This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/EesNZ0RnspzkuT_H8NFIXZq6PjY.roa File: EesNZ0RnspzkuT_H8NFIXZq6PjY.roa (raw, json) Hash identifier: 7NhcyktFcFiP+lG7oiD1FQ6oyjmx15KRlfJgt15DKyI= Subject key identifier: 11:EB:0D:67:44:67:B2:9C:E4:B9:3F:C7:F0:D1:48:5D:9A:BA:3E:36 Certificate issuer: /CN=b1bc850d17ca6d3c7b4d00e501e2d356f08a585e Certificate serial: 019B7C12CD51B5F483C6AC7817F10EFEB09D Authority key identifier: B1:BC:85:0D:17:CA:6D:3C:7B:4D:00:E5:01:E2:D3:56:F0:8A:58:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sbyFDRfKbTx7TQDlAeLTVvCKWF4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/EesNZ0RnspzkuT_H8NFIXZq6PjY.roa Signing time: Fri 02 Jan 2026 00:19:25 +0000 ROA not before: Fri 02 Jan 2026 00:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 91.228.72.0/24 maxlen: 24 91.228.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.mft rsync://rpki.ripe.net/repository/DEFAULT/sbyFDRfKbTx7TQDlAeLTVvCKWF4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:cd:51:b5:f4:83:c6:ac:78:17:f1:0e:fe:b0:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1bc850d17ca6d3c7b4d00e501e2d356f08a585e Validity Not Before: Jan 2 00:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=11eb0d674467b29ce4b93fc7f0d1485d9aba3e36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:1f:46:bd:08:8c:c6:c7:4a:00:0b:e0:d8:19: 67:e1:07:ae:a0:9f:6a:5a:e3:08:3c:e8:b0:11:6e: cd:7a:5c:00:78:7f:1d:76:90:bc:b2:2c:94:d0:40: 6f:2b:eb:ee:b5:e2:13:4d:95:5c:46:a0:92:a7:cd: 18:63:de:5a:de:84:73:7c:3a:72:53:e2:8e:95:e2: 8c:14:3f:23:f3:11:86:e1:b9:33:a9:3f:f3:bd:82: 18:7d:81:90:06:9f:1a:44:45:c3:13:f2:22:d9:14: 6b:8a:2d:c4:d0:e7:ed:5a:73:ce:42:18:7d:b1:b6: 5d:68:4a:da:f0:79:ae:61:4b:bf:08:e1:12:bb:c2: b7:10:4d:d5:3c:08:3e:0a:d5:a1:21:fb:78:86:00: 68:5a:f9:86:1e:65:dc:74:ec:4e:6c:0f:c3:8d:bc: b5:fe:ad:bb:3b:51:34:e9:07:37:f1:de:40:73:18: d4:85:c2:2a:9a:f6:f9:50:50:e9:0e:1c:7d:de:e4: 81:00:e4:77:ab:83:68:31:75:ae:61:c6:e3:b8:26: 08:c5:9e:c3:74:db:6d:c4:d3:55:f5:e1:4d:b5:ad: 34:12:52:44:e8:cb:2c:2c:39:7c:a5:80:eb:62:a9: 8b:04:46:7b:05:7c:19:06:53:3e:66:27:e5:2a:c9: 42:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:EB:0D:67:44:67:B2:9C:E4:B9:3F:C7:F0:D1:48:5D:9A:BA:3E:36 X509v3 Authority Key Identifier: keyid:B1:BC:85:0D:17:CA:6D:3C:7B:4D:00:E5:01:E2:D3:56:F0:8A:58:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbyFDRfKbTx7TQDlAeLTVvCKWF4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/EesNZ0RnspzkuT_H8NFIXZq6PjY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8aa02d-94c8-4678-92ac-17fb4ffb9fad/1/sbyFDRfKbTx7TQDlAeLTVvCKWF4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.228.72.0/24 91.228.74.0/24 Signature Algorithm: sha256WithRSAEncryption 44:12:f4:af:cc:68:29:2e:38:27:35:30:21:32:95:25:7b:46: a1:8b:c9:ec:87:cc:96:1e:83:73:e1:6e:59:a2:12:cc:de:c8: 04:ea:ff:42:21:a3:88:f8:41:ee:94:25:80:c5:a0:31:b3:41: 36:f6:db:80:85:2b:6d:bb:5f:29:b3:f2:2d:52:25:c4:78:3b: f7:ad:95:06:ca:bc:86:b9:00:df:22:64:1a:6c:46:d2:9b:ed: 26:1a:64:19:4b:b7:14:62:55:af:f6:83:e6:40:7c:af:0c:ca: 9e:f7:66:87:8d:d7:6f:24:ae:09:d5:9a:3d:59:3d:d3:57:f7: 02:c3:91:d7:9f:86:4c:2f:09:3a:8c:3f:ad:e9:63:df:f6:95: f5:31:37:04:89:e7:e1:45:54:5d:ed:cc:c6:55:e3:14:02:42: 23:ad:8b:83:f2:0a:ad:35:4c:7d:51:6d:3f:71:08:b7:cd:5b: d9:d6:c7:ff:db:f6:50:d6:2f:2c:eb:fa:55:25:7b:ab:de:8e: 6e:7c:4c:73:60:23:11:be:1b:de:85:26:f6:2d:ef:04:08:b7: 49:fe:f4:9f:cf:12:1f:d4:70:f4:58:74:35:34:80:b9:5c:d2: 36:3b:a4:47:bc:ab:16:e0:d4:a4:e2:56:08:5e:48:e2:9a:30: b8:c4:32:52 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8Es1RtfSDxqx4F/EO/rCdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYmM4NTBkMTdjYTZkM2M3YjRkMDBlNTAxZTJkMzU2ZjA4 YTU4NWUwHhcNMjYwMTAyMDAxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMWViMGQ2NzQ0NjdiMjljZTRiOTNmYzdmMGQxNDg1ZDlhYmEzZTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6B9GvQiMxsdKAAvg2Bln4QeuoJ9q WuMIPOiwEW7NelwAeH8ddpC8siyU0EBvK+vuteITTZVcRqCSp80YY95a3oRzfDpy U+KOleKMFD8j8xGG4bkzqT/zvYIYfYGQBp8aREXDE/Ii2RRrii3E0OftWnPOQhh9 sbZdaEra8HmuYUu/COESu8K3EE3VPAg+CtWhIft4hgBoWvmGHmXcdOxObA/Djby1 /q27O1E06Qc38d5AcxjUhcIqmvb5UFDpDhx93uSBAOR3q4NoMXWuYcbjuCYIxZ7D dNttxNNV9eFNta00ElJE6MssLDl8pYDrYqmLBEZ7BXwZBlM+ZiflKslC0QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBHrDWdEZ7Kc5Lk/x/DRSF2auj42MB8GA1UdIwQY MBaAFLG8hQ0Xym08e00A5QHi01bwilheMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2J5RkRSZktiVHg3VFFEbEFlTFRWdkNLV0Y0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC84YWEwMmQtOTRjOC00Njc4LTkyYWMt MTdmYjRmZmI5ZmFkLzEvRWVzTlowUm5zcHprdVRfSDhORklYWnE2UGpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC84YWEwMmQtOTRjOC00Njc4LTkyYWMtMTdmYjRmZmI5ZmFk LzEvc2J5RkRSZktiVHg3VFFEbEFlTFRWdkNLV0Y0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW+RIAwQA W+RKMA0GCSqGSIb3DQEBCwUAA4IBAQBEEvSvzGgpLjgnNTAhMpUle0ahi8nsh8yW HoNz4W5ZohLM3sgE6v9CIaOI+EHulCWAxaAxs0E29tuAhSttu18ps/ItUiXEeDv3 rZUGyryGuQDfImQabEbSm+0mGmQZS7cUYlWv9oPmQHyvDMqe92aHjddvJK4J1Zo9 WT3TV/cCw5HXn4ZMLwk6jD+t6WPf9pX1MTcEiefhRVRd7czGVeMUAkIjrYuD8gqt NUx9UW0/cQi3zVvZ1sf/2/ZQ1i8s6/pVJXur3o5ufExzYCMRvhvehSb2Le8ECLdJ /vSfzxIf1HD0WHQ1NIC5XNI2O6RHvKsW4NSk4lYIXkjimjC4xDJS -----END CERTIFICATE-----Generated at Wed Jan 7 23:51:48 2026 by rpki-client