This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/ejwbFPhATqylSwO48MC87csxibE.roa File: ejwbFPhATqylSwO48MC87csxibE.roa (raw, json) Hash identifier: RaSUYk9rFkC5b/EdXmZf9la1zC9aeBsb5R7RgPQgXfo= Subject key identifier: 7A:3C:1B:14:F8:40:4E:AC:A5:4B:03:B8:F0:C0:BC:ED:CB:31:89:B1 Certificate issuer: /CN=5833294a1cdc1358afc439c0a72733b065a86f8b Certificate serial: 019B797EC41A41AEF7B82A1104AC8FA87DF5 Authority key identifier: 58:33:29:4A:1C:DC:13:58:AF:C4:39:C0:A7:27:33:B0:65:A8:6F:8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WDMpShzcE1ivxDnApyczsGWob4s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/ejwbFPhATqylSwO48MC87csxibE.roa Signing time: Thu 01 Jan 2026 12:18:29 +0000 ROA not before: Thu 01 Jan 2026 12:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49352 IP address blocks: 62.113.93.0/24 maxlen: 24 176.99.4.0/24 maxlen: 24 176.99.5.0/24 maxlen: 24 176.99.5.190/32 maxlen: 32 176.99.6.0/24 maxlen: 24 176.99.7.0/24 maxlen: 24 176.99.8.0/24 maxlen: 24 176.99.9.0/24 maxlen: 24 178.21.9.0/24 maxlen: 24 178.21.12.0/22 maxlen: 22 178.21.12.0/24 maxlen: 24 178.21.13.0/24 maxlen: 24 178.21.14.0/23 maxlen: 23 185.38.16.0/24 maxlen: 24 185.38.17.0/24 maxlen: 24 185.38.18.0/24 maxlen: 24 185.38.19.0/24 maxlen: 24 188.93.208.0/23 maxlen: 23 188.93.208.172/32 maxlen: 32 188.93.209.127/32 maxlen: 32 188.93.213.0/24 maxlen: 24 188.93.214.0/24 maxlen: 24 188.93.215.0/24 maxlen: 24 194.67.64.0/24 maxlen: 24 194.67.75.0/24 maxlen: 24 194.67.76.0/23 maxlen: 23 194.67.76.0/24 maxlen: 24 194.67.77.0/24 maxlen: 24 194.67.106.0/24 maxlen: 24 213.189.193.0/24 maxlen: 24 213.189.194.0/24 maxlen: 24 213.189.195.0/24 maxlen: 24 213.189.199.0/24 maxlen: 24 2a02:f20::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/WDMpShzcE1ivxDnApyczsGWob4s.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/WDMpShzcE1ivxDnApyczsGWob4s.mft rsync://rpki.ripe.net/repository/DEFAULT/WDMpShzcE1ivxDnApyczsGWob4s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:c4:1a:41:ae:f7:b8:2a:11:04:ac:8f:a8:7d:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5833294a1cdc1358afc439c0a72733b065a86f8b Validity Not Before: Jan 1 12:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a3c1b14f8404eaca54b03b8f0c0bcedcb3189b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:f3:63:96:f2:ea:03:9f:79:9d:c7:ad:7b:58: bb:87:e5:a7:08:10:32:97:1b:d8:ac:f9:da:96:9e: 52:37:82:79:8b:a9:4b:35:bc:40:cf:e5:fc:e0:95: ae:d1:f8:06:b3:12:94:28:49:8c:25:67:65:37:49: b3:50:36:a0:8d:2e:01:8f:4e:c8:da:b9:6b:6e:df: 1c:5d:1c:58:45:9b:89:b2:0e:86:8a:0b:2d:1c:1f: ee:46:1b:e8:31:8f:40:93:f0:02:07:85:cd:0f:ae: bb:bb:19:64:8e:00:7f:42:a1:8a:ff:34:d6:96:c3: 28:b3:40:8a:b8:45:de:83:0c:64:13:c6:f8:f7:64: 00:3e:7c:28:f6:3c:c2:7b:5f:d4:1b:b6:7a:44:80: 91:99:ba:e5:2b:f4:e3:54:25:14:26:b1:1b:4c:19: 0b:9f:e9:1c:aa:5d:3f:f1:b8:55:ab:20:86:27:39: 0a:40:95:a0:0e:98:19:0c:bd:71:c5:53:cf:9d:0e: 87:2c:03:83:17:3f:2e:9e:2c:41:38:cc:5a:db:bc: c2:14:e6:2c:2b:0c:81:89:92:1c:56:7e:5b:00:68: 76:79:95:a4:a6:88:c6:fd:e5:05:f9:c5:68:d3:25: 89:61:29:a3:ca:98:dd:0f:68:4d:89:27:a5:f9:50: e3:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:3C:1B:14:F8:40:4E:AC:A5:4B:03:B8:F0:C0:BC:ED:CB:31:89:B1 X509v3 Authority Key Identifier: keyid:58:33:29:4A:1C:DC:13:58:AF:C4:39:C0:A7:27:33:B0:65:A8:6F:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WDMpShzcE1ivxDnApyczsGWob4s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/ejwbFPhATqylSwO48MC87csxibE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/WDMpShzcE1ivxDnApyczsGWob4s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.113.93.0/24 176.99.4.0-176.99.9.255 178.21.9.0/24 178.21.12.0/22 185.38.16.0/22 188.93.208.0/23 188.93.213.0-188.93.215.255 194.67.64.0/24 194.67.75.0-194.67.77.255 194.67.106.0/24 213.189.193.0-213.189.195.255 213.189.199.0/24 IPv6: 2a02:f20::/32 Signature Algorithm: sha256WithRSAEncryption 3b:76:f7:17:09:52:37:aa:60:df:25:21:d8:eb:46:8f:f2:0f: 73:7a:43:c0:2e:00:ff:41:ff:f0:ef:13:c6:f5:be:99:b9:22: 81:c9:d4:9e:bf:74:a2:31:6b:5f:31:dd:32:0e:da:a6:90:37: 93:ae:b9:9c:cd:c1:70:59:23:8c:a0:bf:a3:1d:07:7f:e3:0c: 29:26:c6:18:94:21:fb:6c:e9:2c:87:60:31:b3:2d:0e:b9:67: 1e:b3:e2:d7:02:95:dc:25:79:92:cb:62:e7:98:52:56:c8:30: d0:53:31:5a:3f:2c:dc:ed:53:0d:4e:49:89:82:d5:cf:48:59: 7f:8c:ad:08:0e:75:e8:30:f2:5e:c3:57:04:46:97:18:21:82: 5b:ed:8d:65:98:ee:52:e9:55:87:4d:22:03:46:2c:b3:f1:80: a9:e0:eb:ee:ea:a4:e8:96:19:c1:84:07:36:16:d2:6f:35:29: 4e:ca:7d:ce:8f:c2:7d:5c:8b:b0:e2:09:59:fb:cf:35:16:1b: c1:a1:ad:bc:3d:08:01:2a:22:98:c7:e7:2c:3e:1a:7f:23:6b: b4:c8:a6:99:d8:e0:b5:e8:f2:4b:8a:0a:df:f3:33:26:c0:69: 95:e3:7c:0c:48:71:37:c1:de:b1:32:74:ef:0e:f6:c1:0f:4f: 92:d9:ac:0c -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgISAZt5fsQaQa73uCoRBKyPqH31MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4MzMyOTRhMWNkYzEzNThhZmM0MzljMGE3MjczM2IwNjVh ODZmOGIwHhcNMjYwMTAxMTIxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTNjMWIxNGY4NDA0ZWFjYTU0YjAzYjhmMGMwYmNlZGNiMzE4OWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6vNjlvLqA595ncete1i7h+WnCBAy lxvYrPnalp5SN4J5i6lLNbxAz+X84JWu0fgGsxKUKEmMJWdlN0mzUDagjS4Bj07I 2rlrbt8cXRxYRZuJsg6GigstHB/uRhvoMY9Ak/ACB4XND667uxlkjgB/QqGK/zTW lsMos0CKuEXegwxkE8b492QAPnwo9jzCe1/UG7Z6RICRmbrlK/TjVCUUJrEbTBkL n+kcql0/8bhVqyCGJzkKQJWgDpgZDL1xxVPPnQ6HLAODFz8unixBOMxa27zCFOYs KwyBiZIcVn5bAGh2eZWkpojG/eUF+cVo0yWJYSmjypjdD2hNiSel+VDjkwIDAQAB o4ICfDCCAngwHQYDVR0OBBYEFHo8GxT4QE6spUsDuPDAvO3LMYmxMB8GA1UdIwQY MBaAFFgzKUoc3BNYr8Q5wKcnM7BlqG+LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0RNcFNoemNFMWl2eERuQXB5Y3pzR1dvYjRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80YjQxOWMtY2Y4Zi00YzlhLTk0ZDct YmI0YjY1YjZhMGQxLzEvZWp3YkZQaEFUcXlsU3dPNDhNQzg3Y3N4aWJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80YjQxOWMtY2Y4Zi00YzlhLTk0ZDctYmI0YjY1YjZhMGQx LzEvV0RNcFNoemNFMWl2eERuQXB5Y3pzR1dvYjRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGRBggrBgEFBQcBBwEB/wSBgTB/MG4EAgABMGgDBAA+cV0w DAMEArBjBAMEAbBjCAMEALIVCQMEArIVDAMEArkmEAMEAbxd0DAMAwQAvF3VAwQD vF3QAwQAwkNAMAwDBADCQ0sDBAHCQ0wDBADCQ2owDAMEANW9wQMEAtW9wAMEANW9 xzANBAIAAjAHAwUAKgIPIDANBgkqhkiG9w0BAQsFAAOCAQEAO3b3FwlSN6pg3yUh 2OtGj/IPc3pDwC4A/0H/8O8TxvW+mbkigcnUnr90ojFrXzHdMg7appA3k665nM3B cFkjjKC/ox0Hf+MMKSbGGJQh+2zpLIdgMbMtDrlnHrPi1wKV3CV5ksti55hSVsgw 0FMxWj8s3O1TDU5JiYLVz0hZf4ytCA516DDyXsNXBEaXGCGCW+2NZZjuUulVh00i A0Yss/GAqeDr7uqk6JYZwYQHNhbSbzUpTsp9zo/CfVyLsOIJWfvPNRYbwaGtvD0I ASoimMfnLD4afyNrtMimmdjgtejyS4oK3/MzJsBpleN8DEhxN8HesTJ07w72wQ9P ktmsDA== -----END CERTIFICATE-----Generated at Tue Feb 10 09:28:12 2026 by rpki-client