This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/eIXa3P7-DLgvGb_upQKW0QWQEN0.roa File: eIXa3P7-DLgvGb_upQKW0QWQEN0.roa (raw, json) Hash identifier: rZZy59BZf9kQ9RiHu2DTRBT4n3jQYisJ5vFK73yoXdk= Subject key identifier: 78:85:DA:DC:FE:FE:0C:B8:2F:19:BF:EE:A5:02:96:D1:05:90:10:DD Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26 Certificate serial: 019B7C8079E7B99857BC6F1D39D23DF76E04 Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/eIXa3P7-DLgvGb_upQKW0QWQEN0.roa Signing time: Fri 02 Jan 2026 02:19:13 +0000 ROA not before: Fri 02 Jan 2026 02:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3561 IP address blocks: 62.216.64.0/21 maxlen: 21 178.157.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:79:e7:b9:98:57:bc:6f:1d:39:d2:3d:f7:6e:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26 Validity Not Before: Jan 2 02:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7885dadcfefe0cb82f19bfeea50296d1059010dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:63:0a:f0:5c:b9:0d:22:b9:12:50:24:e7:b7: 88:ab:73:f2:19:96:39:8b:15:5e:7b:17:c0:79:73: 83:08:a5:cf:e2:47:25:37:a1:92:1c:f9:3a:6b:5e: a5:e8:38:b2:5b:86:e8:af:3f:bd:85:12:d8:35:06: 4b:12:8d:8e:3c:50:b3:d9:25:1b:34:98:1b:82:df: 48:2d:8d:79:53:22:6d:21:95:e7:24:c3:68:25:9b: 39:34:83:5b:11:2c:ef:ad:68:24:c7:7e:86:42:bc: b2:a4:4c:ec:ab:b1:44:2d:af:71:62:40:9c:20:40: dc:e3:d5:39:c8:b4:93:34:d9:c3:d8:e3:d1:40:89: cd:0f:9b:69:03:e4:d9:df:06:f9:ea:9c:f5:4b:e8: 91:ae:0a:24:d4:c6:7b:f7:b1:5f:e8:c7:3e:a1:d2: a2:51:83:e7:ec:eb:af:5e:90:0e:c7:24:76:e6:0d: c1:0a:3d:50:97:bb:87:14:34:fe:c7:ac:93:cd:34: df:11:dc:19:af:ad:f8:69:6b:a7:ed:73:ed:49:59: 85:47:da:15:22:fa:43:02:c5:76:0b:a2:59:5e:37: b3:eb:d0:0b:a8:ee:49:ce:ea:ed:50:c4:ef:d6:48: 30:9b:e4:1b:61:14:58:7d:a8:fc:6d:df:eb:e4:2e: d4:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:85:DA:DC:FE:FE:0C:B8:2F:19:BF:EE:A5:02:96:D1:05:90:10:DD X509v3 Authority Key Identifier: keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/eIXa3P7-DLgvGb_upQKW0QWQEN0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.216.64.0/21 178.157.64.0/22 Signature Algorithm: sha256WithRSAEncryption 80:d7:30:4c:a0:65:d2:89:66:4b:59:b4:2f:f4:e7:8a:59:d3: be:98:3f:2e:08:46:05:a5:df:2c:bd:41:26:25:85:8d:f3:fd: b9:4c:6e:34:a9:ef:c3:00:28:9b:89:54:34:2b:4e:32:c1:9f: 7d:82:c5:e7:dc:aa:7f:74:3a:54:94:68:ca:b6:aa:6e:27:de: f7:05:7c:f1:0e:f5:d5:32:14:e9:a8:92:87:8b:77:49:5d:bd: 09:b8:35:aa:58:c7:0f:3a:31:a9:8e:96:f7:b9:bc:b0:bc:e5: 4d:e8:5b:bb:ee:3e:d6:88:3e:d6:16:9a:25:ea:87:29:58:37: fc:f6:58:82:fc:d9:c1:99:90:a5:72:87:65:cc:e8:f6:ca:6f: 9f:98:ef:9c:a2:f0:ca:b8:00:13:29:01:02:78:ce:ea:50:0f: 1d:69:11:dd:de:85:df:f9:83:d9:b3:28:a5:2c:6a:6f:7d:81: 03:d5:fd:12:0f:63:c6:71:16:ab:5c:5e:fe:59:bc:d0:e3:d6: bd:03:6d:7e:30:9a:02:28:3c:0c:fa:81:d6:31:3e:dc:cb:5d: ad:23:93:c7:3b:bf:d0:43:bb:2e:5b:08:27:51:7a:ce:fa:9e: 1d:14:4b:27:9e:7b:ed:32:89:c7:e4:df:19:61:37:21:de:00: ce:41:3e:a0 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8gHnnuZhXvG8dOdI9924EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMjMzZDc1NTA4YjRlODVjY2NmNDQzNDlhN2NiNzAzMTk4 ZDFkMjYwHhcNMjYwMTAyMDIxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODg1ZGFkY2ZlZmUwY2I4MmYxOWJmZWVhNTAyOTZkMTA1OTAxMGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWMK8Fy5DSK5ElAk57eIq3PyGZY5 ixVeexfAeXODCKXP4kclN6GSHPk6a16l6DiyW4borz+9hRLYNQZLEo2OPFCz2SUb NJgbgt9ILY15UyJtIZXnJMNoJZs5NINbESzvrWgkx36GQryypEzsq7FELa9xYkCc IEDc49U5yLSTNNnD2OPRQInND5tpA+TZ3wb56pz1S+iRrgok1MZ797Ff6Mc+odKi UYPn7OuvXpAOxyR25g3BCj1Ql7uHFDT+x6yTzTTfEdwZr634aWun7XPtSVmFR9oV IvpDAsV2C6JZXjez69ALqO5JzurtUMTv1kgwm+QbYRRYfaj8bd/r5C7UyQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHiF2tz+/gy4Lxm/7qUCltEFkBDdMB8GA1UdIwQY MBaAFGsjPXVQi06FzM9ENJp8twMZjR0mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEt ZmE5Y2I1MWNkMGYxLzEvZUlYYTNQNy1ETGd2R2JfdXBRS1cwUVdRRU4wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEtZmE5Y2I1MWNkMGYx LzEvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDPthAAwQC sp1AMA0GCSqGSIb3DQEBCwUAA4IBAQCA1zBMoGXSiWZLWbQv9OeKWdO+mD8uCEYF pd8svUEmJYWN8/25TG40qe/DACibiVQ0K04ywZ99gsXn3Kp/dDpUlGjKtqpuJ973 BXzxDvXVMhTpqJKHi3dJXb0JuDWqWMcPOjGpjpb3ubywvOVN6Fu77j7WiD7WFpol 6ocpWDf89liC/NnBmZClcodlzOj2ym+fmO+covDKuAATKQECeM7qUA8daRHd3oXf +YPZsyilLGpvfYED1f0SD2PGcRarXF7+WbzQ49a9A21+MJoCKDwM+oHWMT7cy12t I5PHO7/QQ7suWwgnUXrO+p4dFEsnnnvtMonH5N8ZYTch3gDOQT6g -----END CERTIFICATE-----Generated at Mon Jan 19 20:34:48 2026 by rpki-client