This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/egKdfoe4jr_OcoA2zw7t88jvhNw.roa File: egKdfoe4jr_OcoA2zw7t88jvhNw.roa (raw, json) Hash identifier: Rm9ZrDiXC3MyZptxhCKpvW8pxI8d9wrZAzUEIDnaY8I= Subject key identifier: 7A:02:9D:7E:87:B8:8E:BF:CE:72:80:36:CF:0E:ED:F3:C8:EF:84:DC Certificate issuer: /CN=6f0b366a136f8fcc5df523c8d46f790791c1b3bb Certificate serial: 019B78A2E8403F342AEB77C5C19E7C4FA095 Authority key identifier: 6F:0B:36:6A:13:6F:8F:CC:5D:F5:23:C8:D4:6F:79:07:91:C1:B3:BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bws2ahNvj8xd9SPI1G95B5HBs7s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/egKdfoe4jr_OcoA2zw7t88jvhNw.roa Signing time: Thu 01 Jan 2026 08:18:20 +0000 ROA not before: Thu 01 Jan 2026 08:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59723 IP address blocks: 185.191.88.0/22 maxlen: 24 2a0a:1640::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.crl rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.mft rsync://rpki.ripe.net/repository/DEFAULT/bws2ahNvj8xd9SPI1G95B5HBs7s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:e8:40:3f:34:2a:eb:77:c5:c1:9e:7c:4f:a0:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f0b366a136f8fcc5df523c8d46f790791c1b3bb Validity Not Before: Jan 1 08:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a029d7e87b88ebfce728036cf0eedf3c8ef84dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1b:6b:03:81:32:85:fa:e3:e2:de:60:7c:8a: 13:e4:d8:e0:30:90:e5:da:8f:35:80:46:d4:96:68: 3e:e4:81:ae:57:1a:4a:3d:0c:22:fb:2e:c0:2a:57: cf:da:18:c2:a0:de:dd:47:05:1d:66:48:6a:e2:a9: df:1f:6c:a1:29:f7:d4:42:a0:c2:a1:bd:c1:ea:a6: 73:da:c4:b9:20:04:04:55:21:96:47:56:1c:f9:15: fc:aa:d5:6a:d4:21:4a:fc:75:aa:42:94:1e:4b:69: 21:d4:a1:79:75:7f:44:36:c6:42:10:e2:bd:cd:60: 59:c8:53:e0:0c:d3:e6:68:0b:0e:a5:90:13:25:6c: 70:6f:67:4e:55:84:bc:52:a9:a9:63:ea:ff:8b:73: 46:7a:1c:8f:c8:fe:2c:66:f8:1b:64:c0:20:95:e1: 29:cf:4b:b2:4b:05:31:aa:dd:d5:90:14:7a:d1:d6: ee:c8:55:61:c2:54:76:83:4e:bd:49:b6:71:14:60: e0:e2:4b:a1:f3:9f:ef:ec:25:5b:09:fe:41:88:5d: 23:c8:cf:ef:4d:8f:b6:59:47:c5:64:64:5d:ff:c2: fb:01:5b:8b:e4:60:83:12:8f:6d:36:74:c7:cd:44: ca:07:26:69:a2:0e:aa:3b:2e:15:89:61:7d:05:87: 7e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:02:9D:7E:87:B8:8E:BF:CE:72:80:36:CF:0E:ED:F3:C8:EF:84:DC X509v3 Authority Key Identifier: keyid:6F:0B:36:6A:13:6F:8F:CC:5D:F5:23:C8:D4:6F:79:07:91:C1:B3:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bws2ahNvj8xd9SPI1G95B5HBs7s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/egKdfoe4jr_OcoA2zw7t88jvhNw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.191.88.0/22 IPv6: 2a0a:1640::/29 Signature Algorithm: sha256WithRSAEncryption 84:3f:c9:35:c1:ce:86:04:f0:98:93:25:67:41:38:88:4e:63: 50:9a:50:a3:af:34:9a:38:b7:01:8c:48:ed:35:7b:29:3f:b7: e0:b9:b0:53:d1:02:16:54:8c:fa:2c:b0:8c:b3:7a:5b:c5:1a: 68:97:25:7b:89:a4:80:2a:55:9e:ab:f8:ea:62:ca:b2:87:b7: 17:41:9f:52:30:b7:f8:a9:96:bc:c7:ad:7f:27:ae:f8:97:09: 8a:13:6e:d7:64:83:99:f5:10:2d:46:69:bc:b1:8b:07:86:30: af:9a:6d:22:8c:26:43:6e:2e:86:f1:99:d1:c5:ec:32:f5:a7: a6:19:7a:d1:c5:b9:52:95:63:00:1a:05:d9:15:e3:90:c7:75: e6:00:a2:60:9f:1a:35:6e:e2:2d:5d:db:2c:d3:03:da:1d:f8: 87:e5:f2:2e:80:9e:8c:3e:9f:eb:22:c3:df:42:dc:ca:28:a7: e0:c9:df:78:2e:aa:17:d0:f2:53:8b:04:64:3c:55:2b:89:3d: cb:98:02:7d:41:c9:f3:f1:b8:01:1d:f7:e2:df:50:c5:5b:ee: fc:86:f2:68:ae:e7:4f:b8:44:eb:35:c6:26:33:8c:59:8f:35: a4:e7:14:6b:34:bf:59:50:85:81:99:fe:13:9a:fb:91:50:c4: 7a:61:92:25 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4ouhAPzQq63fFwZ58T6CVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMGIzNjZhMTM2ZjhmY2M1ZGY1MjNjOGQ0NmY3OTA3OTFj MWIzYmIwHhcNMjYwMTAxMDgxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTAyOWQ3ZTg3Yjg4ZWJmY2U3MjgwMzZjZjBlZWRmM2M4ZWY4NGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRtrA4Eyhfrj4t5gfIoT5NjgMJDl 2o81gEbUlmg+5IGuVxpKPQwi+y7AKlfP2hjCoN7dRwUdZkhq4qnfH2yhKffUQqDC ob3B6qZz2sS5IAQEVSGWR1Yc+RX8qtVq1CFK/HWqQpQeS2kh1KF5dX9ENsZCEOK9 zWBZyFPgDNPmaAsOpZATJWxwb2dOVYS8UqmpY+r/i3NGehyPyP4sZvgbZMAgleEp z0uySwUxqt3VkBR60dbuyFVhwlR2g069SbZxFGDg4kuh85/v7CVbCf5BiF0jyM/v TY+2WUfFZGRd/8L7AVuL5GCDEo9tNnTHzUTKByZpog6qOy4ViWF9BYd+JwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFHoCnX6HuI6/znKANs8O7fPI74TcMB8GA1UdIwQY MBaAFG8LNmoTb4/MXfUjyNRveQeRwbO7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYndzMmFoTnZqOHhkOVNQSTFHOTVCNUhCczdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kMjNkZGUtZTI0Zi00MjU4LWE3Y2Ut ZWVmNmMyZjQ1MTc2LzEvZWdLZGZvZTRqcl9PY29BMnp3N3Q4OGp2aE53LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kMjNkZGUtZTI0Zi00MjU4LWE3Y2UtZWVmNmMyZjQ1MTc2 LzEvYndzMmFoTnZqOHhkOVNQSTFHOTVCNUhCczdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCub9YMA0E AgACMAcDBQMqChZAMA0GCSqGSIb3DQEBCwUAA4IBAQCEP8k1wc6GBPCYkyVnQTiI TmNQmlCjrzSaOLcBjEjtNXspP7fgubBT0QIWVIz6LLCMs3pbxRpolyV7iaSAKlWe q/jqYsqyh7cXQZ9SMLf4qZa8x61/J674lwmKE27XZIOZ9RAtRmm8sYsHhjCvmm0i jCZDbi6G8ZnRxewy9aemGXrRxblSlWMAGgXZFeOQx3XmAKJgnxo1buItXdss0wPa HfiH5fIugJ6MPp/rIsPfQtzKKKfgyd94LqoX0PJTiwRkPFUriT3LmAJ9Qcnz8bgB Hffi31DFW+78hvJorudPuETrNcYmM4xZjzWk5xRrNL9ZUIWBmf4TmvuRUMR6YZIl -----END CERTIFICATE-----Generated at Mon Feb 9 21:18:49 2026 by rpki-client