This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/eG6Nd0AEheFJzh2ZzgIc-HGYq9Y.roa File: eG6Nd0AEheFJzh2ZzgIc-HGYq9Y.roa (raw, json) Hash identifier: tN9thuUXDSgdN1PacHIHF6V4krE+2Pkx1P2dF2wQPtI= Subject key identifier: 78:6E:8D:77:40:04:85:E1:49:CE:1D:99:CE:02:1C:F8:71:98:AB:D6 Certificate issuer: /CN=b9b0d33432eca77c054e8fa8707248da4e47db0b Certificate serial: 019B7AC7C412962D1FC74A8D00B0F1B0058D Authority key identifier: B9:B0:D3:34:32:EC:A7:7C:05:4E:8F:A8:70:72:48:DA:4E:47:DB:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/eG6Nd0AEheFJzh2ZzgIc-HGYq9Y.roa Signing time: Thu 01 Jan 2026 18:17:50 +0000 ROA not before: Thu 01 Jan 2026 18:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206492 IP address blocks: 62.65.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.mft rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:c4:12:96:2d:1f:c7:4a:8d:00:b0:f1:b0:05:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9b0d33432eca77c054e8fa8707248da4e47db0b Validity Not Before: Jan 1 18:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=786e8d77400485e149ce1d99ce021cf87198abd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f6:9b:b7:f4:56:10:89:69:2e:ff:2d:d7:93: a2:d3:aa:ae:b5:5a:65:8c:ea:b1:1d:19:3e:84:c6: f9:4e:b0:98:39:b9:45:bc:7c:ec:bb:2d:46:3a:78: f4:67:fe:fd:7f:4b:9e:28:a4:b8:64:36:ec:84:c2: 50:59:be:80:e1:87:a8:3c:41:f6:0f:71:42:e1:c5: 39:1e:c9:26:32:6c:ac:41:bf:1d:4d:0f:ff:15:cd: 09:a6:fc:e7:e5:71:06:d0:0e:12:c2:37:e4:54:61: a0:a2:ad:ba:5c:bd:7f:45:4b:78:b4:84:11:0a:be: 65:93:7c:03:f3:27:86:01:73:d4:2f:09:86:c0:23: 7b:79:c4:3a:05:c4:6c:b0:99:06:a5:95:98:53:07: 3f:0c:39:87:e8:0e:94:30:dd:a8:e6:bd:8d:59:e9: 8f:a4:e8:51:93:c3:cb:a5:69:66:3b:12:f6:c9:54: 3d:ae:ff:e9:6b:fa:e7:ea:21:58:22:08:f2:ab:f5: 6f:2a:ea:04:45:4e:d4:9d:16:5c:5e:ac:a1:25:75: 49:46:04:d7:50:89:08:80:4f:f0:b7:9e:31:cb:75: 45:95:ef:75:9c:d8:3a:9c:dd:f8:03:d8:76:16:b5: 81:65:4d:3f:97:e3:70:d4:47:34:d4:db:85:c1:ba: e8:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:6E:8D:77:40:04:85:E1:49:CE:1D:99:CE:02:1C:F8:71:98:AB:D6 X509v3 Authority Key Identifier: keyid:B9:B0:D3:34:32:EC:A7:7C:05:4E:8F:A8:70:72:48:DA:4E:47:DB:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubDTNDLsp3wFTo-ocHJI2k5H2ws.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/eG6Nd0AEheFJzh2ZzgIc-HGYq9Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/ubDTNDLsp3wFTo-ocHJI2k5H2ws.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.65.137.0/24 Signature Algorithm: sha256WithRSAEncryption 84:cd:78:04:bb:f0:19:c8:52:44:21:94:2d:05:6b:58:1a:e0: 64:35:b9:8b:3c:b9:69:c6:f2:ab:2a:b2:64:e3:29:8f:61:b9: c8:6e:aa:08:96:29:97:35:64:e9:a5:d4:b0:00:3d:b5:2a:fc: 2a:67:0b:e2:48:27:36:1e:85:03:e4:6b:b9:4a:a3:0a:d3:da: 1b:ff:d8:d1:94:f0:52:26:66:05:7c:62:c5:6a:de:cd:13:43: 9e:54:69:84:f0:de:b4:d1:00:52:cb:52:73:be:0a:44:cb:16: e7:1a:cf:12:29:a9:09:6c:cd:2c:ea:8a:7b:9e:33:9a:61:4f: 31:f9:fb:01:77:96:55:21:4b:96:4c:7e:f4:69:98:d5:24:c5: a8:9f:00:8b:1b:38:16:2c:ae:ae:d1:ec:7c:9f:6a:35:15:29: 4a:02:f0:6e:65:87:0c:34:65:57:fc:52:84:fa:ba:6a:ca:d8: 53:dd:bf:a2:69:bd:83:32:95:7c:73:da:2b:1c:05:93:f1:ac: 40:6d:12:8d:29:13:13:e8:9a:eb:de:42:dd:0f:99:6c:a5:1f: 2a:23:d5:3f:05:07:56:c6:ca:2a:f9:1a:ca:2d:93:f6:f0:b7: d4:17:a2:3b:77:8d:5a:4a:77:cd:27:59:53:68:f8:ee:8b:3f: 6c:72:53:3d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x8QSli0fx0qNALDxsAWNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5YjBkMzM0MzJlY2E3N2MwNTRlOGZhODcwNzI0OGRhNGU0 N2RiMGIwHhcNMjYwMTAxMTgxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODZlOGQ3NzQwMDQ4NWUxNDljZTFkOTljZTAyMWNmODcxOThhYmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5fabt/RWEIlpLv8t15Oi06qutVpl jOqxHRk+hMb5TrCYOblFvHzsuy1GOnj0Z/79f0ueKKS4ZDbshMJQWb6A4YeoPEH2 D3FC4cU5HskmMmysQb8dTQ//Fc0Jpvzn5XEG0A4SwjfkVGGgoq26XL1/RUt4tIQR Cr5lk3wD8yeGAXPULwmGwCN7ecQ6BcRssJkGpZWYUwc/DDmH6A6UMN2o5r2NWemP pOhRk8PLpWlmOxL2yVQ9rv/pa/rn6iFYIgjyq/VvKuoERU7UnRZcXqyhJXVJRgTX UIkIgE/wt54xy3VFle91nNg6nN34A9h2FrWBZU0/l+Nw1Ec01NuFwbroawIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHhujXdABIXhSc4dmc4CHPhxmKvWMB8GA1UdIwQY MBaAFLmw0zQy7Kd8BU6PqHBySNpOR9sLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWJEVE5ETHNwM3dGVG8tb2NISkkyazVIMndzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9iNDMxY2EtNTI3NS00MmI1LThkNTQt ZDE5NmY5MjkxNzMyLzEvZUc2TmQwQUVoZUZKemgyWnpnSWMtSEdZcTlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9iNDMxY2EtNTI3NS00MmI1LThkNTQtZDE5NmY5MjkxNzMy LzEvdWJEVE5ETHNwM3dGVG8tb2NISkkyazVIMndzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPkGJMA0G CSqGSIb3DQEBCwUAA4IBAQCEzXgEu/AZyFJEIZQtBWtYGuBkNbmLPLlpxvKrKrJk 4ymPYbnIbqoIlimXNWTppdSwAD21KvwqZwviSCc2HoUD5Gu5SqMK09ob/9jRlPBS JmYFfGLFat7NE0OeVGmE8N600QBSy1JzvgpEyxbnGs8SKakJbM0s6op7njOaYU8x +fsBd5ZVIUuWTH70aZjVJMWonwCLGzgWLK6u0ex8n2o1FSlKAvBuZYcMNGVX/FKE +rpqythT3b+iab2DMpV8c9orHAWT8axAbRKNKRMT6Jrr3kLdD5lspR8qI9U/BQdW xsoq+RrKLZP28LfUF6I7d41aSnfNJ1lTaPjuiz9sclM9 -----END CERTIFICATE-----Generated at Sun Jan 25 13:02:22 2026 by rpki-client