This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/E7EPHRS2n8zUbGI8ks5uEiC9Nko.roa File: E7EPHRS2n8zUbGI8ks5uEiC9Nko.roa (raw, json) Hash identifier: N80eNVaLMbcNwKhaF5bXs2cowcGND/P7WCKPbfCbeo8= Subject key identifier: 13:B1:0F:1D:14:B6:9F:CC:D4:6C:62:3C:92:CE:6E:12:20:BD:36:4A Certificate issuer: /CN=e97124752c840067dd37e242e949dda34dcb4b4e Certificate serial: 019B7BA51537C106554F3CAE32B5EBAC3E2C Authority key identifier: E9:71:24:75:2C:84:00:67:DD:37:E2:42:E9:49:DD:A3:4D:CB:4B:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XEkdSyEAGfdN-JC6Undo03LS04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/E7EPHRS2n8zUbGI8ks5uEiC9Nko.roa Signing time: Thu 01 Jan 2026 22:19:34 +0000 ROA not before: Thu 01 Jan 2026 22:19:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56805 IP address blocks: 185.63.76.0/22 maxlen: 22 185.63.76.0/24 maxlen: 24 185.63.77.0/24 maxlen: 24 185.63.78.0/24 maxlen: 24 185.63.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/6XEkdSyEAGfdN-JC6Undo03LS04.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/6XEkdSyEAGfdN-JC6Undo03LS04.mft rsync://rpki.ripe.net/repository/DEFAULT/6XEkdSyEAGfdN-JC6Undo03LS04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:15:37:c1:06:55:4f:3c:ae:32:b5:eb:ac:3e:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e97124752c840067dd37e242e949dda34dcb4b4e Validity Not Before: Jan 1 22:19:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=13b10f1d14b69fccd46c623c92ce6e1220bd364a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:82:53:84:c5:6b:8b:7d:64:c5:74:01:82:e7: dd:09:be:08:b9:a3:8d:38:a6:64:11:de:ea:14:7a: 14:ad:38:39:23:9f:16:00:68:81:75:0a:14:93:38: cf:4c:ee:1d:db:f0:ff:d4:be:e7:ac:02:09:7a:17: dd:fb:e4:ea:61:fe:7b:e3:50:b6:6c:e7:9f:da:c3: f2:30:56:5f:16:3d:87:c3:c5:99:fd:e4:a5:f2:c1: 1d:f6:12:44:d1:d8:ca:3a:05:96:c2:04:e2:01:00: 51:7b:25:aa:76:04:ba:76:51:0a:bb:d1:c2:62:e2: 93:92:3e:37:d3:bb:76:44:87:be:8d:cf:09:e0:2d: 3c:30:64:3a:04:fb:2c:71:65:63:cf:e7:f6:f1:95: 50:21:c9:09:ba:b6:b0:a7:96:a2:0a:61:57:77:3a: 4d:08:d6:7f:5c:40:58:45:40:5d:02:b1:62:59:93: c7:45:fb:67:0a:1b:a5:de:b2:d9:b3:34:00:cb:5d: 7b:71:13:db:05:d1:03:1d:9c:fe:94:1a:d8:bb:cc: 86:57:5c:55:9b:ce:a8:3c:67:78:42:bb:56:88:da: c0:42:e2:7b:57:5a:58:09:35:53:ce:4b:4e:d7:73: 14:f6:ef:56:ce:3e:09:bd:d5:f7:4d:72:c0:66:49: 38:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:B1:0F:1D:14:B6:9F:CC:D4:6C:62:3C:92:CE:6E:12:20:BD:36:4A X509v3 Authority Key Identifier: keyid:E9:71:24:75:2C:84:00:67:DD:37:E2:42:E9:49:DD:A3:4D:CB:4B:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XEkdSyEAGfdN-JC6Undo03LS04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/E7EPHRS2n8zUbGI8ks5uEiC9Nko.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/75a9c9-1650-4b0b-b78c-5cb39b54a7ed/1/6XEkdSyEAGfdN-JC6Undo03LS04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.63.76.0/22 Signature Algorithm: sha256WithRSAEncryption ce:f5:48:64:08:b9:ac:dd:32:dd:da:33:55:e3:76:30:10:e1: 5e:8f:75:e1:9c:22:be:3e:c4:ea:c7:05:b1:33:f2:b3:63:db: 7c:0b:fe:4c:54:66:ca:33:a5:37:03:38:ca:ef:b4:26:7e:8f: 9d:ca:1e:60:53:8c:df:6d:9f:20:e5:d7:2e:3d:27:18:a9:c3: 25:42:4a:dc:cf:a9:66:83:31:ae:df:39:27:9e:f8:4c:4e:ae: e3:2e:b7:f5:80:ce:3b:e7:f5:67:d3:93:c7:78:23:c5:d4:e9: a2:ed:f6:eb:00:f8:3f:87:27:22:b3:5b:14:c2:7d:86:4c:7b: 9a:8f:35:dd:9d:a9:10:4c:5f:20:21:3c:68:79:a1:0c:34:91: d0:69:ff:aa:af:2c:ed:0d:5b:12:68:d8:33:97:d0:f7:33:a0: 80:7b:24:2a:5e:04:a8:18:73:7a:d0:ea:86:cb:8c:34:77:89: 7d:8b:5e:15:0d:e0:81:46:6e:73:71:d7:e6:04:eb:11:02:b7: 47:1a:d1:9e:7a:be:9e:90:6d:4b:23:23:46:b7:04:04:20:a4: 46:11:85:40:af:9e:21:ca:e2:54:dc:78:67:9b:10:9f:9f:ec: 2c:fe:f4:a1:ee:a9:4d:18:4d:66:bd:d9:e4:e4:1f:8f:c5:b2: 36:f1:1e:88 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pRU3wQZVTzyuMrXrrD4sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NzEyNDc1MmM4NDAwNjdkZDM3ZTI0MmU5NDlkZGEzNGRj YjRiNGUwHhcNMjYwMTAxMjIxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxM2IxMGYxZDE0YjY5ZmNjZDQ2YzYyM2M5MmNlNmUxMjIwYmQzNjRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4JThMVri31kxXQBgufdCb4IuaON OKZkEd7qFHoUrTg5I58WAGiBdQoUkzjPTO4d2/D/1L7nrAIJehfd++TqYf5741C2 bOef2sPyMFZfFj2Hw8WZ/eSl8sEd9hJE0djKOgWWwgTiAQBReyWqdgS6dlEKu9HC YuKTkj4307t2RIe+jc8J4C08MGQ6BPsscWVjz+f28ZVQIckJurawp5aiCmFXdzpN CNZ/XEBYRUBdArFiWZPHRftnChul3rLZszQAy117cRPbBdEDHZz+lBrYu8yGV1xV m86oPGd4QrtWiNrAQuJ7V1pYCTVTzktO13MU9u9Wzj4JvdX3TXLAZkk46wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBOxDx0Utp/M1GxiPJLObhIgvTZKMB8GA1UdIwQY MBaAFOlxJHUshABn3TfiQulJ3aNNy0tOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlhFa2RTeUVBR2ZkTi1KQzZVbmRvMDNMUzA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS83NWE5YzktMTY1MC00YjBiLWI3OGMt NWNiMzliNTRhN2VkLzEvRTdFUEhSUzJuOHpVYkdJOGtzNXVFaUM5TmtvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS83NWE5YzktMTY1MC00YjBiLWI3OGMtNWNiMzliNTRhN2Vk LzEvNlhFa2RTeUVBR2ZkTi1KQzZVbmRvMDNMUzA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuT9MMA0G CSqGSIb3DQEBCwUAA4IBAQDO9UhkCLms3TLd2jNV43YwEOFej3XhnCK+PsTqxwWx M/KzY9t8C/5MVGbKM6U3AzjK77Qmfo+dyh5gU4zfbZ8g5dcuPScYqcMlQkrcz6lm gzGu3zknnvhMTq7jLrf1gM475/Vn05PHeCPF1Omi7fbrAPg/hycis1sUwn2GTHua jzXdnakQTF8gITxoeaEMNJHQaf+qryztDVsSaNgzl9D3M6CAeyQqXgSoGHN60OqG y4w0d4l9i14VDeCBRm5zcdfmBOsRArdHGtGeer6ekG1LIyNGtwQEIKRGEYVAr54h yuJU3HhnmxCfn+ws/vSh7qlNGE1mvdnk5B+PxbI28R6I -----END CERTIFICATE-----Generated at Tue Feb 10 00:14:54 2026 by rpki-client