This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/eANnaI0GGzfziqDmk3jw-r4G0TA.roa File: eANnaI0GGzfziqDmk3jw-r4G0TA.roa (raw, json) Hash identifier: wlsMTfOuS0IU8a4wZ8IPTnAMJudHI+T0Qy9e4m8glN4= Subject key identifier: 78:03:67:68:8D:06:1B:37:F3:8A:A0:E6:93:78:F0:FA:BE:06:D1:30 Certificate issuer: /CN=cc13be84718f551c241477f22a041c734eb97dc5 Certificate serial: 019B7DCAE30E12D37725FAAC31780BFC560C Authority key identifier: CC:13:BE:84:71:8F:55:1C:24:14:77:F2:2A:04:1C:73:4E:B9:7D:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBO-hHGPVRwkFHfyKgQcc065fcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/eANnaI0GGzfziqDmk3jw-r4G0TA.roa Signing time: Fri 02 Jan 2026 08:20:06 +0000 ROA not before: Fri 02 Jan 2026 08:20:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199274 IP address blocks: 91.239.26.0/23 maxlen: 24 176.112.192.0/19 maxlen: 24 185.22.60.0/22 maxlen: 24 194.177.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.mft rsync://rpki.ripe.net/repository/DEFAULT/zBO-hHGPVRwkFHfyKgQcc065fcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:e3:0e:12:d3:77:25:fa:ac:31:78:0b:fc:56:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc13be84718f551c241477f22a041c734eb97dc5 Validity Not Before: Jan 2 08:20:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=780367688d061b37f38aa0e69378f0fabe06d130 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ad:de:78:fc:b4:d5:78:9f:cb:73:aa:0e:77: 2e:ec:e3:99:a0:66:a3:f9:2d:60:a7:5c:28:fd:cf: a2:14:27:c8:a7:e0:be:b8:36:3c:ee:48:b8:61:9a: 39:6e:11:c4:de:9e:68:89:ac:48:72:88:fb:e9:ee: 69:9d:20:42:e0:59:ca:7b:ac:8b:4a:ba:a0:bc:e6: 1d:03:15:16:a5:9a:98:a5:9d:56:89:1e:5c:a2:43: 0b:ae:6d:0c:91:d2:9d:c8:3c:c4:d3:54:94:19:28: db:5e:57:2f:43:7a:7e:c6:b1:85:c8:a2:1d:a6:ec: b1:99:f0:90:de:b1:63:00:83:3d:38:ec:f2:2b:f1: c8:c6:7e:36:35:bb:21:2e:ae:8c:8b:2a:36:62:c7: 55:61:a9:cb:43:bc:e3:3d:a0:f8:1c:61:91:b6:8a: ae:f8:2b:e0:15:55:48:38:3f:f9:5c:c0:cc:02:54: 2d:7f:90:32:04:58:52:c5:06:b8:84:a8:cf:90:0d: 83:11:6a:9e:9d:13:12:b1:2f:e5:d3:1d:01:56:75: ec:55:40:dc:66:c8:54:83:c3:b0:3e:09:30:44:fe: 35:7d:c5:16:3a:61:3b:43:c4:51:06:d3:14:f5:17: 93:3e:64:ed:9e:72:cc:04:7e:12:2d:65:9e:1e:43: c8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:03:67:68:8D:06:1B:37:F3:8A:A0:E6:93:78:F0:FA:BE:06:D1:30 X509v3 Authority Key Identifier: keyid:CC:13:BE:84:71:8F:55:1C:24:14:77:F2:2A:04:1C:73:4E:B9:7D:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBO-hHGPVRwkFHfyKgQcc065fcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/eANnaI0GGzfziqDmk3jw-r4G0TA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.239.26.0/23 176.112.192.0/19 185.22.60.0/22 194.177.20.0/22 Signature Algorithm: sha256WithRSAEncryption 3c:9a:ac:9f:44:f6:bd:b6:84:8e:8e:ec:49:d1:4d:b7:57:14: 31:54:38:8d:34:9c:9a:b9:21:30:dc:cd:60:07:a5:ee:66:27: ab:a2:bc:03:6e:63:1f:2c:31:c3:67:05:57:98:d6:8f:f3:91: c3:ad:34:e0:c0:b7:e6:3b:d8:67:04:ec:31:00:66:07:2a:af: e1:03:57:90:46:46:3c:b1:4d:18:7d:cb:ec:28:a6:7c:7a:3f: a7:44:dd:e7:14:2f:41:c4:6b:90:86:92:fd:3e:82:69:40:9c: 84:90:d8:fd:48:67:34:a2:ee:4b:b0:18:0a:85:9d:93:0d:f9: 5f:4e:af:ab:2f:c9:79:e1:7a:bd:55:38:98:81:7a:66:08:8a: e2:3c:42:af:ab:bf:81:21:e8:96:93:ef:9e:3e:a1:94:2e:a7: 4c:db:93:9e:3e:94:41:f8:90:a6:2e:9b:88:12:85:23:00:1b: a0:7b:59:94:b2:ef:27:01:7e:85:62:43:9e:07:58:4b:25:72: 23:df:0b:7a:ac:30:c0:c6:27:5e:73:a5:34:84:53:40:67:d5: a4:5a:8e:f9:7c:a8:12:32:93:62:66:15:01:88:ee:e6:6a:fe: 01:32:15:34:eb:1d:cf:57:d7:6d:8b:0d:87:b9:d9:94:7a:f5: e0:9b:76:27 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt9yuMOEtN3JfqsMXgL/FYMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjMTNiZTg0NzE4ZjU1MWMyNDE0NzdmMjJhMDQxYzczNGVi OTdkYzUwHhcNMjYwMTAyMDgyMDA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODAzNjc2ODhkMDYxYjM3ZjM4YWEwZTY5Mzc4ZjBmYWJlMDZkMTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj63eePy01Xify3OqDncu7OOZoGaj +S1gp1wo/c+iFCfIp+C+uDY87ki4YZo5bhHE3p5oiaxIcoj76e5pnSBC4FnKe6yL SrqgvOYdAxUWpZqYpZ1WiR5cokMLrm0MkdKdyDzE01SUGSjbXlcvQ3p+xrGFyKId puyxmfCQ3rFjAIM9OOzyK/HIxn42NbshLq6Miyo2YsdVYanLQ7zjPaD4HGGRtoqu +CvgFVVIOD/5XMDMAlQtf5AyBFhSxQa4hKjPkA2DEWqenRMSsS/l0x0BVnXsVUDc ZshUg8OwPgkwRP41fcUWOmE7Q8RRBtMU9ReTPmTtnnLMBH4SLWWeHkPIEwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFHgDZ2iNBhs384qg5pN48Pq+BtEwMB8GA1UdIwQY MBaAFMwTvoRxj1UcJBR38ioEHHNOuX3FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekJPLWhIR1BWUndrRkhmeUtnUWNjMDY1ZmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS82YmNhYzEtZTMwZi00YmE3LWE3NGUt NzQxZDU1Yzk5ODAyLzEvZUFObmFJMEdHemZ6aXFEbWszanctcjRHMFRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS82YmNhYzEtZTMwZi00YmE3LWE3NGUtNzQxZDU1Yzk5ODAy LzEvekJPLWhIR1BWUndrRkhmeUtnUWNjMDY1ZmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBW+8aAwQF sHDAAwQCuRY8AwQCwrEUMA0GCSqGSIb3DQEBCwUAA4IBAQA8mqyfRPa9toSOjuxJ 0U23VxQxVDiNNJyauSEw3M1gB6XuZierorwDbmMfLDHDZwVXmNaP85HDrTTgwLfm O9hnBOwxAGYHKq/hA1eQRkY8sU0YfcvsKKZ8ej+nRN3nFC9BxGuQhpL9PoJpQJyE kNj9SGc0ou5LsBgKhZ2TDflfTq+rL8l54Xq9VTiYgXpmCIriPEKvq7+BIeiWk++e PqGULqdM25OePpRB+JCmLpuIEoUjABuge1mUsu8nAX6FYkOeB1hLJXIj3wt6rDDA xidec6U0hFNAZ9WkWo75fKgSMpNiZhUBiO7mav4BMhU06x3PV9dtiw2HudmUevXg m3Yn -----END CERTIFICATE-----Generated at Mon Feb 9 22:59:32 2026 by rpki-client