This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/2eb7NbWGKQr9AuoFG0noSQ2eJ7E.roa File: 2eb7NbWGKQr9AuoFG0noSQ2eJ7E.roa (raw, json) Hash identifier: 0jcSmBTvhe4wLRS/tRMO9Kp0nd5ABXWyz2AY1UPsHZU= Subject key identifier: D9:E6:FB:35:B5:86:29:0A:FD:02:EA:05:1B:49:E8:49:0D:9E:27:B1 Certificate issuer: /CN=23dd05eb7bd945c65df1873552dcc90cb2e17723 Certificate serial: 019B7CECBAFA2EFAF49D29603C7088D7C9EC Authority key identifier: 23:DD:05:EB:7B:D9:45:C6:5D:F1:87:35:52:DC:C9:0C:B2:E1:77:23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/2eb7NbWGKQr9AuoFG0noSQ2eJ7E.roa Signing time: Fri 02 Jan 2026 04:17:27 +0000 ROA not before: Fri 02 Jan 2026 04:17:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12400 IP address blocks: 185.105.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:ba:fa:2e:fa:f4:9d:29:60:3c:70:88:d7:c9:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23dd05eb7bd945c65df1873552dcc90cb2e17723 Validity Not Before: Jan 2 04:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d9e6fb35b586290afd02ea051b49e8490d9e27b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:73:a2:4a:3a:0e:69:44:5a:3c:10:fc:42:1b: a0:08:66:4e:d8:04:cf:2b:bf:50:35:bd:ba:b4:28: 77:ee:be:3c:3b:77:3f:e0:9f:8a:29:98:02:81:15: cd:4c:1f:39:93:35:9d:ba:99:46:98:b5:b9:25:06: 79:01:d7:9f:d0:e5:ea:91:fc:ff:e5:40:1a:9e:e3: 3d:63:3b:51:10:e1:a1:36:6f:c7:2c:c2:ab:5a:e3: 62:8c:a8:52:ce:94:7c:53:1a:79:30:dc:f6:a8:f4: 99:0b:07:b0:16:93:c3:f6:c4:af:e0:0a:d0:71:48: 94:aa:14:1b:e1:00:92:f8:e0:7e:52:8d:43:08:ab: 55:13:24:73:c4:9a:f0:c7:68:11:49:42:b4:68:32: 53:ba:f3:0e:1c:2a:e4:b8:7f:a2:f5:ad:f4:db:03: cb:d0:d0:93:5c:f8:b6:3d:ff:21:54:57:18:5c:66: 35:ef:7d:2f:2f:3e:99:52:55:c4:48:62:8e:a7:e2: f7:a7:fa:b9:5a:23:ee:c8:db:b1:7e:b0:0d:ae:6f: 80:d1:c7:84:27:c7:ea:5a:85:4b:ae:ef:67:57:fe: 48:5f:73:e1:28:72:c7:64:e2:75:40:41:3b:cb:45: d8:4a:35:bd:62:d9:7b:72:7f:51:bb:12:9d:6a:67: d2:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:E6:FB:35:B5:86:29:0A:FD:02:EA:05:1B:49:E8:49:0D:9E:27:B1 X509v3 Authority Key Identifier: keyid:23:DD:05:EB:7B:D9:45:C6:5D:F1:87:35:52:DC:C9:0C:B2:E1:77:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/2eb7NbWGKQr9AuoFG0noSQ2eJ7E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.105.176.0/22 Signature Algorithm: sha256WithRSAEncryption 37:54:4a:25:08:40:e9:7e:f9:d3:30:8a:ae:2b:ea:b9:ee:80: d2:98:4b:53:e9:39:fd:f5:36:15:9a:cf:93:e6:ec:d4:db:bc: d8:36:dc:6b:a4:48:be:d6:37:7d:ac:a6:86:23:b8:11:63:c0: d9:8c:2e:83:c2:4d:de:73:56:fd:6b:ca:3e:7e:cc:60:6d:0a: 46:73:40:63:1b:40:af:0b:5a:08:5e:61:7f:e7:6d:7b:da:ea: 85:04:f9:99:79:d3:70:32:4e:27:b6:17:75:a5:3a:c0:d2:38: c0:37:66:4c:9b:63:b7:6b:c4:98:0f:89:d9:58:9d:f9:4c:f1: 9e:34:52:1d:ec:47:b1:b7:0b:10:93:dc:df:53:cd:c8:6e:0f: 92:eb:c8:48:eb:22:a5:c8:91:6c:6e:59:e0:14:83:e3:1b:ea: c9:28:bf:7b:32:33:97:75:4b:24:7c:07:57:c1:c4:3e:95:bd: 45:d9:8b:12:47:62:bf:4d:77:d8:c8:29:f8:a0:7a:e5:16:4b: 68:05:c1:24:5c:1f:49:e6:da:8c:b9:82:56:2c:0c:60:e0:ed: b0:5b:87:5b:a5:8b:33:e6:d7:b8:b4:f9:5f:32:a0:74:39:3e: b1:0a:3d:d8:75:85:34:64:20:46:b5:1e:f8:87:2d:37:9d:7e: 28:02:ce:81 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87Lr6Lvr0nSlgPHCI18nsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZGQwNWViN2JkOTQ1YzY1ZGYxODczNTUyZGNjOTBjYjJl MTc3MjMwHhcNMjYwMTAyMDQxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOWU2ZmIzNWI1ODYyOTBhZmQwMmVhMDUxYjQ5ZTg0OTBkOWUyN2IxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXOiSjoOaURaPBD8QhugCGZO2ATP K79QNb26tCh37r48O3c/4J+KKZgCgRXNTB85kzWduplGmLW5JQZ5Adef0OXqkfz/ 5UAanuM9YztREOGhNm/HLMKrWuNijKhSzpR8Uxp5MNz2qPSZCwewFpPD9sSv4ArQ cUiUqhQb4QCS+OB+Uo1DCKtVEyRzxJrwx2gRSUK0aDJTuvMOHCrkuH+i9a302wPL 0NCTXPi2Pf8hVFcYXGY1730vLz6ZUlXESGKOp+L3p/q5WiPuyNuxfrANrm+A0ceE J8fqWoVLru9nV/5IX3PhKHLHZOJ1QEE7y0XYSjW9Ytl7cn9RuxKdamfSEQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNnm+zW1hikK/QLqBRtJ6EkNniexMB8GA1UdIwQY MBaAFCPdBet72UXGXfGHNVLcyQyy4XcjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTkwRjYzdlpSY1pkOFljMVV0ekpETExoZHlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9iODdlNTAtMzUxMC00MjBlLThiZjUt YzRhM2EwYTVhOWIxLzEvMmViN05iV0dLUXI5QXVvRkcwbm9TUTJlSjdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9iODdlNTAtMzUxMC00MjBlLThiZjUtYzRhM2EwYTVhOWIx LzEvSTkwRjYzdlpSY1pkOFljMVV0ekpETExoZHlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuWmwMA0G CSqGSIb3DQEBCwUAA4IBAQA3VEolCEDpfvnTMIquK+q57oDSmEtT6Tn99TYVms+T 5uzU27zYNtxrpEi+1jd9rKaGI7gRY8DZjC6Dwk3ec1b9a8o+fsxgbQpGc0BjG0Cv C1oIXmF/52172uqFBPmZedNwMk4nthd1pTrA0jjAN2ZMm2O3a8SYD4nZWJ35TPGe NFId7EextwsQk9zfU83Ibg+S68hI6yKlyJFsblngFIPjG+rJKL97MjOXdUskfAdX wcQ+lb1F2YsSR2K/TXfYyCn4oHrlFktoBcEkXB9J5tqMuYJWLAxg4O2wW4dbpYsz 5te4tPlfMqB0OT6xCj3YdYU0ZCBGtR74hy03nX4oAs6B -----END CERTIFICATE-----Generated at Mon Jan 26 05:04:47 2026 by rpki-client