This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/E7v6hMZAYWaHkRlbGtOj9vSPgCU.roa File: E7v6hMZAYWaHkRlbGtOj9vSPgCU.roa (raw, json) Hash identifier: MiOCqZqr88ikQyLtncklUrXjnwaAx3E5tXyKQ8CA/ac= Subject key identifier: 13:BB:FA:84:C6:40:61:66:87:91:19:5B:1A:D3:A3:F6:F4:8F:80:25 Certificate issuer: /CN=06defa1311f53f6c441463da8fab3403ad688011 Certificate serial: 019B79EC8C915E8E6D8F17CFEF295DFBFBF9 Authority key identifier: 06:DE:FA:13:11:F5:3F:6C:44:14:63:DA:8F:AB:34:03:AD:68:80:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bt76ExH1P2xEFGPaj6s0A61ogBE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/E7v6hMZAYWaHkRlbGtOj9vSPgCU.roa Signing time: Thu 01 Jan 2026 14:18:24 +0000 ROA not before: Thu 01 Jan 2026 14:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8661 IP address blocks: 178.175.0.0/17 maxlen: 17 178.175.0.0/18 maxlen: 18 178.175.64.0/18 maxlen: 18 185.47.188.0/22 maxlen: 22 213.163.96.0/19 maxlen: 19 213.163.96.0/22 maxlen: 22 213.163.96.0/24 maxlen: 24 213.163.97.0/24 maxlen: 24 213.163.98.0/24 maxlen: 24 213.163.99.0/24 maxlen: 24 213.163.100.0/22 maxlen: 22 213.163.104.0/21 maxlen: 21 213.163.112.0/20 maxlen: 20 213.163.121.0/24 maxlen: 24 2a02:e540::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.mft rsync://rpki.ripe.net/repository/DEFAULT/Bt76ExH1P2xEFGPaj6s0A61ogBE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:8c:91:5e:8e:6d:8f:17:cf:ef:29:5d:fb:fb:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06defa1311f53f6c441463da8fab3403ad688011 Validity Not Before: Jan 1 14:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=13bbfa84c64061668791195b1ad3a3f6f48f8025 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7e:54:07:28:16:e6:4b:3d:cf:31:43:92:72: 7d:0c:ca:fe:2e:28:5d:fe:ff:47:31:15:68:7f:f4: 87:82:02:08:86:de:5f:ce:db:b3:b9:2d:36:1f:d4: 53:c2:6d:c8:d7:96:e6:f0:86:6d:44:68:41:16:20: de:a9:13:4c:81:14:42:f1:0c:d1:f8:32:d8:e1:8b: 0a:51:df:3e:66:4a:b8:1e:3d:63:cb:d4:c9:ad:78: 6a:ba:df:cc:28:4c:0c:4f:a8:3b:c2:16:6e:4d:f8: 7f:88:d7:3e:b6:c1:d0:22:55:b2:e8:8f:28:d6:cf: b1:26:ea:7f:78:41:f2:91:a5:ac:c0:a6:1f:58:99: 93:06:fe:b6:33:24:b9:c6:3a:2a:30:b8:c6:59:b3: 10:5b:5f:da:9f:f0:21:9e:c1:d9:15:c5:0d:ae:60: 48:af:1a:f6:0e:c3:7e:4d:df:c2:31:8e:96:94:26: 6c:46:da:f2:4f:c0:c9:59:46:df:c2:b8:62:8b:84: 65:7f:87:d4:9d:42:5c:e0:ae:32:cd:2e:4f:cf:4b: 77:6e:85:2e:fc:2d:2b:90:3f:d3:2a:3f:0b:0f:c0: ef:cd:25:ff:eb:93:5f:9b:4f:30:68:1c:af:73:39: 89:97:61:69:89:6c:e2:c3:af:f6:fb:54:88:87:1b: 19:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:BB:FA:84:C6:40:61:66:87:91:19:5B:1A:D3:A3:F6:F4:8F:80:25 X509v3 Authority Key Identifier: keyid:06:DE:FA:13:11:F5:3F:6C:44:14:63:DA:8F:AB:34:03:AD:68:80:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bt76ExH1P2xEFGPaj6s0A61ogBE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/E7v6hMZAYWaHkRlbGtOj9vSPgCU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.175.0.0/17 185.47.188.0/22 213.163.96.0/19 IPv6: 2a02:e540::/29 Signature Algorithm: sha256WithRSAEncryption 86:db:d8:f7:8e:a5:6e:d6:4f:9e:1e:52:0a:50:d4:2e:25:79: c6:46:3b:65:9e:d0:9d:d5:de:b2:13:0d:17:be:cd:60:bb:9c: e1:5b:ef:0d:cf:3c:08:19:e6:24:ff:53:22:e7:47:c5:95:76: 18:e9:fb:e6:2d:18:a6:5f:a9:6c:63:fe:97:3b:66:a7:41:a3: 2f:1a:dd:35:22:61:a9:e0:eb:26:06:7a:82:3b:56:62:76:c6: 6c:09:28:f8:97:b8:3e:38:43:8b:9a:2a:b3:da:c4:77:ea:1c: 5d:48:f2:8d:e5:e3:e4:c0:17:95:0a:17:b3:d4:a2:4b:31:c6: 95:38:d2:35:c7:2f:cc:dc:58:68:93:26:e2:30:b0:51:14:c7: 1f:6b:17:18:22:13:6c:88:ec:ba:f5:3b:b1:23:12:68:d9:ad: 08:ea:3d:32:a3:11:25:b8:41:f0:af:0c:38:56:63:50:78:e1: c0:4f:78:80:c7:69:36:04:46:1b:4c:ac:d9:8b:c3:67:9e:6d: 52:24:d0:88:53:c3:70:e5:37:d5:af:ae:ea:08:47:cb:b1:94: d6:12:d4:b8:72:15:7f:93:38:99:a3:a8:1d:b9:c6:19:3c:20: e2:21:12:79:53:87:e2:bd:23:15:67:e3:25:b8:c0:88:6c:09: eb:c1:de:5b -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt57IyRXo5tjxfP7yld+/v5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2ZGVmYTEzMTFmNTNmNmM0NDE0NjNkYThmYWIzNDAzYWQ2 ODgwMTEwHhcNMjYwMTAxMTQxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxM2JiZmE4NGM2NDA2MTY2ODc5MTE5NWIxYWQzYTNmNmY0OGY4MDI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlX5UBygW5ks9zzFDknJ9DMr+Lihd /v9HMRVof/SHggIIht5fztuzuS02H9RTwm3I15bm8IZtRGhBFiDeqRNMgRRC8QzR +DLY4YsKUd8+Zkq4Hj1jy9TJrXhqut/MKEwMT6g7whZuTfh/iNc+tsHQIlWy6I8o 1s+xJup/eEHykaWswKYfWJmTBv62MyS5xjoqMLjGWbMQW1/an/AhnsHZFcUNrmBI rxr2DsN+Td/CMY6WlCZsRtryT8DJWUbfwrhii4Rlf4fUnUJc4K4yzS5Pz0t3boUu /C0rkD/TKj8LD8DvzSX/65Nfm08waByvczmJl2FpiWziw6/2+1SIhxsZ+QIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFBO7+oTGQGFmh5EZWxrTo/b0j4AlMB8GA1UdIwQY MBaAFAbe+hMR9T9sRBRj2o+rNAOtaIARMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnQ3NkV4SDFQMnhFRkdQYWo2czBBNjFvZ0JFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9iNGI3MGMtMThiZi00NTAyLWJmOWYt NGY4OTEzYTkxNWQzLzEvRTd2NmhNWkFZV2FIa1JsYkd0T2o5dlNQZ0NVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC9iNGI3MGMtMThiZi00NTAyLWJmOWYtNGY4OTEzYTkxNWQz LzEvQnQ3NkV4SDFQMnhFRkdQYWo2czBBNjFvZ0JFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQHsq8AAwQC uS+8AwQF1aNgMA0EAgACMAcDBQMqAuVAMA0GCSqGSIb3DQEBCwUAA4IBAQCG29j3 jqVu1k+eHlIKUNQuJXnGRjtlntCd1d6yEw0Xvs1gu5zhW+8NzzwIGeYk/1Mi50fF lXYY6fvmLRimX6lsY/6XO2anQaMvGt01ImGp4OsmBnqCO1ZidsZsCSj4l7g+OEOL miqz2sR36hxdSPKN5ePkwBeVChez1KJLMcaVONI1xy/M3FhokybiMLBRFMcfaxcY IhNsiOy69TuxIxJo2a0I6j0yoxEluEHwrww4VmNQeOHAT3iAx2k2BEYbTKzZi8Nn nm1SJNCIU8Nw5TfVr67qCEfLsZTWEtS4chV/kziZo6gducYZPCDiIRJ5U4fivSMV Z+MluMCIbAnrwd5b -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:51 2026 by rpki-client