This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/Eh8nnLZAiLZ58YhkCNvvP_JGhzU.roa File: Eh8nnLZAiLZ58YhkCNvvP_JGhzU.roa (raw, json) Hash identifier: sRohF3I3BrcI8tiCBb8cHcbGxNylJjfyMotjHjcTNBk= Subject key identifier: 12:1F:27:9C:B6:40:88:B6:79:F1:88:64:08:DB:EF:3F:F2:46:87:35 Certificate issuer: /CN=f6eea10afacf3a9c26ea1b1ec488e955e4dfa06a Certificate serial: 019B7A5B49C77DF74BC1C214A8289B9FC8CE Authority key identifier: F6:EE:A1:0A:FA:CF:3A:9C:26:EA:1B:1E:C4:88:E9:55:E4:DF:A0:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/Eh8nnLZAiLZ58YhkCNvvP_JGhzU.roa Signing time: Thu 01 Jan 2026 16:19:21 +0000 ROA not before: Thu 01 Jan 2026 16:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9026 IP address blocks: 62.212.0.0/19 maxlen: 19 185.120.40.0/22 maxlen: 22 2a02:20::/29 maxlen: 29 2a02:20::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.mft rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:49:c7:7d:f7:4b:c1:c2:14:a8:28:9b:9f:c8:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6eea10afacf3a9c26ea1b1ec488e955e4dfa06a Validity Not Before: Jan 1 16:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=121f279cb64088b679f1886408dbef3ff2468735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:87:61:cc:4e:5e:b5:27:3a:b9:52:45:41:9b: c7:37:64:6b:ac:71:aa:4b:72:2c:54:22:15:41:7c: 4d:3d:f0:80:55:97:5e:fe:22:5f:85:cb:c8:2a:02: fc:f2:37:58:0c:5b:5d:de:67:c1:c3:58:cd:5e:86: 35:09:a7:22:34:b6:b0:83:1f:48:c8:95:bf:91:5f: eb:dc:71:1c:d9:26:a0:c9:dd:5e:ff:72:eb:8c:0a: ec:a0:45:d9:91:db:3e:94:c6:03:b0:7a:e6:f2:af: 9c:82:d7:0b:a8:13:e6:6c:96:2a:67:1d:04:7f:57: 71:f3:e8:d1:6c:07:22:13:78:1d:ec:1b:d3:b4:2f: ce:6f:c4:b6:46:bd:da:07:2e:25:2f:4c:dd:bd:00: 98:1e:cc:06:0f:e3:ff:53:52:3f:75:b1:89:6f:0f: 29:45:76:57:e0:21:ea:c1:4b:d1:51:48:b0:b2:e8: ad:1d:fe:06:3b:9a:b7:1f:b0:99:03:de:da:ac:d6: c1:11:e9:fa:8f:f7:40:87:fa:45:f4:5c:b9:e2:18: f4:9b:08:9f:43:91:83:85:8d:21:5a:97:29:ff:35: c6:10:cc:4b:4f:8b:7c:69:c0:9a:64:a0:b6:1c:8c: c4:61:0c:0c:dd:70:8b:7b:e6:79:5e:2e:9d:59:b1: bc:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:1F:27:9C:B6:40:88:B6:79:F1:88:64:08:DB:EF:3F:F2:46:87:35 X509v3 Authority Key Identifier: keyid:F6:EE:A1:0A:FA:CF:3A:9C:26:EA:1B:1E:C4:88:E9:55:E4:DF:A0:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/Eh8nnLZAiLZ58YhkCNvvP_JGhzU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.212.0.0/19 185.120.40.0/22 IPv6: 2a02:20::/29 Signature Algorithm: sha256WithRSAEncryption 08:44:6e:23:9e:53:43:90:3b:99:9e:14:37:95:bf:16:51:36: 8d:43:2e:84:83:ab:6d:37:ea:c7:68:e2:3e:52:7a:d8:5f:76: 58:40:4c:48:bf:53:65:f5:64:8d:f8:d7:93:e5:3f:91:04:d5: 9a:5c:2a:e1:b8:6f:7c:3c:7c:c9:9b:d8:f3:fe:c4:a4:b3:91: 9f:1d:ad:ae:2b:d1:e6:b0:e0:21:43:c1:9c:48:32:72:89:11: 29:24:89:9f:02:f7:b5:eb:fb:0d:95:ea:91:76:04:6f:f4:25: e0:b3:8c:f1:38:de:06:c5:e4:3a:ba:6c:c3:10:31:9b:ee:60: 81:a0:53:94:7c:15:a9:2e:00:2d:d9:d9:b0:a7:04:5b:4e:57: 25:47:e1:8e:1d:6d:c9:6c:d3:af:9b:0e:00:cd:40:99:4c:25: ea:d5:69:52:68:79:5c:e9:40:71:a5:83:74:98:2c:85:62:28: f7:16:30:d0:06:6a:6b:df:fa:88:f5:c3:a4:22:86:ae:5d:a5: 6a:9b:4c:ad:f5:04:88:91:5e:e7:7a:b0:ba:10:b5:d0:14:62: ca:14:a6:8c:b4:98:48:ea:a0:98:33:d4:09:9d:ce:66:0a:1a: fb:49:90:ef:b3:8f:ba:90:5b:30:10:b4:a9:ef:e5:2c:03:5a: 97:3b:60:c4 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt6W0nHffdLwcIUqCibn8jOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2ZWVhMTBhZmFjZjNhOWMyNmVhMWIxZWM0ODhlOTU1ZTRk ZmEwNmEwHhcNMjYwMTAxMTYxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjFmMjc5Y2I2NDA4OGI2NzlmMTg4NjQwOGRiZWYzZmYyNDY4NzM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIdhzE5etSc6uVJFQZvHN2RrrHGq S3IsVCIVQXxNPfCAVZde/iJfhcvIKgL88jdYDFtd3mfBw1jNXoY1CaciNLawgx9I yJW/kV/r3HEc2Sagyd1e/3LrjArsoEXZkds+lMYDsHrm8q+cgtcLqBPmbJYqZx0E f1dx8+jRbAciE3gd7BvTtC/Ob8S2Rr3aBy4lL0zdvQCYHswGD+P/U1I/dbGJbw8p RXZX4CHqwUvRUUiwsuitHf4GO5q3H7CZA97arNbBEen6j/dAh/pF9Fy54hj0mwif Q5GDhY0hWpcp/zXGEMxLT4t8acCaZKC2HIzEYQwM3XCLe+Z5Xi6dWbG8LQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFBIfJ5y2QIi2efGIZAjb7z/yRoc1MB8GA1UdIwQY MBaAFPbuoQr6zzqcJuobHsSI6VXk36BqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXU2aEN2clBPcHdtNmhzZXhJanBWZVRmb0dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS82ZjU3NDYtYjQwNi00YzA1LTk3NDEt NTRkOGY2YjA2YjgzLzEvRWg4bm5MWkFpTFo1OFloa0NOdnZQX0pHaHpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS82ZjU3NDYtYjQwNi00YzA1LTk3NDEtNTRkOGY2YjA2Yjgz LzEvOXU2aEN2clBPcHdtNmhzZXhJanBWZVRmb0dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQFPtQAAwQC uXgoMA0EAgACMAcDBQMqAgAgMA0GCSqGSIb3DQEBCwUAA4IBAQAIRG4jnlNDkDuZ nhQ3lb8WUTaNQy6Eg6ttN+rHaOI+UnrYX3ZYQExIv1Nl9WSN+NeT5T+RBNWaXCrh uG98PHzJm9jz/sSks5GfHa2uK9HmsOAhQ8GcSDJyiREpJImfAve16/sNleqRdgRv 9CXgs4zxON4GxeQ6umzDEDGb7mCBoFOUfBWpLgAt2dmwpwRbTlclR+GOHW3JbNOv mw4AzUCZTCXq1WlSaHlc6UBxpYN0mCyFYij3FjDQBmpr3/qI9cOkIoauXaVqm0yt 9QSIkV7nerC6ELXQFGLKFKaMtJhI6qCYM9QJnc5mChr7SZDvs4+6kFswELSp7+Us A1qXO2DE -----END CERTIFICATE-----Generated at Mon Jan 26 18:43:34 2026 by rpki-client