This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/eI-ehXddlcSy-ljw7tvO4bB6Wvw.roa File: eI-ehXddlcSy-ljw7tvO4bB6Wvw.roa (raw, json) Hash identifier: IitlgjD1A9ywmqlI7KTae7u+H+3I3h+Rr83XGfruLVc= Subject key identifier: 78:8F:9E:85:77:5D:95:C4:B2:FA:58:F0:EE:DB:CE:E1:B0:7A:5A:FC Certificate issuer: /CN=62677ee08f4bb219804b673347c3a0b6a332d722 Certificate serial: 019B7D5C559A04AD9C582852A99498ED7D1B Authority key identifier: 62:67:7E:E0:8F:4B:B2:19:80:4B:67:33:47:C3:A0:B6:A3:32:D7:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ymd-4I9LshmAS2czR8OgtqMy1yI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/eI-ehXddlcSy-ljw7tvO4bB6Wvw.roa Signing time: Fri 02 Jan 2026 06:19:21 +0000 ROA not before: Fri 02 Jan 2026 06:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16354 IP address blocks: 134.19.136.0/21 maxlen: 21 171.22.96.0/22 maxlen: 22 185.30.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.crl rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.mft rsync://rpki.ripe.net/repository/DEFAULT/Ymd-4I9LshmAS2czR8OgtqMy1yI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 03:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:55:9a:04:ad:9c:58:28:52:a9:94:98:ed:7d:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62677ee08f4bb219804b673347c3a0b6a332d722 Validity Not Before: Jan 2 06:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=788f9e85775d95c4b2fa58f0eedbcee1b07a5afc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:fe:2a:9c:73:b1:e4:9b:fc:9a:be:fe:d5:c0: a5:ee:e5:0f:56:e5:72:c6:21:cd:a5:f3:72:58:3e: f6:af:51:b6:81:4f:77:3d:d9:ea:e3:66:a8:30:b0: 8a:93:c9:2a:2f:98:af:58:64:0a:6d:88:99:5f:b9: 71:bd:78:e7:2c:2c:a0:65:f8:e6:b9:53:89:7d:c7: c5:af:4a:8e:c4:0b:30:5e:c7:5a:0d:ae:7f:9b:2e: 36:5a:c4:97:ca:53:b2:33:ee:7a:fd:1d:9b:b7:9a: 7c:df:1c:d4:ce:92:bd:26:81:63:d5:c8:2e:97:bf: 6a:34:77:22:62:6d:dd:fb:62:85:39:51:d7:30:63: 05:8e:5e:41:0e:04:f7:c0:42:3f:7b:f9:bf:f5:2e: 60:de:f2:67:79:dc:ef:65:27:43:8d:0b:34:03:dd: a3:a5:1c:9f:09:49:ba:92:13:5f:2e:27:b6:95:9d: 40:9b:61:e6:b2:c3:f3:d8:0c:d3:e8:5d:6e:17:df: 11:f2:96:41:32:c3:51:af:08:67:bd:72:65:48:c1: c2:25:ad:d8:81:ec:3d:8e:ca:67:94:94:04:0e:f0: 0e:6e:92:51:b3:20:0b:ba:0d:7d:6f:15:f7:b0:3f: ca:f0:63:46:23:93:b1:14:b3:7b:7d:a6:3b:7e:a0: e6:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:8F:9E:85:77:5D:95:C4:B2:FA:58:F0:EE:DB:CE:E1:B0:7A:5A:FC X509v3 Authority Key Identifier: keyid:62:67:7E:E0:8F:4B:B2:19:80:4B:67:33:47:C3:A0:B6:A3:32:D7:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymd-4I9LshmAS2czR8OgtqMy1yI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/eI-ehXddlcSy-ljw7tvO4bB6Wvw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/Ymd-4I9LshmAS2czR8OgtqMy1yI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 134.19.136.0/21 171.22.96.0/22 185.30.120.0/22 Signature Algorithm: sha256WithRSAEncryption 44:2d:09:b4:f7:63:d6:4c:aa:d1:a4:f3:eb:c7:64:2c:38:0d: b3:1c:bd:13:06:7d:6e:38:f7:13:42:3c:86:80:30:1c:fc:e0: d4:62:f5:fd:98:9e:45:74:e7:2a:7c:b6:a3:03:12:42:5c:c8: 91:15:ba:17:67:aa:a9:e2:6d:aa:b8:75:82:71:c0:29:d3:a1: 10:9b:04:23:a1:bf:d9:84:88:e4:75:04:94:82:1f:7e:ef:a0: 90:ee:0e:ba:eb:ee:5d:04:92:6d:d1:ac:99:76:3c:ab:b2:95: c1:de:54:db:fa:0f:79:dc:c0:c9:4f:43:17:af:bc:47:9d:46: 25:37:74:1d:1e:6e:c5:51:1b:c6:56:5f:91:1e:da:71:62:6c: 7b:d3:a3:d6:6a:a7:cd:fb:24:f7:20:58:f7:13:5d:01:4d:a1: f3:b7:ef:93:51:18:fc:db:8a:ed:34:65:df:8f:06:06:ff:be: 93:31:f5:43:00:b5:ea:71:82:55:23:02:ca:cd:1d:9c:cb:a7: ec:48:d5:1b:76:b4:4c:06:cf:a4:e4:da:7d:af:69:7f:87:6d: 54:4d:a5:55:e7:7e:02:8d:f0:bb:bb:06:1b:db:ae:11:c6:40: c6:1c:39:00:8e:8e:54:1d:33:28:78:61:39:fe:b2:d7:65:f2: 35:a2:2d:09 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9XFWaBK2cWChSqZSY7X0bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyNjc3ZWUwOGY0YmIyMTk4MDRiNjczMzQ3YzNhMGI2YTMz MmQ3MjIwHhcNMjYwMTAyMDYxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODhmOWU4NTc3NWQ5NWM0YjJmYTU4ZjBlZWRiY2VlMWIwN2E1YWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlf4qnHOx5Jv8mr7+1cCl7uUPVuVy xiHNpfNyWD72r1G2gU93Pdnq42aoMLCKk8kqL5ivWGQKbYiZX7lxvXjnLCygZfjm uVOJfcfFr0qOxAswXsdaDa5/my42WsSXylOyM+56/R2bt5p83xzUzpK9JoFj1cgu l79qNHciYm3d+2KFOVHXMGMFjl5BDgT3wEI/e/m/9S5g3vJnedzvZSdDjQs0A92j pRyfCUm6khNfLie2lZ1Am2HmssPz2AzT6F1uF98R8pZBMsNRrwhnvXJlSMHCJa3Y gew9jspnlJQEDvAObpJRsyALug19bxX3sD/K8GNGI5OxFLN7faY7fqDmJQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFHiPnoV3XZXEsvpY8O7bzuGwelr8MB8GA1UdIwQY MBaAFGJnfuCPS7IZgEtnM0fDoLajMtciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWW1kLTRJOUxzaG1BUzJjelI4T2d0cU15MXlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9iMjA1ZjItOGQzYy00NTdjLWE2M2Mt NWYxMGVlNWZkMTAwLzEvZUktZWhYZGRsY1N5LWxqdzd0dk80YkI2V3Z3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9iMjA1ZjItOGQzYy00NTdjLWE2M2MtNWYxMGVlNWZkMTAw LzEvWW1kLTRJOUxzaG1BUzJjelI4T2d0cU15MXlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDhhOIAwQC qxZgAwQCuR54MA0GCSqGSIb3DQEBCwUAA4IBAQBELQm092PWTKrRpPPrx2QsOA2z HL0TBn1uOPcTQjyGgDAc/ODUYvX9mJ5FdOcqfLajAxJCXMiRFboXZ6qp4m2quHWC ccAp06EQmwQjob/ZhIjkdQSUgh9+76CQ7g666+5dBJJt0ayZdjyrspXB3lTb+g95 3MDJT0MXr7xHnUYlN3QdHm7FURvGVl+RHtpxYmx706PWaqfN+yT3IFj3E10BTaHz t++TURj824rtNGXfjwYG/76TMfVDALXqcYJVIwLKzR2cy6fsSNUbdrRMBs+k5Np9 r2l/h21UTaVV534CjfC7uwYb264RxkDGHDkAjo5UHTMoeGE5/rLXZfI1oi0J -----END CERTIFICATE-----Generated at Thu Jan 29 11:27:39 2026 by rpki-client