This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/E9IB3sYZ-oc7-YPITpGQaihn-so.roa File: E9IB3sYZ-oc7-YPITpGQaihn-so.roa (raw, json) Hash identifier: 5jPfUKrdbwudGJGlNuuaExPB1D+OPBNCB1dk0F5dGxU= Subject key identifier: 13:D2:01:DE:C6:19:FA:87:3B:F9:83:C8:4E:91:90:6A:28:67:FA:CA Certificate issuer: /CN=25e1b659862d15a51cb5ff34de7223c69e48126a Certificate serial: 019B7BA42CFF2C7F4B5EA0C4D547E065D552 Authority key identifier: 25:E1:B6:59:86:2D:15:A5:1C:B5:FF:34:DE:72:23:C6:9E:48:12:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeG2WYYtFaUctf803nIjxp5IEmo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/E9IB3sYZ-oc7-YPITpGQaihn-so.roa Signing time: Thu 01 Jan 2026 22:18:35 +0000 ROA not before: Thu 01 Jan 2026 22:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204638 IP address blocks: 185.75.56.0/24 maxlen: 24 185.75.57.0/24 maxlen: 24 185.75.58.0/24 maxlen: 24 185.75.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.crl rsync://rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.mft rsync://rpki.ripe.net/repository/DEFAULT/JeG2WYYtFaUctf803nIjxp5IEmo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:2c:ff:2c:7f:4b:5e:a0:c4:d5:47:e0:65:d5:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25e1b659862d15a51cb5ff34de7223c69e48126a Validity Not Before: Jan 1 22:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=13d201dec619fa873bf983c84e91906a2867faca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e0:27:56:15:3a:11:90:f7:49:61:d7:0f:c8: bb:1b:e4:6a:94:50:81:65:e9:79:0c:c2:c9:77:bf: 6c:16:27:0d:8c:97:ed:d0:81:a3:19:e0:c0:59:12: 0d:fb:4f:df:1e:88:c2:67:2e:b7:28:ba:7a:38:7e: 65:21:d2:7e:45:4c:34:6b:b8:c5:25:a6:ad:b0:92: 04:81:52:af:d0:b5:10:7b:26:ef:50:26:5f:6b:75: 96:7f:5b:f3:74:d1:fc:fd:64:96:5e:e7:63:c3:36: 37:e4:0f:3e:b3:6c:13:6c:ed:bc:44:fb:b5:c7:2a: f3:f3:44:5a:ad:80:98:36:a3:b4:74:07:3e:d0:14: 1e:4e:6d:57:e6:14:ff:48:3b:dd:67:f1:b0:20:e9: 49:66:ea:de:51:de:76:71:ef:e6:e7:6a:93:1e:af: c1:49:6b:13:a5:b1:60:a8:ec:68:72:93:52:5f:f3: 4a:e6:58:88:6e:67:d2:82:a9:14:9a:09:96:a0:67: 09:5c:47:61:e7:59:0b:41:25:f7:9a:52:55:ed:28: 87:eb:8e:ba:82:7b:87:39:f2:08:67:3c:a6:0a:ff: e2:f7:91:18:53:04:43:52:1d:2a:00:5c:84:23:92: 52:a4:ba:eb:30:3c:22:1e:7a:45:e0:a9:71:da:ff: e0:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:D2:01:DE:C6:19:FA:87:3B:F9:83:C8:4E:91:90:6A:28:67:FA:CA X509v3 Authority Key Identifier: keyid:25:E1:B6:59:86:2D:15:A5:1C:B5:FF:34:DE:72:23:C6:9E:48:12:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeG2WYYtFaUctf803nIjxp5IEmo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/E9IB3sYZ-oc7-YPITpGQaihn-so.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ff3b6c-6db3-4821-9a40-e3c7d4e6598f/1/JeG2WYYtFaUctf803nIjxp5IEmo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.75.56.0/22 Signature Algorithm: sha256WithRSAEncryption 67:0a:c9:31:7d:8f:7f:3e:ab:98:b3:6f:e8:74:77:fd:c6:2b: c0:73:c7:4a:03:d3:af:40:2c:64:3e:7f:3d:08:ff:b8:95:37: 57:cd:17:89:f7:2a:e7:cc:79:7e:af:d4:ec:7d:c3:fa:7c:e5: 0f:60:7e:a5:d0:7c:4a:79:6b:a8:bc:ea:6b:82:c7:7d:10:0c: 77:75:28:b9:03:f0:68:bb:c9:e1:5a:9c:8e:94:d4:a2:e4:af: 59:0a:90:9f:3e:05:cc:30:64:0a:93:cc:20:62:cd:6d:cc:aa: e9:d5:c3:e5:7a:92:4a:92:f6:54:fa:3f:70:04:0f:6b:8e:cf: aa:c4:8a:27:57:03:91:9c:7a:b6:7c:b5:bf:2f:78:04:1b:19: 92:b4:e6:91:53:2d:9d:b5:78:a9:9c:3d:ed:8e:26:05:45:ae: c0:10:29:03:f8:62:2c:8a:e0:dc:6e:ca:cf:53:20:c1:f8:03: 3b:1b:bc:e8:8c:b4:a7:9e:63:ba:04:cb:d0:34:3d:a5:f1:b8: 0f:66:f2:8b:ab:86:50:e9:1f:32:94:f9:98:c6:7e:7b:60:d1: 62:1c:b2:5d:97:b5:9e:c9:32:41:6d:a4:62:c8:08:54:52:9b: 50:5a:14:b2:09:10:38:cb:4e:92:a4:b5:1a:af:9c:63:b9:9b: f9:65:7a:37 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pCz/LH9LXqDE1UfgZdVSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1ZTFiNjU5ODYyZDE1YTUxY2I1ZmYzNGRlNzIyM2M2OWU0 ODEyNmEwHhcNMjYwMTAxMjIxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxM2QyMDFkZWM2MTlmYTg3M2JmOTgzYzg0ZTkxOTA2YTI4NjdmYWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruAnVhU6EZD3SWHXD8i7G+RqlFCB Zel5DMLJd79sFicNjJft0IGjGeDAWRIN+0/fHojCZy63KLp6OH5lIdJ+RUw0a7jF JaatsJIEgVKv0LUQeybvUCZfa3WWf1vzdNH8/WSWXudjwzY35A8+s2wTbO28RPu1 xyrz80RarYCYNqO0dAc+0BQeTm1X5hT/SDvdZ/GwIOlJZureUd52ce/m52qTHq/B SWsTpbFgqOxocpNSX/NK5liIbmfSgqkUmgmWoGcJXEdh51kLQSX3mlJV7SiH6466 gnuHOfIIZzymCv/i95EYUwRDUh0qAFyEI5JSpLrrMDwiHnpF4Klx2v/grwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBPSAd7GGfqHO/mDyE6RkGooZ/rKMB8GA1UdIwQY MBaAFCXhtlmGLRWlHLX/NN5yI8aeSBJqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmVHMldZWXRGYVVjdGY4MDNuSWp4cDVJRW1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9mZjNiNmMtNmRiMy00ODIxLTlhNDAt ZTNjN2Q0ZTY1OThmLzEvRTlJQjNzWVotb2M3LVlQSVRwR1FhaWhuLXNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9mZjNiNmMtNmRiMy00ODIxLTlhNDAtZTNjN2Q0ZTY1OThm LzEvSmVHMldZWXRGYVVjdGY4MDNuSWp4cDVJRW1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuUs4MA0G CSqGSIb3DQEBCwUAA4IBAQBnCskxfY9/PquYs2/odHf9xivAc8dKA9OvQCxkPn89 CP+4lTdXzReJ9yrnzHl+r9TsfcP6fOUPYH6l0HxKeWuovOprgsd9EAx3dSi5A/Bo u8nhWpyOlNSi5K9ZCpCfPgXMMGQKk8wgYs1tzKrp1cPlepJKkvZU+j9wBA9rjs+q xIonVwORnHq2fLW/L3gEGxmStOaRUy2dtXipnD3tjiYFRa7AECkD+GIsiuDcbsrP UyDB+AM7G7zojLSnnmO6BMvQND2l8bgPZvKLq4ZQ6R8ylPmYxn57YNFiHLJdl7We yTJBbaRiyAhUUptQWhSyCRA4y06SpLUar5xjuZv5ZXo3 -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:37 2026 by rpki-client