This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/1-eh-1pXGI5Cgf4EfxZ3-rrSgEiA.roa File: 1-eh-1pXGI5Cgf4EfxZ3-rrSgEiA.roa (raw, json) Hash identifier: j6+XhxL67BgzWzBRQ/eSUIWdiMYbHn8AWKsJCtSBwfk= Subject key identifier: F9:E8:7E:D6:95:C6:23:90:A0:7F:81:1F:C5:9D:FE:AE:B4:A0:12:20 Certificate issuer: /CN=ecba774ba82fb0427f766e783e770f4bd96416f9 Certificate serial: 019B7C1276796397ACFD339173FB1B42B2D1 Authority key identifier: EC:BA:77:4B:A8:2F:B0:42:7F:76:6E:78:3E:77:0F:4B:D9:64:16:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/1-eh-1pXGI5Cgf4EfxZ3-rrSgEiA.roa Signing time: Fri 02 Jan 2026 00:19:03 +0000 ROA not before: Fri 02 Jan 2026 00:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198381 IP address blocks: 80.84.136.0/24 maxlen: 24 80.84.145.0/24 maxlen: 24 80.84.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.mft rsync://rpki.ripe.net/repository/DEFAULT/7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:76:79:63:97:ac:fd:33:91:73:fb:1b:42:b2:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecba774ba82fb0427f766e783e770f4bd96416f9 Validity Not Before: Jan 2 00:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f9e87ed695c62390a07f811fc59dfeaeb4a01220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9e:48:6d:bd:19:5d:55:ed:a9:b2:7d:de:81: e3:89:b8:83:d2:9b:79:e3:f5:9b:78:91:3d:48:dc: a6:9a:72:1e:d4:f0:2d:ef:f2:41:04:cf:a4:49:96: e5:3c:87:7d:8d:5b:30:f5:d5:df:72:d2:3d:19:db: 69:8c:71:fe:a5:e8:87:f8:58:dd:d7:19:ed:c7:3e: d1:0c:20:2b:a9:f9:71:d2:77:9e:2f:91:20:d6:37: 09:2d:01:38:24:ad:84:e2:46:67:f3:58:6a:fc:eb: 8d:42:40:96:0e:92:b5:c0:91:46:b2:f0:07:c4:bc: d6:cb:b4:2a:2d:15:0d:9b:f2:9d:1b:64:87:cd:36: b5:5b:16:50:5d:a1:48:a7:e5:de:d9:2e:0a:1c:4b: 1e:ee:ff:55:3b:11:c9:20:70:2e:f4:29:33:ef:07: 75:0e:77:b5:07:c7:3b:08:96:69:af:66:ba:de:2c: 1d:6c:e8:58:90:80:9d:3b:f1:77:28:fe:e8:49:88: 89:20:ae:e8:66:35:b2:d7:12:cf:56:f5:c1:67:7f: 5b:7b:2b:c6:5b:d7:47:4b:31:fd:10:22:9d:1c:9d: e9:43:fb:a6:2b:a2:7d:85:fe:17:c0:b3:49:b0:dd: e5:3c:a2:7c:3f:45:5b:ca:bb:e9:a8:a2:c2:95:13: d9:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:E8:7E:D6:95:C6:23:90:A0:7F:81:1F:C5:9D:FE:AE:B4:A0:12:20 X509v3 Authority Key Identifier: keyid:EC:BA:77:4B:A8:2F:B0:42:7F:76:6E:78:3E:77:0F:4B:D9:64:16:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lp3S6gvsEJ_dm54PncPS9lkFvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/1-eh-1pXGI5Cgf4EfxZ3-rrSgEiA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/810c11-a105-4db1-a6b5-392b863c9f03/1/7Lp3S6gvsEJ_dm54PncPS9lkFvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.84.136.0/24 80.84.145.0/24 80.84.149.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:16:7b:87:c9:39:09:b7:2a:96:5c:a8:ed:e6:48:65:7f:7d: 21:5c:b1:0d:da:fa:37:06:fd:13:e2:85:e4:b8:22:39:27:89: b3:e7:73:20:df:c6:17:11:82:f5:02:b8:30:4f:9c:dd:93:5f: 3e:df:68:da:a4:20:9c:03:a0:a5:28:1b:c0:89:1f:c8:95:20: ee:78:0f:20:9f:9c:ed:65:69:55:05:b8:31:26:fa:27:29:3f: 82:60:b5:ac:ac:c3:ac:5f:d9:a9:ef:4d:a1:69:bc:11:78:77: a8:5f:a7:43:72:9f:6a:4d:c0:fd:4b:7f:f6:0e:61:83:be:6d: c4:ad:59:02:2e:a4:8a:bc:b6:0b:a1:94:a4:ad:7d:ee:8e:45: 2c:7f:b0:22:b2:de:01:29:95:8c:69:48:57:a6:ae:bc:af:44: 2d:32:c7:75:5a:da:79:f7:ed:06:da:2e:19:31:f4:91:4c:07: cb:be:9e:07:66:80:c6:dc:ad:a0:c5:dc:af:9e:28:46:50:c8: 71:7c:62:8d:63:39:64:3d:03:00:2c:db:e2:f1:87:c0:50:1a: 57:78:62:1b:4e:15:f1:eb:6b:91:8f:2a:34:b9:c0:31:86:fb: 8e:07:25:e3:12:e2:71:ec:aa:fd:bf:ec:6b:11:ae:3f:f5:5c: 6e:67:6c:2b -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZt8EnZ5Y5es/TORc/sbQrLRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjYmE3NzRiYTgyZmIwNDI3Zjc2NmU3ODNlNzcwZjRiZDk2 NDE2ZjkwHhcNMjYwMTAyMDAxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOWU4N2VkNjk1YzYyMzkwYTA3ZjgxMWZjNTlkZmVhZWI0YTAxMjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApp5Ibb0ZXVXtqbJ93oHjibiD0pt5 4/WbeJE9SNymmnIe1PAt7/JBBM+kSZblPId9jVsw9dXfctI9GdtpjHH+peiH+Fjd 1xntxz7RDCArqflx0neeL5Eg1jcJLQE4JK2E4kZn81hq/OuNQkCWDpK1wJFGsvAH xLzWy7QqLRUNm/KdG2SHzTa1WxZQXaFIp+Xe2S4KHEse7v9VOxHJIHAu9Ckz7wd1 Dne1B8c7CJZpr2a63iwdbOhYkICdO/F3KP7oSYiJIK7oZjWy1xLPVvXBZ39beyvG W9dHSzH9ECKdHJ3pQ/umK6J9hf4XwLNJsN3lPKJ8P0VbyrvpqKLClRPZ4QIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFPnoftaVxiOQoH+BH8Wd/q60oBIgMB8GA1UdIwQY MBaAFOy6d0uoL7BCf3ZueD53D0vZZBb5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0xwM1M2Z3ZzRUpfZG01NFBuY1BTOWxrRnZrLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi84MTBjMTEtYTEwNS00ZGIxLWE2YjUt MzkyYjg2M2M5ZjAzLzEvMS1laC0xcFhHSTVDZ2Y0RWZ4WjMtcnJTZ0VpQS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZTYvODEwYzExLWExMDUtNGRiMS1hNmI1LTM5MmI4NjNjOWYw My8xLzdMcDNTNmd2c0VKX2RtNTRQbmNQUzlsa0Z2ay5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAFBUiAME AFBUkQMEAFBUlTANBgkqhkiG9w0BAQsFAAOCAQEAbBZ7h8k5Cbcqllyo7eZIZX99 IVyxDdr6Nwb9E+KF5LgiOSeJs+dzIN/GFxGC9QK4ME+c3ZNfPt9o2qQgnAOgpSgb wIkfyJUg7ngPIJ+c7WVpVQW4MSb6Jyk/gmC1rKzDrF/Zqe9NoWm8EXh3qF+nQ3Kf ak3A/Ut/9g5hg75txK1ZAi6kiry2C6GUpK197o5FLH+wIrLeASmVjGlIV6auvK9E LTLHdVraefftBtouGTH0kUwHy76eB2aAxtytoMXcr54oRlDIcXxijWM5ZD0DACzb 4vGHwFAaV3hiG04V8etrkY8qNLnAMYb7jgcl4xLiceyq/b/saxGuP/VcbmdsKw== -----END CERTIFICATE-----Generated at Sun Jan 25 16:53:43 2026 by rpki-client