This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/Eii8h6uaBr6fEXcjaJ5se8NVU0c.roa File: Eii8h6uaBr6fEXcjaJ5se8NVU0c.roa (raw, json) Hash identifier: WAw9S4sN6yDFY1nBSSz2zmctfGBwQIAYJa1xn10MbIU= Subject key identifier: 12:28:BC:87:AB:9A:06:BE:9F:11:77:23:68:9E:6C:7B:C3:55:53:47 Certificate issuer: /CN=02c4df5b74d99f9796718435c3afd2220cb56751 Certificate serial: 019B76EB44A47B5B9A57A1D6FDB58A9C60B1 Authority key identifier: 02:C4:DF:5B:74:D9:9F:97:96:71:84:35:C3:AF:D2:22:0C:B5:67:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/Eii8h6uaBr6fEXcjaJ5se8NVU0c.roa Signing time: Thu 01 Jan 2026 00:18:08 +0000 ROA not before: Thu 01 Jan 2026 00:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214568 IP address blocks: 194.246.72.0/24 maxlen: 24 194.246.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.crl rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.mft rsync://rpki.ripe.net/repository/DEFAULT/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:44:a4:7b:5b:9a:57:a1:d6:fd:b5:8a:9c:60:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02c4df5b74d99f9796718435c3afd2220cb56751 Validity Not Before: Jan 1 00:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1228bc87ab9a06be9f117723689e6c7bc3555347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:42:87:87:97:e7:a4:90:80:8a:49:b7:9d:23: d7:22:a8:16:54:eb:4d:81:a0:80:77:11:c0:19:ef: 0c:6a:b8:f7:55:13:1d:ed:46:75:45:5e:cf:c4:86: f6:25:68:ca:20:e7:95:16:31:0a:49:17:7e:92:7e: 0d:5b:50:1a:2d:34:02:ee:ee:89:be:b4:35:f7:22: 25:e9:4b:1b:c0:32:7a:b5:a4:5a:9b:08:38:30:ea: 90:44:b2:7e:0a:37:8f:d5:2a:a9:c8:4c:fe:7f:84: b5:b1:20:b2:00:24:2f:33:41:b8:a8:72:41:da:ab: 22:39:9d:91:7f:8d:57:63:42:b8:84:3c:04:ab:59: 26:07:ff:59:26:40:b0:0f:01:ab:bd:b1:31:0c:45: e6:8e:93:e1:07:42:ea:48:d8:ae:1e:bc:ee:42:a3: b2:f7:40:7c:54:e3:c4:3a:50:ce:e7:a4:9b:f8:5d: 74:a5:ee:db:04:d0:d0:6e:5e:c8:54:6e:46:cf:0b: 62:8a:5c:9e:8e:e2:7c:79:43:b5:4c:74:ec:0e:a6: 17:a3:bc:74:1d:76:2b:ff:9e:18:70:ae:97:f4:ae: 69:05:e1:80:77:94:b4:62:e8:d8:58:2f:76:66:ab: d1:cb:13:13:7d:63:a1:b4:be:23:d6:26:40:0a:61: 8f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:28:BC:87:AB:9A:06:BE:9F:11:77:23:68:9E:6C:7B:C3:55:53:47 X509v3 Authority Key Identifier: keyid:02:C4:DF:5B:74:D9:9F:97:96:71:84:35:C3:AF:D2:22:0C:B5:67:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/Eii8h6uaBr6fEXcjaJ5se8NVU0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/8f5a1d-6087-46be-b4b8-21de03a85235/1/AsTfW3TZn5eWcYQ1w6_SIgy1Z1E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.246.72.0/23 Signature Algorithm: sha256WithRSAEncryption 3c:fc:94:72:05:58:f9:ac:d0:36:0f:33:28:e4:1f:2b:6b:46: 11:09:66:26:31:dd:1d:07:21:65:f7:bc:ef:e6:d2:51:58:65: be:1e:3d:9d:74:51:9e:d6:77:3d:69:b0:4c:ad:98:e5:60:ca: 07:75:4f:4a:b8:26:7b:8a:e5:c8:68:15:f9:cc:d8:09:b4:42: f0:85:25:a0:2b:7a:b8:39:dc:9c:11:74:8a:0e:23:f9:9c:b7: 57:13:d9:7d:87:73:52:33:82:8a:c9:f8:5f:11:1d:96:94:54: 9b:ee:23:be:62:83:cd:33:62:57:ed:de:4a:78:17:9f:de:d3: 26:85:c6:bd:f2:67:7c:aa:55:6c:b6:c6:bc:cc:0f:83:28:13: 3a:d4:16:6a:a5:85:dd:f3:f3:6f:ee:71:82:d9:fd:80:39:8f: bc:e0:14:0b:40:72:e9:27:d1:54:84:6e:c0:dc:e3:a2:26:d5: cd:54:6f:f2:dc:42:c3:b0:dd:60:5b:62:e9:55:ef:11:52:eb: cc:be:b8:54:b4:6e:f3:8a:d1:69:45:71:32:4d:52:60:6e:ee: bc:47:e6:41:6e:22:b1:cd:51:1b:98:9d:a9:f8:6e:84:95:54: 71:b5:31:15:77:32:71:48:d8:01:26:2b:8c:11:84:17:c0:a6: 9d:46:b5:48 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt260Ske1uaV6HW/bWKnGCxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyYzRkZjViNzRkOTlmOTc5NjcxODQzNWMzYWZkMjIyMGNi NTY3NTEwHhcNMjYwMTAxMDAxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjI4YmM4N2FiOWEwNmJlOWYxMTc3MjM2ODllNmM3YmMzNTU1MzQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUKHh5fnpJCAikm3nSPXIqgWVOtN gaCAdxHAGe8Marj3VRMd7UZ1RV7PxIb2JWjKIOeVFjEKSRd+kn4NW1AaLTQC7u6J vrQ19yIl6UsbwDJ6taRamwg4MOqQRLJ+CjeP1SqpyEz+f4S1sSCyACQvM0G4qHJB 2qsiOZ2Rf41XY0K4hDwEq1kmB/9ZJkCwDwGrvbExDEXmjpPhB0LqSNiuHrzuQqOy 90B8VOPEOlDO56Sb+F10pe7bBNDQbl7IVG5GzwtiilyejuJ8eUO1THTsDqYXo7x0 HXYr/54YcK6X9K5pBeGAd5S0YujYWC92ZqvRyxMTfWOhtL4j1iZACmGPcQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBIovIermga+nxF3I2iebHvDVVNHMB8GA1UdIwQY MBaAFALE31t02Z+XlnGENcOv0iIMtWdRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXNUZlczVFpuNWVXY1lRMXc2X1NJZ3kxWjFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS84ZjVhMWQtNjA4Ny00NmJlLWI0Yjgt MjFkZTAzYTg1MjM1LzEvRWlpOGg2dWFCcjZmRVhjamFKNXNlOE5WVTBjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS84ZjVhMWQtNjA4Ny00NmJlLWI0YjgtMjFkZTAzYTg1MjM1 LzEvQXNUZlczVFpuNWVXY1lRMXc2X1NJZ3kxWjFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwvZIMA0G CSqGSIb3DQEBCwUAA4IBAQA8/JRyBVj5rNA2DzMo5B8ra0YRCWYmMd0dByFl97zv 5tJRWGW+Hj2ddFGe1nc9abBMrZjlYMoHdU9KuCZ7iuXIaBX5zNgJtELwhSWgK3q4 OdycEXSKDiP5nLdXE9l9h3NSM4KKyfhfER2WlFSb7iO+YoPNM2JX7d5KeBef3tMm hca98md8qlVstsa8zA+DKBM61BZqpYXd8/Nv7nGC2f2AOY+84BQLQHLpJ9FUhG7A 3OOiJtXNVG/y3ELDsN1gW2LpVe8RUuvMvrhUtG7zitFpRXEyTVJgbu68R+ZBbiKx zVEbmJ2p+G6ElVRxtTEVdzJxSNgBJiuMEYQXwKadRrVI -----END CERTIFICATE-----Generated at Mon Feb 9 18:21:44 2026 by rpki-client