This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/eGbytIohe-kr726dY0U9-5W_3W0.roa File: eGbytIohe-kr726dY0U9-5W_3W0.roa (raw, json) Hash identifier: FCsduLoeE0W7ZOHD77VZfhJqVup/YNlpb0KlPrFDE1U= Subject key identifier: 78:66:F2:B4:8A:21:7B:E9:2B:EF:6E:9D:63:45:3D:FB:95:BF:DD:6D Certificate issuer: /CN=fa649915a478ea86dff0002c5bed9829825f9813 Certificate serial: 019B790FFBFA3FB2EB14F5190A8C9F7ACEB6 Authority key identifier: FA:64:99:15:A4:78:EA:86:DF:F0:00:2C:5B:ED:98:29:82:5F:98:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/eGbytIohe-kr726dY0U9-5W_3W0.roa Signing time: Thu 01 Jan 2026 10:17:29 +0000 ROA not before: Thu 01 Jan 2026 10:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205067 IP address blocks: 185.230.184.0/24 maxlen: 24 185.230.185.0/24 maxlen: 24 185.230.186.0/24 maxlen: 24 185.230.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:0f:fb:fa:3f:b2:eb:14:f5:19:0a:8c:9f:7a:ce:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa649915a478ea86dff0002c5bed9829825f9813 Validity Not Before: Jan 1 10:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7866f2b48a217be92bef6e9d63453dfb95bfdd6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:23:97:21:bc:b1:f9:c8:ba:4e:ee:37:5e:30: 47:73:b5:2e:7e:96:e0:10:7f:74:ec:2d:c8:84:2d: a3:0a:2c:ff:4e:60:19:23:ef:d5:4e:6c:72:46:9a: 44:e5:fe:da:db:a5:26:ef:51:b6:b4:3c:dd:c5:12: 5b:e7:9b:c8:84:7d:52:22:af:e6:87:ed:06:69:b6: ed:1f:fe:87:c0:09:ff:6d:c7:be:40:69:32:de:79: 0e:20:f0:73:25:9b:5e:6e:3a:58:68:45:6b:98:08: 70:fc:04:8a:05:43:f2:e8:2a:e1:c9:99:08:63:ef: 16:ba:87:19:9a:a5:90:59:1b:23:40:25:cb:07:5e: 5f:eb:56:1d:9a:b0:bf:58:d0:14:10:b6:b7:2b:46: a8:e8:48:07:b0:f3:90:e7:f7:35:6f:89:46:a8:85: f7:bd:79:ad:b7:b7:a1:6b:ee:ac:4e:bd:d2:98:58: 96:5a:6d:01:cd:e8:3b:b6:63:f9:14:38:8a:30:7a: eb:a2:b7:aa:18:6c:69:01:57:17:d2:24:e2:d6:2c: 8c:55:5c:be:bf:b7:ce:3f:10:67:2a:d0:28:4b:29: 9b:18:77:ad:91:be:d3:23:97:c4:7d:f3:aa:b1:36: 7c:95:9a:d9:e7:ae:f2:4d:0a:0e:6e:d8:ff:75:9d: 36:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:66:F2:B4:8A:21:7B:E9:2B:EF:6E:9D:63:45:3D:FB:95:BF:DD:6D X509v3 Authority Key Identifier: keyid:FA:64:99:15:A4:78:EA:86:DF:F0:00:2C:5B:ED:98:29:82:5F:98:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/eGbytIohe-kr726dY0U9-5W_3W0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.230.184.0/22 Signature Algorithm: sha256WithRSAEncryption 8c:88:12:45:ec:fa:56:a2:95:cc:67:ca:df:db:49:3f:93:d6: 90:67:82:07:4e:ca:25:0e:15:b1:b2:74:bf:5e:91:7c:0a:41: b8:f8:a6:8a:16:a7:53:c1:dc:c6:5d:c1:26:3e:b3:a6:a2:4f: 2b:55:0b:47:6e:15:82:9e:3d:99:bd:fa:62:d9:85:a4:8e:23: 7d:20:13:61:7a:bc:b5:03:ea:4d:df:53:17:ce:93:a9:d2:2d: 31:f2:c3:01:ca:55:d7:eb:71:56:7a:fd:a7:b0:29:93:6e:54: 91:45:0f:d2:26:46:0d:6a:fd:16:81:08:f7:e7:d3:b6:d3:eb: 8c:67:7a:1b:fe:7b:82:0e:ef:90:d0:d1:8f:fa:3f:e2:8f:b5: e8:ea:df:98:8d:7a:07:6f:ff:d0:08:3c:50:43:4c:a1:14:7c: 2d:49:35:3a:74:16:6a:3f:5e:4b:24:50:ea:e2:a9:9e:a3:55: ad:1b:bf:ef:f3:b7:64:a5:3a:69:9c:23:ba:a9:b9:e5:24:83: 71:c3:28:0f:90:41:5f:df:48:41:db:05:29:6e:54:40:29:63: de:46:db:5c:ae:92:aa:c6:9d:9c:19:92:e2:35:83:51:de:09: 33:ef:39:9e:d4:10:c0:4d:20:d0:91:5f:54:d8:92:d7:9c:5d: 50:da:e9:eb -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt5D/v6P7LrFPUZCoyfes62MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhNjQ5OTE1YTQ3OGVhODZkZmYwMDAyYzViZWQ5ODI5ODI1 Zjk4MTMwHhcNMjYwMTAxMTAxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODY2ZjJiNDhhMjE3YmU5MmJlZjZlOWQ2MzQ1M2RmYjk1YmZkZDZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iOXIbyx+ci6Tu43XjBHc7Uufpbg EH907C3IhC2jCiz/TmAZI+/VTmxyRppE5f7a26Um71G2tDzdxRJb55vIhH1SIq/m h+0GabbtH/6HwAn/bce+QGky3nkOIPBzJZtebjpYaEVrmAhw/ASKBUPy6CrhyZkI Y+8WuocZmqWQWRsjQCXLB15f61YdmrC/WNAUELa3K0ao6EgHsPOQ5/c1b4lGqIX3 vXmtt7eha+6sTr3SmFiWWm0Bzeg7tmP5FDiKMHrroreqGGxpAVcX0iTi1iyMVVy+ v7fOPxBnKtAoSymbGHetkb7TI5fEffOqsTZ8lZrZ567yTQoObtj/dZ02/QIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFHhm8rSKIXvpK+9unWNFPfuVv91tMB8GA1UdIwQY MBaAFPpkmRWkeOqG3/AALFvtmCmCX5gTMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1tU1pGYVI0Nm9iZjhBQXNXLTJZS1lKZm1CTS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWIvYmM0ZjIxLWE5NzctNDdlMi1iY2Iz LTdlYWQ2MjY0ZTY1NS8xL2VHYnl0SW9oZS1rcjcyNmRZMFU5LTVXXzNXMC5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMWIvYmM0ZjIxLWE5NzctNDdlMi1iY2IzLTdlYWQ2MjY0ZTY1 NS8xLzEtbVNaRmFSNDZvYmY4QUFzVy0yWUtZSmZtQk0uY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK55rgw DQYJKoZIhvcNAQELBQADggEBAIyIEkXs+lailcxnyt/bST+T1pBnggdOyiUOFbGy dL9ekXwKQbj4pooWp1PB3MZdwSY+s6aiTytVC0duFYKePZm9+mLZhaSOI30gE2F6 vLUD6k3fUxfOk6nSLTHywwHKVdfrcVZ6/aewKZNuVJFFD9ImRg1q/RaBCPfn07bT 64xnehv+e4IO75DQ0Y/6P+KPtejq35iNegdv/9AIPFBDTKEUfC1JNTp0Fmo/Xksk UOriqZ6jVa0bv+/zt2SlOmmcI7qpueUkg3HDKA+QQV/fSEHbBSluVEApY95G21yu kqrGnZwZkuI1g1HeCTPvOZ7UEMBNINCRX1TYktecXVDa6es= -----END CERTIFICATE-----Generated at Tue Feb 10 02:58:25 2026 by rpki-client