This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/eANMEZRpiO084elBkN0Ql1rIV84.roa File: eANMEZRpiO084elBkN0Ql1rIV84.roa (raw, json) Hash identifier: qWdWxU6HZTPO0JemmHUHwRNEgSR0VaGfvIivMCV7q3E= Subject key identifier: 78:03:4C:11:94:69:88:ED:3C:E1:E9:41:90:DD:10:97:5A:C8:57:CE Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019BD5B4EEE23FD56BD26C129736BAF5F23B Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/eANMEZRpiO084elBkN0Ql1rIV84.roa Signing time: Mon 19 Jan 2026 10:02:43 +0000 ROA not before: Mon 19 Jan 2026 10:02:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25198 IP address blocks: 77.107.95.0/24 maxlen: 24 80.240.89.0/24 maxlen: 24 81.5.189.0/24 maxlen: 24 81.168.65.0/24 maxlen: 24 81.168.105.0/24 maxlen: 24 81.168.125.0/24 maxlen: 24 82.163.25.0/24 maxlen: 24 89.28.234.0/24 maxlen: 24 213.130.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d5:b4:ee:e2:3f:d5:6b:d2:6c:12:97:36:ba:f5:f2:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 19 10:02:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=78034c11946988ed3ce1e94190dd10975ac857ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:eb:db:6f:fe:33:5d:14:db:36:cd:ff:41:f8: c1:a2:35:67:f6:3e:72:ea:79:cb:a0:89:7b:f7:a2: 8a:c6:51:14:af:ae:43:df:9d:b5:31:c0:73:af:fc: 2a:9d:26:a0:03:99:7d:55:84:0f:83:d5:ce:23:9e: ca:ff:e4:20:5f:83:69:fb:de:92:0e:ec:d8:68:69: 6c:b8:02:be:9f:91:92:61:a1:d5:8e:5e:cc:4b:b5: f8:aa:bf:e7:d6:21:16:03:e8:9a:4f:b4:96:78:5a: d3:9d:2e:69:05:c7:78:32:2c:a3:98:8e:5b:4a:e4: 8b:4b:db:51:99:c6:e2:97:e5:85:6b:01:b4:1a:f6: d0:b6:cb:d4:56:fb:19:82:f7:d2:f7:cc:05:15:7a: 49:15:1b:3f:7c:2e:01:1a:56:28:73:e4:17:63:5a: ee:6b:23:f3:61:4c:5e:26:ea:6c:41:10:3e:ff:80: 4a:04:9d:34:a9:97:95:a2:63:c1:a4:06:5b:e4:01: ef:57:10:7c:59:62:42:a6:53:63:c6:64:7f:07:4a: 11:bb:31:e7:16:0a:72:06:55:f7:7e:a3:34:1c:e0: 86:be:bf:df:4b:7b:26:ae:a0:33:17:22:e9:ca:be: 74:81:12:e1:52:33:4f:01:6c:ac:48:3d:37:76:3f: 92:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:03:4C:11:94:69:88:ED:3C:E1:E9:41:90:DD:10:97:5A:C8:57:CE X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/eANMEZRpiO084elBkN0Ql1rIV84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.107.95.0/24 80.240.89.0/24 81.5.189.0/24 81.168.65.0/24 81.168.105.0/24 81.168.125.0/24 82.163.25.0/24 89.28.234.0/24 213.130.154.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:78:79:db:7a:eb:5b:be:c9:6b:56:b2:24:30:de:8d:41:6c: 10:d3:0d:0a:b2:e1:97:4f:ed:59:91:53:a1:62:3f:94:07:54: 09:28:00:5d:1d:27:b5:6e:97:a0:15:84:9e:7b:b4:91:48:ed: 52:10:9d:38:19:4c:3f:0c:c8:89:6a:61:fb:f7:4c:ae:30:c1: c2:62:0a:cb:ae:0a:c5:fc:c7:30:a2:45:d0:1e:40:ef:41:70: 1d:5b:d4:ef:f8:8b:4b:ae:84:17:be:fc:8d:a7:42:37:a3:25: 24:f7:11:2b:e3:76:b4:fe:b9:87:55:2c:d7:61:e1:45:75:18: 2b:c5:fc:7d:1e:6a:c0:ed:15:d6:93:0b:cc:9c:06:a7:cc:f6: d0:95:ce:b9:b1:eb:2e:39:0b:6b:3f:da:78:f0:64:5e:aa:6e: 2a:fc:93:84:cc:d9:c0:3f:00:2d:49:9a:69:70:49:ec:f2:92: 48:d7:6c:6f:be:05:32:d2:d5:84:ab:d5:6f:2b:f0:3f:2c:ae: d5:4d:ad:61:e7:1f:02:5a:bf:12:fc:db:8c:78:c7:8e:8d:a6: ca:8d:cd:63:0c:0e:a8:ef:3c:28:f6:ab:a0:6b:c2:e7:32:87: 8e:4f:1a:1a:d4:fc:eb:0d:8e:99:0d:4f:d7:8f:b0:0e:07:d7: e5:ef:15:d7 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZvVtO7iP9Vr0mwSlza69fI7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTE5MTAwMjQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODAzNGMxMTk0Njk4OGVkM2NlMWU5NDE5MGRkMTA5NzVhYzg1N2NlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+vbb/4zXRTbNs3/QfjBojVn9j5y 6nnLoIl796KKxlEUr65D3521McBzr/wqnSagA5l9VYQPg9XOI57K/+QgX4Np+96S DuzYaGlsuAK+n5GSYaHVjl7MS7X4qr/n1iEWA+iaT7SWeFrTnS5pBcd4MiyjmI5b SuSLS9tRmcbil+WFawG0GvbQtsvUVvsZgvfS98wFFXpJFRs/fC4BGlYoc+QXY1ru ayPzYUxeJupsQRA+/4BKBJ00qZeVomPBpAZb5AHvVxB8WWJCplNjxmR/B0oRuzHn FgpyBlX3fqM0HOCGvr/fS3smrqAzFyLpyr50gRLhUjNPAWysSD03dj+SbwIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFHgDTBGUaYjtPOHpQZDdEJdayFfOMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvZUFOTUVaUnBpTzA4NGVsQmtOMFFsMXJJVjg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQATWtfAwQA UPBZAwQAUQW9AwQAUahBAwQAUahpAwQAUah9AwQAUqMZAwQAWRzqAwQA1YKaMA0G CSqGSIb3DQEBCwUAA4IBAQAseHnbeutbvslrVrIkMN6NQWwQ0w0KsuGXT+1ZkVOh Yj+UB1QJKABdHSe1bpegFYSee7SRSO1SEJ04GUw/DMiJamH790yuMMHCYgrLrgrF /McwokXQHkDvQXAdW9Tv+ItLroQXvvyNp0I3oyUk9xEr43a0/rmHVSzXYeFFdRgr xfx9HmrA7RXWkwvMnAanzPbQlc65sesuOQtrP9p48GReqm4q/JOEzNnAPwAtSZpp cEns8pJI12xvvgUy0tWEq9VvK/A/LK7VTa1h5x8CWr8S/NuMeMeOjabKjc1jDA6o 7zwo9quga8LnMoeOTxoa1PzrDY6ZDU/Xj7AOB9fl7xXX -----END CERTIFICATE-----Generated at Mon Jan 19 16:52:07 2026 by rpki-client