This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/8eoml7dYa0eoM9KDK5sW1rlposY.roa File: 8eoml7dYa0eoM9KDK5sW1rlposY.roa (raw, json) Hash identifier: VOm0DAbeHrJJa6zbFFsa/wwwKrik//M4U5w54aGoMoQ= Subject key identifier: F1:EA:26:97:B7:58:6B:47:A8:33:D2:83:2B:9B:16:D6:B9:69:A2:C6 Certificate issuer: /CN=13d62220648d6eee42ac92c396bf2d1e81ae65f7 Certificate serial: 019B7DCA18ACC5EEDC920D16D62798DAD55F Authority key identifier: 13:D6:22:20:64:8D:6E:EE:42:AC:92:C3:96:BF:2D:1E:81:AE:65:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9YiIGSNbu5CrJLDlr8tHoGuZfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/8eoml7dYa0eoM9KDK5sW1rlposY.roa Signing time: Fri 02 Jan 2026 08:19:15 +0000 ROA not before: Fri 02 Jan 2026 08:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31276 IP address blocks: 193.24.236.0/22 maxlen: 22 194.147.128.0/22 maxlen: 22 2a07:ea80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.mft rsync://rpki.ripe.net/repository/DEFAULT/E9YiIGSNbu5CrJLDlr8tHoGuZfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:18:ac:c5:ee:dc:92:0d:16:d6:27:98:da:d5:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13d62220648d6eee42ac92c396bf2d1e81ae65f7 Validity Not Before: Jan 2 08:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f1ea2697b7586b47a833d2832b9b16d6b969a2c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b9:16:27:1c:04:9b:6a:f5:1b:db:4c:1d:b1: 80:65:0c:78:13:c5:24:84:cc:d1:39:f0:79:cc:78: 9f:6b:3b:ea:e3:21:f5:41:84:42:f5:16:b6:4b:c2: 90:d0:81:93:ae:a6:f5:d8:23:74:22:7e:80:40:66: af:fa:2b:d0:74:16:a6:14:46:e1:8d:90:7c:67:c6: d4:4c:29:cb:72:38:ff:80:4d:68:80:1a:c5:aa:76: 23:e6:12:0a:d5:21:5b:fe:ec:3c:0b:b0:db:d3:6c: bf:1a:08:f3:a6:fe:10:50:cd:b9:e7:fd:a2:ea:cb: c5:b5:bc:d3:12:8e:52:bd:44:f2:dd:9f:66:3d:59: 9a:90:86:bd:b6:14:2d:ee:e0:fd:90:48:17:b9:cf: f7:db:c1:34:44:13:b7:aa:98:c5:71:12:2e:8d:b6: 6f:e0:78:3a:b4:a1:7c:1d:e9:3b:52:7f:66:a2:70: e6:df:2c:81:58:63:43:9b:08:16:4e:26:c5:59:a2: 6a:f7:e4:4a:14:e9:30:2d:e0:99:ab:ab:ff:11:bb: 95:e7:1c:ac:9f:1d:bd:0f:5a:16:e4:22:b4:34:6d: cb:87:7d:24:b9:d7:0d:59:32:a5:c3:96:7b:c1:8f: f5:66:84:77:4b:94:77:eb:c4:6e:d5:8e:15:e3:c1: 34:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:EA:26:97:B7:58:6B:47:A8:33:D2:83:2B:9B:16:D6:B9:69:A2:C6 X509v3 Authority Key Identifier: keyid:13:D6:22:20:64:8D:6E:EE:42:AC:92:C3:96:BF:2D:1E:81:AE:65:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9YiIGSNbu5CrJLDlr8tHoGuZfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/8eoml7dYa0eoM9KDK5sW1rlposY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0c258a-5203-43e6-9672-fd9c74906baa/1/E9YiIGSNbu5CrJLDlr8tHoGuZfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.24.236.0/22 194.147.128.0/22 IPv6: 2a07:ea80::/29 Signature Algorithm: sha256WithRSAEncryption 7a:bd:18:3f:d6:eb:a9:b4:1b:5a:20:0b:84:f0:f3:15:08:ef: 52:f1:48:ef:de:7b:32:5f:4c:53:a9:5f:07:67:5f:08:4e:af: 75:c4:96:2a:da:8a:8c:77:bd:6c:71:d6:b3:3d:b4:69:45:17: 96:d6:73:fb:34:e5:6b:63:07:a4:c1:4a:23:f1:31:75:1f:80: 0a:4c:d8:a8:84:c7:d8:e7:7c:a9:aa:65:da:74:81:61:25:03: 11:c2:f1:d8:52:5f:51:a8:45:43:c0:72:a7:be:cd:56:41:ec: a5:4b:f9:39:4e:d6:23:b7:39:ab:b7:c5:0a:b6:a0:25:26:62: 89:9c:6b:c8:04:31:31:67:cb:ca:dc:44:54:74:64:bf:ba:e7: f7:69:22:31:64:51:9f:a5:c6:1f:68:f6:0f:82:e7:38:23:15: 4b:34:c4:d6:7a:2e:a8:09:69:06:a5:ca:b8:34:ed:09:01:34: 92:aa:5c:73:4c:a0:ab:52:2b:79:a5:b1:3b:b1:75:a6:22:1b: ec:e8:7b:2c:ae:43:3f:f3:4e:6c:5f:12:1c:77:af:f5:21:75: b6:3d:84:ba:05:db:9e:60:b4:c0:62:60:6f:f2:96:7e:bd:75: 66:85:0d:3b:14:c9:04:ec:ae:5a:8e:2d:e3:32:f1:5f:c7:f2: 29:27:03:c9 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt9yhisxe7ckg0W1ieY2tVfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzZDYyMjIwNjQ4ZDZlZWU0MmFjOTJjMzk2YmYyZDFlODFh ZTY1ZjcwHhcNMjYwMTAyMDgxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMWVhMjY5N2I3NTg2YjQ3YTgzM2QyODMyYjliMTZkNmI5NjlhMmM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrkWJxwEm2r1G9tMHbGAZQx4E8Uk hMzROfB5zHifazvq4yH1QYRC9Ra2S8KQ0IGTrqb12CN0In6AQGav+ivQdBamFEbh jZB8Z8bUTCnLcjj/gE1ogBrFqnYj5hIK1SFb/uw8C7Db02y/Ggjzpv4QUM255/2i 6svFtbzTEo5SvUTy3Z9mPVmakIa9thQt7uD9kEgXuc/328E0RBO3qpjFcRIujbZv 4Hg6tKF8Hek7Un9monDm3yyBWGNDmwgWTibFWaJq9+RKFOkwLeCZq6v/EbuV5xys nx29D1oW5CK0NG3Lh30kudcNWTKlw5Z7wY/1ZoR3S5R368Ru1Y4V48E0CwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFPHqJpe3WGtHqDPSgyubFta5aaLGMB8GA1UdIwQY MBaAFBPWIiBkjW7uQqySw5a/LR6BrmX3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTlZaUlHU05idTVDckpMRGxyOHRIb0d1WmZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8wYzI1OGEtNTIwMy00M2U2LTk2NzIt ZmQ5Yzc0OTA2YmFhLzEvOGVvbWw3ZFlhMGVvTTlLREs1c1cxcmxwb3NZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS8wYzI1OGEtNTIwMy00M2U2LTk2NzItZmQ5Yzc0OTA2YmFh LzEvRTlZaUlHU05idTVDckpMRGxyOHRIb0d1WmZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCwRjsAwQC wpOAMA0EAgACMAcDBQMqB+qAMA0GCSqGSIb3DQEBCwUAA4IBAQB6vRg/1uuptBta IAuE8PMVCO9S8Ujv3nsyX0xTqV8HZ18ITq91xJYq2oqMd71scdazPbRpRReW1nP7 NOVrYwekwUoj8TF1H4AKTNiohMfY53ypqmXadIFhJQMRwvHYUl9RqEVDwHKnvs1W QeylS/k5TtYjtzmrt8UKtqAlJmKJnGvIBDExZ8vK3ERUdGS/uuf3aSIxZFGfpcYf aPYPguc4IxVLNMTWei6oCWkGpcq4NO0JATSSqlxzTKCrUit5pbE7sXWmIhvs6Hss rkM/805sXxIcd6/1IXW2PYS6BdueYLTAYmBv8pZ+vXVmhQ07FMkE7K5aji3jMvFf x/IpJwPJ -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:31 2026 by rpki-client