This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/eUo_bNnchSXjEh7nSJZjL7aLPiA.roa File: eUo_bNnchSXjEh7nSJZjL7aLPiA.roa (raw, json) Hash identifier: n280U0gLCUcqag4RMrq6KoZD9cy9r2Vw69lVLlyKIeY= Subject key identifier: 79:4A:3F:6C:D9:DC:85:25:E3:12:1E:E7:48:96:63:2F:B6:8B:3E:20 Certificate issuer: /CN=1fedc4c19e033a167e4af795d54e34b71ea093c6 Certificate serial: 019B7EA59E1688114188F9329814FF554C23 Authority key identifier: 1F:ED:C4:C1:9E:03:3A:16:7E:4A:F7:95:D5:4E:34:B7:1E:A0:93:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/eUo_bNnchSXjEh7nSJZjL7aLPiA.roa Signing time: Fri 02 Jan 2026 12:19:01 +0000 ROA not before: Fri 02 Jan 2026 12:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34412 IP address blocks: 31.25.90.0/24 maxlen: 24 31.25.91.0/24 maxlen: 24 62.204.61.0/24 maxlen: 24 77.72.80.0/24 maxlen: 24 91.228.192.0/24 maxlen: 24 91.246.44.0/24 maxlen: 24 146.19.217.0/24 maxlen: 24 185.49.231.0/24 maxlen: 24 185.226.140.0/24 maxlen: 24 185.226.141.0/24 maxlen: 24 185.226.142.0/24 maxlen: 24 185.226.143.0/24 maxlen: 24 193.3.182.0/24 maxlen: 24 2a10:5740::/48 maxlen: 48 2a10:5740:1::/48 maxlen: 48 2a10:5740:2::/48 maxlen: 48 2a10:5740:3::/48 maxlen: 48 2a11:9b40::/48 maxlen: 48 2a11:9b40:1::/48 maxlen: 48 2a11:9b40:2::/48 maxlen: 48 2a11:9b40:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:9e:16:88:11:41:88:f9:32:98:14:ff:55:4c:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fedc4c19e033a167e4af795d54e34b71ea093c6 Validity Not Before: Jan 2 12:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=794a3f6cd9dc8525e3121ee74896632fb68b3e20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:cc:b7:19:29:fe:2b:25:15:0f:8e:e6:73:bb: 54:8c:f9:5e:be:6c:3d:60:47:03:12:62:4b:b7:4c: 06:ea:60:70:4c:e9:4d:f6:a2:f4:16:26:6e:8b:18: 06:bb:b3:c0:ed:98:b4:b8:0d:bc:76:33:dd:e1:52: 66:6f:d6:c2:dd:ed:ee:bf:53:27:63:23:ff:22:eb: 0f:97:61:89:f8:8d:af:53:50:ea:0d:77:e3:fd:2f: e4:29:19:51:70:e3:28:9e:eb:7b:2d:3b:7b:94:14: 0b:3a:22:5c:41:8d:b7:e3:3b:25:ee:8b:45:fc:f7: 34:db:2f:e2:6a:99:3d:93:5a:8c:72:5c:fc:3e:fa: c7:18:f1:cd:09:7f:c2:7b:74:71:e1:e6:d9:4c:69: 98:dc:13:5b:67:86:23:22:f8:8a:d5:34:c5:03:68: f6:c7:ef:63:4c:da:19:5d:09:92:c9:ba:4e:8b:b8: cb:51:88:b4:34:b2:ff:14:e7:35:30:1f:de:cf:27: bf:f2:57:9d:c2:c2:e9:ad:19:d3:37:5e:17:10:cd: 49:3d:6e:fc:fe:60:60:b1:4b:a2:d1:ab:d0:7c:30: 0a:70:01:75:c2:1d:b9:b6:38:b9:03:f4:6a:69:72: 4c:8e:1c:12:c2:97:e0:7d:3a:54:c1:81:cd:b8:63: a4:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:4A:3F:6C:D9:DC:85:25:E3:12:1E:E7:48:96:63:2F:B6:8B:3E:20 X509v3 Authority Key Identifier: keyid:1F:ED:C4:C1:9E:03:3A:16:7E:4A:F7:95:D5:4E:34:B7:1E:A0:93:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/eUo_bNnchSXjEh7nSJZjL7aLPiA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/df91c3-d5b8-4a58-ae9e-2f879b5754e1/1/H-3EwZ4DOhZ-SveV1U40tx6gk8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.25.90.0/23 62.204.61.0/24 77.72.80.0/24 91.228.192.0/24 91.246.44.0/24 146.19.217.0/24 185.49.231.0/24 185.226.140.0/22 193.3.182.0/24 IPv6: 2a10:5740::/46 2a11:9b40::/46 Signature Algorithm: sha256WithRSAEncryption 9e:54:1b:df:1f:a2:38:c4:9a:5e:32:33:b2:f2:f0:7b:3b:b1: 73:59:29:bf:97:48:06:fc:1d:a7:82:c9:7d:fc:9c:65:2c:8c: 54:d3:29:9c:1d:e1:27:d8:1a:14:4d:d6:f2:b5:90:a2:52:09: b8:d4:08:0a:51:1f:6b:c0:e6:ec:b4:99:b1:23:1d:31:5f:87: 65:1f:b6:0d:2a:bd:2c:58:06:2f:47:f4:66:7e:9d:8e:cc:9c: 93:89:93:db:5a:c7:22:fa:8e:70:d6:39:bd:31:ae:2b:e4:fd: 75:5a:9d:cc:2b:59:91:cf:17:6a:85:c1:14:ce:f6:bc:09:69: 29:67:58:c1:ef:a2:9b:43:25:29:13:68:04:c8:b5:b4:9f:5d: 16:c7:91:ca:0d:c0:d8:bd:14:66:73:f1:15:3a:e1:ae:58:55: c2:ec:d7:8f:ff:b1:e0:23:0c:3b:e9:42:e3:2c:c6:d6:ff:1c: 76:50:91:6a:ca:4e:60:79:cc:2f:c4:82:9a:fb:9a:34:2c:ea: 9b:ee:2f:c4:ef:06:88:15:ef:3f:f0:f8:87:12:1b:8b:41:e1: 09:cf:8b:fd:4b:8d:e7:a6:2c:dd:71:cf:2f:37:0d:f5:b6:e3: 9a:7b:a9:6f:0c:6a:e7:ec:ec:08:4a:f1:69:0b:e3:77:cd:fe: 2d:30:dc:cb -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgISAZt+pZ4WiBFBiPkymBT/VUwjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmZWRjNGMxOWUwMzNhMTY3ZTRhZjc5NWQ1NGUzNGI3MWVh MDkzYzYwHhcNMjYwMTAyMTIxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OTRhM2Y2Y2Q5ZGM4NTI1ZTMxMjFlZTc0ODk2NjMyZmI2OGIzZTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMy3GSn+KyUVD47mc7tUjPlevmw9 YEcDEmJLt0wG6mBwTOlN9qL0FiZuixgGu7PA7Zi0uA28djPd4VJmb9bC3e3uv1Mn YyP/IusPl2GJ+I2vU1DqDXfj/S/kKRlRcOMonut7LTt7lBQLOiJcQY234zsl7otF /Pc02y/iapk9k1qMclz8PvrHGPHNCX/Ce3Rx4ebZTGmY3BNbZ4YjIviK1TTFA2j2 x+9jTNoZXQmSybpOi7jLUYi0NLL/FOc1MB/ezye/8ledwsLprRnTN14XEM1JPW78 /mBgsUui0avQfDAKcAF1wh25tji5A/RqaXJMjhwSwpfgfTpUwYHNuGOk9QIDAQAB o4ICUzCCAk8wHQYDVR0OBBYEFHlKP2zZ3IUl4xIe50iWYy+2iz4gMB8GA1UdIwQY MBaAFB/txMGeAzoWfkr3ldVONLceoJPGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSC0zRXdaNERPaFotU3ZlVjFVNDB0eDZnazhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9kZjkxYzMtZDViOC00YTU4LWFlOWUt MmY4NzliNTc1NGUxLzEvZVVvX2JObmNoU1hqRWg3blNKWmpMN2FMUGlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9kZjkxYzMtZDViOC00YTU4LWFlOWUtMmY4NzliNTc1NGUx LzEvSC0zRXdaNERPaFotU3ZlVjFVNDB0eDZnazhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGkGCCsGAQUFBwEHAQH/BFowWDA8BAIAATA2AwQBHxlaAwQA Psw9AwQATUhQAwQAW+TAAwQAW/YsAwQAkhPZAwQAuTHnAwQCueKMAwQAwQO2MBgE AgACMBIDBwIqEFdAAAADBwIqEZtAAAAwDQYJKoZIhvcNAQELBQADggEBAJ5UG98f ojjEml4yM7Ly8Hs7sXNZKb+XSAb8HaeCyX38nGUsjFTTKZwd4SfYGhRN1vK1kKJS CbjUCApRH2vA5uy0mbEjHTFfh2Uftg0qvSxYBi9H9GZ+nY7MnJOJk9taxyL6jnDW Ob0xrivk/XVancwrWZHPF2qFwRTO9rwJaSlnWMHvoptDJSkTaATItbSfXRbHkcoN wNi9FGZz8RU64a5YVcLs14//seAjDDvpQuMsxtb/HHZQkWrKTmB5zC/Egpr7mjQs 6pvuL8TvBogV7z/w+IcSG4tB4QnPi/1LjeemLN1xzy83DfW245p7qW8Maufs7AhK 8WkL43fN/i0w3Ms= -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:50 2026 by rpki-client