This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/eZ1vnil2R_lRaxzm1u2K8oueOEA.roa File: eZ1vnil2R_lRaxzm1u2K8oueOEA.roa (raw, json) Hash identifier: iEQw8uo18WbpEVqcP2/fu5Vr2CBuKtNokc7vp22mHpA= Subject key identifier: 79:9D:6F:9E:29:76:47:F9:51:6B:1C:E6:D6:ED:8A:F2:8B:9E:38:40 Certificate issuer: /CN=8724b401ffeac3d5db42f828cab4f163c064d6d5 Certificate serial: 019B7910068B20596DD42D18C9B00A06E998 Authority key identifier: 87:24:B4:01:FF:EA:C3:D5:DB:42:F8:28:CA:B4:F1:63:C0:64:D6:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/eZ1vnil2R_lRaxzm1u2K8oueOEA.roa Signing time: Thu 01 Jan 2026 10:17:31 +0000 ROA not before: Thu 01 Jan 2026 10:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51018 IP address blocks: 185.239.52.0/22 maxlen: 22 185.239.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.crl rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft rsync://rpki.ripe.net/repository/DEFAULT/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:06:8b:20:59:6d:d4:2d:18:c9:b0:0a:06:e9:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8724b401ffeac3d5db42f828cab4f163c064d6d5 Validity Not Before: Jan 1 10:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=799d6f9e297647f9516b1ce6d6ed8af28b9e3840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:10:ad:08:2c:df:84:bc:8e:7d:d1:53:05:b1: 2e:69:09:4d:89:b3:79:8f:d8:de:8a:48:fe:45:6f: 74:fd:8e:cd:e3:ba:00:31:c9:d7:8d:42:8c:90:93: fd:0c:1e:2a:ad:5d:35:07:e8:ce:e6:98:03:f1:78: 79:a5:ab:10:6d:9e:e2:cf:8d:26:dd:52:86:32:75: 93:80:61:5d:38:96:8b:fc:27:47:ac:fe:92:27:71: 2f:f8:9d:e7:bc:e9:f2:80:29:dd:d2:a4:41:67:ab: be:6c:26:ca:99:42:7f:f8:4a:73:ec:4c:fe:32:fb: 55:4b:6b:e1:f5:29:8a:33:29:cf:ba:d8:7e:54:7d: b7:c1:a8:dc:98:5c:d7:38:0e:05:39:f7:d4:68:d2: 00:3f:76:d0:3f:3e:2f:bd:92:47:02:a1:94:10:75: 68:dc:1c:04:56:23:42:87:9e:2f:89:7f:d7:64:b4: 68:e7:71:d6:06:9b:8c:8c:9b:10:4b:dd:5a:2a:45: e6:4e:21:c3:d0:e4:e5:32:a5:56:0f:99:83:44:18: 99:47:c4:64:a7:55:f8:a2:0b:1b:9d:0f:42:4a:7e: e5:5a:7c:9c:d1:9d:64:55:43:6d:b1:30:d2:d0:49: 2b:a5:c6:f1:1c:72:dd:31:b9:20:fc:2e:87:b2:4d: aa:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:9D:6F:9E:29:76:47:F9:51:6B:1C:E6:D6:ED:8A:F2:8B:9E:38:40 X509v3 Authority Key Identifier: keyid:87:24:B4:01:FF:EA:C3:D5:DB:42:F8:28:CA:B4:F1:63:C0:64:D6:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/eZ1vnil2R_lRaxzm1u2K8oueOEA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.239.52.0/22 Signature Algorithm: sha256WithRSAEncryption 34:1d:c0:2d:8a:10:32:c8:39:f1:b7:05:24:a8:4c:c1:de:3d: 8e:8c:45:08:cf:79:ab:46:16:5e:6f:31:4b:36:37:2a:01:03: 13:eb:a3:41:7c:3c:d3:18:35:28:2b:e5:75:41:9a:a1:8f:0c: 82:e1:ee:41:13:6d:1a:42:d4:df:cb:72:59:6a:35:10:a6:82: ec:1d:22:06:77:ff:17:e7:10:d9:81:86:84:53:84:ff:ee:8e: 6c:2c:fe:02:d2:86:73:02:9d:96:e6:8e:c5:39:44:45:d5:a9: 42:c5:d9:94:66:f0:1a:b1:a0:fa:2e:97:d2:76:c5:06:46:3d: 4f:37:45:94:91:7b:d1:a8:ef:c9:42:73:91:2f:c1:5e:4c:78: 21:dc:63:bb:01:4d:bd:ad:f5:1f:b6:44:d5:9f:8f:a0:98:42: ad:ae:54:da:c1:15:ff:e5:c8:ba:67:17:ed:4d:1c:43:97:e1: 9b:4b:e4:41:52:66:21:3f:f8:55:c9:3a:89:cd:6d:eb:d2:1d: cd:a2:4a:ed:64:4b:a4:2f:91:9e:16:c0:e2:04:1e:c0:cb:22: eb:fb:fb:1e:1d:a8:ad:60:fa:f3:17:f4:44:05:81:d5:0f:af: f5:4f:cd:52:6c:fe:4c:37:db:e5:4c:1a:ee:8f:0b:97:10:ef: 3a:c5:8c:65 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EAaLIFlt1C0YybAKBumYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3MjRiNDAxZmZlYWMzZDVkYjQyZjgyOGNhYjRmMTYzYzA2 NGQ2ZDUwHhcNMjYwMTAxMTAxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OTlkNmY5ZTI5NzY0N2Y5NTE2YjFjZTZkNmVkOGFmMjhiOWUzODQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxCtCCzfhLyOfdFTBbEuaQlNibN5 j9jeikj+RW90/Y7N47oAMcnXjUKMkJP9DB4qrV01B+jO5pgD8Xh5pasQbZ7iz40m 3VKGMnWTgGFdOJaL/CdHrP6SJ3Ev+J3nvOnygCnd0qRBZ6u+bCbKmUJ/+Epz7Ez+ MvtVS2vh9SmKMynPuth+VH23wajcmFzXOA4FOffUaNIAP3bQPz4vvZJHAqGUEHVo 3BwEViNCh54viX/XZLRo53HWBpuMjJsQS91aKkXmTiHD0OTlMqVWD5mDRBiZR8Rk p1X4ogsbnQ9CSn7lWnyc0Z1kVUNtsTDS0EkrpcbxHHLdMbkg/C6Hsk2qbQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHmdb54pdkf5UWsc5tbtivKLnjhAMB8GA1UdIwQY MBaAFIcktAH/6sPV20L4KMq08WPAZNbVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHlTMEFmX3F3OVhiUXZnb3lyVHhZOEJrMXRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8zZTUwYzktOTVkMC00YWI3LWE3ZTEt MDExMTAzODkzNGQzLzEvZVoxdm5pbDJSX2xSYXh6bTF1Mks4b3VlT0VBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS8zZTUwYzktOTVkMC00YWI3LWE3ZTEtMDExMTAzODkzNGQz LzEvaHlTMEFmX3F3OVhiUXZnb3lyVHhZOEJrMXRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCue80MA0G CSqGSIb3DQEBCwUAA4IBAQA0HcAtihAyyDnxtwUkqEzB3j2OjEUIz3mrRhZebzFL NjcqAQMT66NBfDzTGDUoK+V1QZqhjwyC4e5BE20aQtTfy3JZajUQpoLsHSIGd/8X 5xDZgYaEU4T/7o5sLP4C0oZzAp2W5o7FOURF1alCxdmUZvAasaD6LpfSdsUGRj1P N0WUkXvRqO/JQnORL8FeTHgh3GO7AU29rfUftkTVn4+gmEKtrlTawRX/5ci6Zxft TRxDl+GbS+RBUmYhP/hVyTqJzW3r0h3NokrtZEukL5GeFsDiBB7AyyLr+/seHait YPrzF/REBYHVD6/1T81SbP5MN9vlTBrujwuXEO86xYxl -----END CERTIFICATE-----Generated at Mon Feb 9 21:24:09 2026 by rpki-client