This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/Eh3uKkM8bg-dwTmkmB7wgh0XsuA.roa File: Eh3uKkM8bg-dwTmkmB7wgh0XsuA.roa (raw, json) Hash identifier: 1+a+B/uUbNc1Axp6SF/xxqBjGxtyMv5rURwc4G4VG9Q= Subject key identifier: 12:1D:EE:2A:43:3C:6E:0F:9D:C1:39:A4:98:1E:F0:82:1D:17:B2:E0 Certificate issuer: /CN=6b7dfe4b68b20895ededf3a003232a979e17c38c Certificate serial: 019B7BA435AEA829C6575188F91C5245FDB9 Authority key identifier: 6B:7D:FE:4B:68:B2:08:95:ED:ED:F3:A0:03:23:2A:97:9E:17:C3:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a33-S2iyCJXt7fOgAyMql54Xw4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/Eh3uKkM8bg-dwTmkmB7wgh0XsuA.roa Signing time: Thu 01 Jan 2026 22:18:37 +0000 ROA not before: Thu 01 Jan 2026 22:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202105 IP address blocks: 185.164.20.0/24 maxlen: 24 185.164.21.0/24 maxlen: 24 185.164.22.0/24 maxlen: 24 185.164.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.crl rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.mft rsync://rpki.ripe.net/repository/DEFAULT/a33-S2iyCJXt7fOgAyMql54Xw4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 16:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:35:ae:a8:29:c6:57:51:88:f9:1c:52:45:fd:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b7dfe4b68b20895ededf3a003232a979e17c38c Validity Not Before: Jan 1 22:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=121dee2a433c6e0f9dc139a4981ef0821d17b2e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7e:52:3d:83:f3:00:61:0c:86:79:98:e8:4a: 1d:d9:d5:39:3e:d6:d1:91:e7:5a:2e:c8:f9:f7:22: 76:da:d3:ed:53:9a:53:49:2b:39:d4:3b:82:f1:6c: dc:33:c4:67:6c:4d:0d:91:40:6c:7d:69:fb:17:fe: d0:89:16:7f:03:f1:88:73:5b:25:97:94:ef:b4:45: 7b:83:e6:20:03:6d:f8:19:cf:d3:05:c7:46:f7:0f: 5b:f7:45:03:2b:68:e9:b1:d9:34:39:bb:5c:bb:7a: a0:32:99:a8:2c:67:be:f6:c6:dd:d1:61:71:bb:01: c9:c8:86:8f:54:40:0c:31:e2:3f:e8:0d:72:65:af: c2:bb:2d:df:26:8a:30:1c:10:2b:3a:ef:ea:c5:4f: bf:57:c5:50:03:d1:ae:51:ee:49:2f:fe:3d:ea:69: b6:e3:ae:1f:2e:8f:cc:d9:ca:b5:5f:44:1c:91:b3: 90:52:ed:1e:95:06:84:23:05:c4:7a:1a:a2:90:23: b1:ab:22:6c:48:d3:8c:9f:53:ee:07:0e:08:4e:54: 9c:08:82:4f:e6:24:fc:8e:69:3a:25:c1:dc:4d:b9: b6:14:d7:3d:4f:a9:65:39:80:92:15:26:63:fe:7d: b5:1c:d8:99:69:05:29:fc:1f:95:8b:ec:99:85:29: 29:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:1D:EE:2A:43:3C:6E:0F:9D:C1:39:A4:98:1E:F0:82:1D:17:B2:E0 X509v3 Authority Key Identifier: keyid:6B:7D:FE:4B:68:B2:08:95:ED:ED:F3:A0:03:23:2A:97:9E:17:C3:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a33-S2iyCJXt7fOgAyMql54Xw4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/Eh3uKkM8bg-dwTmkmB7wgh0XsuA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/a1bd16-84b4-4612-a7f0-9c76d10ec532/1/a33-S2iyCJXt7fOgAyMql54Xw4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.164.20.0/22 Signature Algorithm: sha256WithRSAEncryption 78:13:8c:9f:78:35:06:4f:2c:12:e4:60:1a:ca:13:83:ac:2c: 86:97:54:e0:35:ab:57:8b:ee:55:9f:9b:0e:d1:11:6c:bb:17: ca:3b:fe:c8:d6:4b:9f:8f:3b:e6:72:cc:d1:77:e8:88:82:92: 14:f5:c1:fb:10:b6:f5:5e:7b:cd:ac:21:f8:16:bb:1e:5f:1c: 52:17:72:2a:64:2c:b0:6f:94:a9:8c:66:c9:d7:89:e3:13:e4: 10:84:92:fb:da:ea:eb:12:a1:20:13:cc:73:40:c9:0d:ea:91: 2b:84:02:4f:17:b6:90:ee:b7:f0:6c:90:4e:e3:4f:b1:82:2f: bc:8c:0a:04:26:54:e8:6a:78:81:23:cd:cf:b8:85:16:90:45: d5:75:18:b4:ff:32:f4:90:54:d1:e0:c9:f5:d2:1e:12:f1:fd: bc:2c:c8:82:9a:75:02:56:ec:4a:cc:9c:67:fc:8a:61:ac:2c: 6b:8d:cf:75:68:af:10:37:ec:a1:05:17:07:10:61:76:f0:df: a0:23:08:16:14:8f:8d:50:de:51:ae:36:24:60:89:17:17:3d: e1:f5:63:e9:ee:b8:cb:8c:b3:5c:ae:47:77:21:5e:94:50:6b: 20:76:2d:ab:f3:ea:d6:2b:72:48:db:cc:33:4b:f5:2e:ad:0d: f9:5d:72:9e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pDWuqCnGV1GI+RxSRf25MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiN2RmZTRiNjhiMjA4OTVlZGVkZjNhMDAzMjMyYTk3OWUx N2MzOGMwHhcNMjYwMTAxMjIxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjFkZWUyYTQzM2M2ZTBmOWRjMTM5YTQ5ODFlZjA4MjFkMTdiMmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv35SPYPzAGEMhnmY6Eod2dU5PtbR kedaLsj59yJ22tPtU5pTSSs51DuC8WzcM8RnbE0NkUBsfWn7F/7QiRZ/A/GIc1sl l5TvtEV7g+YgA234Gc/TBcdG9w9b90UDK2jpsdk0Obtcu3qgMpmoLGe+9sbd0WFx uwHJyIaPVEAMMeI/6A1yZa/Cuy3fJoowHBArOu/qxU+/V8VQA9GuUe5JL/496mm2 464fLo/M2cq1X0QckbOQUu0elQaEIwXEehqikCOxqyJsSNOMn1PuBw4ITlScCIJP 5iT8jmk6JcHcTbm2FNc9T6llOYCSFSZj/n21HNiZaQUp/B+Vi+yZhSkpKwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBId7ipDPG4PncE5pJge8IIdF7LgMB8GA1UdIwQY MBaAFGt9/ktosgiV7e3zoAMjKpeeF8OMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTMzLVMyaXlDSlh0N2ZPZ0F5TXFsNTRYdzR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9hMWJkMTYtODRiNC00NjEyLWE3ZjAt OWM3NmQxMGVjNTMyLzEvRWgzdUtrTThiZy1kd1Rta21CN3dnaDBYc3VBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9hMWJkMTYtODRiNC00NjEyLWE3ZjAtOWM3NmQxMGVjNTMy LzEvYTMzLVMyaXlDSlh0N2ZPZ0F5TXFsNTRYdzR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuaQUMA0G CSqGSIb3DQEBCwUAA4IBAQB4E4yfeDUGTywS5GAayhODrCyGl1TgNatXi+5Vn5sO 0RFsuxfKO/7I1kufjzvmcszRd+iIgpIU9cH7ELb1XnvNrCH4FrseXxxSF3IqZCyw b5SpjGbJ14njE+QQhJL72urrEqEgE8xzQMkN6pErhAJPF7aQ7rfwbJBO40+xgi+8 jAoEJlToaniBI83PuIUWkEXVdRi0/zL0kFTR4Mn10h4S8f28LMiCmnUCVuxKzJxn /IphrCxrjc91aK8QN+yhBRcHEGF28N+gIwgWFI+NUN5RrjYkYIkXFz3h9WPp7rjL jLNcrkd3IV6UUGsgdi2r8+rWK3JI28wzS/UurQ35XXKe -----END CERTIFICATE-----Generated at Tue Jan 27 02:49:54 2026 by rpki-client