This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/EjJrWFeTwJ_321jk-J6zSaeztUY.roa File: EjJrWFeTwJ_321jk-J6zSaeztUY.roa (raw, json) Hash identifier: 6r9Rq2EqEC8dkR5wD5X0UhjtGuaRN59q4KgSMAlkjYI= Subject key identifier: 12:32:6B:58:57:93:C0:9F:F7:DB:58:E4:F8:9E:B3:49:A7:B3:B5:46 Certificate issuer: /CN=b391ec497b64d611249fde597a5ee87e9337d5ee Certificate serial: 019B7A5B96F7E15DA8C895C799141C5A7CE2 Authority key identifier: B3:91:EC:49:7B:64:D6:11:24:9F:DE:59:7A:5E:E8:7E:93:37:D5:EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5HsSXtk1hEkn95Zel7ofpM31e4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/EjJrWFeTwJ_321jk-J6zSaeztUY.roa Signing time: Thu 01 Jan 2026 16:19:41 +0000 ROA not before: Thu 01 Jan 2026 16:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210893 IP address blocks: 31.41.250.0/24 maxlen: 24 195.5.127.0/24 maxlen: 24 2a11:2c80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.mft rsync://rpki.ripe.net/repository/DEFAULT/s5HsSXtk1hEkn95Zel7ofpM31e4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:96:f7:e1:5d:a8:c8:95:c7:99:14:1c:5a:7c:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b391ec497b64d611249fde597a5ee87e9337d5ee Validity Not Before: Jan 1 16:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=12326b585793c09ff7db58e4f89eb349a7b3b546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e3:86:b6:94:6c:58:26:57:1f:30:7f:de:b6: 19:3a:29:43:7c:4e:dc:fe:0d:e7:24:72:55:32:fb: c8:d1:96:65:72:dc:14:55:74:b5:2f:f0:f3:fc:1e: 87:f3:8f:eb:57:45:96:c0:53:fd:e3:4b:97:9f:9e: 41:48:de:57:a9:d5:93:4c:97:bf:d5:d4:35:15:4c: 15:ea:ce:ed:0a:29:c7:ea:b2:ae:93:17:4d:1c:49: 37:b6:00:7c:34:d0:7f:8e:ee:15:31:6c:b6:1b:b6: 9b:25:70:48:9e:a8:d3:b6:e3:c5:78:8b:4b:43:00: c7:92:a8:5a:c8:eb:97:f7:16:69:10:8c:0e:45:fb: 85:5a:d6:21:51:29:86:cd:97:32:0d:7f:b7:15:65: 98:4c:44:19:a6:46:73:b8:45:05:72:09:bb:5a:43: 4b:0a:d3:97:a7:a6:84:8f:06:b9:22:98:1f:d7:2b: 13:29:77:25:c6:9d:74:69:f7:6b:2c:42:95:88:42: e8:fe:c9:36:94:aa:83:26:f7:d6:dd:00:1d:bf:8e: 42:52:25:48:5d:96:ab:e4:93:a8:03:fb:6e:4a:8f: 6c:08:ab:82:fe:4d:00:98:06:40:02:2f:57:8c:43: 01:09:0b:5a:3d:33:62:1a:ef:3d:97:26:7b:5c:34: 7e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:32:6B:58:57:93:C0:9F:F7:DB:58:E4:F8:9E:B3:49:A7:B3:B5:46 X509v3 Authority Key Identifier: keyid:B3:91:EC:49:7B:64:D6:11:24:9F:DE:59:7A:5E:E8:7E:93:37:D5:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5HsSXtk1hEkn95Zel7ofpM31e4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/EjJrWFeTwJ_321jk-J6zSaeztUY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/6dc121-0a6f-45ad-8af9-e1a4293520be/1/s5HsSXtk1hEkn95Zel7ofpM31e4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.41.250.0/24 195.5.127.0/24 IPv6: 2a11:2c80::/29 Signature Algorithm: sha256WithRSAEncryption 55:43:35:31:7a:06:b1:79:0f:46:7b:0e:e2:2a:ca:57:0d:75: 6f:be:ea:59:25:82:60:16:ae:b3:e6:4a:44:b0:d6:34:84:aa: 8a:e4:4a:2d:fe:70:66:fe:b2:59:a3:a1:22:b1:fd:15:a4:25: 97:11:db:19:8f:6e:3e:35:e4:06:1b:c0:5e:5c:cb:7e:70:63: 78:fa:66:67:58:c4:b9:59:dc:33:8b:c7:e0:bc:c7:c0:45:ec: 97:a8:95:4a:36:e8:fc:84:12:36:7f:88:05:08:d0:b9:cc:d6: c4:ad:00:f4:36:c6:08:08:19:76:85:4b:d1:64:0e:6e:6b:46: c5:1d:59:dc:62:77:26:95:76:7d:20:49:42:a0:60:76:e0:41: 82:85:84:4e:b3:d8:fe:26:41:99:26:71:1c:43:c3:04:2e:9d: 30:17:58:18:59:eb:56:98:89:2a:f4:4e:b2:92:cc:df:b5:87: 62:22:f1:c7:ca:71:37:b6:b9:11:83:53:9d:5d:9a:70:1a:18: 08:7c:9e:5a:01:0f:60:5d:01:51:2c:01:ae:2a:b7:9a:83:a0: 2f:e5:08:73:ab:1a:cc:af:96:72:00:f9:86:c8:7c:69:12:19: db:a8:ea:43:cc:0d:c6:ec:c2:db:e5:af:62:09:ba:ad:fb:05: 30:87:02:2c -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt6W5b34V2oyJXHmRQcWnziMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzOTFlYzQ5N2I2NGQ2MTEyNDlmZGU1OTdhNWVlODdlOTMz N2Q1ZWUwHhcNMjYwMTAxMTYxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjMyNmI1ODU3OTNjMDlmZjdkYjU4ZTRmODllYjM0OWE3YjNiNTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+OGtpRsWCZXHzB/3rYZOilDfE7c /g3nJHJVMvvI0ZZlctwUVXS1L/Dz/B6H84/rV0WWwFP940uXn55BSN5XqdWTTJe/ 1dQ1FUwV6s7tCinH6rKukxdNHEk3tgB8NNB/ju4VMWy2G7abJXBInqjTtuPFeItL QwDHkqhayOuX9xZpEIwORfuFWtYhUSmGzZcyDX+3FWWYTEQZpkZzuEUFcgm7WkNL CtOXp6aEjwa5Ipgf1ysTKXclxp10afdrLEKViELo/sk2lKqDJvfW3QAdv45CUiVI XZar5JOoA/tuSo9sCKuC/k0AmAZAAi9XjEMBCQtaPTNiGu89lyZ7XDR+7QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFBIya1hXk8Cf99tY5Pies0mns7VGMB8GA1UdIwQY MBaAFLOR7El7ZNYRJJ/eWXpe6H6TN9XuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczVIc1NYdGsxaEVrbjk1WmVsN29mcE0zMWU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi82ZGMxMjEtMGE2Zi00NWFkLThhZjkt ZTFhNDI5MzUyMGJlLzEvRWpKcldGZVR3Sl8zMjFqay1KNnpTYWV6dFVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi82ZGMxMjEtMGE2Zi00NWFkLThhZjktZTFhNDI5MzUyMGJl LzEvczVIc1NYdGsxaEVrbjk1WmVsN29mcE0zMWU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAHyn6AwQA wwV/MA0EAgACMAcDBQMqESyAMA0GCSqGSIb3DQEBCwUAA4IBAQBVQzUxegaxeQ9G ew7iKspXDXVvvupZJYJgFq6z5kpEsNY0hKqK5Eot/nBm/rJZo6Eisf0VpCWXEdsZ j24+NeQGG8BeXMt+cGN4+mZnWMS5Wdwzi8fgvMfAReyXqJVKNuj8hBI2f4gFCNC5 zNbErQD0NsYICBl2hUvRZA5ua0bFHVncYncmlXZ9IElCoGB24EGChYROs9j+JkGZ JnEcQ8MELp0wF1gYWetWmIkq9E6ykszftYdiIvHHynE3trkRg1OdXZpwGhgIfJ5a AQ9gXQFRLAGuKreag6Av5QhzqxrMr5ZyAPmGyHxpEhnbqOpDzA3G7MLb5a9iCbqt +wUwhwIs -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:10 2026 by rpki-client