This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/enheJsXMtTxgm2wRND7dJgv8cak.roa File: enheJsXMtTxgm2wRND7dJgv8cak.roa (raw, json) Hash identifier: C3fYygAIlGdruBbPXDLy8TVW2TRb7yeOUTAGkUC/fmA= Subject key identifier: 7A:78:5E:26:C5:CC:B5:3C:60:9B:6C:11:34:3E:DD:26:0B:FC:71:A9 Certificate issuer: /CN=06785117986adaa437bec30a2bf9f157a9257df2 Certificate serial: 019B7DCB133E36A0ECC8C8B86B2F12681624 Authority key identifier: 06:78:51:17:98:6A:DA:A4:37:BE:C3:0A:2B:F9:F1:57:A9:25:7D:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/enheJsXMtTxgm2wRND7dJgv8cak.roa Signing time: Fri 02 Jan 2026 08:20:19 +0000 ROA not before: Fri 02 Jan 2026 08:20:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56327 IP address blocks: 185.204.84.0/22 maxlen: 22 185.219.224.0/22 maxlen: 22 185.248.72.0/22 maxlen: 22 2a0f:78c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:13:3e:36:a0:ec:c8:c8:b8:6b:2f:12:68:16:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06785117986adaa437bec30a2bf9f157a9257df2 Validity Not Before: Jan 2 08:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a785e26c5ccb53c609b6c11343edd260bfc71a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:10:82:de:2f:8c:55:7d:38:71:36:11:ab:b0: 6a:04:41:8a:ea:b1:1b:a4:1f:59:95:9d:f8:3f:bc: 5b:b3:94:03:1c:94:2f:df:5e:7e:03:5c:ad:cb:44: f6:42:b2:bc:b1:88:96:6a:d7:99:87:9f:a4:32:68: 4c:d8:38:48:af:5a:1f:23:05:e9:46:41:77:b0:3d: 8a:ee:3b:9e:a4:88:0a:3c:18:e5:1a:aa:29:28:d5: 1d:44:ba:49:c4:bd:df:df:24:4b:40:59:d2:7f:63: b1:8f:37:8d:89:72:04:91:69:d1:24:1b:cc:52:da: 50:18:ec:b4:b0:0b:f9:51:23:e2:34:54:1d:ab:43: b4:ea:7e:0b:93:c9:75:c1:8d:01:4f:4c:64:5c:5f: cf:c2:7e:c9:da:bd:c6:b3:91:39:4c:d1:b4:75:1f: f2:9e:36:16:7f:da:c5:dc:8d:7f:e9:5a:ed:77:9b: 97:c7:b1:48:e8:dc:ba:5e:3e:b5:ab:59:54:79:24: b5:32:15:87:0e:3f:19:86:2c:f3:34:a7:5f:02:10: e3:32:c6:08:f0:cf:cc:5f:5d:81:3f:a9:50:b6:74: 51:7c:80:ca:c6:cb:d0:7c:54:52:44:99:c7:24:dd: ab:cb:04:c5:e2:8e:53:31:a1:dd:8a:57:bf:1e:45: c2:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:78:5E:26:C5:CC:B5:3C:60:9B:6C:11:34:3E:DD:26:0B:FC:71:A9 X509v3 Authority Key Identifier: keyid:06:78:51:17:98:6A:DA:A4:37:BE:C3:0A:2B:F9:F1:57:A9:25:7D:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/enheJsXMtTxgm2wRND7dJgv8cak.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.204.84.0/22 185.219.224.0/22 185.248.72.0/22 IPv6: 2a0f:78c0::/29 Signature Algorithm: sha256WithRSAEncryption 4d:a5:d0:cd:40:11:2a:b5:be:af:77:e4:71:ab:53:4b:51:90: 1b:fc:74:68:44:d2:8a:cf:7b:1b:56:73:46:69:46:4f:91:fb: 24:8f:86:42:98:5a:80:e9:4c:0f:17:cd:4e:e5:fb:cf:38:33: 8e:4f:3a:6d:39:5a:29:ff:9b:08:bf:d0:c7:0c:16:c2:3f:05: 31:42:67:b2:c0:ee:67:52:c4:e7:ed:9e:d8:3c:90:c3:e0:d6: 30:81:a7:d8:a9:46:cf:05:2b:78:68:26:8e:30:a2:c7:6d:e6: 50:6e:3d:7b:c7:03:91:2e:4c:e2:80:58:d9:3a:f5:b5:17:f8: 04:f3:9c:c4:98:14:0b:3c:a7:4b:d0:a5:33:56:90:f5:79:08: 73:11:59:56:64:41:e0:0b:17:8d:ea:50:a5:a1:ca:b5:fa:01: e2:d7:a7:31:d8:9f:9e:42:d5:8d:8b:6d:b3:5a:e3:4d:a4:b8: 54:62:2d:ac:de:24:d2:49:9b:69:07:09:9e:1e:62:53:c8:bf: 13:c1:b0:7a:a5:62:5b:b5:08:af:5b:6a:4c:08:4a:15:88:43: 8a:b4:16:ad:b0:73:1f:50:ee:e9:62:6a:8f:15:53:44:5d:70: 89:65:c0:32:56:25:8c:f8:70:e3:7f:67:4d:df:92:72:99:41: 8c:82:ba:24 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt9yxM+NqDsyMi4ay8SaBYkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2Nzg1MTE3OTg2YWRhYTQzN2JlYzMwYTJiZjlmMTU3YTky NTdkZjIwHhcNMjYwMTAyMDgyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTc4NWUyNmM1Y2NiNTNjNjA5YjZjMTEzNDNlZGQyNjBiZmM3MWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hCC3i+MVX04cTYRq7BqBEGK6rEb pB9ZlZ34P7xbs5QDHJQv315+A1yty0T2QrK8sYiWateZh5+kMmhM2DhIr1ofIwXp RkF3sD2K7juepIgKPBjlGqopKNUdRLpJxL3f3yRLQFnSf2OxjzeNiXIEkWnRJBvM UtpQGOy0sAv5USPiNFQdq0O06n4Lk8l1wY0BT0xkXF/Pwn7J2r3Gs5E5TNG0dR/y njYWf9rF3I1/6Vrtd5uXx7FI6Ny6Xj61q1lUeSS1MhWHDj8ZhizzNKdfAhDjMsYI 8M/MX12BP6lQtnRRfIDKxsvQfFRSRJnHJN2rywTF4o5TMaHdile/HkXCXwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFHp4XibFzLU8YJtsETQ+3SYL/HGpMB8GA1UdIwQY MBaAFAZ4UReYatqkN77DCiv58VepJX3yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm5oUkY1aHEycVEzdnNNS0tfbnhWNmtsZmZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC80OGY5NjQtYTQzMS00ZGU2LTk5Y2Ut ODRlZTQ4ODU2NmYxLzEvZW5oZUpzWE10VHhnbTJ3Uk5EN2RKZ3Y4Y2FrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC80OGY5NjQtYTQzMS00ZGU2LTk5Y2UtODRlZTQ4ODU2NmYx LzEvQm5oUkY1aHEycVEzdnNNS0tfbnhWNmtsZmZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCucxUAwQC udvgAwQCufhIMA0EAgACMAcDBQMqD3jAMA0GCSqGSIb3DQEBCwUAA4IBAQBNpdDN QBEqtb6vd+Rxq1NLUZAb/HRoRNKKz3sbVnNGaUZPkfskj4ZCmFqA6UwPF81O5fvP ODOOTzptOVop/5sIv9DHDBbCPwUxQmeywO5nUsTn7Z7YPJDD4NYwgafYqUbPBSt4 aCaOMKLHbeZQbj17xwORLkzigFjZOvW1F/gE85zEmBQLPKdL0KUzVpD1eQhzEVlW ZEHgCxeN6lClocq1+gHi16cx2J+eQtWNi22zWuNNpLhUYi2s3iTSSZtpBwmeHmJT yL8TwbB6pWJbtQivW2pMCEoViEOKtBatsHMfUO7pYmqPFVNEXXCJZcAyViWM+HDj f2dN35JymUGMgrok -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:51 2026 by rpki-client