This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6123c4-2bc5-4df9-ad13-e1d99b8706e4/1/eKfPeQ0pVHNDq_anMz-foX-E7BA.roa File: eKfPeQ0pVHNDq_anMz-foX-E7BA.roa (raw, json) Hash identifier: Iv1BE8Jw8DIcy2g8xb7OAne6CeQO/s+G+wiNEGvaPmc= Subject key identifier: 78:A7:CF:79:0D:29:54:73:43:AB:F6:A7:33:3F:9F:A1:7F:84:EC:10 Certificate issuer: /CN=1008ba5429a709bc58ecdbae3f17e1bc9d3a4d5c Certificate serial: 019B7B360848A5F77D1A3E059F1324E6FD75 Authority key identifier: 10:08:BA:54:29:A7:09:BC:58:EC:DB:AE:3F:17:E1:BC:9D:3A:4D:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EAi6VCmnCbxY7NuuPxfhvJ06TVw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/6123c4-2bc5-4df9-ad13-e1d99b8706e4/1/eKfPeQ0pVHNDq_anMz-foX-E7BA.roa Signing time: Thu 01 Jan 2026 20:18:17 +0000 ROA not before: Thu 01 Jan 2026 20:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47688 IP address blocks: 185.77.12.0/24 maxlen: 24 185.77.13.0/24 maxlen: 24 185.77.14.0/24 maxlen: 24 185.142.226.0/23 maxlen: 24 2a07:3146::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/6123c4-2bc5-4df9-ad13-e1d99b8706e4/1/EAi6VCmnCbxY7NuuPxfhvJ06TVw.crl rsync://rpki.ripe.net/repository/DEFAULT/31/6123c4-2bc5-4df9-ad13-e1d99b8706e4/1/EAi6VCmnCbxY7NuuPxfhvJ06TVw.mft rsync://rpki.ripe.net/repository/DEFAULT/EAi6VCmnCbxY7NuuPxfhvJ06TVw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:08:48:a5:f7:7d:1a:3e:05:9f:13:24:e6:fd:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1008ba5429a709bc58ecdbae3f17e1bc9d3a4d5c Validity Not Before: Jan 1 20:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=78a7cf790d29547343abf6a7333f9fa17f84ec10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f6:75:e2:78:8e:7a:12:68:6f:c4:49:5d:64: 48:26:e3:bc:55:5c:77:40:6a:48:43:d9:53:83:0e: 85:91:17:aa:2c:81:2d:c1:96:32:9d:7f:af:09:5d: 08:e7:a3:9f:fe:0d:aa:c4:49:cb:5d:f2:da:38:8d: 2e:11:bc:ee:42:67:15:9a:4a:b5:bc:0c:a5:ea:3f: 33:66:e9:67:9c:d1:86:78:ef:e1:c4:67:0c:b9:1e: ae:14:ce:11:27:50:71:a3:e4:2b:18:bb:74:3d:85: 51:01:dc:6d:b9:aa:70:82:e7:aa:64:3d:fa:c7:d0: c2:37:fc:9b:9e:56:f3:7e:54:ee:66:e2:de:53:2f: cf:40:33:dd:13:5c:2f:09:96:5b:88:f6:bb:88:40: 32:b0:cb:3e:d9:f8:63:ea:65:33:f2:44:fd:ba:19: 3c:b1:22:83:25:81:bc:f0:0c:5b:d9:a5:86:be:5f: c9:95:35:b5:32:e0:1b:62:86:ab:3d:3a:b1:17:03: fa:eb:83:13:0d:c8:44:55:df:a0:83:98:be:21:07: af:3c:4a:52:61:c2:39:d9:d3:74:e1:e6:ea:27:44: 68:15:92:34:37:9a:b4:4a:20:16:ee:bb:b4:bb:3d: f1:47:10:ec:e1:3a:b1:a6:a9:99:7d:49:b2:d5:3b: 8a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:A7:CF:79:0D:29:54:73:43:AB:F6:A7:33:3F:9F:A1:7F:84:EC:10 X509v3 Authority Key Identifier: keyid:10:08:BA:54:29:A7:09:BC:58:EC:DB:AE:3F:17:E1:BC:9D:3A:4D:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EAi6VCmnCbxY7NuuPxfhvJ06TVw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6123c4-2bc5-4df9-ad13-e1d99b8706e4/1/eKfPeQ0pVHNDq_anMz-foX-E7BA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6123c4-2bc5-4df9-ad13-e1d99b8706e4/1/EAi6VCmnCbxY7NuuPxfhvJ06TVw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.77.12.0-185.77.14.255 185.142.226.0/23 IPv6: 2a07:3146::/32 Signature Algorithm: sha256WithRSAEncryption 08:d5:94:15:a4:96:bb:d9:58:a1:40:2e:0a:67:9e:03:14:11: 18:b1:78:5b:f3:37:c7:71:62:13:b2:b9:44:bb:01:06:da:04: 05:46:e2:4e:18:c4:1e:7d:f2:df:76:60:d4:48:96:35:09:03: 66:57:7a:06:9d:e2:64:55:26:d5:d1:b2:3a:79:72:be:25:ac: ea:b5:cd:3f:31:51:e4:ce:35:a0:1b:72:04:fc:2c:8b:93:6d: fa:ca:08:5a:28:ba:df:8f:33:8f:00:0e:99:14:89:34:6c:11: 02:b7:3a:c3:10:08:18:5d:49:a6:84:a2:44:b5:9c:35:59:25: 10:d5:0c:37:70:70:cf:11:0b:b9:f2:bb:df:dc:d9:78:19:8e: 7d:68:15:4a:99:a7:eb:ec:00:45:63:45:e6:78:cc:c8:df:8a: 18:d4:67:88:97:8c:55:dc:49:9b:05:e0:03:3a:4b:f4:01:d4: e1:48:e2:dc:23:c1:dd:8f:58:7d:3c:20:1d:73:36:db:b6:32: 7a:6a:28:bd:f6:e7:99:0e:f0:70:cc:11:f0:6c:6a:0f:26:34: 5b:e3:0d:df:e8:4b:12:1c:02:f2:c1:ad:6b:cb:c8:6b:13:5a: 14:9a:5a:97:b7:13:d1:00:4c:6c:a5:d3:d8:40:78:52:91:c5: 09:6b:ce:02 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt7NghIpfd9Gj4FnxMk5v11MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwMDhiYTU0MjlhNzA5YmM1OGVjZGJhZTNmMTdlMWJjOWQz YTRkNWMwHhcNMjYwMTAxMjAxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OGE3Y2Y3OTBkMjk1NDczNDNhYmY2YTczMzNmOWZhMTdmODRlYzEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfZ14niOehJob8RJXWRIJuO8VVx3 QGpIQ9lTgw6FkReqLIEtwZYynX+vCV0I56Of/g2qxEnLXfLaOI0uEbzuQmcVmkq1 vAyl6j8zZulnnNGGeO/hxGcMuR6uFM4RJ1Bxo+QrGLt0PYVRAdxtuapwgueqZD36 x9DCN/ybnlbzflTuZuLeUy/PQDPdE1wvCZZbiPa7iEAysMs+2fhj6mUz8kT9uhk8 sSKDJYG88Axb2aWGvl/JlTW1MuAbYoarPTqxFwP664MTDchEVd+gg5i+IQevPEpS YcI52dN04ebqJ0RoFZI0N5q0SiAW7ru0uz3xRxDs4TqxpqmZfUmy1TuKpQIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFHinz3kNKVRzQ6v2pzM/n6F/hOwQMB8GA1UdIwQY MBaAFBAIulQppwm8WOzbrj8X4bydOk1cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUFpNlZDbW5DYnhZN051dVB4Zmh2SjA2VFZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS82MTIzYzQtMmJjNS00ZGY5LWFkMTMt ZTFkOTliODcwNmU0LzEvZUtmUGVRMHBWSE5EcV9hbk16LWZvWC1FN0JBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS82MTIzYzQtMmJjNS00ZGY5LWFkMTMtZTFkOTliODcwNmU0 LzEvRUFpNlZDbW5DYnhZN051dVB4Zmh2SjA2VFZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUMAwDBAK5TQwD BAC5TQ4DBAG5juIwDQQCAAIwBwMFACoHMUYwDQYJKoZIhvcNAQELBQADggEBAAjV lBWklrvZWKFALgpnngMUERixeFvzN8dxYhOyuUS7AQbaBAVG4k4YxB598t92YNRI ljUJA2ZXegad4mRVJtXRsjp5cr4lrOq1zT8xUeTONaAbcgT8LIuTbfrKCFoout+P M48ADpkUiTRsEQK3OsMQCBhdSaaEokS1nDVZJRDVDDdwcM8RC7nyu9/c2XgZjn1o FUqZp+vsAEVjReZ4zMjfihjUZ4iXjFXcSZsF4AM6S/QB1OFI4twjwd2PWH08IB1z Ntu2MnpqKL3255kO8HDMEfBsag8mNFvjDd/oSxIcAvLBrWvLyGsTWhSaWpe3E9EA TGyl09hAeFKRxQlrzgI= -----END CERTIFICATE-----Generated at Tue Feb 10 04:15:35 2026 by rpki-client