This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/eBZ7AmSoNEvuFIsVSaKIFPergtc.roa File: eBZ7AmSoNEvuFIsVSaKIFPergtc.roa (raw, json) Hash identifier: bJyd01nfZd9XumL2AfymHRJRduJs4cP6QwBEo8jMpBk= Subject key identifier: 78:16:7B:02:64:A8:34:4B:EE:14:8B:15:49:A2:88:14:F7:AB:82:D7 Certificate issuer: /CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e Certificate serial: 019B7FF1B0CABAEC083D05F3DD3FEB448157 Authority key identifier: 0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/eBZ7AmSoNEvuFIsVSaKIFPergtc.roa Signing time: Fri 02 Jan 2026 18:21:44 +0000 ROA not before: Fri 02 Jan 2026 18:21:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5650 IP address blocks: 217.78.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 03:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:b0:ca:ba:ec:08:3d:05:f3:dd:3f:eb:44:81:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e Validity Not Before: Jan 2 18:21:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=78167b0264a8344bee148b1549a28814f7ab82d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:80:2e:7b:b9:2f:a5:7f:4a:6e:5e:98:f6:90: d5:b0:43:44:5d:c6:d7:af:3a:e6:72:fe:1c:fa:d1: c0:6f:a6:38:ab:9d:ec:fe:1b:b2:df:05:7a:f6:2d: d7:bf:47:9d:ff:d3:fa:28:6e:89:44:5d:cf:02:f1: af:48:22:fe:60:9f:48:b9:95:d2:c0:47:ef:4c:76: 68:2f:f6:d6:b8:50:e9:de:2b:30:13:48:90:ea:d8: bf:0e:a2:8c:7d:d0:65:66:78:b0:8a:83:a6:86:c4: 67:07:bf:68:c4:c4:4a:43:66:1a:96:bc:56:94:0a: 56:67:eb:a7:97:dc:45:de:92:1e:d7:fa:8f:ee:c9: a2:2a:3b:87:9c:84:ec:e5:73:07:38:9f:ba:ff:26: 4b:a9:1d:91:6b:5b:f8:4b:13:1f:56:2f:96:00:ee: cc:e1:59:29:0d:9c:5a:08:f0:f9:1f:f6:2d:aa:d4: a8:ee:03:57:1f:db:a7:13:5c:78:24:d9:ae:6c:d0: 01:fa:fe:fb:8d:d6:9a:2f:88:f4:05:f8:c0:2b:71: 33:be:5a:4a:29:ed:9e:4a:81:20:89:00:28:e8:03: b8:fb:d1:30:53:a0:9a:a6:a6:4d:95:a6:22:19:ff: 5b:5c:83:64:d4:b2:49:15:52:39:c7:33:cf:19:58: ce:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:16:7B:02:64:A8:34:4B:EE:14:8B:15:49:A2:88:14:F7:AB:82:D7 X509v3 Authority Key Identifier: keyid:0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/eBZ7AmSoNEvuFIsVSaKIFPergtc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.78.40.0/21 Signature Algorithm: sha256WithRSAEncryption 0b:b9:bd:e6:44:05:70:90:73:4c:26:74:9a:f5:ab:6a:2c:1b: dc:0f:04:82:4c:29:45:43:79:48:21:34:17:97:fc:5e:8f:58: 80:b2:bb:d2:d0:c4:f8:75:ab:db:10:19:5c:0d:84:49:e3:a8: 5c:89:a2:78:b8:c7:76:35:69:b8:d4:4b:53:b8:f5:0d:a8:28: cf:5b:51:44:3c:95:44:cf:0f:ca:a7:72:8a:e8:cc:ae:da:ff: 3b:f6:93:58:98:a5:8b:d4:fe:71:13:c9:7f:35:fa:14:3a:d6: 77:94:65:98:5e:55:83:f0:e0:2b:11:9f:aa:f5:fb:06:d2:98: ac:65:ec:7f:f2:cb:05:6d:7d:2e:a4:96:06:24:0b:45:9d:9c: 8e:90:0a:a5:03:09:01:d8:73:3e:ee:20:57:d1:fa:32:f9:db: f5:3d:26:34:50:67:f5:ce:e7:78:30:c4:8c:32:40:87:00:7f: 3c:64:c8:f1:d7:98:fa:b8:46:31:4a:46:f6:0e:6b:fb:6f:f9: 49:0a:48:72:01:47:93:85:cf:8c:7b:14:2b:45:24:f0:02:04: 74:bb:bd:bb:94:35:25:e9:f0:19:67:0e:81:82:71:69:34:8f: 81:63:d5:ef:c6:ca:c1:34:a2:d7:0e:01:c4:f3:5b:40:af:c3: 4c:ae:e1:36 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8bDKuuwIPQXz3T/rRIFXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTEzMDhlYWQ2YWRiMWQwODVlN2U1OTEwYTBjYjJkZTU2 YWEzMmUwHhcNMjYwMTAyMTgyMTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODE2N2IwMjY0YTgzNDRiZWUxNDhiMTU0OWEyODgxNGY3YWI4MmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4Aue7kvpX9Kbl6Y9pDVsENEXcbX rzrmcv4c+tHAb6Y4q53s/huy3wV69i3Xv0ed/9P6KG6JRF3PAvGvSCL+YJ9IuZXS wEfvTHZoL/bWuFDp3iswE0iQ6ti/DqKMfdBlZniwioOmhsRnB79oxMRKQ2YalrxW lApWZ+unl9xF3pIe1/qP7smiKjuHnITs5XMHOJ+6/yZLqR2Ra1v4SxMfVi+WAO7M 4VkpDZxaCPD5H/YtqtSo7gNXH9unE1x4JNmubNAB+v77jdaaL4j0BfjAK3EzvlpK Ke2eSoEgiQAo6AO4+9EwU6CapqZNlaYiGf9bXINk1LJJFVI5xzPPGVjOPwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHgWewJkqDRL7hSLFUmiiBT3q4LXMB8GA1UdIwQY MBaAFAzhMI6tatsdCF5+WRCgyy3laqMuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9Fd2pxMXEyeDBJWG41WkVLRExMZVZxb3k0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS84OTkzODAtYWQyNy00NGViLThjMmUt YjBiYWQxOGYwMmQwLzEvZUJaN0FtU29ORXZ1RklzVlNhS0lGUGVyZ3RjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS84OTkzODAtYWQyNy00NGViLThjMmUtYjBiYWQxOGYwMmQw LzEvRE9Fd2pxMXEyeDBJWG41WkVLRExMZVZxb3k0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2U4oMA0G CSqGSIb3DQEBCwUAA4IBAQALub3mRAVwkHNMJnSa9atqLBvcDwSCTClFQ3lIITQX l/xej1iAsrvS0MT4davbEBlcDYRJ46hciaJ4uMd2NWm41EtTuPUNqCjPW1FEPJVE zw/Kp3KK6Myu2v879pNYmKWL1P5xE8l/NfoUOtZ3lGWYXlWD8OArEZ+q9fsG0pis Zex/8ssFbX0upJYGJAtFnZyOkAqlAwkB2HM+7iBX0foy+dv1PSY0UGf1zud4MMSM MkCHAH88ZMjx15j6uEYxSkb2Dmv7b/lJCkhyAUeThc+MexQrRSTwAgR0u727lDUl 6fAZZw6BgnFpNI+BY9XvxsrBNKLXDgHE81tAr8NMruE2 -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:03 2026 by rpki-client