b:c0: 7c:c3:1f:76:a6:70:6c:12:b3:b3:a8:32:64:b8:10: 52:88:89:b0:4b:5e:f6:58:6e:52:21:30:ef:c9:cf: 94:64:c2:73:b6:9c:87:a4:15:c8:c6:ff:b8:0d:e1: 8c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:48:81:99:76:B4:44:64:AB:E1:F9:8B:8F:E2:31:C4:F8:1E:88:43 X509v3 Authority Key Identifier: keyid:93:67:96:5E:28:34:F1:89:3C:FA:86:31:A4:84:07:1E:6A:2D:45:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2eWXig08Yk8-oYxpIQHHmotRbc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/ekiBmXa0RGSr4fmLj-IxxPgeiEM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/k2eWXig08Yk8-oYxpIQHHmotRbc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.142.201.0-95.142.203.255 185.32.249.0/24 185.32.251.0/24 IPv6: 2a00:bdc0:e003::-2a00:bdc0:e004:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption ae:17:bf:48:ea:1c:bf:f6:8b:ce:0e:02:e3:09:fe:37:0e:a8: 9d:d0:9d:7e:a4:2c:df:04:20:43:1b:12:92:5b:26:ba:8a:be: 08:86:f0:92:ed:e0:2c:2b:f6:78:40:0e:f7:93:f7:04:26:7f: ae:a4:05:dd:b2:04:d7:c3:b9:36:2e:7f:6b:ee:8b:26:85:0a: f1:8b:4e:22:9f:80:42:df:bf:34:0b:90:43:f0:aa:91:0e:1f: 7e:0e:b5:5d:d8:b5:d9:c3:15:0a:86:4a:97:7c:fc:6f:be:55: 23:fe:8f:be:30:9f:6f:a5:0b:15:03:32:7d:16:dc:22:d5:8a: b1:54:c3:d9:5d:f9:4c:d9:6e:a7:13:94:44:ce:20:de:5a:23: 9c:f2:17:2d:05:61:bc:56:98:b4:35:bc:db:30:78:7b:4a:99: 46:5d:43:ed:98:db:dc:a3:fd:34:70:37:47:66:af:e9:21:07: b2:0b:3d:23:e5:f8:eb:6a:a3:23:fe:c6:cb:20:c7:63:ad:5e: 9b:9b:dc:43:bf:64:db:79:1d:08:83:27:54:b5:6c:ab:92:a9: 55:b9:66:93:cc:2a:80:8d:97:40:23:d8:60:56:e3:3e:db:72: 26:e9:9a:82:04:2b:be:b8:8f:43:00:78:4e:08:b7:7d:b2:83: ca:7d:a5:03 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZt/8YXgyuAOOo1nw3idrh39MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjc5NjVlMjgzNGYxODkzY2ZhODYzMWE0ODQwNzFlNmEy ZDQ1YjcwHhcNMjYwMTAyMTgyMTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTQ4ODE5OTc2YjQ0NDY0YWJlMWY5OGI4ZmUyMzFjNGY4MWU4ODQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsobB973zRuwbbfGryZPX7xslwsvF hdkVimkBDn7b2B8gmiVoW7rkEmkNsQZ0IotqmY8qA5BFDkv7EWhRAS4Ok3MNaaRJ PYziTnjfhd2ajkCRtQXSgYHQWnE+iZBmmyAI2FqnG4kVV6MGp/NMB3JYZ2WGkjtj 6UrxWd35Or2h1q/RCTOIELy3aLrGsH3f5CjKPCKzgdZfYd3tREIFQVFsirBmZmft UHEWi0ZghKia2wTkEtSxZDZPtg3wi5RMI1PYBfheppSifQ9poR2AyGS/S8B8wx92 pnBsErOzqDJkuBBSiImwS172WG5SITDvyc+UZMJztpyHpBXIxv+4DeGMZwIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFHpIgZl2tERkq+H5i4/iMcT4HohDMB8GA1UdIwQY MBaAFJNnll4oNPGJPPqGMaSEBx5qLUW3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJlV1hpZzA4WWs4LW9ZeHBJUUhIbW90UmJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8xODEzYmEtNTA2ZS00NDRlLTljYTQt ZjA5M2UxN2IyN2VmLzEvZWtpQm1YYTBSR1NyNGZtTGotSXh4UGdlaUVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi8xODEzYmEtNTA2ZS00NDRlLTljYTQtZjA5M2UxN2IyN2Vm LzEvazJlV1hpZzA4WWs4LW9ZeHBJUUhIbW90UmJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjAgBAIAATAaMAwDBABfjskD BAJfjsgDBAC5IPkDBAC5IPswGgQCAAIwFDASAwcAKgC9wOADAwcAKgC9wOAEMA0G CSqGSIb3DQEBCwUAA4IBAQCuF79I6hy/9ovODgLjCf43Dqid0J1+pCzfBCBDGxKS Wya6ir4IhvCS7eAsK/Z4QA73k/cEJn+upAXdsgTXw7k2Ln9r7osmhQrxi04in4BC 3780C5BD8KqRDh9+DrVd2LXZwxUKhkqXfPxvvlUj/o++MJ9vpQsVAzJ9Ftwi1Yqx VMPZXflM2W6nE5REziDeWiOc8hctBWG8Vpi0NbzbMHh7SplGXUPtmNvco/00cDdH Zq/pIQeyCz0j5fjraqMj/sbLIMdjrV6bm9xDv2TbeR0IgydUtWyrkqlVuWaTzCqA jZdAI9hgVuM+23Im6ZqCBCu+uI9DAHhOCLd9soPKfaUD -----END CERTIFICATE-----Generated at Mon Jan 26 15:17:43 2026 by rpki-client