This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/eJGdRqR19npkYtvPHiGG4FtsJ9I.roa File: eJGdRqR19npkYtvPHiGG4FtsJ9I.roa (raw, json) Hash identifier: 0EM+2GV5EUJcYRTF87nIhzm0VJnMFJsOgKeMDspDH20= Subject key identifier: 78:91:9D:46:A4:75:F6:7A:64:62:DB:CF:1E:21:86:E0:5B:6C:27:D2 Certificate issuer: /CN=ac8a69ecb787cce9892dc65480463fb088b613df Certificate serial: 019B77C674014661B30292057299E8BC248C Authority key identifier: AC:8A:69:EC:B7:87:CC:E9:89:2D:C6:54:80:46:3F:B0:88:B6:13:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/eJGdRqR19npkYtvPHiGG4FtsJ9I.roa Signing time: Thu 01 Jan 2026 04:17:32 +0000 ROA not before: Thu 01 Jan 2026 04:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44946 IP address blocks: 93.94.128.0/21 maxlen: 24 93.94.135.0/24 maxlen: 24 185.59.200.0/22 maxlen: 24 194.187.64.0/22 maxlen: 24 195.49.152.0/22 maxlen: 24 2a02:158::/32 maxlen: 64 2a02:158:600::/39 maxlen: 39 2a02:158:aa00::/39 maxlen: 39 2a02:158:fffe::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:74:01:46:61:b3:02:92:05:72:99:e8:bc:24:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac8a69ecb787cce9892dc65480463fb088b613df Validity Not Before: Jan 1 04:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=78919d46a475f67a6462dbcf1e2186e05b6c27d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:53:a2:dd:b4:e5:49:05:4e:18:9e:c4:35:bb: 1a:82:4c:72:87:5f:d4:5a:8d:77:6f:3b:ff:c3:35: dc:82:27:6e:36:d9:98:e0:f3:28:7e:03:a4:f1:0e: c1:5e:50:4b:95:09:7c:56:1a:33:94:b2:4a:c2:c6: e6:0b:77:79:43:29:eb:38:0a:b8:17:eb:d1:1a:85: aa:52:ef:e5:20:6e:19:4b:9d:3d:00:59:95:7c:b8: c2:24:9c:f5:e0:81:21:a2:05:ce:59:3e:ed:46:f9: a8:ff:a6:4c:ae:3a:0e:b5:90:13:9e:c7:5e:1d:b3: 3b:81:f4:ce:4c:b2:1c:de:b1:f9:2b:6e:a3:58:f4: 88:21:c7:b0:e7:46:d0:98:3c:ec:eb:34:f8:dc:8a: 77:74:8f:d8:b1:d9:6f:74:fe:a0:0d:7c:88:37:6f: 4c:24:4a:2e:77:37:e8:21:bb:69:9e:e2:55:c7:5e: 4f:12:9c:5f:45:4f:15:e6:61:3a:ec:af:79:89:e1: 8c:7c:a2:9c:6e:a0:d9:99:87:1b:de:49:fc:25:6c: 99:7c:a6:ee:05:da:c1:b0:0a:6d:6e:6a:ce:75:22: 75:63:84:51:3a:7a:ae:52:89:47:08:d2:bd:5f:b3: a5:c8:d1:ff:95:2d:78:ae:96:56:1d:76:0c:7a:61: 74:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:91:9D:46:A4:75:F6:7A:64:62:DB:CF:1E:21:86:E0:5B:6C:27:D2 X509v3 Authority Key Identifier: keyid:AC:8A:69:EC:B7:87:CC:E9:89:2D:C6:54:80:46:3F:B0:88:B6:13:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/eJGdRqR19npkYtvPHiGG4FtsJ9I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.94.128.0/21 185.59.200.0/22 194.187.64.0/22 195.49.152.0/22 IPv6: 2a02:158::/32 Signature Algorithm: sha256WithRSAEncryption 00:c9:3a:1f:7e:b1:30:f6:f2:19:4e:f6:59:c8:b9:0c:c9:e0: d4:12:c2:a0:78:0a:4f:80:1b:41:5e:ba:48:75:e7:4c:32:c7: 68:59:34:bc:f0:cf:06:c7:45:79:93:79:bd:ff:28:48:bd:e5: 3c:7e:46:1d:73:ae:00:5e:ad:9b:f0:7b:2f:9c:bc:3f:03:7a: 9d:10:9e:68:55:c6:e4:0d:fb:be:77:40:80:70:57:4a:46:fa: 50:ea:fe:71:68:1b:2d:e4:f4:28:67:14:dc:48:03:d8:73:be: d2:ed:6c:a5:ed:8e:05:40:99:44:ca:7d:8e:51:d1:07:ad:ec: 08:4f:d2:69:19:ee:44:a1:38:48:94:87:54:fe:dd:64:2e:77: 6c:a3:cc:e0:5a:30:b0:91:34:8f:c2:f4:80:e0:49:66:e9:3a: 8d:3a:ba:f3:c5:f5:3c:d6:96:1d:09:af:0c:03:ee:51:04:be: c9:13:a1:59:30:14:3b:cb:c0:6e:19:c8:5f:64:e3:2b:17:29: 11:1a:a1:26:f6:ad:f1:bd:80:85:2b:68:a7:5d:e0:f6:78:f0: 54:11:d2:2e:40:4d:8f:30:aa:e9:4f:f3:09:c5:61:ca:ea:26: a1:2c:4f:e1:51:9e:b4:8a:27:36:08:5e:79:b3:9b:bf:50:42: 94:7e:31:92 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt3xnQBRmGzApIFcpnovCSMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjOGE2OWVjYjc4N2NjZTk4OTJkYzY1NDgwNDYzZmIwODhi NjEzZGYwHhcNMjYwMTAxMDQxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODkxOWQ0NmE0NzVmNjdhNjQ2MmRiY2YxZTIxODZlMDViNmMyN2QyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFOi3bTlSQVOGJ7ENbsagkxyh1/U Wo13bzv/wzXcgiduNtmY4PMofgOk8Q7BXlBLlQl8VhozlLJKwsbmC3d5QynrOAq4 F+vRGoWqUu/lIG4ZS509AFmVfLjCJJz14IEhogXOWT7tRvmo/6ZMrjoOtZATnsde HbM7gfTOTLIc3rH5K26jWPSIIcew50bQmDzs6zT43Ip3dI/YsdlvdP6gDXyIN29M JEoudzfoIbtpnuJVx15PEpxfRU8V5mE67K95ieGMfKKcbqDZmYcb3kn8JWyZfKbu BdrBsAptbmrOdSJ1Y4RROnquUolHCNK9X7OlyNH/lS14rpZWHXYMemF0BwIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFHiRnUakdfZ6ZGLbzx4hhuBbbCfSMB8GA1UdIwQY MBaAFKyKaey3h8zpiS3GVIBGP7CIthPfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcklwcDdMZUh6T21KTGNaVWdFWV9zSWkyRTk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi84N2RhZGYtMjlkOS00OWQzLThhYzYt NGNjNDBmZmQ3OTZkLzEvZUpHZFJxUjE5bnBrWXR2UEhpR0c0RnRzSjlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi84N2RhZGYtMjlkOS00OWQzLThhYzYtNGNjNDBmZmQ3OTZk LzEvcklwcDdMZUh6T21KTGNaVWdFWV9zSWkyRTk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDXV6AAwQC uTvIAwQCwrtAAwQCwzGYMA0EAgACMAcDBQAqAgFYMA0GCSqGSIb3DQEBCwUAA4IB AQAAyToffrEw9vIZTvZZyLkMyeDUEsKgeApPgBtBXrpIdedMMsdoWTS88M8Gx0V5 k3m9/yhIveU8fkYdc64AXq2b8HsvnLw/A3qdEJ5oVcbkDfu+d0CAcFdKRvpQ6v5x aBst5PQoZxTcSAPYc77S7Wyl7Y4FQJlEyn2OUdEHrewIT9JpGe5EoThIlIdU/t1k Lndso8zgWjCwkTSPwvSA4Elm6TqNOrrzxfU81pYdCa8MA+5RBL7JE6FZMBQ7y8Bu GchfZOMrFykRGqEm9q3xvYCFK2inXeD2ePBUEdIuQE2PMKrpT/MJxWHK6iahLE/h UZ60iic2CF55s5u/UEKUfjGS -----END CERTIFICATE-----Generated at Mon Jan 26 17:44:44 2026 by rpki-client