This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/ehMi1MpsSos50ixSq-SkgktFubA.roa File: ehMi1MpsSos50ixSq-SkgktFubA.roa (raw, json) Hash identifier: v7e/pMK4iqvprYrX1lZ4kmFd9T3x8khwvouPRxKbv04= Subject key identifier: 7A:13:22:D4:CA:6C:4A:8B:39:D2:2C:52:AB:E4:A4:82:4B:45:B9:B0 Certificate issuer: /CN=37518d180923a7f3c00653ec12bc702b95aab907 Certificate serial: 019B7C123B2DE384BB0B6739B9FE6BB0D2CE Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/ehMi1MpsSos50ixSq-SkgktFubA.roa Signing time: Fri 02 Jan 2026 00:18:48 +0000 ROA not before: Fri 02 Jan 2026 00:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211249 IP address blocks: 95.183.138.0/23 maxlen: 23 95.183.192.0/22 maxlen: 22 193.140.1.0/24 maxlen: 24 193.140.2.0/23 maxlen: 23 193.140.4.0/22 maxlen: 22 193.255.112.0/21 maxlen: 21 194.27.92.0/22 maxlen: 22 194.27.96.0/22 maxlen: 22 194.27.100.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.mft rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:3b:2d:e3:84:bb:0b:67:39:b9:fe:6b:b0:d2:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907 Validity Not Before: Jan 2 00:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a1322d4ca6c4a8b39d22c52abe4a4824b45b9b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:9b:82:b0:d3:5d:b4:76:45:05:04:8a:ac:3d: e5:c0:4f:cd:ff:b8:c6:40:fc:2a:ed:e1:0e:a0:cb: e9:9e:51:2b:da:f1:89:76:d6:46:e8:fd:69:e5:22: d9:8a:03:cf:f3:92:75:b9:04:4b:2c:b1:81:97:5f: d0:75:dc:0f:f9:e9:f2:af:d2:f5:ad:c1:29:d9:14: 7a:6a:e3:50:32:e5:b5:e5:e1:5c:04:91:f3:e2:5d: 27:20:84:dd:fc:c1:37:68:ee:b5:30:c4:30:0c:e9: 37:cc:f9:dc:a3:fe:c4:4a:c0:f6:73:fa:25:39:73: 47:be:22:a9:d3:cc:76:09:a0:68:8b:50:a0:28:93: 9f:ac:9a:85:f2:cb:77:8e:6c:a0:54:6c:6f:07:d7: b7:e7:76:dd:86:13:86:6d:23:99:45:13:e6:53:5d: 6f:ea:55:e3:65:6e:b3:8d:6f:4c:93:a2:1f:4d:da: 97:d4:08:42:db:d3:1f:b5:c8:ef:66:19:3a:40:fc: 71:90:ad:6c:12:7b:29:b9:38:cf:52:1d:5e:9c:91: 9c:81:ad:db:61:e3:e6:72:2f:ef:3c:9a:9a:52:65: 0e:6f:08:f0:d9:50:69:71:27:71:2f:3d:88:3c:65: 85:2b:9e:63:49:4b:72:84:17:e5:27:8f:4c:f1:cb: 03:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:13:22:D4:CA:6C:4A:8B:39:D2:2C:52:AB:E4:A4:82:4B:45:B9:B0 X509v3 Authority Key Identifier: keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/ehMi1MpsSos50ixSq-SkgktFubA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.183.138.0/23 95.183.192.0/22 193.140.1.0-193.140.7.255 193.255.112.0/21 194.27.92.0-194.27.101.255 Signature Algorithm: sha256WithRSAEncryption 40:07:dc:34:0e:00:42:a5:49:b3:3e:79:58:1f:51:e3:b2:81: 37:b4:46:66:2a:1e:98:28:59:61:28:ba:23:df:c6:2c:91:44: cd:30:31:0f:86:23:4e:10:92:6e:09:ac:3e:b8:80:75:b7:21: 2a:ea:c6:a0:64:28:52:32:81:02:37:a9:f4:6f:77:f0:a6:99: cc:15:55:67:2e:6d:4c:8e:a8:05:7d:4c:76:8b:90:62:f0:37: c8:1a:2c:6e:02:e7:55:7a:43:5c:30:48:04:15:2d:88:e1:d9: 60:62:9b:71:a3:25:04:2c:ff:40:dd:0f:f8:24:2f:30:b0:14: 8e:ba:56:c1:5a:81:15:c1:09:36:c8:fb:9f:84:3f:87:f4:18: c5:e3:98:92:13:70:75:ae:06:83:24:f4:07:58:ee:1a:28:aa: 02:aa:63:23:4e:51:42:f1:96:cc:46:14:73:e0:30:74:e1:bf: 5f:f4:23:c6:99:1e:0f:ce:89:5c:c4:1b:02:a1:5d:18:92:d7: 38:17:db:62:c0:fd:2a:80:a3:03:6b:db:42:59:d6:3e:6c:da: 67:29:eb:be:b8:f7:3f:38:c8:ea:2e:b9:5d:4b:cd:f9:aa:16: f2:96:92:7b:2e:d7:55:e1:02:a1:59:91:86:27:83:5e:c0:b5: 35:3c:55:8c -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgISAZt8Ejst44S7C2c5uf5rsNLOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NTE4ZDE4MDkyM2E3ZjNjMDA2NTNlYzEyYmM3MDJiOTVh YWI5MDcwHhcNMjYwMTAyMDAxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTEzMjJkNGNhNmM0YThiMzlkMjJjNTJhYmU0YTQ4MjRiNDViOWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7JuCsNNdtHZFBQSKrD3lwE/N/7jG QPwq7eEOoMvpnlEr2vGJdtZG6P1p5SLZigPP85J1uQRLLLGBl1/QddwP+enyr9L1 rcEp2RR6auNQMuW15eFcBJHz4l0nIITd/ME3aO61MMQwDOk3zPnco/7ESsD2c/ol OXNHviKp08x2CaBoi1CgKJOfrJqF8st3jmygVGxvB9e353bdhhOGbSOZRRPmU11v 6lXjZW6zjW9Mk6IfTdqX1AhC29MftcjvZhk6QPxxkK1sEnspuTjPUh1enJGcga3b YePmci/vPJqaUmUObwjw2VBpcSdxLz2IPGWFK55jSUtyhBflJ49M8csDZQIDAQAB o4ICMTCCAi0wHQYDVR0OBBYEFHoTItTKbEqLOdIsUqvkpIJLRbmwMB8GA1UdIwQY MBaAFDdRjRgJI6fzwAZT7BK8cCuVqrkHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjFHTkdBa2pwX1BBQmxQc0VyeHdLNVdxdVFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9mODBlZjMtOWYwYi00YmQxLTgwMTgt NTk2NzE5MjBmYjYwLzEvZWhNaTFNcHNTb3M1MGl4U3EtU2tna3RGdWJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9mODBlZjMtOWYwYi00YmQxLTgwMTgtNTk2NzE5MjBmYjYw LzEvTjFHTkdBa2pwX1BBQmxQc0VyeHdLNVdxdVFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuAwQBX7eKAwQC X7fAMAwDBADBjAEDBAPBjAADBAPB/3AwDAMEAsIbXAMEAcIbZDANBgkqhkiG9w0B AQsFAAOCAQEAQAfcNA4AQqVJsz55WB9R47KBN7RGZioemChZYSi6I9/GLJFEzTAx D4YjThCSbgmsPriAdbchKurGoGQoUjKBAjep9G938KaZzBVVZy5tTI6oBX1MdouQ YvA3yBosbgLnVXpDXDBIBBUtiOHZYGKbcaMlBCz/QN0P+CQvMLAUjrpWwVqBFcEJ Nsj7n4Q/h/QYxeOYkhNwda4GgyT0B1juGiiqAqpjI05RQvGWzEYUc+AwdOG/X/Qj xpkeD86JXMQbAqFdGJLXOBfbYsD9KoCjA2vbQlnWPmzaZynrvrj3PzjI6i65XUvN +aoW8paSey7XVeECoVmRhieDXsC1NTxVjA== -----END CERTIFICATE-----Generated at Mon Jan 26 11:06:03 2026 by rpki-client