This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/EE1IR__hFo0NNKF6xFAxKCvJLLc.roa File: EE1IR__hFo0NNKF6xFAxKCvJLLc.roa (raw, json) Hash identifier: c5vHGMXBjtf9/OA6kUh+XleGeiDScbpifIZCP8WtbjI= Subject key identifier: 10:4D:48:47:FF:E1:16:8D:0D:34:A1:7A:C4:50:31:28:2B:C9:2C:B7 Certificate issuer: /CN=b49eb50cb8bac92dc176e8a87cf25552822194fa Certificate serial: 019B79EC62CE2011A6A196DD37268AFF7D39 Authority key identifier: B4:9E:B5:0C:B8:BA:C9:2D:C1:76:E8:A8:7C:F2:55:52:82:21:94:FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/EE1IR__hFo0NNKF6xFAxKCvJLLc.roa Signing time: Thu 01 Jan 2026 14:18:13 +0000 ROA not before: Thu 01 Jan 2026 14:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 55081 IP address blocks: 185.117.196.0/22 maxlen: 22 2a06:8640::/32 maxlen: 32 2a06:8641::/32 maxlen: 32 2a06:8642::/32 maxlen: 32 2a06:8643::/32 maxlen: 32 2a06:8644::/32 maxlen: 32 2a06:8645::/32 maxlen: 32 2a06:8646::/32 maxlen: 32 2a06:8647::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:62:ce:20:11:a6:a1:96:dd:37:26:8a:ff:7d:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b49eb50cb8bac92dc176e8a87cf25552822194fa Validity Not Before: Jan 1 14:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=104d4847ffe1168d0d34a17ac45031282bc92cb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:38:f2:85:97:21:bd:73:59:7f:f3:fd:3e:46: 9f:1a:63:dc:bf:20:e8:bb:fa:42:3e:c5:e2:ef:13: b7:9e:d7:77:6f:61:2f:ea:4d:ab:84:43:5a:10:59: e0:24:c4:be:da:e2:07:91:ab:da:ff:2f:72:23:c2: a4:83:fc:27:77:fa:4f:b7:b5:46:b9:6b:89:e1:36: ae:b5:97:6e:39:cf:43:b0:24:d0:c6:66:b9:59:bb: 3e:2b:3a:d2:98:08:e3:c5:33:7d:7b:03:2c:dc:97: dc:1a:81:55:39:82:bb:5f:ae:fb:c6:7b:e9:87:e1: f8:c3:f9:39:64:6e:28:8a:27:f9:d7:d2:37:1b:dc: ac:0c:7d:d8:dd:88:38:59:a7:69:0e:60:39:5a:b9: 2d:15:53:47:10:2e:da:39:67:43:f1:44:46:8d:74: 62:45:46:89:7c:ed:bd:e3:e2:76:25:90:17:bb:c8: 3a:98:ce:91:1d:b9:40:36:95:02:fe:79:0d:d0:55: b5:f6:94:58:0d:ff:85:9d:db:77:ef:27:31:89:b8: 43:fb:88:09:4f:5c:2f:04:bf:82:8c:83:d6:07:60: 70:ec:dd:f2:22:1e:9f:dd:55:dc:5f:bb:94:11:65: 2c:dd:40:e8:17:88:e3:ca:b4:8f:12:bf:c4:65:1c: 1e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:4D:48:47:FF:E1:16:8D:0D:34:A1:7A:C4:50:31:28:2B:C9:2C:B7 X509v3 Authority Key Identifier: keyid:B4:9E:B5:0C:B8:BA:C9:2D:C1:76:E8:A8:7C:F2:55:52:82:21:94:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/EE1IR__hFo0NNKF6xFAxKCvJLLc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.117.196.0/22 IPv6: 2a06:8640::/29 Signature Algorithm: sha256WithRSAEncryption 15:e7:2a:41:e8:49:f5:b7:ad:e6:ca:e3:23:03:ef:36:92:4d: 8e:19:94:99:f5:98:b6:fc:3a:f8:89:11:74:e5:8d:98:92:ce: 8c:f4:2c:4b:28:f6:8d:3f:94:aa:0a:36:a3:93:70:bf:02:b2: ce:c6:67:73:c2:59:ae:8d:a6:6d:ec:08:7e:c0:f6:de:b0:5c: 1f:9c:ea:6c:0f:45:94:47:c8:ca:63:06:38:29:0b:6c:65:5e: 1d:77:40:47:52:29:4a:62:fc:71:23:51:40:c7:67:5e:1c:06: e7:f3:c9:01:43:8f:57:d5:f4:30:ae:9d:94:71:29:fc:d4:f1: 9d:c9:28:34:36:c8:23:b5:26:a9:04:cd:65:ee:4d:ee:55:af: aa:75:a3:4a:24:7c:b6:fc:97:d3:f0:a7:3c:ef:59:4e:26:0f: 83:67:ea:57:c5:5e:24:4f:a4:59:05:1e:1f:8b:67:be:15:cb: 0d:aa:44:8b:69:f2:19:4a:27:b9:70:41:5e:bb:06:72:7e:66: 98:dc:0c:6f:91:05:4b:0d:a9:73:64:a4:e0:2e:6d:c3:20:07: c3:c9:5a:39:83:a9:5b:a0:cf:70:e8:05:d1:96:05:73:76:e4: d8:e4:f5:4c:3d:f2:63:d7:40:a2:53:c5:7e:ed:cc:af:39:d6: 69:cf:c4:ac -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt57GLOIBGmoZbdNyaK/305MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0OWViNTBjYjhiYWM5MmRjMTc2ZThhODdjZjI1NTUyODIy MTk0ZmEwHhcNMjYwMTAxMTQxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDRkNDg0N2ZmZTExNjhkMGQzNGExN2FjNDUwMzEyODJiYzkyY2I3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTjyhZchvXNZf/P9PkafGmPcvyDo u/pCPsXi7xO3ntd3b2Ev6k2rhENaEFngJMS+2uIHkava/y9yI8Kkg/wnd/pPt7VG uWuJ4TautZduOc9DsCTQxma5Wbs+KzrSmAjjxTN9ewMs3JfcGoFVOYK7X677xnvp h+H4w/k5ZG4oiif519I3G9ysDH3Y3Yg4WadpDmA5WrktFVNHEC7aOWdD8URGjXRi RUaJfO294+J2JZAXu8g6mM6RHblANpUC/nkN0FW19pRYDf+Fndt37ycxibhD+4gJ T1wvBL+CjIPWB2Bw7N3yIh6f3VXcX7uUEWUs3UDoF4jjyrSPEr/EZRweJQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBBNSEf/4RaNDTShesRQMSgrySy3MB8GA1UdIwQY MBaAFLSetQy4usktwXboqHzyVVKCIZT6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEo2MURMaTZ5UzNCZHVpb2ZQSlZVb0lobFBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8zZWFhNzAtMDUyMC00NTU5LTg0MWEt NGNhOTU2YjA4YTQxLzEvRUUxSVJfX2hGbzBOTktGNnhGQXhLQ3ZKTExjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS8zZWFhNzAtMDUyMC00NTU5LTg0MWEtNGNhOTU2YjA4YTQx LzEvdEo2MURMaTZ5UzNCZHVpb2ZQSlZVb0lobFBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuXXEMA0E AgACMAcDBQMqBoZAMA0GCSqGSIb3DQEBCwUAA4IBAQAV5ypB6En1t63myuMjA+82 kk2OGZSZ9Zi2/Dr4iRF05Y2Yks6M9CxLKPaNP5SqCjajk3C/ArLOxmdzwlmujaZt 7Ah+wPbesFwfnOpsD0WUR8jKYwY4KQtsZV4dd0BHUilKYvxxI1FAx2deHAbn88kB Q49X1fQwrp2UcSn81PGdySg0NsgjtSapBM1l7k3uVa+qdaNKJHy2/JfT8Kc871lO Jg+DZ+pXxV4kT6RZBR4fi2e+FcsNqkSLafIZSie5cEFeuwZyfmaY3AxvkQVLDalz ZKTgLm3DIAfDyVo5g6lboM9w6AXRlgVzduTY5PVMPfJj10CiU8V+7cyvOdZpz8Ss -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:53 2026 by rpki-client