This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/eiBAjPlDdAEJJvNoTH-1fALVwBg.roa File: eiBAjPlDdAEJJvNoTH-1fALVwBg.roa (raw, json) Hash identifier: tHK9gw0NecINRkXtDNFXNpkwOaFhBnt8zEFuvT1+in8= Subject key identifier: 7A:20:40:8C:F9:43:74:01:09:26:F3:68:4C:7F:B5:7C:02:D5:C0:18 Certificate issuer: /CN=8dff1b0ce9f486a67e63d3f0d0e688a24f700c7c Certificate serial: 019B7EA4D8120BB3FE0201817BD6ADD96AC2 Authority key identifier: 8D:FF:1B:0C:E9:F4:86:A6:7E:63:D3:F0:D0:E6:88:A2:4F:70:0C:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/eiBAjPlDdAEJJvNoTH-1fALVwBg.roa Signing time: Fri 02 Jan 2026 12:18:11 +0000 ROA not before: Fri 02 Jan 2026 12:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51733 IP address blocks: 91.209.254.0/24 maxlen: 24 91.221.58.0/23 maxlen: 23 91.221.58.0/24 maxlen: 24 91.221.59.0/24 maxlen: 24 185.156.84.0/22 maxlen: 22 185.156.84.0/23 maxlen: 23 185.156.84.0/24 maxlen: 24 185.156.85.0/24 maxlen: 24 185.156.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:d8:12:0b:b3:fe:02:01:81:7b:d6:ad:d9:6a:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8dff1b0ce9f486a67e63d3f0d0e688a24f700c7c Validity Not Before: Jan 2 12:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a20408cf94374010926f3684c7fb57c02d5c018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:dd:82:69:8e:51:7b:c7:70:61:40:af:d1:14: 3a:b6:89:f9:19:8e:8a:ce:f3:3b:fa:6d:29:b2:68: df:56:62:42:d9:e0:e8:36:77:74:ae:79:50:0d:cc: 3f:7a:ae:da:f3:a3:00:cc:b0:77:5d:86:c8:2d:c3: df:99:f5:8e:2a:2e:e1:0d:c0:9c:91:f7:18:56:0b: e4:55:b9:8a:27:e6:7d:66:cb:8e:2e:f2:ad:65:ff: c1:5c:d0:1f:d8:3b:c4:c8:3c:1a:16:fb:9d:a0:fa: 0a:64:c8:54:fe:ae:8f:48:5c:41:c9:74:49:a0:ae: f8:76:38:7e:f3:ee:3d:2a:38:aa:9a:04:86:6c:fb: bc:14:ce:41:bb:2a:8d:33:fe:02:92:a1:e1:96:38: f0:ce:bc:c2:be:8c:a4:d8:60:51:46:f9:b8:8f:a8: 1f:99:e2:b7:88:a2:41:ec:32:ea:cd:b2:d8:cb:5c: 34:1f:d6:80:c8:e3:19:24:21:cf:b2:73:a0:61:5f: 94:73:1a:23:d3:e5:18:c0:31:83:fe:1d:cc:5f:cd: 33:0a:7b:19:7e:87:ef:1f:ac:04:8a:e1:57:0d:4c: 9c:86:76:13:b5:bf:c6:7e:ec:23:dc:53:ce:3f:f4: 96:d5:2a:83:ee:f9:6e:95:24:f1:cf:57:0b:89:e6: 36:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:20:40:8C:F9:43:74:01:09:26:F3:68:4C:7F:B5:7C:02:D5:C0:18 X509v3 Authority Key Identifier: keyid:8D:FF:1B:0C:E9:F4:86:A6:7E:63:D3:F0:D0:E6:88:A2:4F:70:0C:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/eiBAjPlDdAEJJvNoTH-1fALVwBg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.254.0/24 91.221.58.0/23 185.156.84.0/22 Signature Algorithm: sha256WithRSAEncryption b0:95:9c:e4:5f:5e:a4:c8:9f:e3:a3:3a:55:aa:32:c1:0d:fc: 31:e5:0a:96:22:0d:3d:89:b3:a2:30:8b:bc:7c:76:73:95:3c: 91:0e:63:34:03:83:5a:fd:8f:4f:45:a4:fe:a8:94:82:63:1d: 24:6c:d5:b8:3c:d7:58:b3:0e:a5:f1:32:e0:93:e0:e6:43:08: 35:f7:b1:53:b1:72:20:69:97:c3:0e:f7:ad:eb:6d:e5:e6:0b: 89:26:33:ae:a6:01:fb:92:20:c3:e0:ff:47:c2:dd:96:16:52: 89:6c:2c:9d:61:fa:8a:3b:8b:d7:04:12:b0:f2:58:4b:de:3c: ae:ed:ea:73:90:be:8b:74:f5:03:a8:12:3f:59:ac:53:2f:10: 80:90:fa:2d:c5:3f:f7:d7:19:35:6c:93:83:aa:0b:3c:c5:47: 8c:dd:4b:2a:3a:47:2a:09:60:15:f4:72:97:56:ec:8b:17:c3: e2:84:07:72:9d:57:31:5b:eb:48:79:f0:8b:0f:ee:a5:c7:7c: 31:f7:d2:38:84:4f:dd:4d:c7:fc:7c:02:50:48:03:25:4b:30: 15:47:90:66:63:fc:c8:b7:7a:84:4c:88:6e:54:54:df:e4:8a: 18:62:b5:fd:b9:5b:99:93:8c:73:57:d2:d0:d2:8e:66:89:58: f2:51:9f:4a -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+pNgSC7P+AgGBe9at2WrCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkZmYxYjBjZTlmNDg2YTY3ZTYzZDNmMGQwZTY4OGEyNGY3 MDBjN2MwHhcNMjYwMTAyMTIxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTIwNDA4Y2Y5NDM3NDAxMDkyNmYzNjg0YzdmYjU3YzAyZDVjMDE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA092CaY5Re8dwYUCv0RQ6ton5GY6K zvM7+m0psmjfVmJC2eDoNnd0rnlQDcw/eq7a86MAzLB3XYbILcPfmfWOKi7hDcCc kfcYVgvkVbmKJ+Z9ZsuOLvKtZf/BXNAf2DvEyDwaFvudoPoKZMhU/q6PSFxByXRJ oK74djh+8+49KjiqmgSGbPu8FM5BuyqNM/4CkqHhljjwzrzCvoyk2GBRRvm4j6gf meK3iKJB7DLqzbLYy1w0H9aAyOMZJCHPsnOgYV+Ucxoj0+UYwDGD/h3MX80zCnsZ fofvH6wEiuFXDUychnYTtb/Gfuwj3FPOP/SW1SqD7vlulSTxz1cLieY2/QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFHogQIz5Q3QBCSbzaEx/tXwC1cAYMB8GA1UdIwQY MBaAFI3/Gwzp9IamfmPT8NDmiKJPcAx8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamY4YkRPbjBocVotWTlQdzBPYUlvazl3REh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi80YWY2NGEtNTdmOC00NjQzLTg3YmEt ZDg3YjcwMjZhM2ZmLzEvZWlCQWpQbERkQUVKSnZOb1RILTFmQUxWd0JnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi80YWY2NGEtNTdmOC00NjQzLTg3YmEtZDg3YjcwMjZhM2Zm LzEvamY4YkRPbjBocVotWTlQdzBPYUlvazl3REh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW9H+AwQB W906AwQCuZxUMA0GCSqGSIb3DQEBCwUAA4IBAQCwlZzkX16kyJ/jozpVqjLBDfwx 5QqWIg09ibOiMIu8fHZzlTyRDmM0A4Na/Y9PRaT+qJSCYx0kbNW4PNdYsw6l8TLg k+DmQwg197FTsXIgaZfDDvet623l5guJJjOupgH7kiDD4P9Hwt2WFlKJbCydYfqK O4vXBBKw8lhL3jyu7epzkL6LdPUDqBI/WaxTLxCAkPotxT/31xk1bJODqgs8xUeM 3UsqOkcqCWAV9HKXVuyLF8PihAdynVcxW+tIefCLD+6lx3wx99I4hE/dTcf8fAJQ SAMlSzAVR5BmY/zIt3qETIhuVFTf5IoYYrX9uVuZk4xzV9LQ0o5miVjyUZ9K -----END CERTIFICATE-----Generated at Sun Jan 25 18:06:37 2026 by rpki-client