This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/E7BW_8fVLRmphh5TsZba9Rvd3kU.roa File: E7BW_8fVLRmphh5TsZba9Rvd3kU.roa (raw, json) Hash identifier: aLR4qOWHBBoXqv3Yx8BoWKYJaEGNBYKmGm00kiTbgcM= Subject key identifier: 13:B0:56:FF:C7:D5:2D:19:A9:86:1E:53:B1:96:DA:F5:1B:DD:DE:45 Certificate issuer: /CN=29390ec0adca5f0743d181145c7899f991fb65e0 Certificate serial: 019B7EA65D31FA32C9E6C7B359782C87F1FD Authority key identifier: 29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/E7BW_8fVLRmphh5TsZba9Rvd3kU.roa Signing time: Fri 02 Jan 2026 12:19:50 +0000 ROA not before: Fri 02 Jan 2026 12:19:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214956 IP address blocks: 195.151.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:5d:31:fa:32:c9:e6:c7:b3:59:78:2c:87:f1:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29390ec0adca5f0743d181145c7899f991fb65e0 Validity Not Before: Jan 2 12:19:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=13b056ffc7d52d19a9861e53b196daf51bddde45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:59:62:16:f4:97:6c:81:e7:ee:a5:c4:eb:6b: 49:3e:a6:ba:46:8f:6a:e3:f8:44:fc:f3:a3:29:61: f2:bc:c7:98:a7:e3:df:d8:a7:b0:16:cf:bf:07:a1: 6f:f5:f3:96:49:7b:7f:03:c9:61:88:c3:62:3f:f8: 86:d5:d3:c0:4a:49:ae:7d:6c:f1:fc:ba:8b:4c:4f: 90:f7:8b:ac:fd:79:86:78:c8:e3:40:2e:3e:e9:55: 61:a2:c6:c0:7c:b1:96:d4:f9:6d:bd:8e:3a:dd:87: f7:66:87:c1:8e:9d:2f:16:be:c5:bb:e8:b5:11:b0: 1a:7c:08:0d:cb:6a:48:70:cc:9b:4f:63:c3:2e:d2: bb:c0:48:a5:b9:8a:0a:f2:41:ef:1f:f4:59:ee:39: b2:28:b0:29:73:71:ed:f2:df:1e:6a:25:0a:ed:b1: 22:c9:f0:1e:99:97:05:0d:37:51:7a:08:04:af:c9: 8b:93:92:ed:ef:a9:f7:c7:60:0e:f5:00:40:c4:7d: f4:52:71:8c:e2:16:0d:e8:d0:9d:e8:dd:7d:d6:ad: 84:3a:92:17:23:72:ad:5b:02:3c:e7:99:33:1a:92: e1:63:04:55:37:2f:40:a2:2f:a1:63:2e:21:f2:b1: 61:8b:6b:0d:39:ec:fd:62:c1:6f:16:12:70:72:64: 5a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:B0:56:FF:C7:D5:2D:19:A9:86:1E:53:B1:96:DA:F5:1B:DD:DE:45 X509v3 Authority Key Identifier: keyid:29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/E7BW_8fVLRmphh5TsZba9Rvd3kU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.151.168.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:de:77:73:e4:90:6e:c9:16:6a:f7:10:af:dd:30:8d:d4:f8: 24:58:ed:03:80:c4:62:2b:c9:48:16:c4:f4:da:55:05:42:3a: 16:1f:2e:24:a9:b0:ad:ab:9a:e6:c3:97:ce:6e:50:0c:e2:b4: 82:73:fb:9d:72:c5:28:1d:c4:18:9d:53:bd:ca:f0:52:49:0c: f8:cb:61:93:90:b7:95:7f:80:7c:59:6d:28:2b:1e:85:1c:e0: 08:97:b4:c2:30:73:ae:01:ad:a0:89:c7:e0:68:66:d7:d2:53: c9:69:1a:9b:2f:76:07:06:1f:c6:dd:58:f0:a3:34:d5:4b:37: bb:d3:f0:dc:cf:f0:eb:35:dc:33:5b:53:fe:87:a3:6f:f9:2a: 0d:59:32:c0:c2:c6:47:90:cc:57:66:42:c8:5e:84:df:fb:9a: 7b:d7:c5:e3:cf:20:7f:1a:29:93:9c:b5:b4:bd:a3:a5:86:9e: 47:1c:11:cd:48:e2:96:1d:bd:db:3a:3b:38:e5:1a:78:2e:38: a4:6e:0e:0f:4b:4f:f8:d9:c5:ec:6c:0f:93:e8:39:a2:4e:94: 1c:b2:60:ae:ad:d8:59:7e:fb:57:bf:ee:4b:81:03:73:b5:99: 78:63:5b:35:24:36:b0:d5:8a:5c:98:95:4e:1d:59:5d:b0:2a: 0b:4c:f2:02 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pl0x+jLJ5sezWXgsh/H9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MzkwZWMwYWRjYTVmMDc0M2QxODExNDVjNzg5OWY5OTFm YjY1ZTAwHhcNMjYwMTAyMTIxOTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxM2IwNTZmZmM3ZDUyZDE5YTk4NjFlNTNiMTk2ZGFmNTFiZGRkZTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFliFvSXbIHn7qXE62tJPqa6Ro9q 4/hE/POjKWHyvMeYp+Pf2KewFs+/B6Fv9fOWSXt/A8lhiMNiP/iG1dPASkmufWzx /LqLTE+Q94us/XmGeMjjQC4+6VVhosbAfLGW1PltvY463Yf3ZofBjp0vFr7Fu+i1 EbAafAgNy2pIcMybT2PDLtK7wEiluYoK8kHvH/RZ7jmyKLApc3Ht8t8eaiUK7bEi yfAemZcFDTdReggEr8mLk5Lt76n3x2AO9QBAxH30UnGM4hYN6NCd6N191q2EOpIX I3KtWwI855kzGpLhYwRVNy9Aoi+hYy4h8rFhi2sNOez9YsFvFhJwcmRaaQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBOwVv/H1S0ZqYYeU7GW2vUb3d5FMB8GA1UdIwQY MBaAFCk5DsCtyl8HQ9GBFFx4mfmR+2XgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1RrT3dLM0tYd2REMFlFVVhIaVotWkg3WmVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9iMzEzOTItMmQxYy00OTM0LWE1OWUt ZWQ0MzNhYWM3ODI4LzEvRTdCV184ZlZMUm1waGg1VHNaYmE5UnZkM2tVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9iMzEzOTItMmQxYy00OTM0LWE1OWUtZWQ0MzNhYWM3ODI4 LzEvS1RrT3dLM0tYd2REMFlFVVhIaVotWkg3WmVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw5eoMA0G CSqGSIb3DQEBCwUAA4IBAQAr3ndz5JBuyRZq9xCv3TCN1PgkWO0DgMRiK8lIFsT0 2lUFQjoWHy4kqbCtq5rmw5fOblAM4rSCc/udcsUoHcQYnVO9yvBSSQz4y2GTkLeV f4B8WW0oKx6FHOAIl7TCMHOuAa2gicfgaGbX0lPJaRqbL3YHBh/G3VjwozTVSze7 0/Dcz/DrNdwzW1P+h6Nv+SoNWTLAwsZHkMxXZkLIXoTf+5p718XjzyB/GimTnLW0 vaOlhp5HHBHNSOKWHb3bOjs45Rp4Ljikbg4PS0/42cXsbA+T6DmiTpQcsmCurdhZ fvtXv+5LgQNztZl4Y1s1JDaw1YpcmJVOHVldsCoLTPIC -----END CERTIFICATE-----Generated at Mon Jan 26 07:56:27 2026 by rpki-client