This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/8795e0-efb7-48c5-849f-cfceb87973dd/1/eB3uPlbhT9tEDY5qNe0tIWTsTWY.roa File: eB3uPlbhT9tEDY5qNe0tIWTsTWY.roa (raw, json) Hash identifier: zKY7/TDIQJUuidUGqhY09n7E2V88zvDbW+XuMaOB4/g= Subject key identifier: 78:1D:EE:3E:56:E1:4F:DB:44:0D:8E:6A:35:ED:2D:21:64:EC:4D:66 Certificate issuer: /CN=81f3a87e11366b545a5a127b83287653b18c8a56 Certificate serial: 019C0E82F8FFC7CED4E46358D72861A1AB73 Authority key identifier: 81:F3:A8:7E:11:36:6B:54:5A:5A:12:7B:83:28:76:53:B1:8C:8A:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gfOofhE2a1RaWhJ7gyh2U7GMilY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/8795e0-efb7-48c5-849f-cfceb87973dd/1/eB3uPlbhT9tEDY5qNe0tIWTsTWY.roa Signing time: Fri 30 Jan 2026 10:46:30 +0000 ROA not before: Fri 30 Jan 2026 10:46:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208363 IP address blocks: 45.128.112.0/24 maxlen: 24 45.128.113.0/24 maxlen: 24 45.128.114.0/23 maxlen: 23 45.144.92.0/23 maxlen: 23 92.53.162.0/23 maxlen: 23 185.171.164.0/23 maxlen: 23 185.232.134.0/24 maxlen: 24 188.93.38.0/23 maxlen: 23 213.184.72.0/23 maxlen: 23 213.184.74.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/8795e0-efb7-48c5-849f-cfceb87973dd/1/gfOofhE2a1RaWhJ7gyh2U7GMilY.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/8795e0-efb7-48c5-849f-cfceb87973dd/1/gfOofhE2a1RaWhJ7gyh2U7GMilY.mft rsync://rpki.ripe.net/repository/DEFAULT/gfOofhE2a1RaWhJ7gyh2U7GMilY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0e:82:f8:ff:c7:ce:d4:e4:63:58:d7:28:61:a1:ab:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81f3a87e11366b545a5a127b83287653b18c8a56 Validity Not Before: Jan 30 10:46:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=781dee3e56e14fdb440d8e6a35ed2d2164ec4d66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6a:9f:9e:50:23:b9:c0:76:52:cc:51:d0:0a: b2:7f:da:34:aa:b2:c8:92:51:ef:3e:b7:a5:32:30: 17:d7:38:7f:8d:55:4f:d3:4c:96:9f:fc:f3:ca:0b: fb:25:87:4b:64:b8:9a:c9:f1:fc:28:1e:1d:be:88: a3:69:3d:bb:38:d8:bf:b6:41:b3:58:6a:b1:aa:fe: e0:46:ef:f1:4d:53:0c:72:06:e9:91:db:66:38:85: 69:07:a2:01:f6:a7:69:83:24:2d:a4:13:6c:83:61: 7f:f0:87:ec:75:cf:5e:d1:75:dc:81:5b:da:a5:64: 34:dc:0d:c0:81:03:af:f3:34:0c:37:43:fa:5f:f4: d6:34:77:20:d9:93:80:f2:62:72:ff:17:dc:26:cc: c3:1d:f2:5a:16:e7:48:9b:71:3a:a3:57:75:92:d0: c6:56:cb:d3:c2:41:45:0c:98:5c:90:2b:69:6f:4b: 6f:3a:a8:7a:e4:49:e7:41:2a:20:fa:55:44:81:11: 6b:76:12:62:6f:50:75:43:0c:09:9a:06:0a:2d:43: d4:94:b4:df:6d:3a:a1:d9:e8:e2:28:4c:4e:c3:ae: af:0d:f8:76:06:94:77:16:e4:8b:37:16:28:7b:63: bd:ed:1d:6f:41:51:4e:db:5b:06:bb:38:cf:38:fb: 44:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:1D:EE:3E:56:E1:4F:DB:44:0D:8E:6A:35:ED:2D:21:64:EC:4D:66 X509v3 Authority Key Identifier: keyid:81:F3:A8:7E:11:36:6B:54:5A:5A:12:7B:83:28:76:53:B1:8C:8A:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gfOofhE2a1RaWhJ7gyh2U7GMilY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8795e0-efb7-48c5-849f-cfceb87973dd/1/eB3uPlbhT9tEDY5qNe0tIWTsTWY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8795e0-efb7-48c5-849f-cfceb87973dd/1/gfOofhE2a1RaWhJ7gyh2U7GMilY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.128.112.0/22 45.144.92.0/23 92.53.162.0/23 185.171.164.0/23 185.232.134.0/24 188.93.38.0/23 213.184.72.0/22 Signature Algorithm: sha256WithRSAEncryption 73:6a:a2:27:66:98:b4:a2:20:88:f7:0b:da:7f:e4:63:96:c2: f0:5d:ee:80:cc:22:68:6d:fc:e6:07:29:b8:ef:b1:e5:54:d0: ba:7f:80:5c:98:5b:48:07:98:8c:66:34:68:04:b8:fa:07:39: 84:b9:ab:64:22:78:18:37:d2:1d:43:5b:02:b3:ca:2b:a5:29: 4f:20:81:2e:3f:14:c1:e5:e5:6c:32:32:ce:59:93:bf:b0:e8: 12:87:44:0e:20:06:dc:9c:0a:72:04:2e:e6:82:3a:13:e2:db: 4a:60:92:ff:68:c9:67:52:fa:98:d1:76:7d:88:e2:5d:c1:1c: ea:ee:3f:b5:87:aa:ab:a2:96:fd:1f:a6:4b:0d:83:f7:d2:fa: fa:f1:4c:ae:54:e3:f8:cb:35:bc:ee:6b:48:c8:aa:a8:94:77: 5d:5b:1a:60:e5:0e:b2:bd:c9:94:18:d1:08:6a:ec:70:2f:2a: 20:9d:f8:be:5c:20:06:3c:96:88:91:51:23:d5:cd:77:0a:b8: 5c:54:a3:67:0e:88:a4:50:91:8e:cc:20:b9:c4:34:c3:81:1f: 87:3c:5f:0f:ce:4d:00:e0:0b:77:fc:c6:0b:16:ab:87:f9:ed: b5:f2:a8:0b:87:0e:eb:a1:91:c0:5d:87:e3:0a:a9:58:ac:80: 0f:72:3f:73 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZwOgvj/x87U5GNY1yhhoatzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxZjNhODdlMTEzNjZiNTQ1YTVhMTI3YjgzMjg3NjUzYjE4 YzhhNTYwHhcNMjYwMTMwMTA0NjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODFkZWUzZTU2ZTE0ZmRiNDQwZDhlNmEzNWVkMmQyMTY0ZWM0ZDY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2qfnlAjucB2UsxR0Aqyf9o0qrLI klHvPrelMjAX1zh/jVVP00yWn/zzygv7JYdLZLiayfH8KB4dvoijaT27ONi/tkGz WGqxqv7gRu/xTVMMcgbpkdtmOIVpB6IB9qdpgyQtpBNsg2F/8Ifsdc9e0XXcgVva pWQ03A3AgQOv8zQMN0P6X/TWNHcg2ZOA8mJy/xfcJszDHfJaFudIm3E6o1d1ktDG VsvTwkFFDJhckCtpb0tvOqh65EnnQSog+lVEgRFrdhJib1B1QwwJmgYKLUPUlLTf bTqh2ejiKExOw66vDfh2BpR3FuSLNxYoe2O97R1vQVFO21sGuzjPOPtEcQIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFHgd7j5W4U/bRA2OajXtLSFk7E1mMB8GA1UdIwQY MBaAFIHzqH4RNmtUWloSe4ModlOxjIpWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2ZPb2ZoRTJhMVJhV2hKN2d5aDJVN0dNaWxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC84Nzk1ZTAtZWZiNy00OGM1LTg0OWYt Y2ZjZWI4Nzk3M2RkLzEvZUIzdVBsYmhUOXRFRFk1cU5lMHRJV1RzVFdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC84Nzk1ZTAtZWZiNy00OGM1LTg0OWYtY2ZjZWI4Nzk3M2Rk LzEvZ2ZPb2ZoRTJhMVJhV2hKN2d5aDJVN0dNaWxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQCLYBwAwQB LZBcAwQBXDWiAwQBuaukAwQAueiGAwQBvF0mAwQC1bhIMA0GCSqGSIb3DQEBCwUA A4IBAQBzaqInZpi0oiCI9wvaf+RjlsLwXe6AzCJobfzmBym477HlVNC6f4BcmFtI B5iMZjRoBLj6BzmEuatkIngYN9IdQ1sCs8orpSlPIIEuPxTB5eVsMjLOWZO/sOgS h0QOIAbcnApyBC7mgjoT4ttKYJL/aMlnUvqY0XZ9iOJdwRzq7j+1h6qropb9H6ZL DYP30vr68UyuVOP4yzW87mtIyKqolHddWxpg5Q6yvcmUGNEIauxwLyognfi+XCAG PJaIkVEj1c13CrhcVKNnDoikUJGOzCC5xDTDgR+HPF8Pzk0A4At3/MYLFquH+e21 8qgLhw7roZHAXYfjCqlYrIAPcj9z -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:34 2026 by rpki-client