This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/E-bHCsYrW7SrEgoszTkYjWaBUl0.roa File: E-bHCsYrW7SrEgoszTkYjWaBUl0.roa (raw, json) Hash identifier: SQvcR4616bSFv3T1JdnviQPzodPyTLJ2qwgGIvoGyQQ= Subject key identifier: 13:E6:C7:0A:C6:2B:5B:B4:AB:12:0A:2C:CD:39:18:8D:66:81:52:5D Certificate issuer: /CN=f440e5eba2f8bfc8fe8fe56cc88a4289652390ba Certificate serial: 019B797E5D0712D5453C7E84444831E57148 Authority key identifier: F4:40:E5:EB:A2:F8:BF:C8:FE:8F:E5:6C:C8:8A:42:89:65:23:90:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EDl66L4v8j-j-VsyIpCiWUjkLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/E-bHCsYrW7SrEgoszTkYjWaBUl0.roa Signing time: Thu 01 Jan 2026 12:18:03 +0000 ROA not before: Thu 01 Jan 2026 12:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7018 IP address blocks: 195.225.128.0/23 maxlen: 23 195.225.130.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.crl rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.mft rsync://rpki.ripe.net/repository/DEFAULT/9EDl66L4v8j-j-VsyIpCiWUjkLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:5d:07:12:d5:45:3c:7e:84:44:48:31:e5:71:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f440e5eba2f8bfc8fe8fe56cc88a4289652390ba Validity Not Before: Jan 1 12:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=13e6c70ac62b5bb4ab120a2ccd39188d6681525d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:98:cc:fc:e7:3a:4f:c4:e6:1b:2d:32:fb:ce: 60:a4:be:4b:16:67:fe:8a:98:13:7a:46:9e:28:40: bf:e4:10:26:37:b9:79:89:45:ff:98:7f:9a:a1:43: 97:9f:15:47:5f:54:e9:38:01:45:5e:cd:0a:c4:d7: 5a:87:46:34:d2:20:6d:9a:bc:5d:e5:7c:2a:f1:3e: 1d:bd:44:71:16:0d:d9:7e:9e:e0:4e:a3:3e:1b:de: 31:6d:1f:54:c9:6c:6b:a3:8a:13:e1:b9:91:9d:02: 9b:85:5d:51:08:b6:fb:f8:ae:27:31:d9:fa:08:99: 5c:9d:7d:16:fc:81:d0:64:5b:5f:92:45:2e:d0:c5: 77:58:70:10:ed:c1:95:fa:d0:e5:6e:c2:fc:6b:0e: 82:71:65:5a:77:c1:bb:f5:79:af:2a:9f:91:bc:f1: 4a:6e:bd:f8:28:e9:7f:2c:4e:d7:aa:76:a8:b6:5d: 7a:d2:bd:5e:5f:e8:6f:72:1d:fc:be:9a:57:4e:16: 3b:3b:03:61:c9:36:56:c5:a1:9f:f9:86:17:58:c6: b8:22:a8:d8:94:ba:d0:e8:9f:72:91:91:46:ac:da: c4:e8:0a:1b:7b:7b:c4:b4:d9:61:80:fe:12:77:8b: 76:2d:ee:01:cc:21:91:06:8f:2c:17:c0:5c:7f:a7: 6b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:E6:C7:0A:C6:2B:5B:B4:AB:12:0A:2C:CD:39:18:8D:66:81:52:5D X509v3 Authority Key Identifier: keyid:F4:40:E5:EB:A2:F8:BF:C8:FE:8F:E5:6C:C8:8A:42:89:65:23:90:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EDl66L4v8j-j-VsyIpCiWUjkLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/E-bHCsYrW7SrEgoszTkYjWaBUl0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/de8662-993f-47f7-a27f-00b92c1c1ef4/1/9EDl66L4v8j-j-VsyIpCiWUjkLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.225.128.0/22 Signature Algorithm: sha256WithRSAEncryption 71:78:12:dc:9b:af:15:4d:86:a8:6d:fc:11:20:5d:81:ad:88: 89:70:b3:b1:61:4e:71:4a:28:4d:e7:7b:80:e0:f2:5c:f4:24: 78:69:85:3c:7c:f6:67:67:c4:08:e2:a0:ed:61:82:fa:9b:02: b8:ef:42:89:57:9f:52:89:65:bc:22:05:0d:05:d5:ed:7b:fd: 8e:42:fa:02:83:08:a0:64:55:0b:c8:d8:c0:7a:3e:6a:f7:95: 8a:56:22:c4:ac:0d:50:90:63:f6:86:e9:79:53:be:9b:37:5b: a0:b9:b4:b5:64:6a:96:e8:7f:a8:ae:4f:aa:74:72:a9:40:a7: d1:5a:fd:3e:7c:16:4d:ac:2b:dd:36:10:3b:70:7f:ff:7b:df: 0c:72:d8:bf:fd:de:62:1a:85:5c:99:96:50:7b:a2:66:45:41: b4:5b:e1:b0:b8:8a:84:cf:97:3b:4e:d1:01:83:20:a5:8f:b5: a5:21:0a:09:bc:26:0d:4a:3e:24:a2:6c:1a:72:c7:d9:04:b7: cb:80:f2:cf:5c:21:88:a0:05:6a:a2:35:3f:72:3a:74:12:df: f5:e6:4a:84:a0:47:89:53:c3:aa:9f:79:d1:8b:a2:4d:29:f5: a8:09:34:aa:c9:d1:ff:ca:30:a5:0f:42:56:eb:41:24:b8:ba: a0:b0:f9:77 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fl0HEtVFPH6EREgx5XFIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0NDBlNWViYTJmOGJmYzhmZThmZTU2Y2M4OGE0Mjg5NjUy MzkwYmEwHhcNMjYwMTAxMTIxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxM2U2YzcwYWM2MmI1YmI0YWIxMjBhMmNjZDM5MTg4ZDY2ODE1MjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpjM/Oc6T8TmGy0y+85gpL5LFmf+ ipgTekaeKEC/5BAmN7l5iUX/mH+aoUOXnxVHX1TpOAFFXs0KxNdah0Y00iBtmrxd 5Xwq8T4dvURxFg3Zfp7gTqM+G94xbR9UyWxro4oT4bmRnQKbhV1RCLb7+K4nMdn6 CJlcnX0W/IHQZFtfkkUu0MV3WHAQ7cGV+tDlbsL8aw6CcWVad8G79XmvKp+RvPFK br34KOl/LE7Xqnaotl160r1eX+hvch38vppXThY7OwNhyTZWxaGf+YYXWMa4IqjY lLrQ6J9ykZFGrNrE6Aobe3vEtNlhgP4Sd4t2Le4BzCGRBo8sF8Bcf6drEwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBPmxwrGK1u0qxIKLM05GI1mgVJdMB8GA1UdIwQY MBaAFPRA5eui+L/I/o/lbMiKQollI5C6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUVEbDY2TDR2OGotai1Wc3lJcENpV1Vqa0xvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9kZTg2NjItOTkzZi00N2Y3LWEyN2Yt MDBiOTJjMWMxZWY0LzEvRS1iSENzWXJXN1NyRWdvc3pUa1lqV2FCVWwwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC9kZTg2NjItOTkzZi00N2Y3LWEyN2YtMDBiOTJjMWMxZWY0 LzEvOUVEbDY2TDR2OGotai1Wc3lJcENpV1Vqa0xvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCw+GAMA0G CSqGSIb3DQEBCwUAA4IBAQBxeBLcm68VTYaobfwRIF2BrYiJcLOxYU5xSihN53uA 4PJc9CR4aYU8fPZnZ8QI4qDtYYL6mwK470KJV59SiWW8IgUNBdXte/2OQvoCgwig ZFULyNjAej5q95WKViLErA1QkGP2hul5U76bN1ugubS1ZGqW6H+ork+qdHKpQKfR Wv0+fBZNrCvdNhA7cH//e98Mcti//d5iGoVcmZZQe6JmRUG0W+GwuIqEz5c7TtEB gyClj7WlIQoJvCYNSj4komwacsfZBLfLgPLPXCGIoAVqojU/cjp0Et/15kqEoEeJ U8Oqn3nRi6JNKfWoCTSqydH/yjClD0JW60EkuLqgsPl3 -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:24 2026 by rpki-client