This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/EbkZTFb2VFqMx2a_D6MlchqeqkI.roa File: EbkZTFb2VFqMx2a_D6MlchqeqkI.roa (raw, json) Hash identifier: hHzZ/zf777mCNzIX/f5moIT+5CBboFuObhSKwaqB7cs= Subject key identifier: 11:B9:19:4C:56:F6:54:5A:8C:C7:66:BF:0F:A3:25:72:1A:9E:AA:42 Certificate issuer: /CN=f99f65e1be42a65b494cf2642a4dd8e328d0f9ce Certificate serial: 019B79110964264DC860ECFE9D31918EB026 Authority key identifier: F9:9F:65:E1:BE:42:A6:5B:49:4C:F2:64:2A:4D:D8:E3:28:D0:F9:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/EbkZTFb2VFqMx2a_D6MlchqeqkI.roa Signing time: Thu 01 Jan 2026 10:18:38 +0000 ROA not before: Thu 01 Jan 2026 10:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62241 IP address blocks: 45.93.132.0/22 maxlen: 22 185.48.56.0/22 maxlen: 22 185.245.184.0/22 maxlen: 22 2a01:9520::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft rsync://rpki.ripe.net/repository/DEFAULT/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:09:64:26:4d:c8:60:ec:fe:9d:31:91:8e:b0:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f99f65e1be42a65b494cf2642a4dd8e328d0f9ce Validity Not Before: Jan 1 10:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=11b9194c56f6545a8cc766bf0fa325721a9eaa42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:eb:d0:96:3f:1c:a4:f0:5f:1a:35:43:d6:6d: 07:a1:3e:27:2f:c4:fd:a0:93:6d:4b:69:29:27:99: ad:17:41:23:65:54:eb:b9:32:b3:b4:ca:79:0c:30: 0c:f9:e7:3e:2a:e2:14:4c:a3:1b:ad:53:09:5d:e6: f6:44:26:86:99:96:57:f2:0f:ca:5d:78:56:29:4c: a2:95:91:13:6c:1d:75:e6:37:af:92:f4:29:51:24: f8:66:36:54:5d:1f:89:56:61:72:80:2b:ca:41:3c: b6:fe:09:eb:67:8b:7a:80:76:a3:da:0d:f4:cc:ea: b7:64:29:2c:07:fb:bf:85:71:00:a0:e9:e6:9c:0d: b6:e6:d5:b3:47:cb:55:a3:af:a2:8f:fa:05:b5:98: ab:d0:12:a9:ba:fc:4d:56:62:7f:14:dd:57:5e:76: c9:32:f8:0c:3d:9e:d6:17:fd:89:8f:6a:0c:70:f4: a2:ce:c1:1b:df:65:74:45:ef:5a:e4:e8:89:bc:77: d8:bf:fe:73:20:b6:f9:55:8b:69:87:c4:8e:eb:ed: ec:f0:ec:13:29:50:ba:ad:81:af:82:7d:a2:ef:70: 8f:2c:ac:ea:39:45:35:ae:0b:c3:ed:f2:0e:51:7e: b1:6a:92:24:ec:0a:f5:09:0b:cc:75:6a:a1:2c:c7: 1c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:B9:19:4C:56:F6:54:5A:8C:C7:66:BF:0F:A3:25:72:1A:9E:AA:42 X509v3 Authority Key Identifier: keyid:F9:9F:65:E1:BE:42:A6:5B:49:4C:F2:64:2A:4D:D8:E3:28:D0:F9:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/EbkZTFb2VFqMx2a_D6MlchqeqkI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.93.132.0/22 185.48.56.0/22 185.245.184.0/22 IPv6: 2a01:9520::/29 Signature Algorithm: sha256WithRSAEncryption af:26:93:84:a4:11:76:d5:d3:f2:1c:26:36:a7:7a:44:32:c2: e6:d4:da:86:6a:2d:30:c9:4f:4f:24:cd:e2:c0:2b:5d:62:be: 44:eb:89:e1:ae:88:3f:c4:c2:88:b0:d8:b3:0e:8d:45:23:d6: 91:4d:c8:49:03:8c:3e:ff:75:75:54:e0:f9:a6:b8:b5:d4:5e: 76:8e:7f:2b:80:4d:ba:e0:f1:ff:47:25:9e:57:7f:64:24:98: cd:ea:f8:6d:51:1e:03:28:98:49:b6:fa:f6:d0:5c:f1:23:8a: b6:fb:01:bf:f3:51:f7:47:da:1e:16:c7:fb:75:5f:6f:7f:e0: 84:04:e9:9d:fe:44:c9:40:9b:45:1f:99:d6:fb:2e:32:80:97: 16:b1:6d:3a:2c:f2:22:95:d5:0d:1c:93:53:50:0b:cb:d1:ab: 25:de:d4:61:ce:b5:b4:08:3b:0c:5e:e7:3c:73:cb:1c:5f:fc: 09:e3:71:13:2f:6c:bc:29:9d:05:b4:97:ff:ae:43:93:9f:08: 52:7a:1f:7b:ef:72:9a:63:67:f7:f0:53:6f:57:0b:9c:12:56: 31:9f:5f:fc:e2:75:d5:f1:9b:8d:31:6b:38:df:a5:dd:b3:b0: 17:53:e1:2c:a6:1e:58:9b:9e:ca:04:66:45:0f:18:a3:75:05: ad:9f:ad:1f -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt5EQlkJk3IYOz+nTGRjrAmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5OWY2NWUxYmU0MmE2NWI0OTRjZjI2NDJhNGRkOGUzMjhk MGY5Y2UwHhcNMjYwMTAxMTAxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMWI5MTk0YzU2ZjY1NDVhOGNjNzY2YmYwZmEzMjU3MjFhOWVhYTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+vQlj8cpPBfGjVD1m0HoT4nL8T9 oJNtS2kpJ5mtF0EjZVTruTKztMp5DDAM+ec+KuIUTKMbrVMJXeb2RCaGmZZX8g/K XXhWKUyilZETbB115jevkvQpUST4ZjZUXR+JVmFygCvKQTy2/gnrZ4t6gHaj2g30 zOq3ZCksB/u/hXEAoOnmnA225tWzR8tVo6+ij/oFtZir0BKpuvxNVmJ/FN1XXnbJ MvgMPZ7WF/2Jj2oMcPSizsEb32V0Re9a5OiJvHfYv/5zILb5VYtph8SO6+3s8OwT KVC6rYGvgn2i73CPLKzqOUU1rgvD7fIOUX6xapIk7Ar1CQvMdWqhLMccVQIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFBG5GUxW9lRajMdmvw+jJXIanqpCMB8GA1UdIwQY MBaAFPmfZeG+QqZbSUzyZCpN2OMo0PnOMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1aOWw0YjVDcGx0SlRQSmtLazNZNHlqUS1jNC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjYvNmRmOGJhLWQ0Y2ItNDcwNS1iZjU1 LTU0ZDE2MjI5OGZmZC8xL0Via1pURmIyVkZxTXgyYV9ENk1sY2hxZXFrSS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYjYvNmRmOGJhLWQ0Y2ItNDcwNS1iZjU1LTU0ZDE2MjI5OGZm ZC8xLzEtWjlsNGI1Q3BsdEpUUEprS2szWTR5alEtYzQuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBIDBAItXYQD BAK5MDgDBAK59bgwDQQCAAIwBwMFAyoBlSAwDQYJKoZIhvcNAQELBQADggEBAK8m k4SkEXbV0/IcJjanekQywubU2oZqLTDJT08kzeLAK11ivkTrieGuiD/Ewoiw2LMO jUUj1pFNyEkDjD7/dXVU4PmmuLXUXnaOfyuATbrg8f9HJZ5Xf2QkmM3q+G1RHgMo mEm2+vbQXPEjirb7Ab/zUfdH2h4Wx/t1X29/4IQE6Z3+RMlAm0Ufmdb7LjKAlxax bTos8iKV1Q0ck1NQC8vRqyXe1GHOtbQIOwxe5zxzyxxf/AnjcRMvbLwpnQW0l/+u Q5OfCFJ6H3vvcppjZ/fwU29XC5wSVjGfX/ziddXxm40xazjfpd2zsBdT4SymHlib nsoEZkUPGKN1Ba2frR8= -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:42 2026 by rpki-client