This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/ea4uOAYmH3F8T77vuYMudZrhuRA.roa File: ea4uOAYmH3F8T77vuYMudZrhuRA.roa (raw, json) Hash identifier: EEiZnb2JPsq/yqrG0Q7hp0FOlD5s4bXDR5+0nIVOWD4= Subject key identifier: 79:AE:2E:38:06:26:1F:71:7C:4F:BE:EF:B9:83:2E:75:9A:E1:B9:10 Certificate issuer: /CN=8777b5b36f66e13c4388c9934da507856515d073 Certificate serial: 019B7834F7DAF7614EC746EBDDCA737EC0C6 Authority key identifier: 87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/ea4uOAYmH3F8T77vuYMudZrhuRA.roa Signing time: Thu 01 Jan 2026 06:18:15 +0000 ROA not before: Thu 01 Jan 2026 06:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211106 IP address blocks: 85.88.58.0/24 maxlen: 24 85.88.59.0/24 maxlen: 24 85.88.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:f7:da:f7:61:4e:c7:46:eb:dd:ca:73:7e:c0:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8777b5b36f66e13c4388c9934da507856515d073 Validity Not Before: Jan 1 06:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=79ae2e3806261f717c4fbeefb9832e759ae1b910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:6f:63:89:77:2c:be:2f:bf:c9:fa:18:e5:55: 6f:f6:12:86:80:79:74:6c:df:f4:1c:cd:b6:80:37: 49:dc:6f:55:91:2a:c9:a5:f3:f1:bd:7d:99:a5:c8: ec:1b:9e:05:23:c9:a6:78:7a:48:b9:1c:fe:9f:52: 0c:cb:1e:0b:db:a9:91:67:b0:9c:74:97:f6:8f:ad: f3:66:6a:77:8f:e8:88:a4:43:f0:d0:de:8e:4b:56: e5:d8:73:6e:7c:05:93:2f:45:07:84:18:48:fc:44: 29:ac:0f:be:51:b6:66:14:98:df:c2:a8:23:d6:04: 15:27:25:c5:d9:29:cb:67:e8:62:d4:0b:6c:cf:cc: d7:e4:7f:69:11:6d:e3:75:61:7f:77:db:38:8f:fe: 73:c2:c0:6e:3c:08:75:f0:4b:a8:5a:6b:eb:7b:44: 2c:9a:0d:32:ba:fa:a6:02:ea:17:a6:68:9d:77:36: 08:cc:54:8b:18:0e:31:1e:66:71:69:67:60:c0:6c: a3:cf:6c:68:9c:2f:cf:bd:83:ad:44:53:87:4e:0e: 90:19:89:97:3e:41:97:0b:60:93:96:ab:ef:34:15: 0d:3d:43:3e:c5:0d:66:79:d9:d2:48:5f:4b:8f:02: fd:ea:94:5e:8a:15:d9:e9:8d:a6:b0:59:04:60:ea: 21:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:AE:2E:38:06:26:1F:71:7C:4F:BE:EF:B9:83:2E:75:9A:E1:B9:10 X509v3 Authority Key Identifier: keyid:87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/ea4uOAYmH3F8T77vuYMudZrhuRA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.88.58.0/23 85.88.63.0/24 Signature Algorithm: sha256WithRSAEncryption b5:b1:ac:69:4a:9e:57:e8:16:86:0e:80:9b:e3:fa:27:a1:83: 3f:c3:9f:1a:a9:17:1b:c7:55:31:bc:4e:5f:7c:0b:b7:18:3a: 66:c9:b3:42:04:c9:b7:0d:eb:d2:9e:0c:d4:67:70:11:96:48: fd:d6:ec:aa:ca:3c:cd:73:85:f6:e5:5b:67:69:f6:70:25:40: 27:82:e2:35:a7:db:52:a6:2e:89:5a:fe:3e:95:e0:59:0e:2f: 0e:7b:5e:42:c2:c4:8d:07:c5:a6:79:66:7c:44:6a:9d:33:bb: cf:06:25:41:49:78:b1:c2:a4:0c:b1:0b:42:1e:bf:77:06:fb: 4f:d4:00:6b:5f:99:c2:e3:18:68:d0:08:80:11:c8:18:82:97: b2:e3:d1:88:ec:c1:5a:9e:94:dc:92:90:93:c7:02:39:e7:93: 8a:75:ec:10:27:14:cf:9c:00:00:ff:56:6c:a6:fb:58:93:0a: d4:d9:bb:61:db:2c:16:a6:cb:8e:c3:a8:38:56:e4:3d:e7:46: 28:d5:86:3f:51:13:25:98:c1:26:df:f4:3f:fe:ca:e4:26:e9: 80:ac:ab:f9:51:90:a7:7d:9a:e0:1e:48:d1:6e:37:6a:a0:c2: e5:9d:a7:dc:11:8d:fa:75:db:c7:79:a8:9a:41:18:7e:c2:c8: 7a:01:a1:db -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NPfa92FOx0br3cpzfsDGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NzdiNWIzNmY2NmUxM2M0Mzg4Yzk5MzRkYTUwNzg1NjUx NWQwNzMwHhcNMjYwMTAxMDYxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OWFlMmUzODA2MjYxZjcxN2M0ZmJlZWZiOTgzMmU3NTlhZTFiOTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5W9jiXcsvi+/yfoY5VVv9hKGgHl0 bN/0HM22gDdJ3G9VkSrJpfPxvX2ZpcjsG54FI8mmeHpIuRz+n1IMyx4L26mRZ7Cc dJf2j63zZmp3j+iIpEPw0N6OS1bl2HNufAWTL0UHhBhI/EQprA++UbZmFJjfwqgj 1gQVJyXF2SnLZ+hi1Atsz8zX5H9pEW3jdWF/d9s4j/5zwsBuPAh18EuoWmvre0Qs mg0yuvqmAuoXpmiddzYIzFSLGA4xHmZxaWdgwGyjz2xonC/PvYOtRFOHTg6QGYmX PkGXC2CTlqvvNBUNPUM+xQ1mednSSF9LjwL96pReihXZ6Y2msFkEYOoh6QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHmuLjgGJh9xfE++77mDLnWa4bkQMB8GA1UdIwQY MBaAFId3tbNvZuE8Q4jJk02lB4VlFdBzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mOTJlMmEtZTFlNC00ODdkLTlhY2Mt ZWQxZjMwY2MxYzU3LzEvZWE0dU9BWW1IM0Y4VDc3dnVZTXVkWnJodVJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9mOTJlMmEtZTFlNC00ODdkLTlhY2MtZWQxZjMwY2MxYzU3 LzEvaDNlMXMyOW00VHhEaU1tVFRhVUhoV1VWMEhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBVVg6AwQA VVg/MA0GCSqGSIb3DQEBCwUAA4IBAQC1saxpSp5X6BaGDoCb4/onoYM/w58aqRcb x1UxvE5ffAu3GDpmybNCBMm3DevSngzUZ3ARlkj91uyqyjzNc4X25VtnafZwJUAn guI1p9tSpi6JWv4+leBZDi8Oe15CwsSNB8WmeWZ8RGqdM7vPBiVBSXixwqQMsQtC Hr93BvtP1ABrX5nC4xho0AiAEcgYgpey49GI7MFanpTckpCTxwI555OKdewQJxTP nAAA/1ZspvtYkwrU2bth2ywWpsuOw6g4VuQ950Yo1YY/URMlmMEm3/Q//srkJumA rKv5UZCnfZrgHkjRbjdqoMLlnafcEY36ddvHeaiaQRh+wsh6AaHb -----END CERTIFICATE-----Generated at Mon Feb 9 23:42:36 2026 by rpki-client