This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/EK6SgEjsBL-mm7iD7ooVjDdFbxY.roa File: EK6SgEjsBL-mm7iD7ooVjDdFbxY.roa (raw, json) Hash identifier: ZEu9nOF1kbSjWSpE4NcC/VjSw7SsIRZ4h2G/ZSkfcXA= Subject key identifier: 10:AE:92:80:48:EC:04:BF:A6:9B:B8:83:EE:8A:15:8C:37:45:6F:16 Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Certificate serial: 019B7CEDCDFEFAB9B64FF2036406CDEC7D2F Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/EK6SgEjsBL-mm7iD7ooVjDdFbxY.roa Signing time: Fri 02 Jan 2026 04:18:38 +0000 ROA not before: Fri 02 Jan 2026 04:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 88.80.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:cd:fe:fa:b9:b6:4f:f2:03:64:06:cd:ec:7d:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Validity Not Before: Jan 2 04:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=10ae928048ec04bfa69bb883ee8a158c37456f16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:26:b0:2a:bd:e3:22:3d:a3:76:01:c8:88:c3: b4:79:fc:f1:81:be:37:79:b1:5d:0a:08:e9:b3:33: 3b:f6:94:b0:8a:1d:97:5f:c9:60:71:51:c9:dc:20: 70:41:29:dc:24:90:ae:97:ef:fa:54:ea:4b:ba:4e: 21:5d:8a:f0:eb:27:72:12:55:59:04:9c:73:84:76: 00:e4:ff:60:10:0a:95:d8:48:93:b2:7e:95:fd:64: a8:c2:02:a2:52:34:22:a0:a2:91:13:8f:b7:07:08: 68:3d:ac:71:35:84:3b:a0:13:f2:93:02:06:fc:ab: 23:ad:62:4b:49:8c:63:85:21:23:68:34:e2:6a:cf: a3:07:fb:ae:2e:c4:d8:40:9a:06:1e:79:7d:c8:8a: a2:16:63:21:f0:02:36:c8:c3:ef:4b:f4:8e:87:76: 6c:4f:b6:66:1d:77:b2:53:40:13:ff:c3:d5:6a:3e: 71:0f:ba:f8:e1:ff:c2:d6:8c:65:de:db:31:80:b8: 09:fa:96:a6:b4:00:b8:a0:65:9b:01:1e:10:22:bb: b1:db:e3:2f:1a:54:0b:47:df:aa:7a:7c:8f:4e:c9: 7d:52:6e:e0:80:ce:a8:7f:18:e2:6b:93:c2:1b:5f: 02:db:9d:25:36:d7:cd:5e:ee:f3:5c:3b:54:c3:97: a3:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:AE:92:80:48:EC:04:BF:A6:9B:B8:83:EE:8A:15:8C:37:45:6F:16 X509v3 Authority Key Identifier: keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/EK6SgEjsBL-mm7iD7ooVjDdFbxY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.80.136.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:d4:ee:b8:ae:53:7e:3a:a5:3e:9d:e8:25:b2:c3:a7:74:bc: 62:9e:d6:43:34:83:f0:31:d0:6e:68:1f:94:d1:5e:cb:7b:b4: e1:ad:ea:87:9a:44:89:a2:18:0a:cc:15:8a:e9:90:e5:8e:5d: 33:88:f5:ce:3f:67:74:0c:95:8e:a1:da:a3:44:14:4f:a5:d1: 57:6c:45:aa:83:f5:b1:68:3b:f1:ff:bf:66:59:96:a8:37:f2: b1:1a:51:69:1b:b8:d1:93:2d:84:e7:37:e8:72:16:c3:ca:9d: ba:e2:30:8e:a9:61:0b:1a:0b:38:7e:84:49:c7:c4:08:de:a4: 28:be:f1:1c:e4:bb:f6:95:ed:8f:68:83:4e:1e:e0:59:fd:7e: 8b:20:43:37:93:f3:9c:a1:2c:5f:ee:7d:c5:ec:b2:bd:e4:11: 27:3c:9d:df:ab:d6:8f:63:c3:c6:5e:b5:d7:d4:f6:bd:22:17: e4:77:78:7a:e1:5b:69:a4:9b:dd:e5:9b:af:1d:7c:a0:dd:bc: 96:91:e8:22:6f:f2:a5:60:bf:2e:88:07:1c:28:1b:cf:e3:0d: ea:9b:b0:af:83:04:c0:87:6e:2d:f7:05:b7:8f:2b:71:ed:4d: 18:33:fa:de:c8:c6:be:cc:5d:89:ed:45:65:2e:db:30:38:69: 8b:68:63:65 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87c3++rm2T/IDZAbN7H0vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2 MzFiZmIwHhcNMjYwMTAyMDQxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMGFlOTI4MDQ4ZWMwNGJmYTY5YmI4ODNlZThhMTU4YzM3NDU2ZjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSawKr3jIj2jdgHIiMO0efzxgb43 ebFdCgjpszM79pSwih2XX8lgcVHJ3CBwQSncJJCul+/6VOpLuk4hXYrw6ydyElVZ BJxzhHYA5P9gEAqV2EiTsn6V/WSowgKiUjQioKKRE4+3BwhoPaxxNYQ7oBPykwIG /KsjrWJLSYxjhSEjaDTias+jB/uuLsTYQJoGHnl9yIqiFmMh8AI2yMPvS/SOh3Zs T7ZmHXeyU0AT/8PVaj5xD7r44f/C1oxl3tsxgLgJ+pamtAC4oGWbAR4QIrux2+Mv GlQLR9+qenyPTsl9Um7ggM6ofxjia5PCG18C250lNtfNXu7zXDtUw5ejdQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBCukoBI7AS/ppu4g+6KFYw3RW8WMB8GA1UdIwQY MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt YWI4ZjFmMzM4N2VlLzEvRUs2U2dFanNCTC1tbTdpRDdvb1ZqRGRGYnhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWFCIMA0G CSqGSIb3DQEBCwUAA4IBAQBu1O64rlN+OqU+neglssOndLxintZDNIPwMdBuaB+U 0V7Le7ThreqHmkSJohgKzBWK6ZDljl0ziPXOP2d0DJWOodqjRBRPpdFXbEWqg/Wx aDvx/79mWZaoN/KxGlFpG7jRky2E5zfochbDyp264jCOqWELGgs4foRJx8QI3qQo vvEc5Lv2le2PaINOHuBZ/X6LIEM3k/OcoSxf7n3F7LK95BEnPJ3fq9aPY8PGXrXX 1Pa9Ihfkd3h64VtppJvd5ZuvHXyg3byWkegib/KlYL8uiAccKBvP4w3qm7CvgwTA h24t9wW3jytx7U0YM/reyMa+zF2J7UVlLtswOGmLaGNl -----END CERTIFICATE-----Generated at Mon Jan 19 14:22:37 2026 by rpki-client