This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EBIHMnEzpUvMJAe-qxZbo80-ffw.roa File: EBIHMnEzpUvMJAe-qxZbo80-ffw.roa (raw, json) Hash identifier: cfn0txzVpMwt7Nc48OA/bYHStOQWWvBz9AKxq2rx/Xs= Subject key identifier: 10:12:07:32:71:33:A5:4B:CC:24:07:BE:AB:16:5B:A3:CD:3E:7D:FC Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A3119DCB0E05EA64AE03C7509F6F32 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EBIHMnEzpUvMJAe-qxZbo80-ffw.roa Signing time: Thu 01 Jan 2026 08:18:31 +0000 ROA not before: Thu 01 Jan 2026 08:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60701 IP address blocks: 94.156.103.0/24 maxlen: 24 194.180.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:11:9d:cb:0e:05:ea:64:ae:03:c7:50:9f:6f:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=101207327133a54bcc2407beab165ba3cd3e7dfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:97:83:cb:73:c6:9b:0a:fc:f3:13:d8:78:38: e8:ff:e3:a1:06:ac:ed:71:46:a0:6e:9a:44:93:49: 30:ee:0b:3e:65:4e:2b:22:7a:c7:26:c4:68:e7:6a: 18:21:ef:69:2c:e3:60:2c:f7:15:90:10:72:a8:3b: 42:83:26:01:a0:83:51:7b:e1:11:db:90:0e:17:b6: f5:9d:50:c3:c9:e7:a1:bd:8c:66:68:63:96:c5:e8: f0:ed:00:a9:fe:29:ca:08:f9:e1:76:eb:2e:f6:a2: 46:d3:e3:53:a2:3b:f3:71:ea:a9:50:b8:b7:e6:39: d2:1c:bb:fd:f9:63:08:97:80:7c:d9:52:0e:e1:2a: 0f:78:f7:f5:6d:35:5c:d8:6c:eb:f8:f4:d2:f0:e1: 2c:4a:c8:4e:1c:74:95:bf:94:42:10:2f:91:86:e6: b8:77:47:ab:0c:1b:54:90:b6:82:c0:87:70:58:bc: 5a:e1:b5:29:c0:7e:c8:f9:3f:a3:48:b5:b1:1d:10: 03:83:49:a2:32:9a:ce:da:36:c9:68:eb:2f:19:cd: 4d:cc:3e:7a:bd:cf:9e:dc:77:25:64:8b:7e:0a:a9: 14:19:81:b4:df:b2:25:86:3b:10:4c:40:a3:c6:54: 29:1a:62:00:03:f1:a5:99:cb:32:27:8e:b2:0d:de: 67:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:12:07:32:71:33:A5:4B:CC:24:07:BE:AB:16:5B:A3:CD:3E:7D:FC X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EBIHMnEzpUvMJAe-qxZbo80-ffw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.156.103.0/24 194.180.39.0/24 Signature Algorithm: sha256WithRSAEncryption 12:f7:85:14:4a:fc:bd:c4:24:1e:a2:22:08:18:1d:59:23:e4: 18:f7:6b:4d:aa:ac:ca:e5:82:55:98:7a:f9:df:6c:0e:6d:36: aa:1f:5b:a8:75:9a:27:99:e1:a3:e4:e3:64:23:a1:bb:7a:36: 09:42:28:8b:f6:7f:ec:f9:51:ec:83:28:77:05:ac:4c:dd:c1: 20:f3:67:48:3c:52:d5:2f:48:79:d7:1d:4b:52:d2:6e:ae:11: 96:af:20:fb:42:13:13:47:4e:37:a5:cd:01:b4:93:3e:01:cf: e8:70:f1:1a:da:2e:1c:b4:dc:68:80:09:fb:b1:bd:e5:ef:96: 1f:ed:db:1b:fc:83:b4:9d:1d:ed:b5:17:df:57:e2:fc:c5:93: 83:eb:5e:dc:2b:54:e8:fc:a8:cc:2b:c3:48:f8:fa:a7:7e:75: 81:35:f5:f8:3f:a1:71:b8:ad:e4:53:8d:e1:d3:81:2d:36:0c: b7:64:bf:79:a8:97:fe:3d:6a:4c:a1:82:84:7f:00:39:44:9e: 3b:06:21:c4:af:2c:62:74:d7:89:04:22:c6:f5:7d:2a:eb:f8: ee:bd:f2:e5:52:80:7a:2f:52:fe:87:1f:b8:5f:13:fb:45:e7: 72:f7:60:0a:15:17:00:52:8a:d5:e1:5a:9e:40:c7:5e:09:1e: 55:92:79:61 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4oxGdyw4F6mSuA8dQn28yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDEyMDczMjcxMzNhNTRiY2MyNDA3YmVhYjE2NWJhM2NkM2U3ZGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA75eDy3PGmwr88xPYeDjo/+OhBqzt cUagbppEk0kw7gs+ZU4rInrHJsRo52oYIe9pLONgLPcVkBByqDtCgyYBoINRe+ER 25AOF7b1nVDDyeehvYxmaGOWxejw7QCp/inKCPnhdusu9qJG0+NTojvzceqpULi3 5jnSHLv9+WMIl4B82VIO4SoPePf1bTVc2Gzr+PTS8OEsSshOHHSVv5RCEC+Rhua4 d0erDBtUkLaCwIdwWLxa4bUpwH7I+T+jSLWxHRADg0miMprO2jbJaOsvGc1NzD56 vc+e3HclZIt+CqkUGYG037IlhjsQTECjxlQpGmIAA/GlmcsyJ46yDd5nBQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBASBzJxM6VLzCQHvqsWW6PNPn38MB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvRUJJSE1uRXpwVXZNSkFlLXF4WmJvODAtZmZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXpxnAwQA wrQnMA0GCSqGSIb3DQEBCwUAA4IBAQAS94UUSvy9xCQeoiIIGB1ZI+QY92tNqqzK 5YJVmHr532wObTaqH1uodZonmeGj5ONkI6G7ejYJQiiL9n/s+VHsgyh3BaxM3cEg 82dIPFLVL0h51x1LUtJurhGWryD7QhMTR043pc0BtJM+Ac/ocPEa2i4ctNxogAn7 sb3l75Yf7dsb/IO0nR3ttRffV+L8xZOD617cK1To/KjMK8NI+PqnfnWBNfX4P6Fx uK3kU43h04EtNgy3ZL95qJf+PWpMoYKEfwA5RJ47BiHEryxidNeJBCLG9X0q6/ju vfLlUoB6L1L+hx+4XxP7Redy92AKFRcAUorV4VqeQMdeCR5Vknlh -----END CERTIFICATE-----Generated at Fri Jan 2 12:07:57 2026 by rpki-client