This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/EBV1N0nyc3uDjy8VuxK9uZr58ys.roa File: EBV1N0nyc3uDjy8VuxK9uZr58ys.roa (raw, json) Hash identifier: Ua/lKqQMivBauR1brwmNmnYyYEQG+PCmKakmmH7OZoQ= Subject key identifier: 10:15:75:37:49:F2:73:7B:83:8F:2F:15:BB:12:BD:B9:9A:F9:F3:2B Certificate issuer: /CN=cbc83c392c5421c595cd5fb79428e8275bdb594c Certificate serial: 019B7EA46511F3951E9132B867115AEC148B Authority key identifier: CB:C8:3C:39:2C:54:21:C5:95:CD:5F:B7:94:28:E8:27:5B:DB:59:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/EBV1N0nyc3uDjy8VuxK9uZr58ys.roa Signing time: Fri 02 Jan 2026 12:17:41 +0000 ROA not before: Fri 02 Jan 2026 12:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 146.19.177.0/24 maxlen: 24 2a13:88c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.crl rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.mft rsync://rpki.ripe.net/repository/DEFAULT/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:65:11:f3:95:1e:91:32:b8:67:11:5a:ec:14:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbc83c392c5421c595cd5fb79428e8275bdb594c Validity Not Before: Jan 2 12:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1015753749f2737b838f2f15bb12bdb99af9f32b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:82:6f:64:3f:dd:03:ad:0a:da:59:ce:80:2c: e5:f4:a5:35:65:92:39:d3:f0:08:8c:f6:d2:56:33: 80:07:b6:79:e8:a5:25:6d:9d:bf:4c:85:be:6a:70: 13:63:94:35:5c:50:a0:af:f3:c6:f1:b0:25:90:b3: e1:4b:0d:b0:37:f8:17:ea:06:ea:21:08:df:f0:f7: 2e:4a:c8:6b:57:d0:66:59:a0:0c:38:a2:8c:62:12: 14:a3:69:b6:84:e0:aa:05:8d:02:2a:70:af:e7:4b: c2:d3:ff:2b:4c:2d:7d:0b:8f:c8:fe:41:1f:23:04: 7e:ad:a7:2e:74:f9:dd:c3:37:77:e4:20:f7:c1:52: ce:0b:db:c7:41:75:ba:72:24:79:52:fa:67:f5:bd: 29:0e:ee:a0:99:0a:72:d2:78:73:2b:2e:2c:d9:84: f5:b5:0f:51:d0:cd:bc:6d:1a:29:34:ae:e5:a4:9c: 60:8c:37:40:6d:f0:f1:7b:44:26:2f:a5:90:b4:5d: 77:21:01:17:17:3f:fb:9e:fc:23:c1:64:28:ca:f0: 8e:cb:06:ca:1a:90:b1:78:7c:b5:10:38:da:d8:85: 78:33:80:b1:4c:1b:93:d3:e1:c2:7b:a1:f0:cc:83: e7:76:bd:69:82:33:63:d7:89:4b:de:b5:c4:20:e2: fd:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:15:75:37:49:F2:73:7B:83:8F:2F:15:BB:12:BD:B9:9A:F9:F3:2B X509v3 Authority Key Identifier: keyid:CB:C8:3C:39:2C:54:21:C5:95:CD:5F:B7:94:28:E8:27:5B:DB:59:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/EBV1N0nyc3uDjy8VuxK9uZr58ys.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/3052de-558b-4334-8a70-9ad33ae653ad/1/y8g8OSxUIcWVzV-3lCjoJ1vbWUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.19.177.0/24 IPv6: 2a13:88c0::/29 Signature Algorithm: sha256WithRSAEncryption 46:fb:68:ae:c5:12:2e:51:fc:5d:8d:c9:cd:7c:67:10:93:92: 47:1f:21:bf:b6:06:0d:63:0b:02:cf:c1:59:36:03:23:0b:cf: df:b7:fa:ee:68:9f:2d:1a:33:4d:02:ef:0a:44:c1:02:c9:96: c6:38:00:bd:7e:72:04:3a:84:ed:33:2d:44:0d:3d:72:90:b3: a0:9d:94:94:7b:cb:f4:d3:ee:c1:ac:75:88:37:8c:56:ff:94: 75:33:54:8a:11:af:b4:3e:f7:81:ee:a5:49:8c:2e:f5:69:93: 5e:d9:52:c4:55:57:3f:df:0a:79:cb:11:d6:8f:39:ac:a9:68: 39:41:63:99:d7:e8:27:a3:49:a9:17:a1:62:a3:4e:52:e3:c6: d7:41:d0:c4:75:0a:38:91:33:ea:5e:17:8d:1f:6d:82:82:71: 9b:7c:82:ec:b3:f4:c1:7b:e0:78:4c:9f:57:5b:60:e9:2a:cd: 31:d2:f6:c8:d5:02:17:c0:0d:07:ca:f1:87:51:d8:3c:5a:e2: 20:63:50:06:a1:fc:f5:27:bc:3d:ce:b5:0c:51:41:d3:f3:30: 16:0a:14:9f:22:c5:cb:a4:68:e8:c1:64:3e:70:95:4e:4a:15: 23:5d:78:17:6a:4a:31:74:fc:8b:f5:45:3f:46:95:ac:12:5c: 05:8a:f5:76 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+pGUR85UekTK4ZxFa7BSLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiYzgzYzM5MmM1NDIxYzU5NWNkNWZiNzk0MjhlODI3NWJk YjU5NGMwHhcNMjYwMTAyMTIxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDE1NzUzNzQ5ZjI3MzdiODM4ZjJmMTViYjEyYmRiOTlhZjlmMzJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIJvZD/dA60K2lnOgCzl9KU1ZZI5 0/AIjPbSVjOAB7Z56KUlbZ2/TIW+anATY5Q1XFCgr/PG8bAlkLPhSw2wN/gX6gbq IQjf8PcuSshrV9BmWaAMOKKMYhIUo2m2hOCqBY0CKnCv50vC0/8rTC19C4/I/kEf IwR+racudPndwzd35CD3wVLOC9vHQXW6ciR5Uvpn9b0pDu6gmQpy0nhzKy4s2YT1 tQ9R0M28bRopNK7lpJxgjDdAbfDxe0QmL6WQtF13IQEXFz/7nvwjwWQoyvCOywbK GpCxeHy1EDja2IV4M4CxTBuT0+HCe6HwzIPndr1pgjNj14lL3rXEIOL91wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBAVdTdJ8nN7g48vFbsSvbma+fMrMB8GA1UdIwQY MBaAFMvIPDksVCHFlc1ft5Qo6Cdb21lMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveThnOE9TeFVJY1dWelYtM2xDam9KMXZiV1V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8zMDUyZGUtNTU4Yi00MzM0LThhNzAt OWFkMzNhZTY1M2FkLzEvRUJWMU4wbnljM3VEank4VnV4Szl1WnI1OHlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8zMDUyZGUtNTU4Yi00MzM0LThhNzAtOWFkMzNhZTY1M2Fk LzEveThnOE9TeFVJY1dWelYtM2xDam9KMXZiV1V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAkhOxMA0E AgACMAcDBQMqE4jAMA0GCSqGSIb3DQEBCwUAA4IBAQBG+2iuxRIuUfxdjcnNfGcQ k5JHHyG/tgYNYwsCz8FZNgMjC8/ft/ruaJ8tGjNNAu8KRMECyZbGOAC9fnIEOoTt My1EDT1ykLOgnZSUe8v00+7BrHWIN4xW/5R1M1SKEa+0PveB7qVJjC71aZNe2VLE VVc/3wp5yxHWjzmsqWg5QWOZ1+gno0mpF6Fio05S48bXQdDEdQo4kTPqXheNH22C gnGbfILss/TBe+B4TJ9XW2DpKs0x0vbI1QIXwA0HyvGHUdg8WuIgY1AGofz1J7w9 zrUMUUHT8zAWChSfIsXLpGjowWQ+cJVOShUjXXgXakoxdPyL9UU/RpWsElwFivV2 -----END CERTIFICATE-----Generated at Wed Jan 7 23:48:05 2026 by rpki-client