This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d042d2-61d2-434d-8e5b-886c416b9051/1/eI1TfXKJJjbPAxbPrjONicZptUI.roa File: eI1TfXKJJjbPAxbPrjONicZptUI.roa (raw, json) Hash identifier: Y1zpjxcPPaHmDlUK3ZwaUZS5k7qwhiP3vZdCGMyYu54= Subject key identifier: 78:8D:53:7D:72:89:26:36:CF:03:16:CF:AE:33:8D:89:C6:69:B5:42 Certificate issuer: /CN=d9486f7fe4eb6d949b8007b4e4198ce1c878302e Certificate serial: 019B7EA49E7C720DD8F015C2EFE7E72EA0B7 Authority key identifier: D9:48:6F:7F:E4:EB:6D:94:9B:80:07:B4:E4:19:8C:E1:C8:78:30:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Uhvf-TrbZSbgAe05BmM4ch4MC4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/d042d2-61d2-434d-8e5b-886c416b9051/1/eI1TfXKJJjbPAxbPrjONicZptUI.roa Signing time: Fri 02 Jan 2026 12:17:56 +0000 ROA not before: Fri 02 Jan 2026 12:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211592 IP address blocks: 185.254.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/d042d2-61d2-434d-8e5b-886c416b9051/1/2Uhvf-TrbZSbgAe05BmM4ch4MC4.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/d042d2-61d2-434d-8e5b-886c416b9051/1/2Uhvf-TrbZSbgAe05BmM4ch4MC4.mft rsync://rpki.ripe.net/repository/DEFAULT/2Uhvf-TrbZSbgAe05BmM4ch4MC4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:9e:7c:72:0d:d8:f0:15:c2:ef:e7:e7:2e:a0:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9486f7fe4eb6d949b8007b4e4198ce1c878302e Validity Not Before: Jan 2 12:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=788d537d72892636cf0316cfae338d89c669b542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ac:81:3f:71:dd:ee:9b:c5:5d:95:00:c8:60: 64:86:2a:b5:39:59:60:71:b8:4f:dc:e1:c0:ce:18: 7c:81:3c:e4:fa:9a:4d:2f:36:b0:bb:4d:1f:a2:a9: bd:a8:65:3d:0c:c2:79:33:42:78:dc:ce:39:b1:c4: 00:47:68:a6:2e:0f:81:46:fc:1c:e1:70:0b:85:bb: 56:5b:7e:17:a4:d6:25:df:8d:b3:4e:2d:b1:d3:66: bc:93:0c:6c:ce:74:7a:ab:20:da:3e:d9:4e:94:45: 8b:fa:17:61:e1:6f:9f:21:a2:4c:e0:9f:6e:5e:e4: d0:3d:10:59:7a:09:08:b1:ff:d6:49:d8:41:71:72: 6c:32:78:4e:e2:8d:f3:5a:ff:93:46:d1:8f:83:7b: 52:cb:40:d9:4f:4f:60:e4:c6:53:51:0a:af:15:37: 53:1f:fd:cc:e0:5c:e1:7f:05:9f:64:25:3b:be:c4: 51:2c:2f:55:9a:bf:17:5b:13:f0:54:2d:1e:3f:a5: 98:f0:eb:b9:1d:87:a9:c1:e5:ac:81:24:68:e6:cd: fe:1d:57:c2:5e:7e:ba:d9:5d:86:f4:dc:82:59:ba: 79:00:c2:27:43:eb:ba:46:fc:36:3d:f2:17:93:b6: 8b:cf:18:41:8f:22:fa:d6:34:28:1c:dd:ae:0b:fa: 26:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:8D:53:7D:72:89:26:36:CF:03:16:CF:AE:33:8D:89:C6:69:B5:42 X509v3 Authority Key Identifier: keyid:D9:48:6F:7F:E4:EB:6D:94:9B:80:07:B4:E4:19:8C:E1:C8:78:30:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Uhvf-TrbZSbgAe05BmM4ch4MC4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d042d2-61d2-434d-8e5b-886c416b9051/1/eI1TfXKJJjbPAxbPrjONicZptUI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d042d2-61d2-434d-8e5b-886c416b9051/1/2Uhvf-TrbZSbgAe05BmM4ch4MC4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.254.166.0/24 Signature Algorithm: sha256WithRSAEncryption 67:6c:9a:77:f2:53:e6:22:a6:8d:fb:f2:0a:b1:65:76:82:4c: a3:64:de:9f:41:09:c0:e0:a2:9e:c4:92:72:7e:cf:99:34:78: d0:fa:65:0f:f5:28:ee:69:fd:6f:bb:b4:3b:26:47:ea:3f:ad: ee:24:69:04:96:77:d6:d5:94:f5:e1:42:48:03:c5:b0:8d:0d: 6e:eb:9a:ce:4b:c2:c5:b6:04:b2:bd:b3:e4:6c:6f:50:83:68: 8a:73:8c:df:64:4e:30:da:b1:45:21:d8:42:d7:ff:74:75:c2: ab:53:f2:31:e7:16:80:57:25:9e:13:4b:41:3a:0a:f3:62:8c: d4:72:1f:63:b6:71:f9:2a:ee:9f:26:4a:50:26:db:e4:d0:b6: 48:9c:dc:0d:56:f1:9b:29:c4:f5:48:4d:38:11:b7:36:2c:96: b1:21:e2:96:77:46:0f:f3:09:fe:71:30:51:1a:1c:27:eb:05: f0:20:c8:0b:02:65:e4:65:75:fd:e2:fd:3f:71:c2:dc:64:28: 3d:51:d9:43:c0:d2:72:da:0d:9b:60:c4:57:ef:66:d2:94:ad: 8a:26:ef:8c:a7:10:77:93:82:4b:80:d9:d0:9c:77:ee:ff:78: c8:12:7d:68:a3:d7:f0:a8:ad:05:35:cd:b7:74:c3:1d:e0:a1: 96:a7:b4:67 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pJ58cg3Y8BXC7+fnLqC3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5NDg2ZjdmZTRlYjZkOTQ5YjgwMDdiNGU0MTk4Y2UxYzg3 ODMwMmUwHhcNMjYwMTAyMTIxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODhkNTM3ZDcyODkyNjM2Y2YwMzE2Y2ZhZTMzOGQ4OWM2NjliNTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6yBP3Hd7pvFXZUAyGBkhiq1OVlg cbhP3OHAzhh8gTzk+ppNLzawu00foqm9qGU9DMJ5M0J43M45scQAR2imLg+BRvwc 4XALhbtWW34XpNYl342zTi2x02a8kwxsznR6qyDaPtlOlEWL+hdh4W+fIaJM4J9u XuTQPRBZegkIsf/WSdhBcXJsMnhO4o3zWv+TRtGPg3tSy0DZT09g5MZTUQqvFTdT H/3M4FzhfwWfZCU7vsRRLC9Vmr8XWxPwVC0eP6WY8Ou5HYepweWsgSRo5s3+HVfC Xn662V2G9NyCWbp5AMInQ+u6Rvw2PfIXk7aLzxhBjyL61jQoHN2uC/omGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHiNU31yiSY2zwMWz64zjYnGabVCMB8GA1UdIwQY MBaAFNlIb3/k622Um4AHtOQZjOHIeDAuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMlVodmYtVHJiWlNiZ0FlMDVCbU00Y2g0TUM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9kMDQyZDItNjFkMi00MzRkLThlNWIt ODg2YzQxNmI5MDUxLzEvZUkxVGZYS0pKamJQQXhiUHJqT05pY1pwdFVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9kMDQyZDItNjFkMi00MzRkLThlNWItODg2YzQxNmI5MDUx LzEvMlVodmYtVHJiWlNiZ0FlMDVCbU00Y2g0TUM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuf6mMA0G CSqGSIb3DQEBCwUAA4IBAQBnbJp38lPmIqaN+/IKsWV2gkyjZN6fQQnA4KKexJJy fs+ZNHjQ+mUP9Sjuaf1vu7Q7JkfqP63uJGkElnfW1ZT14UJIA8WwjQ1u65rOS8LF tgSyvbPkbG9Qg2iKc4zfZE4w2rFFIdhC1/90dcKrU/Ix5xaAVyWeE0tBOgrzYozU ch9jtnH5Ku6fJkpQJtvk0LZInNwNVvGbKcT1SE04Ebc2LJaxIeKWd0YP8wn+cTBR Ghwn6wXwIMgLAmXkZXX94v0/ccLcZCg9UdlDwNJy2g2bYMRX72bSlK2KJu+MpxB3 k4JLgNnQnHfu/3jIEn1oo9fwqK0FNc23dMMd4KGWp7Rn -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:31 2026 by rpki-client