This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/Ebw7UmhhiZG_Nrfoble_YWsPVu4.roa File: Ebw7UmhhiZG_Nrfoble_YWsPVu4.roa (raw, json) Hash identifier: 9BXqjTT23ZUPj2QuWTEKVvPbzIY1hciLXoi7NrQptsU= Subject key identifier: 11:BC:3B:52:68:61:89:91:BF:36:B7:E8:6E:57:BF:61:6B:0F:56:EE Certificate issuer: /CN=1659eb6040193df0681350905e639d0e58d5f9df Certificate serial: 019B797F00342D04261EC6DC83C987325A12 Authority key identifier: 16:59:EB:60:40:19:3D:F0:68:13:50:90:5E:63:9D:0E:58:D5:F9:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/Ebw7UmhhiZG_Nrfoble_YWsPVu4.roa Signing time: Thu 01 Jan 2026 12:18:44 +0000 ROA not before: Thu 01 Jan 2026 12:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 185.154.80.0/22 maxlen: 24 185.154.80.0/24 maxlen: 24 185.154.81.0/24 maxlen: 24 185.154.82.0/24 maxlen: 24 185.154.83.0/24 maxlen: 24 2a05:f500:2::/48 maxlen: 48 2a05:f507:77::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.crl rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.mft rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:00:34:2d:04:26:1e:c6:dc:83:c9:87:32:5a:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1659eb6040193df0681350905e639d0e58d5f9df Validity Not Before: Jan 1 12:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=11bc3b5268618991bf36b7e86e57bf616b0f56ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:73:76:c4:5e:ac:59:de:8e:b8:fd:c2:4a:1f: ff:e6:21:ef:fb:f7:9b:a7:ac:42:fd:65:1e:95:12: 09:34:5b:87:e2:bd:9c:19:bc:fa:36:b6:87:4e:54: da:71:b5:6c:63:9b:a7:b4:dd:4d:ee:e7:98:50:9f: 8a:f4:64:6b:8b:09:62:e8:93:a1:9f:6f:e5:11:10: eb:eb:27:4b:12:4e:92:4a:bc:d6:6e:6b:d9:8e:f6: 7e:72:09:6d:48:b0:e9:bc:51:62:17:28:d5:9f:ca: 98:0a:98:57:75:95:5a:0c:14:b2:99:c0:d7:2d:93: 41:f8:af:40:21:29:01:31:a9:d2:17:1a:cd:e1:f4: ce:6a:9e:4b:a8:ea:5c:98:25:73:2f:55:56:7e:66: 6f:ca:80:d9:42:f6:85:53:79:e2:63:05:7c:03:d0: ae:2e:8c:f6:9b:a2:ec:56:d1:7a:bd:20:93:5e:79: 44:fe:cd:43:b4:61:f8:cd:ae:67:bf:37:03:9f:9c: a5:06:9b:e7:0c:59:35:22:c2:41:96:6e:4b:7a:28: 11:d6:b3:71:2f:1a:2b:93:fc:2c:d1:43:da:ed:e5: 51:c7:b6:11:52:8f:23:4d:c3:52:cb:ee:21:ec:4c: c4:e5:f9:40:a7:7d:90:f7:3a:6c:e2:28:84:4c:f9: 3f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:BC:3B:52:68:61:89:91:BF:36:B7:E8:6E:57:BF:61:6B:0F:56:EE X509v3 Authority Key Identifier: keyid:16:59:EB:60:40:19:3D:F0:68:13:50:90:5E:63:9D:0E:58:D5:F9:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FlnrYEAZPfBoE1CQXmOdDljV-d8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/Ebw7UmhhiZG_Nrfoble_YWsPVu4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ff5133-ca11-42db-b03d-544855cc4f57/1/FlnrYEAZPfBoE1CQXmOdDljV-d8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.154.80.0/22 IPv6: 2a05:f500:2::/48 2a05:f507:77::/48 Signature Algorithm: sha256WithRSAEncryption 94:7d:22:d1:f8:b8:41:20:ab:79:2f:8a:19:c7:62:6d:0e:cc: 2e:40:0b:6e:24:8f:ba:15:c8:17:15:d8:81:62:3a:57:73:86: 35:08:d6:5e:b5:60:7d:55:73:0b:f2:7e:95:76:20:8f:15:7a: 8d:ea:b8:d5:9f:5f:45:f1:45:9a:79:73:cc:c0:ec:ce:ff:29: 26:98:e2:7c:6f:f8:e1:2c:59:a0:15:62:3e:4a:bf:d9:25:5d: ca:4b:6e:0c:5a:8e:50:31:ec:c7:b3:33:90:e9:58:cd:ef:ff: 4e:2d:23:aa:2a:89:6f:ee:24:ed:17:ab:e2:c6:38:59:68:24: 5c:05:59:3a:d7:d6:f0:ba:7d:91:1a:c3:ea:8b:db:92:69:58: e7:bb:51:64:80:7f:b8:41:0f:ab:28:70:42:98:af:eb:84:64: dd:3f:ba:db:96:f4:92:d0:ea:5b:3b:ed:f8:18:01:b9:28:60: 97:59:64:ec:31:8f:52:1b:3a:95:a2:a6:c2:93:6d:a9:92:0c: 97:5a:68:a3:70:c6:e6:53:be:a6:cd:dc:47:08:aa:0b:d9:f1: 1b:ff:e1:ef:e6:0c:86:60:32:6d:4f:55:10:d6:8a:17:1e:ad: 51:30:8b:7f:db:44:13:a0:5a:5c:df:1d:1c:5d:4c:b7:5a:2e: d4:11:0e:5a -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt5fwA0LQQmHsbcg8mHMloSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2NTllYjYwNDAxOTNkZjA2ODEzNTA5MDVlNjM5ZDBlNThk NWY5ZGYwHhcNMjYwMTAxMTIxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMWJjM2I1MjY4NjE4OTkxYmYzNmI3ZTg2ZTU3YmY2MTZiMGY1NmVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3N2xF6sWd6OuP3CSh//5iHv+/eb p6xC/WUelRIJNFuH4r2cGbz6NraHTlTacbVsY5untN1N7ueYUJ+K9GRriwli6JOh n2/lERDr6ydLEk6SSrzWbmvZjvZ+cgltSLDpvFFiFyjVn8qYCphXdZVaDBSymcDX LZNB+K9AISkBManSFxrN4fTOap5LqOpcmCVzL1VWfmZvyoDZQvaFU3niYwV8A9Cu Loz2m6LsVtF6vSCTXnlE/s1DtGH4za5nvzcDn5ylBpvnDFk1IsJBlm5LeigR1rNx Lxork/ws0UPa7eVRx7YRUo8jTcNSy+4h7EzE5flAp32Q9zps4iiETPk/QQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFBG8O1JoYYmRvza36G5Xv2FrD1buMB8GA1UdIwQY MBaAFBZZ62BAGT3waBNQkF5jnQ5Y1fnfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmxucllFQVpQZkJvRTFDUVhtT2REbGpWLWQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9mZjUxMzMtY2ExMS00MmRiLWIwM2Qt NTQ0ODU1Y2M0ZjU3LzEvRWJ3N1VtaGhpWkdfTnJmb2JsZV9ZV3NQVnU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9mZjUxMzMtY2ExMS00MmRiLWIwM2QtNTQ0ODU1Y2M0ZjU3 LzEvRmxucllFQVpQZkJvRTFDUVhtT2REbGpWLWQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQCuZpQMBgE AgACMBIDBwAqBfUAAAIDBwAqBfUHAHcwDQYJKoZIhvcNAQELBQADggEBAJR9ItH4 uEEgq3kvihnHYm0OzC5AC24kj7oVyBcV2IFiOldzhjUI1l61YH1VcwvyfpV2II8V eo3quNWfX0XxRZp5c8zA7M7/KSaY4nxv+OEsWaAVYj5Kv9klXcpLbgxajlAx7Mez M5DpWM3v/04tI6oqiW/uJO0Xq+LGOFloJFwFWTrX1vC6fZEaw+qL25JpWOe7UWSA f7hBD6socEKYr+uEZN0/utuW9JLQ6ls77fgYAbkoYJdZZOwxj1IbOpWipsKTbamS DJdaaKNwxuZTvqbN3EcIqgvZ8Rv/4e/mDIZgMm1PVRDWihcerVEwi3/bRBOgWlzf HRxdTLdaLtQRDlo= -----END CERTIFICATE-----Generated at Sun Jan 18 15:29:37 2026 by rpki-client