This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/Eijib8iYPDeplyoBLGAmPZORFLE.roa File: Eijib8iYPDeplyoBLGAmPZORFLE.roa (raw, json) Hash identifier: //KC1lCHcJET8STKi3XrrsGCkj88N/0LPLS69WfA2CM= Subject key identifier: 12:28:E2:6F:C8:98:3C:37:A9:97:2A:01:2C:60:26:3D:93:91:14:B1 Certificate issuer: /CN=c334a35abfa82d549e490704d68bbe658005d63c Certificate serial: 019B7910783091352E301DE987CF4A919796 Authority key identifier: C3:34:A3:5A:BF:A8:2D:54:9E:49:07:04:D6:8B:BE:65:80:05:D6:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/Eijib8iYPDeplyoBLGAmPZORFLE.roa Signing time: Thu 01 Jan 2026 10:18:00 +0000 ROA not before: Thu 01 Jan 2026 10:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 185.1.101.0/24 maxlen: 24 185.1.104.0/24 maxlen: 24 2001:7f8:bc::/48 maxlen: 48 2001:7f8:be::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.crl rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.mft rsync://rpki.ripe.net/repository/DEFAULT/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:78:30:91:35:2e:30:1d:e9:87:cf:4a:91:97:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c334a35abfa82d549e490704d68bbe658005d63c Validity Not Before: Jan 1 10:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1228e26fc8983c37a9972a012c60263d939114b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:41:73:87:66:d9:17:f9:1e:b7:64:b9:9c:3b: 9f:a4:03:c7:a8:b1:96:18:8e:78:e2:0d:32:42:fe: 98:7a:ad:dd:f0:d1:53:e1:ca:2a:13:a0:9c:ed:73: 9c:04:63:b3:d7:e7:9e:b1:bb:08:d1:c8:70:67:9d: 91:81:7b:66:18:d3:eb:8c:71:a7:93:28:6c:39:c9: e1:c9:96:ae:4d:d4:69:9b:53:f3:ca:ac:0d:db:28: 69:56:7b:d9:88:8e:18:c0:fe:37:d0:d9:a1:8c:54: 3d:d6:40:11:65:3b:82:99:da:c6:43:43:36:f1:b8: d1:32:a4:3d:d1:dd:df:41:d2:71:82:a9:c8:f0:86: 3a:8d:04:69:56:63:5b:89:66:fe:87:0b:39:81:cf: 2f:6d:e9:f2:e9:e5:c6:6d:14:c8:fe:d6:cb:d0:9d: a0:c4:9c:7b:d5:ee:a6:e0:82:5a:23:2f:f5:2a:82: ef:71:e0:7f:88:a4:92:37:d3:30:71:8a:98:e1:8a: 93:69:5b:5c:3f:71:19:6e:a8:7b:69:08:79:db:7a: 5d:c8:ae:af:16:38:08:4c:a5:e1:81:12:7f:64:7a: f5:c3:e3:e0:9f:d7:93:9e:ce:bd:b1:95:60:d9:81: 9d:1d:ac:a9:d3:2a:04:04:79:b1:f4:b9:3b:67:fe: 1e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:28:E2:6F:C8:98:3C:37:A9:97:2A:01:2C:60:26:3D:93:91:14:B1 X509v3 Authority Key Identifier: keyid:C3:34:A3:5A:BF:A8:2D:54:9E:49:07:04:D6:8B:BE:65:80:05:D6:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/Eijib8iYPDeplyoBLGAmPZORFLE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.1.101.0/24 185.1.104.0/24 IPv6: 2001:7f8:bc::/48 2001:7f8:be::/48 Signature Algorithm: sha256WithRSAEncryption 35:4b:ae:d4:95:1f:b9:d9:d9:12:ec:d6:ee:78:2e:97:ba:ec: 76:67:a8:c3:d9:1b:f6:b6:9c:6e:f3:29:b3:3b:09:4d:3c:c7: 9c:79:93:80:64:51:43:d7:32:ef:8a:e6:5c:9a:13:c3:88:ae: 38:ce:13:57:dc:dc:6e:23:6e:96:b6:e6:38:9a:ab:5d:53:15: a3:0a:51:a0:25:af:73:d8:09:5f:69:99:71:dc:93:ef:84:7b: 52:b2:ff:4d:41:58:24:52:7d:6f:79:94:4a:8c:a9:3b:ab:2f: b1:b4:ef:99:83:12:d0:26:52:e0:ac:6b:01:98:87:97:31:49: c3:aa:37:17:29:98:06:ba:d5:6e:92:b1:eb:88:24:fd:cf:b2: 23:9a:62:67:53:c3:6b:10:17:2e:0e:94:c1:7c:7a:95:b5:67: 84:e2:11:82:e3:ea:57:ab:b9:c6:1e:04:29:65:d9:0a:2b:be: c2:9f:87:db:67:ee:86:e4:51:86:a9:2c:e4:0b:18:9f:34:6c: 5c:13:4f:aa:96:72:7e:19:62:df:86:dd:5c:49:c6:b6:eb:c9: 34:df:e6:aa:f3:51:27:1b:e7:78:63:37:bd:a9:7c:f5:de:15: d9:a5:70:21:9d:3d:d3:ec:14:bc:be:46:9b:d4:f7:08:26:50: fc:23:24:a7 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt5EHgwkTUuMB3ph89KkZeWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzMzRhMzVhYmZhODJkNTQ5ZTQ5MDcwNGQ2OGJiZTY1ODAw NWQ2M2MwHhcNMjYwMTAxMTAxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjI4ZTI2ZmM4OTgzYzM3YTk5NzJhMDEyYzYwMjYzZDkzOTExNGIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkFzh2bZF/ket2S5nDufpAPHqLGW GI544g0yQv6Yeq3d8NFT4coqE6Cc7XOcBGOz1+eesbsI0chwZ52RgXtmGNPrjHGn kyhsOcnhyZauTdRpm1PzyqwN2yhpVnvZiI4YwP430NmhjFQ91kARZTuCmdrGQ0M2 8bjRMqQ90d3fQdJxgqnI8IY6jQRpVmNbiWb+hws5gc8vbeny6eXGbRTI/tbL0J2g xJx71e6m4IJaIy/1KoLvceB/iKSSN9MwcYqY4YqTaVtcP3EZbqh7aQh523pdyK6v FjgITKXhgRJ/ZHr1w+Pgn9eTns69sZVg2YGdHayp0yoEBHmx9Lk7Z/4etQIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFBIo4m/ImDw3qZcqASxgJj2TkRSxMB8GA1UdIwQY MBaAFMM0o1q/qC1UnkkHBNaLvmWABdY8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3pTaldyLW9MVlNlU1FjRTFvdS1aWUFGMWp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8zOWIwOGQtZWIwMS00M2IwLWI1NmMt MjczODg0YjUzYzZlLzEvRWlqaWI4aVlQRGVwbHlvQkxHQW1QWk9SRkxFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC8zOWIwOGQtZWIwMS00M2IwLWI1NmMtMjczODg0YjUzYzZl LzEvd3pTaldyLW9MVlNlU1FjRTFvdS1aWUFGMWp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQAuQFlAwQA uQFoMBgEAgACMBIDBwAgAQf4ALwDBwAgAQf4AL4wDQYJKoZIhvcNAQELBQADggEB ADVLrtSVH7nZ2RLs1u54Lpe67HZnqMPZG/a2nG7zKbM7CU08x5x5k4BkUUPXMu+K 5lyaE8OIrjjOE1fc3G4jbpa25jiaq11TFaMKUaAlr3PYCV9pmXHck++Ee1Ky/01B WCRSfW95lEqMqTurL7G075mDEtAmUuCsawGYh5cxScOqNxcpmAa61W6SseuIJP3P siOaYmdTw2sQFy4OlMF8epW1Z4TiEYLj6lerucYeBCll2QorvsKfh9tn7obkUYap LOQLGJ80bFwTT6qWcn4ZYt+G3VxJxrbryTTf5qrzUScb53hjN72pfPXeFdmlcCGd PdPsFLy+RpvU9wgmUPwjJKc= -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:44 2026 by rpki-client