This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/eiNx0hyWr9_GPT53IvxQM9d7nQM.roa File: eiNx0hyWr9_GPT53IvxQM9d7nQM.roa (raw, json) Hash identifier: 24M5NJX5qdMlDv9jNkA+N6M6xg4k0uj4d4NoagskJ0o= Subject key identifier: 7A:23:71:D2:1C:96:AF:DF:C6:3D:3E:77:22:FC:50:33:D7:7B:9D:03 Certificate issuer: /CN=5a43e9e267956e7f262c17f0089f0f60ba7abefb Certificate serial: 019B7EA72E82718144BD3306E2F27D3C14D5 Authority key identifier: 5A:43:E9:E2:67:95:6E:7F:26:2C:17:F0:08:9F:0F:60:BA:7A:BE:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/eiNx0hyWr9_GPT53IvxQM9d7nQM.roa Signing time: Fri 02 Jan 2026 12:20:44 +0000 ROA not before: Fri 02 Jan 2026 12:20:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58250 IP address blocks: 78.93.10.0/24 maxlen: 24 78.93.82.0/23 maxlen: 23 78.93.117.0/24 maxlen: 24 78.93.178.0/24 maxlen: 24 86.60.32.0/19 maxlen: 19 86.60.56.0/21 maxlen: 21 86.60.127.0/24 maxlen: 24 212.93.203.0/24 maxlen: 24 2a02:df4::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.mft rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:2e:82:71:81:44:bd:33:06:e2:f2:7d:3c:14:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a43e9e267956e7f262c17f0089f0f60ba7abefb Validity Not Before: Jan 2 12:20:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a2371d21c96afdfc63d3e7722fc5033d77b9d03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7f:22:20:e0:c1:50:ce:bd:c5:4c:ec:41:72: f2:a8:69:f1:67:25:45:8d:9c:51:d8:44:e9:7b:e8: 3e:67:ce:c4:01:e7:90:f8:75:fc:43:24:45:a3:e4: 6f:2e:d5:e4:fb:54:81:e6:db:76:96:55:5b:67:78: 99:56:1d:af:c9:38:0c:f1:33:ad:ec:66:5b:27:39: 73:bd:c0:fa:6d:cc:63:c3:59:37:db:2a:d8:02:ba: 9e:f4:ca:c9:b0:40:bb:06:88:69:cc:78:53:76:fe: 1d:c2:a3:40:6e:51:7f:ab:b5:42:70:36:36:7a:a6: 29:ae:01:8d:20:67:bf:f6:cf:29:c0:4b:14:10:59: 4f:c8:31:0b:70:d2:de:20:e7:03:dd:94:cd:a9:a4: 7b:00:7f:b8:58:26:c8:e4:9b:f5:e8:99:88:12:d1: 58:75:ba:90:73:4a:09:79:f4:42:1a:76:5b:ef:3b: bb:d6:e5:5a:5e:9a:93:5c:b6:49:95:fc:eb:23:1e: bc:1e:7c:1b:cb:79:3d:2d:41:75:cf:8d:f1:30:0a: 3f:b2:a2:b9:c8:a0:39:4d:7e:de:3a:8b:fa:0a:c0: 0b:b3:69:e1:2c:95:2e:62:ed:c2:07:1d:b5:da:f6: e7:55:3f:d6:3b:dd:42:17:a1:7f:2b:e3:a9:e9:e4: 11:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:23:71:D2:1C:96:AF:DF:C6:3D:3E:77:22:FC:50:33:D7:7B:9D:03 X509v3 Authority Key Identifier: keyid:5A:43:E9:E2:67:95:6E:7F:26:2C:17:F0:08:9F:0F:60:BA:7A:BE:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/eiNx0hyWr9_GPT53IvxQM9d7nQM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.93.10.0/24 78.93.82.0/23 78.93.117.0/24 78.93.178.0/24 86.60.32.0/19 86.60.127.0/24 212.93.203.0/24 IPv6: 2a02:df4::/32 Signature Algorithm: sha256WithRSAEncryption 0a:19:5c:ff:c0:2f:2b:fd:77:69:eb:2b:16:b3:78:9b:a6:40: 5f:e0:6c:52:8f:bc:61:d4:13:41:f4:e3:e0:51:51:5d:52:5d: f1:82:c1:15:9f:72:4f:c2:f1:c7:b6:73:c4:65:24:19:18:52: ac:5e:09:1e:e7:88:40:54:ef:5c:5b:3e:6e:14:63:06:39:f9: aa:31:42:54:f3:73:ff:f2:2c:ff:cf:b9:b6:a1:88:79:5a:df: 7a:0d:b5:04:89:0c:38:59:66:0d:2b:66:44:39:b2:7d:72:8b: 7d:b4:39:3d:19:dd:c1:06:e3:cc:9e:f0:e5:47:59:06:ae:58: dc:09:5e:f7:dd:5d:84:b0:c6:70:f1:8d:bc:60:53:c5:0d:05: 86:24:b9:b2:4c:e2:c3:72:bb:98:f2:e9:06:3d:8b:a0:3c:ff: ec:af:23:97:b5:25:90:34:5f:1c:b4:41:5d:74:e4:4b:55:46: 9b:ac:ad:b0:89:f7:ac:a7:3b:a1:b5:97:f3:84:4a:03:32:50: 3d:56:da:95:1c:19:14:8b:0a:1c:00:7d:7b:44:9c:6a:c6:c8: f4:3b:45:de:6e:09:c5:29:24:aa:43:07:4c:a7:3a:9b:5c:1b: f1:06:89:9a:8f:b9:8d:83:aa:a8:fc:dc:f4:6b:c0:e1:72:1d: 13:b7:e4:1e -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgISAZt+py6CcYFEvTMG4vJ9PBTVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhNDNlOWUyNjc5NTZlN2YyNjJjMTdmMDA4OWYwZjYwYmE3 YWJlZmIwHhcNMjYwMTAyMTIyMDQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTIzNzFkMjFjOTZhZmRmYzYzZDNlNzcyMmZjNTAzM2Q3N2I5ZDAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArn8iIODBUM69xUzsQXLyqGnxZyVF jZxR2ETpe+g+Z87EAeeQ+HX8QyRFo+RvLtXk+1SB5tt2llVbZ3iZVh2vyTgM8TOt 7GZbJzlzvcD6bcxjw1k32yrYArqe9MrJsEC7BohpzHhTdv4dwqNAblF/q7VCcDY2 eqYprgGNIGe/9s8pwEsUEFlPyDELcNLeIOcD3ZTNqaR7AH+4WCbI5Jv16JmIEtFY dbqQc0oJefRCGnZb7zu71uVaXpqTXLZJlfzrIx68Hnwby3k9LUF1z43xMAo/sqK5 yKA5TX7eOov6CsALs2nhLJUuYu3CBx212vbnVT/WO91CF6F/K+Op6eQRyQIDAQAB o4ICPDCCAjgwHQYDVR0OBBYEFHojcdIclq/fxj0+dyL8UDPXe50DMB8GA1UdIwQY MBaAFFpD6eJnlW5/JiwX8AifD2C6er77MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2tQcDRtZVZibjhtTEJmd0NKOFBZTHA2dnZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8wNjQ0NGMtOWQ5Yi00YzZiLTk1MGIt NzljODk4N2E4YjFjLzEvZWlOeDBoeVdyOV9HUFQ1M0l2eFFNOWQ3blFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8wNjQ0NGMtOWQ5Yi00YzZiLTk1MGItNzljODk4N2E4YjFj LzEvV2tQcDRtZVZibjhtTEJmd0NKOFBZTHA2dnZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQATl0KAwQB Tl1SAwQATl11AwQATl2yAwQFVjwgAwQAVjx/AwQA1F3LMA0EAgACMAcDBQAqAg30 MA0GCSqGSIb3DQEBCwUAA4IBAQAKGVz/wC8r/Xdp6ysWs3ibpkBf4GxSj7xh1BNB 9OPgUVFdUl3xgsEVn3JPwvHHtnPEZSQZGFKsXgke54hAVO9cWz5uFGMGOfmqMUJU 83P/8iz/z7m2oYh5Wt96DbUEiQw4WWYNK2ZEObJ9cot9tDk9Gd3BBuPMnvDlR1kG rljcCV733V2EsMZw8Y28YFPFDQWGJLmyTOLDcruY8ukGPYugPP/sryOXtSWQNF8c tEFddORLVUabrK2wifespzuhtZfzhEoDMlA9VtqVHBkUiwocAH17RJxqxsj0O0Xe bgnFKSSqQwdMpzqbXBvxBomaj7mNg6qo/Nz0a8Dhch0Tt+Qe -----END CERTIFICATE-----Generated at Mon Jan 26 02:01:27 2026 by rpki-client