This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/eIMZBtMcWMvFB1hL6z_nOfKcJpw.roa File: eIMZBtMcWMvFB1hL6z_nOfKcJpw.roa (raw, json) Hash identifier: fpooL7KmV8Sp+0vA+7uC8WsK6RO/CGya0r0FndhdjC0= Subject key identifier: 78:83:19:06:D3:1C:58:CB:C5:07:58:4B:EB:3F:E7:39:F2:9C:26:9C Certificate issuer: /CN=0f0d94ee63c70a733663bbc4b5b576de607e19ed Certificate serial: 019B7910E3F4B5E4B74914925D53C84EAEC4 Authority key identifier: 0F:0D:94:EE:63:C7:0A:73:36:63:BB:C4:B5:B5:76:DE:60:7E:19:ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/eIMZBtMcWMvFB1hL6z_nOfKcJpw.roa Signing time: Thu 01 Jan 2026 10:18:28 +0000 ROA not before: Thu 01 Jan 2026 10:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202661 IP address blocks: 185.197.40.0/22 maxlen: 22 2a0e:d1c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft rsync://rpki.ripe.net/repository/DEFAULT/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:e3:f4:b5:e4:b7:49:14:92:5d:53:c8:4e:ae:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f0d94ee63c70a733663bbc4b5b576de607e19ed Validity Not Before: Jan 1 10:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=78831906d31c58cbc507584beb3fe739f29c269c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7e:4e:20:03:10:f3:59:40:1d:a4:a7:90:1c: 95:1b:ea:16:14:bc:8c:b6:a4:06:ee:86:5b:74:c2: 49:60:7a:ad:18:50:25:05:ae:29:b6:c8:b1:ac:ba: a6:69:1a:68:d6:e6:53:28:b1:2c:b4:a7:35:fb:23: 3f:3c:97:96:b1:c5:af:c9:22:50:5f:a6:1a:8d:81: d2:29:82:fc:5d:d8:ba:ff:ef:1c:e4:3f:df:7f:13: ad:81:73:0a:36:6a:a3:b2:9e:ae:50:0c:de:13:13: 2f:1a:ba:80:2e:60:a4:b8:70:bb:c3:3a:2f:56:6d: 30:57:3f:f8:ac:14:f2:39:5b:26:50:5d:af:56:27: be:45:ed:d0:84:91:56:a3:de:43:b5:27:4c:3c:58: 61:6d:16:b1:ac:77:81:43:5a:34:28:b8:1e:39:98: be:f8:e5:0c:1f:dc:0d:5c:25:b3:f1:b5:33:b6:70: e0:1d:30:31:5e:73:2d:ff:1c:6a:bf:e9:2f:7d:4d: f5:54:39:7a:1e:cd:bb:f1:a1:5b:64:6f:cc:de:db: 39:5d:40:1f:5c:fb:97:f2:2a:47:ef:2f:a4:ee:89: 79:10:34:5f:f8:dc:07:e4:80:a1:6f:ca:60:4d:30: 49:38:b3:d7:fa:dd:10:01:46:07:73:f1:e1:de:5a: 60:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:83:19:06:D3:1C:58:CB:C5:07:58:4B:EB:3F:E7:39:F2:9C:26:9C X509v3 Authority Key Identifier: keyid:0F:0D:94:EE:63:C7:0A:73:36:63:BB:C4:B5:B5:76:DE:60:7E:19:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/eIMZBtMcWMvFB1hL6z_nOfKcJpw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.197.40.0/22 IPv6: 2a0e:d1c0::/32 Signature Algorithm: sha256WithRSAEncryption ba:a3:a2:71:ee:7f:5c:a3:07:ef:bf:7a:27:10:b8:20:0d:2c: 81:0a:e9:3a:f5:a4:13:af:f7:3b:81:31:eb:b7:45:32:e6:fd: 48:27:3c:d9:f6:7a:f9:e5:bd:eb:76:c7:aa:21:08:cf:f0:b2: ec:3f:45:75:72:72:a3:26:b5:dd:ab:3b:3f:42:24:40:d7:41: 30:e8:b1:58:af:23:b3:83:62:dc:d6:ba:4f:4b:83:0e:ae:2c: 6e:87:63:5c:bc:5c:48:f4:dc:c0:19:48:1e:50:92:21:b6:d1: 98:b9:f8:e1:7a:9e:e2:c5:4f:e0:24:20:a1:e3:e4:e3:dd:0d: fe:c8:c1:5a:1c:c4:66:fb:97:4b:97:52:46:5b:4d:71:f7:54: 68:40:b4:01:cf:4c:ef:da:a7:8b:d9:58:ac:19:af:02:ca:15: 68:d8:fa:9e:74:4c:ff:13:ec:14:e8:01:e0:9a:c3:cd:22:b0: 19:bf:fa:f8:4e:6f:d0:0f:ea:98:fa:ed:05:57:95:74:41:ad: 4b:f0:9f:30:49:43:4b:aa:c3:1d:43:c0:64:39:b0:c8:2f:33: 86:c8:2b:2f:d5:28:4a:94:b5:84:65:82:9c:e7:0a:f1:1b:03: e7:46:a9:63:46:7b:8f:ca:58:4a:f9:6f:b5:6c:82:53:d4:de: b9:96:ee:30 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5EOP0teS3SRSSXVPITq7EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMGQ5NGVlNjNjNzBhNzMzNjYzYmJjNGI1YjU3NmRlNjA3 ZTE5ZWQwHhcNMjYwMTAxMTAxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODgzMTkwNmQzMWM1OGNiYzUwNzU4NGJlYjNmZTczOWYyOWMyNjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuX5OIAMQ81lAHaSnkByVG+oWFLyM tqQG7oZbdMJJYHqtGFAlBa4ptsixrLqmaRpo1uZTKLEstKc1+yM/PJeWscWvySJQ X6YajYHSKYL8Xdi6/+8c5D/ffxOtgXMKNmqjsp6uUAzeExMvGrqALmCkuHC7wzov Vm0wVz/4rBTyOVsmUF2vVie+Re3QhJFWo95DtSdMPFhhbRaxrHeBQ1o0KLgeOZi+ +OUMH9wNXCWz8bUztnDgHTAxXnMt/xxqv+kvfU31VDl6Hs278aFbZG/M3ts5XUAf XPuX8ipH7y+k7ol5EDRf+NwH5IChb8pgTTBJOLPX+t0QAUYHc/Hh3lpgSwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFHiDGQbTHFjLxQdYS+s/5znynCacMB8GA1UdIwQY MBaAFA8NlO5jxwpzNmO7xLW1dt5gfhntMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHcyVTdtUEhDbk0yWTd2RXRiVjIzbUItR2UwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC80MzllZjYtNmUzOS00NGU4LThjOWIt OTJkNDE4ZThkOWE1LzEvZUlNWkJ0TWNXTXZGQjFoTDZ6X25PZktjSnB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC80MzllZjYtNmUzOS00NGU4LThjOWItOTJkNDE4ZThkOWE1 LzEvRHcyVTdtUEhDbk0yWTd2RXRiVjIzbUItR2UwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCucUoMA0E AgACMAcDBQAqDtHAMA0GCSqGSIb3DQEBCwUAA4IBAQC6o6Jx7n9cowfvv3onELgg DSyBCuk69aQTr/c7gTHrt0Uy5v1IJzzZ9nr55b3rdseqIQjP8LLsP0V1cnKjJrXd qzs/QiRA10Ew6LFYryOzg2Lc1rpPS4MOrixuh2NcvFxI9NzAGUgeUJIhttGYufjh ep7ixU/gJCCh4+Tj3Q3+yMFaHMRm+5dLl1JGW01x91RoQLQBz0zv2qeL2VisGa8C yhVo2PqedEz/E+wU6AHgmsPNIrAZv/r4Tm/QD+qY+u0FV5V0Qa1L8J8wSUNLqsMd Q8BkObDILzOGyCsv1ShKlLWEZYKc5wrxGwPnRqljRnuPylhK+W+1bIJT1N65lu4w -----END CERTIFICATE-----Generated at Mon Feb 9 18:38:56 2026 by rpki-client