This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/0ECEewsHbpx9zU1JX2DIun14wc4.roa File: 0ECEewsHbpx9zU1JX2DIun14wc4.roa (raw, json) Hash identifier: 3xUQ5J+uKoXf2K0tx/gaMVdbcJCYxizBzW4f58o5Lj4= Subject key identifier: D0:40:84:7B:0B:07:6E:9C:7D:CD:4D:49:5F:60:C8:BA:7D:78:C1:CE Certificate issuer: /CN=a8801be2363f211bd2f57818adeaf9c0dbe14bdb Certificate serial: 019B7E374DE721E2B38F54C600972A1B49DA Authority key identifier: A8:80:1B:E2:36:3F:21:1B:D2:F5:78:18:AD:EA:F9:C0:DB:E1:4B:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIAb4jY_IRvS9XgYrer5wNvhS9s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/0ECEewsHbpx9zU1JX2DIun14wc4.roa Signing time: Fri 02 Jan 2026 10:18:32 +0000 ROA not before: Fri 02 Jan 2026 10:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 82.115.214.0/24 maxlen: 24 185.66.202.0/24 maxlen: 24 185.66.203.0/24 maxlen: 24 185.237.4.0/24 maxlen: 24 185.237.5.0/24 maxlen: 24 185.237.6.0/24 maxlen: 24 185.237.7.0/24 maxlen: 24 2a07:e3c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.crl rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft rsync://rpki.ripe.net/repository/DEFAULT/qIAb4jY_IRvS9XgYrer5wNvhS9s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 01:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:4d:e7:21:e2:b3:8f:54:c6:00:97:2a:1b:49:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8801be2363f211bd2f57818adeaf9c0dbe14bdb Validity Not Before: Jan 2 10:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d040847b0b076e9c7dcd4d495f60c8ba7d78c1ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:5a:8b:5e:94:56:52:4a:36:80:8a:6b:2c:3d: d2:f6:f5:cd:44:0a:32:c6:e7:32:10:e1:0b:69:16: 5d:4b:bd:26:ae:2b:70:5d:ab:4d:64:ff:11:75:92: ce:25:37:47:67:fc:a3:ca:99:c8:99:70:26:ae:e6: 1b:d6:87:76:ed:33:3d:a2:60:f1:60:a6:cf:a2:4a: d4:96:ce:1b:24:32:f9:cf:27:83:01:1b:c9:f2:63: e0:1c:e8:34:e9:78:a7:8f:e6:65:0d:22:93:3a:cb: 97:17:b3:6b:dc:06:58:24:21:90:13:ba:5a:3c:95: 3e:a2:d3:6c:5d:40:1c:2e:24:ef:54:7e:43:b4:98: 7c:0b:f6:f5:ca:00:9b:e8:e8:5f:87:c5:e2:8f:5d: 15:a5:a2:48:a5:fa:9b:a9:03:b5:31:6c:85:0e:4c: e9:b2:0f:9e:28:32:e4:fa:45:3f:21:78:82:28:fb: 6e:ed:c0:9e:2c:3f:d6:76:ce:50:30:17:cf:d0:db: cb:cf:4e:17:a4:a2:25:14:c2:28:f4:64:7c:76:04: 3a:f9:69:d3:a8:1f:90:51:3c:03:b3:41:86:c1:24: e6:5f:d4:e6:91:d3:09:a3:fe:46:0e:aa:ec:a0:f1: 4b:52:51:70:4e:ab:e8:d3:42:b9:b3:54:4b:71:62: c9:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:40:84:7B:0B:07:6E:9C:7D:CD:4D:49:5F:60:C8:BA:7D:78:C1:CE X509v3 Authority Key Identifier: keyid:A8:80:1B:E2:36:3F:21:1B:D2:F5:78:18:AD:EA:F9:C0:DB:E1:4B:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIAb4jY_IRvS9XgYrer5wNvhS9s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/0ECEewsHbpx9zU1JX2DIun14wc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.115.214.0/24 185.66.202.0/23 185.237.4.0/22 IPv6: 2a07:e3c0::/48 Signature Algorithm: sha256WithRSAEncryption 4a:8b:71:86:c8:d3:eb:73:0a:0f:12:93:59:53:67:8c:10:d4: 18:03:02:02:5a:78:e5:0b:f6:10:be:a9:bd:6a:c5:71:2d:1a: 64:ba:93:6a:3e:12:c5:87:61:6a:00:d2:cf:7b:92:0c:3f:f9: a2:53:3c:af:d8:1b:7e:ca:15:aa:70:ac:c7:06:94:5f:93:40: 19:4e:2e:47:a6:32:00:d9:ae:35:cf:07:7b:4e:d5:01:a0:12: 22:05:52:ad:45:d4:f9:61:f5:b5:b1:a5:7d:20:db:a9:78:f6: 8d:f8:a3:e2:fd:dd:b5:c7:f3:b2:15:66:d5:06:cd:ad:77:ee: 01:49:4e:ad:43:1f:3e:3b:b1:57:e7:48:9a:6d:7f:d2:ad:53: 8d:8c:de:e4:cd:f2:c4:ba:a0:f4:7b:45:b0:fa:9d:5f:0f:27: 87:5e:78:07:28:9e:bc:cc:f1:d8:04:77:7f:d7:22:30:32:a5: 34:99:43:1c:65:4e:16:71:e5:a6:bd:29:25:65:72:a7:cf:27: 80:a9:bf:98:0e:a7:d4:6a:a1:a1:e0:05:7c:95:ec:d3:41:6d: e4:9c:9d:66:50:3b:0c:db:05:78:22:36:f9:c7:4b:fb:0b:d0: ee:76:59:fb:fc:91:40:24:ac:8d:aa:ec:22:8c:a8:c1:52:88: 23:4b:82:79 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt+N03nIeKzj1TGAJcqG0naMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4ODAxYmUyMzYzZjIxMWJkMmY1NzgxOGFkZWFmOWMwZGJl MTRiZGIwHhcNMjYwMTAyMTAxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMDQwODQ3YjBiMDc2ZTljN2RjZDRkNDk1ZjYwYzhiYTdkNzhjMWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6lqLXpRWUko2gIprLD3S9vXNRAoy xucyEOELaRZdS70mritwXatNZP8RdZLOJTdHZ/yjypnImXAmruYb1od27TM9omDx YKbPokrUls4bJDL5zyeDARvJ8mPgHOg06Xinj+ZlDSKTOsuXF7Nr3AZYJCGQE7pa PJU+otNsXUAcLiTvVH5DtJh8C/b1ygCb6Ohfh8Xij10VpaJIpfqbqQO1MWyFDkzp sg+eKDLk+kU/IXiCKPtu7cCeLD/Wds5QMBfP0NvLz04XpKIlFMIo9GR8dgQ6+WnT qB+QUTwDs0GGwSTmX9TmkdMJo/5GDqrsoPFLUlFwTqvo00K5s1RLcWLJmQIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFNBAhHsLB26cfc1NSV9gyLp9eMHOMB8GA1UdIwQY MBaAFKiAG+I2PyEb0vV4GK3q+cDb4UvbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUlBYjRqWV9JUnZTOVhnWXJlcjV3TnZoUzlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS84MTFlNzMtY2YzMC00OTRkLWFjYWMt ODQyMGFlOWUwNjIyLzEvMEVDRWV3c0hicHg5elUxSlgyREl1bjE0d2M0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS84MTFlNzMtY2YzMC00OTRkLWFjYWMtODQyMGFlOWUwNjIy LzEvcUlBYjRqWV9JUnZTOVhnWXJlcjV3TnZoUzlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQAUnPWAwQB uULKAwQCue0EMA8EAgACMAkDBwAqB+PAAAAwDQYJKoZIhvcNAQELBQADggEBAEqL cYbI0+tzCg8Sk1lTZ4wQ1BgDAgJaeOUL9hC+qb1qxXEtGmS6k2o+EsWHYWoA0s97 kgw/+aJTPK/YG37KFapwrMcGlF+TQBlOLkemMgDZrjXPB3tO1QGgEiIFUq1F1Plh 9bWxpX0g26l49o34o+L93bXH87IVZtUGza137gFJTq1DHz47sVfnSJptf9KtU42M 3uTN8sS6oPR7RbD6nV8PJ4deeAconrzM8dgEd3/XIjAypTSZQxxlThZx5aa9KSVl cqfPJ4Cpv5gOp9RqoaHgBXyV7NNBbeScnWZQOwzbBXgiNvnHS/sL0O52Wfv8kUAk rI2q7CKMqMFSiCNLgnk= -----END CERTIFICATE-----Generated at Sat Jan 17 06:46:21 2026 by rpki-client