This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/1264da-04d7-40ea-8ae1-e96c64d2451f/1/JEiEOpBmU1uH_8AmrDoyELuwAj0.roa File: JEiEOpBmU1uH_8AmrDoyELuwAj0.roa (raw, json) Hash identifier: 8utU4M2KV5mtQMT6I9Tf1TNzyzqi7bmjgO8ePSDyuYs= Subject key identifier: 24:48:84:3A:90:66:53:5B:87:FF:C0:26:AC:3A:32:10:BB:B0:02:3D Certificate issuer: /CN=e364c773f78f58a4180313a2265ede626a4ede8f Certificate serial: 019B8DA85444CEDC916513AC5514AC7BE1F1 Authority key identifier: E3:64:C7:73:F7:8F:58:A4:18:03:13:A2:26:5E:DE:62:6A:4E:DE:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42THc_ePWKQYAxOiJl7eYmpO3o8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/1264da-04d7-40ea-8ae1-e96c64d2451f/1/JEiEOpBmU1uH_8AmrDoyELuwAj0.roa Signing time: Mon 05 Jan 2026 10:16:17 +0000 ROA not before: Mon 05 Jan 2026 10:16:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42374 IP address blocks: 91.234.66.0/23 maxlen: 23 176.104.112.0/21 maxlen: 21 193.17.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/1264da-04d7-40ea-8ae1-e96c64d2451f/1/42THc_ePWKQYAxOiJl7eYmpO3o8.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/1264da-04d7-40ea-8ae1-e96c64d2451f/1/42THc_ePWKQYAxOiJl7eYmpO3o8.mft rsync://rpki.ripe.net/repository/DEFAULT/42THc_ePWKQYAxOiJl7eYmpO3o8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8d:a8:54:44:ce:dc:91:65:13:ac:55:14:ac:7b:e1:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e364c773f78f58a4180313a2265ede626a4ede8f Validity Not Before: Jan 5 10:16:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2448843a9066535b87ffc026ac3a3210bbb0023d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:50:eb:39:1b:10:df:e6:16:ef:a9:53:55:1a: f1:dd:da:78:be:0e:a8:ef:01:10:98:55:2a:ad:6b: 32:b9:a8:37:a2:1f:06:0e:11:87:48:58:99:fa:36: 87:6b:9c:60:93:77:fb:82:4e:49:c5:64:cb:ec:6f: d5:3b:2b:0f:8a:c2:b3:12:f4:cc:eb:db:fb:df:cc: 64:de:c4:0d:a6:08:db:a2:43:ca:62:b6:29:ea:9a: af:6f:6e:70:15:6a:67:c4:f3:58:95:f3:d5:9b:ab: d1:b2:e2:cf:c7:b9:87:28:b8:0d:1e:a9:92:10:bd: 4d:c3:f4:c5:38:e7:1d:b4:d9:e2:26:3c:cf:3b:9e: 1c:dc:02:6d:8f:18:4f:af:50:3a:d1:e6:f0:aa:3f: ea:a4:73:92:9e:a5:c5:77:d2:ac:b3:fb:af:65:26: 53:8d:72:d3:36:bb:16:31:9c:23:c6:66:42:bd:c5: 7e:67:17:5f:44:b7:fa:d7:b9:fd:a7:9e:12:b1:82: f9:d1:57:19:05:96:10:22:73:55:ef:b2:9f:b0:30: 9f:01:8c:0a:88:a3:d8:0a:ec:c1:34:b8:3c:fb:c9: de:fe:a8:5c:88:0d:a9:6b:9c:3e:66:4f:ed:32:5d: a9:f0:85:6f:b9:93:85:81:fc:70:b3:a3:1e:fb:59: 7a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:48:84:3A:90:66:53:5B:87:FF:C0:26:AC:3A:32:10:BB:B0:02:3D X509v3 Authority Key Identifier: keyid:E3:64:C7:73:F7:8F:58:A4:18:03:13:A2:26:5E:DE:62:6A:4E:DE:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42THc_ePWKQYAxOiJl7eYmpO3o8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/1264da-04d7-40ea-8ae1-e96c64d2451f/1/JEiEOpBmU1uH_8AmrDoyELuwAj0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/1264da-04d7-40ea-8ae1-e96c64d2451f/1/42THc_ePWKQYAxOiJl7eYmpO3o8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.234.66.0/23 176.104.112.0/21 193.17.174.0/24 Signature Algorithm: sha256WithRSAEncryption 42:30:2c:34:a7:ab:a8:18:ac:fc:e1:9b:20:30:f2:88:5a:7d: 96:b7:af:b1:bc:9d:bd:f9:ce:2f:66:88:8d:8f:87:4a:90:f6: 52:72:2c:a5:29:59:72:f0:d7:8f:6c:59:15:21:f1:41:e6:c7: 15:01:d4:22:fa:b9:71:7c:24:2e:ff:b2:be:6f:a3:f3:b4:27: cb:3c:bd:a4:19:1b:f9:ad:2a:f4:c9:3d:64:7d:55:18:2d:5d: 3a:ba:07:76:69:ad:a7:68:d7:c2:ac:e5:ae:09:2e:b5:f0:c4: 7e:7e:91:86:69:45:fd:4c:ca:59:f7:c4:b6:52:9e:cd:5b:f7: d6:50:b0:ca:ce:35:34:8e:94:6d:a5:33:4d:a1:9a:f3:63:0f: cb:c1:e8:9c:de:cb:18:bd:63:6a:a2:36:2b:10:ce:20:4f:1c: ea:1d:43:f2:75:8b:b6:51:4c:02:7e:f2:9e:01:d8:3f:ab:13: 10:e1:8c:5c:6b:4e:d8:a4:44:b1:2f:f7:fa:b1:20:a3:91:31: 7e:03:94:26:90:58:db:d6:ab:4b:2a:d2:35:71:68:c5:09:9a: 40:ef:94:86:b1:18:8f:b1:58:4c:0e:6a:09:67:e0:8d:e3:17: 68:a2:8e:d6:6c:70:0a:5d:15:fc:46:bb:9d:d2:50:73:59:b7: 79:22:87:34 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZuNqFREztyRZROsVRSse+HxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzNjRjNzczZjc4ZjU4YTQxODAzMTNhMjI2NWVkZTYyNmE0 ZWRlOGYwHhcNMjYwMTA1MTAxNjE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDQ4ODQzYTkwNjY1MzViODdmZmMwMjZhYzNhMzIxMGJiYjAwMjNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVDrORsQ3+YW76lTVRrx3dp4vg6o 7wEQmFUqrWsyuag3oh8GDhGHSFiZ+jaHa5xgk3f7gk5JxWTL7G/VOysPisKzEvTM 69v738xk3sQNpgjbokPKYrYp6pqvb25wFWpnxPNYlfPVm6vRsuLPx7mHKLgNHqmS EL1Nw/TFOOcdtNniJjzPO54c3AJtjxhPr1A60ebwqj/qpHOSnqXFd9Kss/uvZSZT jXLTNrsWMZwjxmZCvcV+ZxdfRLf617n9p54SsYL50VcZBZYQInNV77KfsDCfAYwK iKPYCuzBNLg8+8ne/qhciA2pa5w+Zk/tMl2p8IVvuZOFgfxws6Me+1l6ywIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFCRIhDqQZlNbh//AJqw6MhC7sAI9MB8GA1UdIwQY MBaAFONkx3P3j1ikGAMToiZe3mJqTt6PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDJUSGNfZVBXS1FZQXhPaUpsN2VZbXBPM284LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8xMjY0ZGEtMDRkNy00MGVhLThhZTEt ZTk2YzY0ZDI0NTFmLzEvSkVpRU9wQm1VMXVIXzhBbXJEb3lFTHV3QWowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8xMjY0ZGEtMDRkNy00MGVhLThhZTEtZTk2YzY0ZDI0NTFm LzEvNDJUSGNfZVBXS1FZQXhPaUpsN2VZbXBPM284LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBW+pCAwQD sGhwAwQAwRGuMA0GCSqGSIb3DQEBCwUAA4IBAQBCMCw0p6uoGKz84ZsgMPKIWn2W t6+xvJ29+c4vZoiNj4dKkPZSciylKVly8NePbFkVIfFB5scVAdQi+rlxfCQu/7K+ b6PztCfLPL2kGRv5rSr0yT1kfVUYLV06ugd2aa2naNfCrOWuCS618MR+fpGGaUX9 TMpZ98S2Up7NW/fWULDKzjU0jpRtpTNNoZrzYw/Lweic3ssYvWNqojYrEM4gTxzq HUPydYu2UUwCfvKeAdg/qxMQ4Yxca07YpESxL/f6sSCjkTF+A5QmkFjb1qtLKtI1 cWjFCZpA75SGsRiPsVhMDmoJZ+CN4xdooo7WbHAKXRX8Rrud0lBzWbd5Ioc0 -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:47 2026 by rpki-client