This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eFIkHLGyOWtI88D-W07OWbj9UaI.roa File: eFIkHLGyOWtI88D-W07OWbj9UaI.roa (raw, json) Hash identifier: yGXkgrRDM12DJQ8ZdY8dTLzVgsSMaN3SFaLy13WWzIM= Subject key identifier: 78:52:24:1C:B1:B2:39:6B:48:F3:C0:FE:5B:4E:CE:59:B8:FD:51:A2 Certificate issuer: /CN=78e7ba8c08853be554c594ded156a6983eba1055 Certificate serial: 019B7CEDF6B5DEFC5425EBC14CC81DAA9B9B Authority key identifier: 78:E7:BA:8C:08:85:3B:E5:54:C5:94:DE:D1:56:A6:98:3E:BA:10:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eOe6jAiFO-VUxZTe0VammD66EFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eFIkHLGyOWtI88D-W07OWbj9UaI.roa Signing time: Fri 02 Jan 2026 04:18:48 +0000 ROA not before: Fri 02 Jan 2026 04:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48479 IP address blocks: 46.18.200.0/21 maxlen: 21 46.18.200.0/24 maxlen: 24 46.18.201.0/24 maxlen: 24 46.18.202.0/24 maxlen: 24 46.18.203.0/24 maxlen: 24 46.18.204.0/23 maxlen: 23 46.18.204.0/24 maxlen: 24 46.18.205.0/24 maxlen: 24 46.18.206.0/24 maxlen: 24 46.18.207.0/24 maxlen: 24 151.252.104.0/21 maxlen: 21 151.252.104.0/24 maxlen: 24 151.252.105.0/24 maxlen: 24 151.252.106.0/24 maxlen: 24 151.252.107.0/24 maxlen: 24 151.252.108.0/24 maxlen: 24 151.252.109.0/24 maxlen: 24 151.252.110.0/24 maxlen: 24 151.252.111.0/24 maxlen: 24 185.52.28.0/24 maxlen: 24 185.52.29.0/24 maxlen: 24 185.52.30.0/24 maxlen: 24 185.52.31.0/24 maxlen: 24 185.52.76.0/24 maxlen: 24 185.52.77.0/24 maxlen: 24 185.52.78.0/24 maxlen: 24 185.52.79.0/24 maxlen: 24 2a03:aa80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.crl rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.mft rsync://rpki.ripe.net/repository/DEFAULT/eOe6jAiFO-VUxZTe0VammD66EFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:f6:b5:de:fc:54:25:eb:c1:4c:c8:1d:aa:9b:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78e7ba8c08853be554c594ded156a6983eba1055 Validity Not Before: Jan 2 04:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7852241cb1b2396b48f3c0fe5b4ece59b8fd51a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4b:9a:62:fd:1b:06:74:95:27:7d:7b:9f:d9: b8:5b:9c:38:0e:57:94:c6:a2:9f:c5:d4:d3:9f:a7: c4:19:91:c4:53:7d:d4:54:02:38:d1:43:46:55:c9: 48:77:e9:e6:f4:d5:6e:7e:b9:97:ce:1a:60:ed:0c: f1:8f:e8:dc:3c:9a:ad:c7:54:49:ef:cf:24:32:b7: 34:0f:99:dc:9e:30:4b:71:e6:63:95:8e:7a:5e:fa: 5b:1c:06:58:24:3b:d5:cb:fc:b7:6f:99:9e:22:79: f0:48:b2:b1:5e:31:36:fa:ef:63:ad:11:64:d0:0f: 8f:e4:b4:72:b5:b5:91:e2:c8:f6:c9:53:a2:ac:4f: c7:8b:f5:ad:2d:c1:b1:f0:74:f0:b9:40:ba:d1:36: 02:24:15:72:26:c1:dc:c8:98:ea:c7:a4:91:ff:ff: 90:a0:48:4f:b7:6a:cb:90:c8:21:33:58:eb:9c:e3: cc:ab:34:4e:9c:31:c9:08:f8:32:ae:07:0a:91:06: 00:40:b0:e5:71:f2:18:98:56:2b:c9:39:42:5d:19: de:30:5c:fd:bb:eb:19:b7:97:67:62:9d:d8:ec:67: 7e:ff:69:c5:d1:50:32:5e:41:da:ff:ad:f7:61:9a: 3b:19:62:a0:0b:e5:2e:b3:2d:ab:99:49:93:3c:5d: 6c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:52:24:1C:B1:B2:39:6B:48:F3:C0:FE:5B:4E:CE:59:B8:FD:51:A2 X509v3 Authority Key Identifier: keyid:78:E7:BA:8C:08:85:3B:E5:54:C5:94:DE:D1:56:A6:98:3E:BA:10:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eOe6jAiFO-VUxZTe0VammD66EFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eFIkHLGyOWtI88D-W07OWbj9UaI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.18.200.0/21 151.252.104.0/21 185.52.28.0/22 185.52.76.0/22 IPv6: 2a03:aa80::/32 Signature Algorithm: sha256WithRSAEncryption 67:af:e0:6a:62:f5:62:cb:78:a5:74:76:07:9d:cb:0f:66:93: 92:85:c1:58:ba:61:ff:d7:a9:9e:1f:6c:d4:8b:90:f7:6c:14: 2b:eb:9f:61:10:59:37:00:81:cc:db:19:b3:a0:21:70:ca:c3: b8:0c:4b:7f:c3:4a:80:87:b4:4d:dc:15:3e:cc:56:95:8e:58: aa:51:7f:10:62:78:09:1b:0c:9d:64:e7:fc:f1:81:f6:c4:1c: ef:90:d7:13:a3:05:96:70:3f:8a:39:95:d9:89:9b:bf:9a:02: b3:02:31:0d:61:18:c8:54:c8:13:41:c8:e2:58:92:69:93:e7: 71:b5:3b:bf:e1:69:b5:0a:02:5e:4e:1d:f8:cf:3a:6a:3b:7d: fe:91:ba:f4:30:28:ae:6a:c9:1d:1e:89:dd:01:f6:c6:e3:86: ab:c1:45:37:39:94:c2:0d:ee:76:da:53:6a:d2:fd:8c:b0:e3: c3:71:73:e2:9f:c8:ef:16:d5:d7:a3:3e:9f:cb:1f:c6:e5:72: ab:c3:2f:93:21:11:e0:b7:7c:26:9c:4e:05:7a:9f:92:b7:6b: bc:5f:44:1b:a7:e9:ab:db:44:ca:1a:a1:c8:6a:e7:77:e2:f5: 0e:21:99:47:60:92:61:21:9a:7e:be:a4:90:22:bd:06:d6:82: 6b:cc:21:8e -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt87fa13vxUJevBTMgdqpubMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4ZTdiYThjMDg4NTNiZTU1NGM1OTRkZWQxNTZhNjk4M2Vi YTEwNTUwHhcNMjYwMTAyMDQxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODUyMjQxY2IxYjIzOTZiNDhmM2MwZmU1YjRlY2U1OWI4ZmQ1MWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUuaYv0bBnSVJ317n9m4W5w4DleU xqKfxdTTn6fEGZHEU33UVAI40UNGVclId+nm9NVufrmXzhpg7Qzxj+jcPJqtx1RJ 788kMrc0D5ncnjBLceZjlY56XvpbHAZYJDvVy/y3b5meInnwSLKxXjE2+u9jrRFk 0A+P5LRytbWR4sj2yVOirE/Hi/WtLcGx8HTwuUC60TYCJBVyJsHcyJjqx6SR//+Q oEhPt2rLkMghM1jrnOPMqzROnDHJCPgyrgcKkQYAQLDlcfIYmFYryTlCXRneMFz9 u+sZt5dnYp3Y7Gd+/2nF0VAyXkHa/633YZo7GWKgC+Uusy2rmUmTPF1sSwIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFHhSJByxsjlrSPPA/ltOzlm4/VGiMB8GA1UdIwQY MBaAFHjnuowIhTvlVMWU3tFWppg+uhBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZU9lNmpBaUZPLVZVeFpUZTBWYW1tRDY2RUZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8zMjU0ODEtNWNlNi00NTZlLTk0YTIt NWVhZjllMTBkODVjLzEvZUZJa0hMR3lPV3RJODhELVcwN09XYmo5VWFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8zMjU0ODEtNWNlNi00NTZlLTk0YTItNWVhZjllMTBkODVj LzEvZU9lNmpBaUZPLVZVeFpUZTBWYW1tRDY2RUZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDLhLIAwQD l/xoAwQCuTQcAwQCuTRMMA0EAgACMAcDBQAqA6qAMA0GCSqGSIb3DQEBCwUAA4IB AQBnr+BqYvViy3ildHYHncsPZpOShcFYumH/16meH2zUi5D3bBQr659hEFk3AIHM 2xmzoCFwysO4DEt/w0qAh7RN3BU+zFaVjliqUX8QYngJGwydZOf88YH2xBzvkNcT owWWcD+KOZXZiZu/mgKzAjENYRjIVMgTQcjiWJJpk+dxtTu/4Wm1CgJeTh34zzpq O33+kbr0MCiuaskdHondAfbG44arwUU3OZTCDe522lNq0v2MsOPDcXPin8jvFtXX oz6fyx/G5XKrwy+TIRHgt3wmnE4Fep+St2u8X0Qbp+mr20TKGqHIaud34vUOIZlH YJJhIZp+vqSQIr0G1oJrzCGO -----END CERTIFICATE-----Generated at Mon Feb 9 20:08:57 2026 by rpki-client