This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/eBs4SdTGJbCQ3DLwCVSn5SRRZ64.roa File: eBs4SdTGJbCQ3DLwCVSn5SRRZ64.roa (raw, json) Hash identifier: X7LaFW8OdKD9K1w6o7caUH266pqTgiUPVyTAbU8JTpI= Subject key identifier: 78:1B:38:49:D4:C6:25:B0:90:DC:32:F0:09:54:A7:E5:24:51:67:AE Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B78347FB8EC144A0FCF03367F8421E456 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/eBs4SdTGJbCQ3DLwCVSn5SRRZ64.roa Signing time: Thu 01 Jan 2026 06:17:44 +0000 ROA not before: Thu 01 Jan 2026 06:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202671 IP address blocks: 193.235.128.0/24 maxlen: 24 194.68.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:7f:b8:ec:14:4a:0f:cf:03:36:7f:84:21:e4:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=781b3849d4c625b090dc32f00954a7e5245167ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a9:f1:62:00:76:c9:8c:e8:85:89:b6:28:f8: cd:cd:c1:6d:f2:1d:bd:78:c8:53:a3:a6:4c:f1:81: 3a:f5:1f:d8:80:e8:e7:76:51:d6:26:e8:5e:00:4b: e2:04:69:d5:a9:e8:71:1f:2a:a6:30:0f:0c:20:d3: 2d:25:c8:9f:82:d2:24:bf:85:42:6e:da:da:e3:c1: 30:0d:b9:e3:f2:b7:e0:35:70:c1:b6:c9:7f:26:77: 61:95:1f:4d:08:35:14:86:8f:a0:bb:b7:ec:b0:5e: c1:b9:d4:25:b0:85:6b:d6:9e:40:cb:eb:48:36:82: 6f:5a:67:0a:bd:73:4b:44:5e:8a:00:2e:62:6f:4c: 1f:92:29:db:68:8a:6b:3e:5b:77:63:62:a9:a4:59: ce:bd:23:f9:ff:00:db:dc:5f:a3:b2:ca:d8:b5:31: ec:dd:51:67:7e:2a:7e:c9:7c:3d:23:a7:7d:4e:f2: 40:30:d6:8d:8f:06:e0:3c:b9:bc:5a:5f:67:fe:c1: f1:76:2d:0d:eb:47:ea:1f:55:d5:11:08:21:e9:2e: 63:64:10:6c:99:2e:6c:55:3a:aa:90:84:ae:c0:e1: 0a:e0:d0:7f:88:b1:60:94:43:bd:a9:31:ee:cc:81: 80:ea:4d:77:47:5b:4c:3c:d3:01:e2:ba:b6:88:8a: a8:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:1B:38:49:D4:C6:25:B0:90:DC:32:F0:09:54:A7:E5:24:51:67:AE X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/eBs4SdTGJbCQ3DLwCVSn5SRRZ64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.235.128.0/24 194.68.64.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:1d:c3:cf:25:3a:85:a6:87:de:c9:7c:6e:4f:ed:21:7e:11: 62:9f:c0:3c:1d:cd:7e:1b:00:3b:78:0a:d2:f6:37:7c:7d:54: 5c:25:32:c7:9e:91:3c:f0:f6:09:7b:ac:82:f1:6b:9c:78:46: 25:d0:a0:9d:88:92:5f:eb:3c:97:82:8c:2a:0e:85:04:62:f7: bd:eb:cf:e1:27:52:7e:95:bc:9d:8a:ad:a6:93:33:0e:77:a8: 4e:99:d5:64:c5:fc:3f:a9:13:a9:fc:1b:85:21:da:09:d4:14: ea:04:69:4d:cf:51:16:96:da:7d:78:83:0b:a6:42:12:44:1f: 20:c4:99:08:c6:8d:df:6e:6c:a9:e0:71:cc:ef:32:5f:20:b0: e1:19:da:89:37:d2:da:ee:68:a4:d3:22:8a:1f:64:c6:c3:e4: e1:cc:f3:6b:e1:24:c2:09:3f:7c:cd:0a:ef:4d:5f:44:18:fd: b3:16:34:3c:eb:f4:88:98:ab:38:41:8c:f6:ac:ba:77:90:0d: c2:34:b2:45:31:a8:ed:5c:b7:bd:e0:dd:a7:e3:14:f5:7b:d6: 17:b7:e0:e2:90:ca:d8:a9:5c:4b:5e:09:14:6f:8b:30:af:d2: b9:c1:69:d4:58:ab:e8:50:86:42:ae:f3:44:20:b2:a7:5e:16: 7f:9b:42:ff -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NH+47BRKD88DNn+EIeRWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODFiMzg0OWQ0YzYyNWIwOTBkYzMyZjAwOTU0YTdlNTI0NTE2N2FlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6nxYgB2yYzohYm2KPjNzcFt8h29 eMhTo6ZM8YE69R/YgOjndlHWJuheAEviBGnVqehxHyqmMA8MINMtJcifgtIkv4VC btra48EwDbnj8rfgNXDBtsl/JndhlR9NCDUUho+gu7fssF7BudQlsIVr1p5Ay+tI NoJvWmcKvXNLRF6KAC5ib0wfkinbaIprPlt3Y2KppFnOvSP5/wDb3F+jssrYtTHs 3VFnfip+yXw9I6d9TvJAMNaNjwbgPLm8Wl9n/sHxdi0N60fqH1XVEQgh6S5jZBBs mS5sVTqqkISuwOEK4NB/iLFglEO9qTHuzIGA6k13R1tMPNMB4rq2iIqooQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHgbOEnUxiWwkNwy8AlUp+UkUWeuMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvZUJzNFNkVEdKYkNRM0RMd0NWU241U1JSWjY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAweuAAwQA wkRAMA0GCSqGSIb3DQEBCwUAA4IBAQA+HcPPJTqFpofeyXxuT+0hfhFin8A8Hc1+ GwA7eArS9jd8fVRcJTLHnpE88PYJe6yC8WuceEYl0KCdiJJf6zyXgowqDoUEYve9 68/hJ1J+lbydiq2mkzMOd6hOmdVkxfw/qROp/BuFIdoJ1BTqBGlNz1EWltp9eIML pkISRB8gxJkIxo3fbmyp4HHM7zJfILDhGdqJN9La7mik0yKKH2TGw+ThzPNr4STC CT98zQrvTV9EGP2zFjQ86/SImKs4QYz2rLp3kA3CNLJFMajtXLe94N2n4xT1e9YX t+DikMrYqVxLXgkUb4swr9K5wWnUWKvoUIZCrvNEILKnXhZ/m0L/ -----END CERTIFICATE-----Generated at Sun Jan 25 10:30:28 2026 by rpki-client