This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/EHGBZMp_wc5DV8XNvUgf59IIUnM.roa File: EHGBZMp_wc5DV8XNvUgf59IIUnM.roa (raw, json) Hash identifier: WhJ+m3NXULvbpOJG6MdgeodPRANT35h+mc/bOuEln74= Subject key identifier: 10:71:81:64:CA:7F:C1:CE:43:57:C5:CD:BD:48:1F:E7:D2:08:52:73 Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Certificate serial: 019B7EA757BD3B76B82FD5382809AC88D049 Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/EHGBZMp_wc5DV8XNvUgf59IIUnM.roa Signing time: Fri 02 Jan 2026 12:20:54 +0000 ROA not before: Fri 02 Jan 2026 12:20:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206946 IP address blocks: 2a06:e881:260a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:57:bd:3b:76:b8:2f:d5:38:28:09:ac:88:d0:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Validity Not Before: Jan 2 12:20:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=10718164ca7fc1ce4357c5cdbd481fe7d2085273 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:a7:30:fc:a8:6c:6d:ad:95:26:a8:27:c8:40: 83:06:db:a8:c5:19:74:2b:7e:25:87:18:fd:e6:24: 8f:c4:16:1b:3f:ce:04:f8:d4:ef:b2:1f:17:e3:0c: e0:11:96:2e:2c:8d:f7:7c:86:8e:5b:40:59:1d:65: a3:bc:a7:54:8f:63:3c:de:3f:68:9d:e4:26:96:dd: 83:35:b1:c8:98:2a:bb:ae:c5:a0:3e:05:8f:d6:58: 6f:d2:3a:be:0b:c9:16:dc:6e:0f:25:42:80:62:e9: d7:ff:42:70:87:da:96:df:b1:ef:4d:f1:4d:44:23: 4a:58:c9:bb:71:b3:d7:35:dd:08:e2:65:fa:5b:b9: db:9b:3a:a2:7e:74:c9:c8:45:bd:02:d9:e5:ba:41: 58:0e:3f:c8:2b:e4:1d:a6:e3:a0:ba:45:77:f1:09: e3:20:4e:0f:b7:70:b0:47:d0:94:c9:65:32:13:62: 87:af:97:aa:8c:b3:c0:2d:a8:dc:39:79:49:a7:7c: 15:15:d0:75:3a:db:46:a1:4e:b7:06:56:6d:45:99: cd:ac:27:33:6b:17:40:c5:ff:e4:fd:e1:ab:92:74: 8f:d9:bd:b7:11:65:5d:2c:04:77:96:b6:50:75:7c: 17:c6:06:9b:99:d3:d4:8b:5f:1a:da:b6:46:a0:12: 2f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:71:81:64:CA:7F:C1:CE:43:57:C5:CD:BD:48:1F:E7:D2:08:52:73 X509v3 Authority Key Identifier: keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/EHGBZMp_wc5DV8XNvUgf59IIUnM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:e881:260a::/48 Signature Algorithm: sha256WithRSAEncryption a0:3c:6b:5e:f1:88:45:f9:c9:25:7f:48:80:4a:69:6a:ad:e9: e6:3f:3c:25:e5:af:9d:de:c4:b5:fb:77:b6:af:fb:9a:a6:09: 5b:7e:3b:ea:6c:76:a8:f7:fd:db:23:a9:f3:94:50:f3:6a:4f: 11:8e:fd:24:86:fa:d8:83:b8:78:ef:cb:fd:e1:85:cd:14:37: 48:1c:da:cf:3f:85:8b:78:e6:98:cf:5d:1f:d3:ef:cd:74:2f: ea:ad:1c:85:d5:a0:a2:21:2e:8f:4b:30:f2:32:4b:75:31:8e: 07:6d:9d:68:61:1d:c7:62:db:e6:b7:bf:a3:3a:6a:94:3c:45: 70:67:d9:4f:93:d9:41:b0:2b:0b:62:57:62:be:66:0a:d7:7d: 45:c2:99:d2:79:e6:88:cd:07:80:ff:09:70:9f:cb:c2:f4:a9: 2f:43:6b:1c:56:c6:c2:65:60:aa:2f:ed:a1:f6:88:6c:27:6b: 0d:a8:58:ed:7c:7f:b5:77:9c:44:64:1b:46:2c:7d:d6:7c:6b: 2e:85:b7:5d:26:c4:a8:d3:9d:d5:27:3c:db:0b:69:26:06:ed: 4f:0e:b1:91:44:a3:24:c9:a5:30:18:fb:10:57:f6:f7:83:21: 91:b3:90:c0:98:70:0a:e5:75:f0:c3:55:4e:f4:4b:e3:d2:be: 31:f5:bf:d7 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+p1e9O3a4L9U4KAmsiNBJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl ZDc5NTQwHhcNMjYwMTAyMTIyMDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDcxODE2NGNhN2ZjMWNlNDM1N2M1Y2RiZDQ4MWZlN2QyMDg1MjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5qcw/Khsba2VJqgnyECDBtuoxRl0 K34lhxj95iSPxBYbP84E+NTvsh8X4wzgEZYuLI33fIaOW0BZHWWjvKdUj2M83j9o neQmlt2DNbHImCq7rsWgPgWP1lhv0jq+C8kW3G4PJUKAYunX/0Jwh9qW37HvTfFN RCNKWMm7cbPXNd0I4mX6W7nbmzqifnTJyEW9AtnlukFYDj/IK+QdpuOgukV38Qnj IE4Pt3CwR9CUyWUyE2KHr5eqjLPALajcOXlJp3wVFdB1OttGoU63BlZtRZnNrCcz axdAxf/k/eGrknSP2b23EWVdLAR3lrZQdXwXxgabmdPUi18a2rZGoBIvywIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBBxgWTKf8HOQ1fFzb1IH+fSCFJzMB8GA1UdIwQY MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt M2Q5MWVkZTViMmIxLzEvRUhHQlpNcF93YzVEVjhYTnZVZ2Y1OUlJVW5NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgbogSYK MA0GCSqGSIb3DQEBCwUAA4IBAQCgPGte8YhF+cklf0iASmlqrenmPzwl5a+d3sS1 +3e2r/uapglbfjvqbHao9/3bI6nzlFDzak8Rjv0khvrYg7h478v94YXNFDdIHNrP P4WLeOaYz10f0+/NdC/qrRyF1aCiIS6PSzDyMkt1MY4HbZ1oYR3HYtvmt7+jOmqU PEVwZ9lPk9lBsCsLYldivmYK131FwpnSeeaIzQeA/wlwn8vC9KkvQ2scVsbCZWCq L+2h9ohsJ2sNqFjtfH+1d5xEZBtGLH3WfGsuhbddJsSo053VJzzbC2kmBu1PDrGR RKMkyaUwGPsQV/b3gyGRs5DAmHAK5XXww1VO9Evj0r4x9b/X -----END CERTIFICATE-----Generated at Tue Jan 20 22:47:34 2026 by rpki-client