This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/eHMcaW7AmfF3NIJ3MWb896ZKnuU.roa File: eHMcaW7AmfF3NIJ3MWb896ZKnuU.roa (raw, json) Hash identifier: XNEe6MYHlmbuNi0TLqQzKe4Tb6BdIHAldmDi9+qsVJg= Subject key identifier: 78:73:1C:69:6E:C0:99:F1:77:34:82:77:31:66:FC:F7:A6:4A:9E:E5 Certificate issuer: /CN=3087d2e1cc08a95174bf794e2f2de6e3d03ef82a Certificate serial: 019B7B36E333F54660D67F5D205468F9D54E Authority key identifier: 30:87:D2:E1:CC:08:A9:51:74:BF:79:4E:2F:2D:E6:E3:D0:3E:F8:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MIfS4cwIqVF0v3lOLy3m49A--Co.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/eHMcaW7AmfF3NIJ3MWb896ZKnuU.roa Signing time: Thu 01 Jan 2026 20:19:13 +0000 ROA not before: Thu 01 Jan 2026 20:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214790 IP address blocks: 185.223.168.0/24 maxlen: 24 185.223.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft rsync://rpki.ripe.net/repository/DEFAULT/MIfS4cwIqVF0v3lOLy3m49A--Co.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:e3:33:f5:46:60:d6:7f:5d:20:54:68:f9:d5:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3087d2e1cc08a95174bf794e2f2de6e3d03ef82a Validity Not Before: Jan 1 20:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=78731c696ec099f1773482773166fcf7a64a9ee5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1e:cb:6b:62:35:a0:0e:f4:09:3b:5a:2e:0d: d8:2e:ca:8b:d9:74:91:35:44:c6:0c:28:8d:78:d3: ae:f0:7e:31:45:78:3a:ef:9f:46:bc:6c:4e:2e:17: 57:8c:97:74:08:c2:93:0a:58:2f:a5:54:f9:ec:81: 8d:2b:00:f3:0e:cd:64:f7:8f:08:b4:4a:f8:5e:f2: 02:2b:30:80:a4:70:64:ff:b0:c8:bb:80:f4:ea:01: 08:ba:57:77:78:a4:de:56:f7:3c:bc:15:6e:cf:7f: a3:08:4b:b1:ea:09:40:3b:e3:26:9e:21:60:ca:f4: 62:29:d9:77:bc:c0:b7:19:e9:7d:92:da:dc:dc:75: 3a:3f:a2:76:31:4e:f7:6e:82:34:09:dd:b3:85:f4: e3:3f:57:e0:38:5f:4c:66:c3:b4:f4:34:7e:ce:5e: 8d:06:78:a3:ea:ab:e2:28:98:a1:be:f7:1d:df:57: 16:ed:e9:f8:fb:a7:fe:e5:93:cc:01:08:49:a3:a3: d8:4c:45:4b:64:a2:e2:2a:28:81:37:0e:f6:75:f0: 52:2a:75:24:d8:04:9f:36:b0:73:42:55:d3:d2:e9: 56:57:04:3b:fd:8a:c0:81:b4:c5:3f:df:a1:68:1b: d1:4e:b1:d1:1c:5d:21:7d:c7:62:f3:a0:17:e5:50: 26:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:73:1C:69:6E:C0:99:F1:77:34:82:77:31:66:FC:F7:A6:4A:9E:E5 X509v3 Authority Key Identifier: keyid:30:87:D2:E1:CC:08:A9:51:74:BF:79:4E:2F:2D:E6:E3:D0:3E:F8:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MIfS4cwIqVF0v3lOLy3m49A--Co.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/eHMcaW7AmfF3NIJ3MWb896ZKnuU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.223.168.0/23 Signature Algorithm: sha256WithRSAEncryption 39:cc:f9:ed:4c:39:55:e1:83:09:40:3f:03:c9:e4:a7:21:e0: b4:c1:65:dc:ce:71:00:f2:27:7a:1e:fa:6b:e8:f8:31:c1:30: de:de:ea:2b:ff:45:bf:56:6b:9c:55:35:5b:05:75:31:8e:37: 37:ac:ae:f5:e7:13:9e:ad:7c:ce:87:25:47:4b:b7:b7:e4:bf: 4f:0e:ec:ef:46:1e:5d:d7:b3:af:13:7d:92:6a:6a:ca:b5:2f: 41:38:18:d4:df:43:19:07:0e:cf:5a:0a:68:83:7c:bf:05:47: fa:4b:3a:b4:c8:c2:f8:56:52:3d:f8:e0:85:0f:37:00:9f:df: 91:e2:53:11:60:62:37:46:46:16:7d:51:01:a9:27:c3:bb:1b: 66:fc:58:a1:8f:40:b4:4f:c4:36:97:72:f4:70:40:c6:9d:3e: a1:9f:6b:58:ff:69:37:09:37:90:b7:42:9a:a9:a1:e3:3d:b6: 15:09:ee:94:7b:72:e4:ae:4e:14:85:8f:da:d0:89:65:ca:4a: 7a:b7:fb:c6:2e:ee:88:da:f9:d1:c2:41:77:58:fd:81:b0:8a: ed:00:45:c0:93:4c:1b:08:34:be:4c:2b:2c:fb:6f:6a:99:72: 77:b1:d1:f4:14:0b:5a:67:7d:28:85:7c:e1:05:76:64:79:e9: 16:70:69:e6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NuMz9UZg1n9dIFRo+dVOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwODdkMmUxY2MwOGE5NTE3NGJmNzk0ZTJmMmRlNmUzZDAz ZWY4MmEwHhcNMjYwMTAxMjAxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODczMWM2OTZlYzA5OWYxNzczNDgyNzczMTY2ZmNmN2E2NGE5ZWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxx7La2I1oA70CTtaLg3YLsqL2XSR NUTGDCiNeNOu8H4xRXg6759GvGxOLhdXjJd0CMKTClgvpVT57IGNKwDzDs1k948I tEr4XvICKzCApHBk/7DIu4D06gEIuld3eKTeVvc8vBVuz3+jCEux6glAO+MmniFg yvRiKdl3vMC3Gel9ktrc3HU6P6J2MU73boI0Cd2zhfTjP1fgOF9MZsO09DR+zl6N Bnij6qviKJihvvcd31cW7en4+6f+5ZPMAQhJo6PYTEVLZKLiKiiBNw72dfBSKnUk 2ASfNrBzQlXT0ulWVwQ7/YrAgbTFP9+haBvRTrHRHF0hfcdi86AX5VAmMQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHhzHGluwJnxdzSCdzFm/PemSp7lMB8GA1UdIwQY MBaAFDCH0uHMCKlRdL95Ti8t5uPQPvgqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUlmUzRjd0lxVkYwdjNsT0x5M200OUEtLUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8xYmE5YTYtZjYxNi00ZTc0LTk2N2Qt N2U3MTkwZmZjNGM5LzEvZUhNY2FXN0FtZkYzTklKM01XYjg5NlpLbnVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy8xYmE5YTYtZjYxNi00ZTc0LTk2N2QtN2U3MTkwZmZjNGM5 LzEvTUlmUzRjd0lxVkYwdjNsT0x5M200OUEtLUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBud+oMA0G CSqGSIb3DQEBCwUAA4IBAQA5zPntTDlV4YMJQD8DyeSnIeC0wWXcznEA8id6Hvpr 6PgxwTDe3uor/0W/VmucVTVbBXUxjjc3rK715xOerXzOhyVHS7e35L9PDuzvRh5d 17OvE32SamrKtS9BOBjU30MZBw7PWgpog3y/BUf6Szq0yML4VlI9+OCFDzcAn9+R 4lMRYGI3RkYWfVEBqSfDuxtm/Fihj0C0T8Q2l3L0cEDGnT6hn2tY/2k3CTeQt0Ka qaHjPbYVCe6Ue3Lkrk4UhY/a0Illykp6t/vGLu6I2vnRwkF3WP2BsIrtAEXAk0wb CDS+TCss+29qmXJ3sdH0FAtaZ30ohXzhBXZkeekWcGnm -----END CERTIFICATE-----Generated at Sun Jan 25 15:12:15 2026 by rpki-client