This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/eieZOr9FHJILQ01WF-oyQAME0-4.roa File: eieZOr9FHJILQ01WF-oyQAME0-4.roa (raw, json) Hash identifier: ahdbiO7qmkWYgXQ04GmEQrp4ceapMkzBgwSwQKptvJI= Subject key identifier: 7A:27:99:3A:BF:45:1C:92:0B:43:4D:56:17:EA:32:40:03:04:D3:EE Certificate issuer: /CN=582e2170a7bcbec310154f2bce99833fec2801fb Certificate serial: 019B7E38F0ED2DE087B98170CCEEE08AD8C3 Authority key identifier: 58:2E:21:70:A7:BC:BE:C3:10:15:4F:2B:CE:99:83:3F:EC:28:01:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WC4hcKe8vsMQFU8rzpmDP-woAfs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/eieZOr9FHJILQ01WF-oyQAME0-4.roa Signing time: Fri 02 Jan 2026 10:20:19 +0000 ROA not before: Fri 02 Jan 2026 10:20:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200184 IP address blocks: 67.63.56.0/24 maxlen: 24 67.63.57.0/24 maxlen: 24 67.63.58.0/24 maxlen: 24 67.63.61.0/24 maxlen: 24 67.63.62.0/24 maxlen: 24 67.63.63.0/24 maxlen: 24 80.75.216.0/24 maxlen: 24 2a13:f800::/29 maxlen: 64 2a13:f800:1001::/48 maxlen: 48 2a13:f800:3101::/48 maxlen: 48 2a13:f800:3102::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.mft rsync://rpki.ripe.net/repository/DEFAULT/WC4hcKe8vsMQFU8rzpmDP-woAfs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:f0:ed:2d:e0:87:b9:81:70:cc:ee:e0:8a:d8:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=582e2170a7bcbec310154f2bce99833fec2801fb Validity Not Before: Jan 2 10:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a27993abf451c920b434d5617ea32400304d3ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ca:0d:7c:9c:f6:2b:c6:73:05:fa:fd:6b:60: 4f:68:3f:6f:24:a3:d6:cb:3a:fd:ac:09:1f:a5:71: c6:47:64:1d:6d:b1:08:0e:de:bf:49:ea:8a:47:79: f4:32:cf:9a:01:8c:30:8c:f1:99:c5:49:28:68:4f: ec:3c:40:53:5f:dc:84:a8:5b:ed:07:36:c0:96:12: a4:02:07:9a:a8:43:ce:50:40:53:71:db:3e:32:e5: 86:d1:a3:3b:64:f2:25:6b:29:23:54:c7:ce:a3:8f: 19:8f:07:1e:73:b2:db:16:7e:5f:56:73:74:2d:b8: 8d:cf:eb:a4:95:45:8a:39:09:fe:73:d6:56:8f:e4: 9f:2d:c5:6e:ca:fe:aa:2a:92:c5:4c:14:e8:d9:d9: 73:42:93:93:b7:de:b6:a1:9d:93:ab:12:85:bb:04: d0:f3:66:b4:4f:fc:01:db:b8:fa:10:d7:5d:57:d9: 45:34:c1:f8:8e:33:66:fe:57:86:c4:51:82:52:3b: 20:f0:42:d6:fc:14:62:c2:b2:9b:c7:2e:ee:42:00: 87:f3:78:e9:dd:f3:3d:80:3a:58:9e:bc:ba:65:ae: 60:c6:0e:43:2d:02:21:e3:75:74:bb:66:71:92:d5: 82:64:52:f1:4f:86:5d:9f:a1:79:8f:c5:79:d9:b9: c3:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:27:99:3A:BF:45:1C:92:0B:43:4D:56:17:EA:32:40:03:04:D3:EE X509v3 Authority Key Identifier: keyid:58:2E:21:70:A7:BC:BE:C3:10:15:4F:2B:CE:99:83:3F:EC:28:01:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WC4hcKe8vsMQFU8rzpmDP-woAfs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/eieZOr9FHJILQ01WF-oyQAME0-4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 67.63.56.0-67.63.58.255 67.63.61.0-67.63.63.255 80.75.216.0/24 IPv6: 2a13:f800::/29 Signature Algorithm: sha256WithRSAEncryption d0:e6:72:16:c6:94:bd:62:20:17:86:dd:49:12:1b:7d:75:95: f0:85:9b:bf:4e:98:2b:14:af:64:bb:3d:b5:a5:27:b8:83:f5: 36:2d:18:cc:f1:ea:25:2e:e6:63:a4:18:08:2f:a5:83:8c:d9: 46:a2:44:d6:d5:77:c3:e0:0d:1e:c5:7c:4d:2c:9e:d4:0a:26: 80:b6:66:f1:77:fc:2d:52:a0:11:93:72:67:71:ec:f6:99:1a: f4:27:6f:ec:55:76:43:69:27:dc:a9:c1:a3:7a:3d:ff:32:f1: 5a:9e:87:b3:db:04:cd:4a:70:48:d8:76:f5:fe:f4:e3:18:90: 90:98:3d:ae:48:dc:73:a9:99:f4:d4:75:73:c8:57:df:70:9f: e2:5b:31:34:b3:c6:e3:4a:ab:f8:85:a6:80:35:2c:6b:12:58: 62:c9:a0:b6:ef:0c:70:88:f7:e7:11:a9:03:8a:57:cc:f6:71: 7e:a3:57:12:bd:c7:66:44:ec:84:5a:75:50:cd:91:81:bc:22: f3:32:36:33:b1:92:f3:62:30:60:40:da:11:14:49:7f:7c:dc: 4a:0a:00:f8:a8:94:3c:fc:7d:4e:06:20:8d:be:cc:ff:b3:79: b9:03:7d:16:1a:fc:61:1d:04:cb:16:1e:04:17:17:ac:6c:0c: 50:28:f7:0a -----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgISAZt+OPDtLeCHuYFwzO7gitjDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4MmUyMTcwYTdiY2JlYzMxMDE1NGYyYmNlOTk4MzNmZWMy ODAxZmIwHhcNMjYwMTAyMTAyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTI3OTkzYWJmNDUxYzkyMGI0MzRkNTYxN2VhMzI0MDAzMDRkM2VlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8oNfJz2K8ZzBfr9a2BPaD9vJKPW yzr9rAkfpXHGR2QdbbEIDt6/SeqKR3n0Ms+aAYwwjPGZxUkoaE/sPEBTX9yEqFvt BzbAlhKkAgeaqEPOUEBTcds+MuWG0aM7ZPIlaykjVMfOo48Zjwcec7LbFn5fVnN0 LbiNz+uklUWKOQn+c9ZWj+SfLcVuyv6qKpLFTBTo2dlzQpOTt962oZ2TqxKFuwTQ 82a0T/wB27j6ENddV9lFNMH4jjNm/leGxFGCUjsg8ELW/BRiwrKbxy7uQgCH83jp 3fM9gDpYnry6Za5gxg5DLQIh43V0u2ZxktWCZFLxT4Zdn6F5j8V52bnDCQIDAQAB o4ICNDCCAjAwHQYDVR0OBBYEFHonmTq/RRySC0NNVhfqMkADBNPuMB8GA1UdIwQY MBaAFFguIXCnvL7DEBVPK86Zgz/sKAH7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0M0aGNLZTh2c01RRlU4cnpwbURQLXdvQWZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi84MWVkNDEtZTM2Yi00NWY3LTkwZTct YjJmZDliZjA5N2Y4LzEvZWllWk9yOUZISklMUTAxV0Ytb3lRQU1FMC00LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi84MWVkNDEtZTM2Yi00NWY3LTkwZTctYjJmZDliZjA5N2Y4 LzEvV0M0aGNLZTh2c01RRlU4cnpwbURQLXdvQWZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEoGCCsGAQUFBwEHAQH/BDswOTAoBAIAATAiMAwDBANDPzgD BABDPzowDAMEAEM/PQMEBkM/AAMEAFBL2DANBAIAAjAHAwUDKhP4ADANBgkqhkiG 9w0BAQsFAAOCAQEA0OZyFsaUvWIgF4bdSRIbfXWV8IWbv06YKxSvZLs9taUnuIP1 Ni0YzPHqJS7mY6QYCC+lg4zZRqJE1tV3w+ANHsV8TSye1AomgLZm8Xf8LVKgEZNy Z3Hs9pka9Cdv7FV2Q2kn3KnBo3o9/zLxWp6Hs9sEzUpwSNh29f704xiQkJg9rkjc c6mZ9NR1c8hX33Cf4lsxNLPG40qr+IWmgDUsaxJYYsmgtu8McIj35xGpA4pXzPZx fqNXEr3HZkTshFp1UM2Rgbwi8zI2M7GS82IwYEDaERRJf3zcSgoA+KiUPPx9TgYg jb7M/7N5uQN9Fhr8YR0EyxYeBBcXrGwMUCj3Cg== -----END CERTIFICATE-----Generated at Sun Jan 25 09:19:17 2026 by rpki-client