This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/EH16yuFbyLqrzY-zBZw-2fo18sA.roa File: EH16yuFbyLqrzY-zBZw-2fo18sA.roa (raw, json) Hash identifier: upDcyjJ/YLUs+19FN8lUK8aViynIvTVmV1GTxYiIVYA= Subject key identifier: 10:7D:7A:CA:E1:5B:C8:BA:AB:CD:8F:B3:05:9C:3E:D9:FA:35:F2:C0 Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Certificate serial: 019BFC9486BFF9C8509224E0937B37C4F787 Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/EH16yuFbyLqrzY-zBZw-2fo18sA.roa Signing time: Mon 26 Jan 2026 23:12:30 +0000 ROA not before: Mon 26 Jan 2026 23:12:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64289 IP address blocks: 193.201.209.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 04:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:94:86:bf:f9:c8:50:92:24:e0:93:7b:37:c4:f7:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Validity Not Before: Jan 26 23:12:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=107d7acae15bc8baabcd8fb3059c3ed9fa35f2c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:da:15:98:95:5d:25:80:a5:a3:db:bf:cb:4b: 0a:a9:61:87:de:5d:25:52:75:c4:67:40:60:5d:a0: 47:86:d4:bd:85:88:34:cf:5b:32:2a:57:c6:ea:ac: 78:a2:ef:e4:65:25:c0:ee:69:51:64:a1:bb:ae:a0: 79:18:9f:2f:9c:fa:6e:5d:6f:a6:72:54:2b:1e:ed: 26:a5:3b:54:c5:62:5e:ac:24:c1:2e:d2:96:a3:f5: a8:45:11:2c:b0:7a:41:9c:0a:e1:10:3f:e4:10:b4: 35:ba:28:47:8c:e9:76:f3:2a:31:1f:73:6d:aa:f2: eb:56:23:d5:0a:d6:86:3b:b5:90:30:61:e8:1e:80: 9d:06:ad:b0:fe:8a:4a:8d:a7:6c:5e:b6:75:be:d2: 69:9e:01:f9:65:59:3f:63:a4:06:0a:33:a7:af:ed: 64:d5:a6:14:49:7b:fb:4f:e8:62:f5:e7:5d:9d:b8: d6:9b:2e:03:db:28:e1:a3:d8:3d:7f:16:69:86:7f: e0:7b:65:30:3b:1c:0f:c8:33:e0:5f:0d:2c:03:3c: a4:80:bf:31:c0:5e:b6:51:30:c1:86:10:95:6d:dc: f2:05:15:f4:e3:01:c1:74:37:b9:3e:40:59:d3:48: 73:3d:d7:e3:2c:6a:47:60:17:23:06:7f:66:39:b0: 66:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:7D:7A:CA:E1:5B:C8:BA:AB:CD:8F:B3:05:9C:3E:D9:FA:35:F2:C0 X509v3 Authority Key Identifier: keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/EH16yuFbyLqrzY-zBZw-2fo18sA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.201.209.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:f0:31:a6:d9:74:cd:99:d5:d7:78:27:a9:7e:2a:a6:7a:aa: 61:d2:49:9d:ae:12:77:a8:53:32:d8:f4:18:54:72:b2:f0:3c: df:73:a2:a4:a0:2b:53:39:cf:64:3e:eb:1a:5a:a5:be:25:7d: 88:d5:14:6c:05:52:e6:46:47:86:23:b9:bd:71:22:0e:1d:b4: c9:03:e6:f0:81:c9:da:be:c2:a1:87:a2:c8:7d:d6:3a:c4:8a: b3:8c:ac:1f:84:5c:18:7a:41:31:25:d3:b3:f9:15:03:89:a4: ef:fb:7b:7e:a2:53:96:bc:5f:f5:8d:6b:0a:1f:66:38:db:8c: bc:8a:08:55:44:ce:b3:b2:c6:27:ad:21:f6:c5:28:97:e2:b6: 2f:6d:e4:57:d6:d8:75:74:84:b4:f8:74:06:59:13:d1:e6:d1: 06:d2:0c:ac:fb:38:d7:ad:1f:75:1c:fc:a1:65:3e:f3:75:c8: 03:d1:9f:3c:ea:ae:07:4e:50:90:20:b6:ce:3d:d4:07:10:1b: 01:c3:6e:2e:be:47:0f:4c:99:5c:23:be:43:0a:ad:6f:f3:df: db:fb:a5:7b:ea:bd:be:49:42:76:b9:07:4f:00:4b:00:38:f2: 5f:43:19:3f:aa:83:b9:d4:9d:4a:2c:62:0f:e2:f6:56:29:c2: 29:2f:0d:57 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZv8lIa/+chQkiTgk3s3xPeHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi YTU3NDUwHhcNMjYwMTI2MjMxMjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDdkN2FjYWUxNWJjOGJhYWJjZDhmYjMwNTljM2VkOWZhMzVmMmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1toVmJVdJYClo9u/y0sKqWGH3l0l UnXEZ0BgXaBHhtS9hYg0z1syKlfG6qx4ou/kZSXA7mlRZKG7rqB5GJ8vnPpuXW+m clQrHu0mpTtUxWJerCTBLtKWo/WoRREssHpBnArhED/kELQ1uihHjOl28yoxH3Nt qvLrViPVCtaGO7WQMGHoHoCdBq2w/opKjadsXrZ1vtJpngH5ZVk/Y6QGCjOnr+1k 1aYUSXv7T+hi9eddnbjWmy4D2yjho9g9fxZphn/ge2UwOxwPyDPgXw0sAzykgL8x wF62UTDBhhCVbdzyBRX04wHBdDe5PkBZ00hzPdfjLGpHYBcjBn9mObBm8wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBB9esrhW8i6q82PswWcPtn6NfLAMB8GA1UdIwQY MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt ZmVhYzI2ZWFlY2MyLzEvRUgxNnl1RmJ5THFyelktekJady0yZm8xOHNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwcnRMA0G CSqGSIb3DQEBCwUAA4IBAQAK8DGm2XTNmdXXeCepfiqmeqph0kmdrhJ3qFMy2PQY VHKy8Dzfc6KkoCtTOc9kPusaWqW+JX2I1RRsBVLmRkeGI7m9cSIOHbTJA+bwgcna vsKhh6LIfdY6xIqzjKwfhFwYekExJdOz+RUDiaTv+3t+olOWvF/1jWsKH2Y424y8 ighVRM6zssYnrSH2xSiX4rYvbeRX1th1dIS0+HQGWRPR5tEG0gys+zjXrR91HPyh ZT7zdcgD0Z886q4HTlCQILbOPdQHEBsBw24uvkcPTJlcI75DCq1v89/b+6V76r2+ SUJ2uQdPAEsAOPJfQxk/qoO51J1KLGIP4vZWKcIpLw1X -----END CERTIFICATE-----Generated at Mon Feb 2 14:22:41 2026 by rpki-client