This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/EGeXD8B0vr0bu-ghfGdkYui_6lA.roa File: EGeXD8B0vr0bu-ghfGdkYui_6lA.roa (raw, json) Hash identifier: gPUVhthzwyALXJfc203Rfoe0hmjn8DnicOu690skbKo= Subject key identifier: 10:67:97:0F:C0:74:BE:BD:1B:BB:E8:21:7C:67:64:62:E8:BF:EA:50 Certificate issuer: /CN=2ace126fa5830911083e45f583cadb08a63ec6f9 Certificate serial: 019B7BA4F304A15B3FDEBB60999736AD1AA8 Authority key identifier: 2A:CE:12:6F:A5:83:09:11:08:3E:45:F5:83:CA:DB:08:A6:3E:C6:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/EGeXD8B0vr0bu-ghfGdkYui_6lA.roa Signing time: Thu 01 Jan 2026 22:19:26 +0000 ROA not before: Thu 01 Jan 2026 22:19:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206984 IP address blocks: 185.169.244.0/22 maxlen: 22 2a0a:7700::/30 maxlen: 30 2a0a:7704::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.mft rsync://rpki.ripe.net/repository/DEFAULT/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:f3:04:a1:5b:3f:de:bb:60:99:97:36:ad:1a:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ace126fa5830911083e45f583cadb08a63ec6f9 Validity Not Before: Jan 1 22:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1067970fc074bebd1bbbe8217c676462e8bfea50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9c:a4:95:c8:7d:cc:e4:74:81:9b:9f:ea:a2: c8:b3:c0:2e:6b:58:50:ca:5b:26:23:8c:a6:e9:64: 26:77:a1:3e:87:c9:af:52:00:e7:9e:91:10:d3:c1: 8f:22:be:4f:54:a7:e3:0b:cf:1f:4f:0b:e8:44:bf: 11:80:90:c7:a0:a9:eb:14:75:80:30:80:32:0e:37: ff:42:95:63:a6:16:6d:19:f2:c7:26:b6:bb:6b:d0: bd:3e:f5:59:9e:c7:9f:f2:b8:f1:2b:e3:f6:14:57: 97:0a:3e:69:5c:13:bc:be:23:fa:b6:31:f5:63:03: af:0f:57:3e:97:0b:0a:27:3a:03:c8:14:2f:9a:52: 51:f1:95:d0:0e:ee:10:b4:16:34:57:b0:2a:73:5e: 4a:c4:d8:10:43:f9:03:08:83:e7:00:4d:79:d2:5b: c4:cf:8b:6b:0b:75:a6:30:43:85:52:1e:f5:b8:28: 58:2e:8b:bd:f5:8b:09:38:3f:3e:c5:ab:fa:ee:f8: 46:f8:a5:f6:e2:8f:72:07:b6:6a:37:a4:fe:6b:46: 52:09:13:b8:e1:38:83:ab:21:33:11:6f:10:92:a4: 95:21:aa:7a:38:ba:ae:64:77:ac:29:51:eb:27:9f: c7:38:90:99:cd:4d:00:4a:e8:3a:c5:2f:79:e0:84: d5:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:67:97:0F:C0:74:BE:BD:1B:BB:E8:21:7C:67:64:62:E8:BF:EA:50 X509v3 Authority Key Identifier: keyid:2A:CE:12:6F:A5:83:09:11:08:3E:45:F5:83:CA:DB:08:A6:3E:C6:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/EGeXD8B0vr0bu-ghfGdkYui_6lA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b73bd2-ab94-4ac3-93c4-6cbcb7e3d8d2/1/Ks4Sb6WDCREIPkX1g8rbCKY-xvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.169.244.0/22 IPv6: 2a0a:7700::/29 Signature Algorithm: sha256WithRSAEncryption 2a:fa:74:81:4d:ec:af:25:88:b0:0c:07:3f:75:8d:e2:ae:61: 4f:92:d6:f1:16:86:41:d9:b3:e1:dc:d2:f1:f8:50:8b:f0:e2: 17:12:49:98:ae:2f:0e:65:29:2d:d2:57:2d:67:50:d1:e1:60: 17:eb:ad:d8:e9:1a:63:f4:da:5c:98:4b:17:c7:81:d5:19:1c: 33:01:e3:9e:12:08:37:a3:2d:50:54:41:4c:0c:8c:09:7c:fc: 19:43:0b:39:54:76:8b:c4:b2:14:30:d5:bd:70:d9:a2:af:ce: 20:73:63:ce:df:3d:c9:4a:b0:77:75:3c:89:b9:7e:54:10:c9: c4:cf:e3:34:f8:8d:db:50:b6:56:b6:87:e1:4f:95:47:6c:2a: c7:0f:10:5d:b4:0b:7f:72:4b:a7:96:6e:1d:22:be:2a:da:80: 8f:04:79:81:ef:b4:ac:32:96:f9:dc:9d:4e:ef:0c:21:87:ac: 38:d3:06:5d:b4:79:39:bf:1a:a2:ba:10:b0:17:da:ba:b8:78: c8:95:c5:d3:3e:07:14:08:08:23:1c:93:71:e5:94:b1:da:6b: bd:3f:77:fa:14:c1:9b:82:82:33:29:8d:67:7a:3c:bc:c7:0d: 03:bc:2f:45:94:b2:50:9c:bc:df:aa:a8:13:14:76:4d:c3:1b: 45:34:75:58 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7pPMEoVs/3rtgmZc2rRqoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhY2UxMjZmYTU4MzA5MTEwODNlNDVmNTgzY2FkYjA4YTYz ZWM2ZjkwHhcNMjYwMTAxMjIxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDY3OTcwZmMwNzRiZWJkMWJiYmU4MjE3YzY3NjQ2MmU4YmZlYTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZyklch9zOR0gZuf6qLIs8Aua1hQ ylsmI4ym6WQmd6E+h8mvUgDnnpEQ08GPIr5PVKfjC88fTwvoRL8RgJDHoKnrFHWA MIAyDjf/QpVjphZtGfLHJra7a9C9PvVZnsef8rjxK+P2FFeXCj5pXBO8viP6tjH1 YwOvD1c+lwsKJzoDyBQvmlJR8ZXQDu4QtBY0V7Aqc15KxNgQQ/kDCIPnAE150lvE z4trC3WmMEOFUh71uChYLou99YsJOD8+xav67vhG+KX24o9yB7ZqN6T+a0ZSCRO4 4TiDqyEzEW8QkqSVIap6OLquZHesKVHrJ5/HOJCZzU0ASug6xS954ITVWwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBBnlw/AdL69G7voIXxnZGLov+pQMB8GA1UdIwQY MBaAFCrOEm+lgwkRCD5F9YPK2wimPsb5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3M0U2I2V0RDUkVJUGtYMWc4cmJDS1kteHZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9iNzNiZDItYWI5NC00YWMzLTkzYzQt NmNiY2I3ZTNkOGQyLzEvRUdlWEQ4QjB2cjBidS1naGZHZGtZdWlfNmxBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi9iNzNiZDItYWI5NC00YWMzLTkzYzQtNmNiY2I3ZTNkOGQy LzEvS3M0U2I2V0RDUkVJUGtYMWc4cmJDS1kteHZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuan0MA0E AgACMAcDBQMqCncAMA0GCSqGSIb3DQEBCwUAA4IBAQAq+nSBTeyvJYiwDAc/dY3i rmFPktbxFoZB2bPh3NLx+FCL8OIXEkmYri8OZSkt0lctZ1DR4WAX663Y6Rpj9Npc mEsXx4HVGRwzAeOeEgg3oy1QVEFMDIwJfPwZQws5VHaLxLIUMNW9cNmir84gc2PO 3z3JSrB3dTyJuX5UEMnEz+M0+I3bULZWtofhT5VHbCrHDxBdtAt/ckunlm4dIr4q 2oCPBHmB77SsMpb53J1O7wwhh6w40wZdtHk5vxqiuhCwF9q6uHjIlcXTPgcUCAgj HJNx5ZSx2mu9P3f6FMGbgoIzKY1nejy8xw0DvC9FlLJQnLzfqqgTFHZNwxtFNHVY -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:28 2026 by rpki-client