This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Eb2QZpAtEmdDYzcM38VUBuHTsRU.roa File: Eb2QZpAtEmdDYzcM38VUBuHTsRU.roa (raw, json) Hash identifier: Sod1B79aMwwZVivyAqO+s7l8S7cXwaQDAAMG0+CxZNU= Subject key identifier: 11:BD:90:66:90:2D:12:67:43:63:37:0C:DF:C5:54:06:E1:D3:B1:15 Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933 Certificate serial: 019B7D5CFA7DBFA2C8CE34DD943400252F31 Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Eb2QZpAtEmdDYzcM38VUBuHTsRU.roa Signing time: Fri 02 Jan 2026 06:20:04 +0000 ROA not before: Fri 02 Jan 2026 06:20:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5588 IP address blocks: 78.133.128.0/17 maxlen: 17 85.219.128.0/17 maxlen: 17 89.174.0.0/16 maxlen: 16 89.174.23.0/24 maxlen: 24 94.42.0.0/16 maxlen: 16 157.25.0.0/16 maxlen: 16 195.94.192.0/19 maxlen: 19 217.8.160.0/19 maxlen: 19 217.153.0.0/16 maxlen: 16 2001:4190::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.mft rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:fa:7d:bf:a2:c8:ce:34:dd:94:34:00:25:2f:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933 Validity Not Before: Jan 2 06:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=11bd9066902d12674363370cdfc55406e1d3b115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ad:30:3b:9e:db:ed:a4:fb:ec:a8:53:0b:c9: 8e:e3:2f:a6:6e:20:c2:2b:ea:3f:52:ea:d4:48:13: bb:a4:f3:6d:5e:3f:0a:ca:e2:24:27:2c:fa:1f:96: 1c:74:63:2a:9a:2c:c9:69:bb:c7:c9:60:62:85:f7: 20:f2:49:08:c1:27:8d:e0:f7:5a:f7:99:20:d8:39: d6:5e:1c:b9:93:9c:d3:b9:83:57:7e:c4:59:dd:97: 2d:9b:76:69:36:74:3b:b0:43:1b:59:ef:bd:fd:92: 29:6d:d8:c7:be:2a:49:c9:61:f8:b1:1c:a5:c3:fb: 16:05:a0:4c:15:82:53:92:69:22:b6:a3:b9:51:9e: 16:3a:57:5e:44:79:76:b1:f7:9a:9e:cb:5d:9d:64: e1:72:ef:ca:9d:55:5b:cf:88:d7:38:fd:cb:d7:a8: 75:af:95:18:92:d0:3f:01:38:24:40:04:b5:66:25: da:9d:c0:75:92:7f:96:9a:d1:6f:1c:17:29:f9:19: c5:e7:1f:40:d0:d3:1c:7f:7f:73:1c:3b:a4:5c:96: af:9b:82:fc:14:66:7f:44:3c:53:5d:6f:1b:87:cf: 92:84:29:9b:23:f2:d6:b1:6d:cd:82:61:a2:f4:04: 23:b7:21:49:23:a5:2a:c5:50:85:1d:01:29:fc:6a: e4:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:BD:90:66:90:2D:12:67:43:63:37:0C:DF:C5:54:06:E1:D3:B1:15 X509v3 Authority Key Identifier: keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Eb2QZpAtEmdDYzcM38VUBuHTsRU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.133.128.0/17 85.219.128.0/17 89.174.0.0/16 94.42.0.0/16 157.25.0.0/16 195.94.192.0/19 217.8.160.0/19 217.153.0.0/16 IPv6: 2001:4190::/32 Signature Algorithm: sha256WithRSAEncryption 79:10:82:ae:54:16:eb:67:63:b6:60:8e:35:9c:c1:3f:0a:cf: b0:44:39:ec:49:31:78:4c:f8:5c:c7:21:ca:31:2f:df:1d:6a: 35:89:41:b7:6a:28:8e:89:7b:50:23:5a:8a:a1:64:b5:4f:35: e6:df:bd:62:6d:46:cd:9e:ba:db:40:05:e5:67:7a:14:b9:f8: 09:6c:38:86:b7:b1:c2:b3:24:19:ab:ce:86:0e:fc:e9:d9:4d: 6a:b6:ba:42:5a:df:23:4f:9f:6b:40:b3:75:53:b4:e8:9d:fe: 3f:8d:cc:b7:4e:6d:0d:46:0c:56:13:f2:73:c4:f3:73:0b:31: 87:38:93:3f:1d:74:1e:09:e3:dc:63:6f:9b:0b:da:49:f8:fa: 61:81:6c:4d:f7:ed:57:f7:64:af:83:3f:af:51:5a:cd:4e:c7: 0d:64:22:ee:3a:2d:ae:ea:a7:48:24:37:5e:eb:39:ca:06:4a: c9:02:6f:b0:0d:48:58:e7:36:e0:60:ab:15:06:69:8e:4e:34: d9:e4:21:c2:0b:90:7b:3e:60:11:60:8a:65:1a:57:af:f7:95: e5:c4:91:53:e3:ed:ed:09:18:56:33:a5:a5:18:ca:69:44:8b: 20:88:1a:e8:23:0a:3c:89:ae:5f:22:0d:73:a5:ca:7e:17:c7: ec:6a:ea:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgISAZt9XPp9v6LIzjTdlDQAJS8xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhY2E2M2RmMjQ4YjdhZGYzZGRkMDdlOGMyZDNlZWRkMDJj ZWY5MzMwHhcNMjYwMTAyMDYyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMWJkOTA2NjkwMmQxMjY3NDM2MzM3MGNkZmM1NTQwNmUxZDNiMTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjK0wO57b7aT77KhTC8mO4y+mbiDC K+o/UurUSBO7pPNtXj8KyuIkJyz6H5YcdGMqmizJabvHyWBihfcg8kkIwSeN4Pda 95kg2DnWXhy5k5zTuYNXfsRZ3Zctm3ZpNnQ7sEMbWe+9/ZIpbdjHvipJyWH4sRyl w/sWBaBMFYJTkmkitqO5UZ4WOldeRHl2sfeanstdnWThcu/KnVVbz4jXOP3L16h1 r5UYktA/ATgkQAS1ZiXancB1kn+WmtFvHBcp+RnF5x9A0NMcf39zHDukXJavm4L8 FGZ/RDxTXW8bh8+ShCmbI/LWsW3NgmGi9AQjtyFJI6UqxVCFHQEp/GrkhQIDAQAB o4ICPjCCAjowHQYDVR0OBBYEFBG9kGaQLRJnQ2M3DN/FVAbh07EVMB8GA1UdIwQY MBaAFBrKY98ki3rfPd0H6MLT7t0CzvkzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzIt OTFlMzE4NGJiMGFiLzEvRWIyUVpwQXRFbWREWXpjTTM4VlVCdUhUc1JVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzItOTFlMzE4NGJiMGFi LzEvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFQGCCsGAQUFBwEHAQH/BEUwQzAyBAIAATAsAwQHToWAAwQH VduAAwMAWa4DAwBeKgMDAJ0ZAwQFw17AAwQF2QigAwMA2ZkwDQQCAAIwBwMFACAB QZAwDQYJKoZIhvcNAQELBQADggEBAHkQgq5UFutnY7ZgjjWcwT8Kz7BEOexJMXhM +FzHIcoxL98dajWJQbdqKI6Je1AjWoqhZLVPNebfvWJtRs2euttABeVnehS5+Als OIa3scKzJBmrzoYO/OnZTWq2ukJa3yNPn2tAs3VTtOid/j+NzLdObQ1GDFYT8nPE 83MLMYc4kz8ddB4J49xjb5sL2kn4+mGBbE337Vf3ZK+DP69RWs1Oxw1kIu46La7q p0gkN17rOcoGSskCb7ANSFjnNuBgqxUGaY5ONNnkIcILkHs+YBFgimUaV6/3leXE kVPj7e0JGFYzpaUYymlEiyCIGugjCjyJrl8iDXOlyn4Xx+xq6ss= -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:02 2026 by rpki-client