This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/eH8mEFUxJaD15bIkdrb0eoEm43Q.roa File: eH8mEFUxJaD15bIkdrb0eoEm43Q.roa (raw, json) Hash identifier: iVNXmnAd/Aq9qGpFjFCXba0ETiSTvXsmOGBSWpVw4y4= Subject key identifier: 78:7F:26:10:55:31:25:A0:F5:E5:B2:24:76:B6:F4:7A:81:26:E3:74 Certificate issuer: /CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e Certificate serial: 019B7EA6A27A2DF6223DB098F7A9DF69E1F3 Authority key identifier: BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/eH8mEFUxJaD15bIkdrb0eoEm43Q.roa Signing time: Fri 02 Jan 2026 12:20:08 +0000 ROA not before: Fri 02 Jan 2026 12:20:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 22604 IP address blocks: 157.23.224.0/20 maxlen: 24 2a0e:bbc0:8000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:a2:7a:2d:f6:22:3d:b0:98:f7:a9:df:69:e1:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e Validity Not Before: Jan 2 12:20:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=787f2610553125a0f5e5b22476b6f47a8126e374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:56:4f:e2:6e:ef:d7:0b:9b:1c:8e:2d:58:97: 70:53:2e:16:90:3b:71:a4:d3:24:3e:4d:5b:87:16: 84:fd:9a:a0:c0:a6:b9:2f:ea:a6:5a:10:68:b3:64: 4d:38:93:f9:ed:ca:2f:09:eb:31:82:a8:46:2c:64: 4c:14:8f:a0:c2:1b:7f:3d:d9:f7:6b:8d:de:b3:1f: a7:4a:87:94:46:48:40:58:0c:7f:57:6c:26:20:f2: fb:bc:94:8f:8d:95:d4:68:12:3b:e8:12:da:74:2f: c7:24:e8:2d:35:41:03:87:54:68:34:7d:4d:84:4e: 68:7e:09:87:3a:0b:59:d6:ba:f3:ae:aa:bd:3f:aa: b8:05:98:04:78:98:f5:d9:18:50:73:d8:bd:0d:0f: c9:f0:ad:d2:b2:9b:8c:39:70:a4:4a:cc:3d:a2:d4: 27:fb:d7:02:c8:e5:06:29:06:4c:17:f5:60:71:d8: 8d:2e:f8:69:6e:85:71:5d:91:54:b2:96:5c:42:83: 05:53:24:10:e2:9f:f0:62:fe:c7:41:2d:08:9b:d1: b4:14:8d:08:47:5e:c6:2b:42:bf:0b:53:36:f2:1c: 8b:53:bb:63:42:f4:6a:9b:95:8d:83:c5:03:35:c4: 27:ac:cd:b9:f4:3c:70:0a:4e:44:3d:05:bf:3e:d0: d1:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:7F:26:10:55:31:25:A0:F5:E5:B2:24:76:B6:F4:7A:81:26:E3:74 X509v3 Authority Key Identifier: keyid:BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/eH8mEFUxJaD15bIkdrb0eoEm43Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.23.224.0/20 IPv6: 2a0e:bbc0:8000::/40 Signature Algorithm: sha256WithRSAEncryption 0e:fd:17:29:f2:dc:ef:bc:f4:c6:ba:f5:d2:79:21:52:9c:3d: 3a:25:61:a5:30:ab:e7:84:bb:c0:db:3f:e2:69:8b:37:88:c0: 18:f8:17:7f:cd:3d:23:11:44:a9:4e:ac:08:07:e0:c0:88:bd: aa:73:cf:02:17:85:a9:7a:73:b0:dd:98:ce:c8:bb:af:d2:d0: a7:3f:69:9b:60:bb:b8:72:f4:ac:dc:bb:92:af:9c:d5:6f:f6: e4:94:6e:28:a3:3b:a4:77:76:82:96:5a:6e:2b:94:73:91:95: ea:85:99:1b:ea:a8:64:72:5a:a5:a5:6b:ad:cf:be:d1:1c:4b: bf:a0:ea:16:aa:fb:55:94:e0:bd:5b:c6:7f:d9:66:ce:74:6c: f3:d6:81:3c:17:8e:55:19:ea:52:cd:3c:55:d0:16:a7:1c:b8: 86:c3:18:77:68:97:38:9d:12:e6:e0:85:a1:30:17:38:5b:8f: f7:ad:5a:6b:54:e8:0b:9d:e4:d1:cd:71:15:10:32:00:6c:bc: 14:ab:a4:4d:20:98:42:2e:7f:1d:db:8a:9d:99:34:80:4f:57: 8a:a5:78:9c:ca:bb:3c:d4:53:e7:a8:45:d9:c7:89:f2:2c:f0: a0:0b:85:8c:13:3b:1e:d2:f3:77:c5:12:50:49:27:1e:a3:9d: b2:5d:8f:b2 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt+pqJ6LfYiPbCY96nfaeHzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiYTM1Y2Y4YWI2ZjNlYWEyYWViYWRkOWUyMzczZGVjMDg5 MzYyNWUwHhcNMjYwMTAyMTIyMDA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODdmMjYxMDU1MzEyNWEwZjVlNWIyMjQ3NmI2ZjQ3YTgxMjZlMzc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFZP4m7v1wubHI4tWJdwUy4WkDtx pNMkPk1bhxaE/ZqgwKa5L+qmWhBos2RNOJP57covCesxgqhGLGRMFI+gwht/Pdn3 a43esx+nSoeURkhAWAx/V2wmIPL7vJSPjZXUaBI76BLadC/HJOgtNUEDh1RoNH1N hE5ofgmHOgtZ1rrzrqq9P6q4BZgEeJj12RhQc9i9DQ/J8K3SspuMOXCkSsw9otQn +9cCyOUGKQZMF/VgcdiNLvhpboVxXZFUspZcQoMFUyQQ4p/wYv7HQS0Im9G0FI0I R17GK0K/C1M28hyLU7tjQvRqm5WNg8UDNcQnrM259DxwCk5EPQW/PtDRZwIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFHh/JhBVMSWg9eWyJHa29HqBJuN0MB8GA1UdIwQY MBaAFLujXPirbz6qKuut2eI3PewIk2JeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9hMGUwMWEtOWJiYy00NGVlLTk4YTMt NTk3YjZlMjQ5MmFiLzEvZUg4bUVGVXhKYUQxNWJJa2RyYjBlb0VtNDNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9hMGUwMWEtOWJiYy00NGVlLTk4YTMtNTk3YjZlMjQ5MmFi LzEvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQEnRfgMA4E AgACMAgDBgAqDrvAgDANBgkqhkiG9w0BAQsFAAOCAQEADv0XKfLc77z0xrr10nkh Upw9OiVhpTCr54S7wNs/4mmLN4jAGPgXf809IxFEqU6sCAfgwIi9qnPPAheFqXpz sN2Yzsi7r9LQpz9pm2C7uHL0rNy7kq+c1W/25JRuKKM7pHd2gpZabiuUc5GV6oWZ G+qoZHJapaVrrc++0RxLv6DqFqr7VZTgvVvGf9lmznRs89aBPBeOVRnqUs08VdAW pxy4hsMYd2iXOJ0S5uCFoTAXOFuP961aa1ToC53k0c1xFRAyAGy8FKukTSCYQi5/ HduKnZk0gE9XiqV4nMq7PNRT56hF2ceJ8izwoAuFjBM7HtLzd8USUEknHqOdsl2P sg== -----END CERTIFICATE-----Generated at Sun Jan 25 14:10:32 2026 by rpki-client