This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/cdbb49-57c5-454f-9b05-e65292158f43/1/eXBL0IY8mmgnQLW1xI74swf6S6A.roa File: eXBL0IY8mmgnQLW1xI74swf6S6A.roa (raw, json) Hash identifier: HsmXrftQWUw6hDHYWb3a78tIwnu4xuqq368XPLs6+1E= Subject key identifier: 79:70:4B:D0:86:3C:9A:68:27:40:B5:B5:C4:8E:F8:B3:07:FA:4B:A0 Certificate issuer: /CN=7aa812372b83a5e0c9fca15a552bb63638a3827d Certificate serial: 019B7EA4AC6282B123C7196EAB6A07CD0996 Authority key identifier: 7A:A8:12:37:2B:83:A5:E0:C9:FC:A1:5A:55:2B:B6:36:38:A3:82:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eqgSNyuDpeDJ_KFaVSu2Njijgn0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/cdbb49-57c5-454f-9b05-e65292158f43/1/eXBL0IY8mmgnQLW1xI74swf6S6A.roa Signing time: Fri 02 Jan 2026 12:17:59 +0000 ROA not before: Fri 02 Jan 2026 12:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35399 IP address blocks: 87.236.56.0/21 maxlen: 21 87.236.56.0/22 maxlen: 22 87.236.56.0/24 maxlen: 24 87.236.57.0/24 maxlen: 24 87.236.58.0/24 maxlen: 24 87.236.59.0/24 maxlen: 24 87.236.60.0/22 maxlen: 22 87.236.60.0/24 maxlen: 24 87.236.61.0/24 maxlen: 24 87.236.62.0/24 maxlen: 24 87.236.63.0/24 maxlen: 24 2a03:b300::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/cdbb49-57c5-454f-9b05-e65292158f43/1/eqgSNyuDpeDJ_KFaVSu2Njijgn0.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/cdbb49-57c5-454f-9b05-e65292158f43/1/eqgSNyuDpeDJ_KFaVSu2Njijgn0.mft rsync://rpki.ripe.net/repository/DEFAULT/eqgSNyuDpeDJ_KFaVSu2Njijgn0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:ac:62:82:b1:23:c7:19:6e:ab:6a:07:cd:09:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7aa812372b83a5e0c9fca15a552bb63638a3827d Validity Not Before: Jan 2 12:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=79704bd0863c9a682740b5b5c48ef8b307fa4ba0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:73:52:78:e3:66:5f:c9:89:af:f7:24:cf:5e: bf:1b:01:9a:6d:14:a9:d9:be:2e:58:45:1e:cf:14: 7a:93:3e:01:fb:f4:d2:f2:3d:e2:0b:f2:93:37:da: 3d:6c:67:0a:23:96:c1:ce:30:b4:1d:03:56:16:eb: 67:60:9c:32:15:cf:9b:6c:46:21:f4:1b:2e:7a:cc: 3d:0c:2d:53:08:f9:ed:91:bf:b8:a3:e7:fe:72:68: d3:b0:e2:e6:e5:c7:ec:59:bb:84:a2:05:ba:3d:a2: b5:13:f9:4a:41:61:2f:f1:2c:07:7f:ff:52:6e:fe: b7:00:07:6e:fc:15:4b:20:86:35:69:4a:50:98:cb: 6f:a8:97:2f:f4:08:92:fc:16:ad:9f:02:5a:00:91: f8:3e:82:7c:ca:d8:cc:77:59:61:c1:07:a0:4a:8d: 93:b8:78:9c:eb:57:21:9b:da:69:ec:ad:4b:4d:a4: 62:f8:82:76:cf:d9:41:d5:4c:f1:72:56:88:1e:2d: 6e:e3:a3:90:5c:47:c7:cc:6d:e0:b9:95:83:a9:75: 2c:fd:3a:21:82:de:c7:00:0a:62:10:54:ee:e4:b7: a7:2e:82:62:61:e0:6c:e8:84:a9:b0:3a:00:2d:6d: eb:8c:de:87:af:56:83:3e:3a:f8:07:6b:03:5f:37: ad:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:70:4B:D0:86:3C:9A:68:27:40:B5:B5:C4:8E:F8:B3:07:FA:4B:A0 X509v3 Authority Key Identifier: keyid:7A:A8:12:37:2B:83:A5:E0:C9:FC:A1:5A:55:2B:B6:36:38:A3:82:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eqgSNyuDpeDJ_KFaVSu2Njijgn0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/cdbb49-57c5-454f-9b05-e65292158f43/1/eXBL0IY8mmgnQLW1xI74swf6S6A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/cdbb49-57c5-454f-9b05-e65292158f43/1/eqgSNyuDpeDJ_KFaVSu2Njijgn0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.236.56.0/21 IPv6: 2a03:b300::/32 Signature Algorithm: sha256WithRSAEncryption 03:30:aa:30:e7:89:58:d3:63:0e:b7:28:c0:cb:75:fe:94:ca: 98:37:70:8d:c0:ed:e4:9b:ba:9d:eb:b0:e0:1f:26:81:5a:eb: 2b:fc:42:46:4b:5d:df:fd:d5:04:31:62:54:a4:d6:40:e8:46: b9:2e:8a:bd:47:c7:c2:9a:8e:0d:c8:d7:eb:5e:cd:a5:06:91: ae:76:b1:fd:b5:c0:66:4e:b5:8d:d3:e6:63:db:4d:ac:72:ea: 7d:58:30:75:15:7e:66:a9:6f:6e:57:c5:8d:60:d7:29:80:28: 5d:37:ce:73:02:a6:e4:e9:21:f8:72:8d:f6:14:00:ed:16:08: bf:9c:08:47:d2:6b:65:8e:15:0a:87:05:f2:8b:31:a0:88:04: f2:ce:af:1d:15:46:d4:13:bd:a7:74:0b:fd:d8:b0:69:e1:e2: ea:58:89:85:49:7a:fa:b2:97:50:71:3a:cd:47:79:ff:91:79: 98:cf:27:a0:a6:0d:dc:fc:3c:38:84:bf:52:ee:84:82:ea:63: 16:2c:a4:8c:65:ff:c6:99:fa:b7:c1:82:1e:df:03:85:c0:2c: cc:d8:a5:de:ad:95:0a:88:ef:ab:4c:72:fa:e7:c8:fc:f9:69: 59:83:5a:dc:2c:78:1f:b1:89:18:bd:55:07:be:ff:75:35:2d: 73:fc:ea:75 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+pKxigrEjxxluq2oHzQmWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhYTgxMjM3MmI4M2E1ZTBjOWZjYTE1YTU1MmJiNjM2Mzhh MzgyN2QwHhcNMjYwMTAyMTIxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OTcwNGJkMDg2M2M5YTY4Mjc0MGI1YjVjNDhlZjhiMzA3ZmE0YmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXNSeONmX8mJr/ckz16/GwGabRSp 2b4uWEUezxR6kz4B+/TS8j3iC/KTN9o9bGcKI5bBzjC0HQNWFutnYJwyFc+bbEYh 9Bsuesw9DC1TCPntkb+4o+f+cmjTsOLm5cfsWbuEogW6PaK1E/lKQWEv8SwHf/9S bv63AAdu/BVLIIY1aUpQmMtvqJcv9AiS/BatnwJaAJH4PoJ8ytjMd1lhwQegSo2T uHic61chm9pp7K1LTaRi+IJ2z9lB1UzxclaIHi1u46OQXEfHzG3guZWDqXUs/Toh gt7HAApiEFTu5LenLoJiYeBs6ISpsDoALW3rjN6Hr1aDPjr4B2sDXzetCQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFHlwS9CGPJpoJ0C1tcSO+LMH+kugMB8GA1UdIwQY MBaAFHqoEjcrg6XgyfyhWlUrtjY4o4J9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXFnU055dURwZURKX0tGYVZTdTJOamlqZ24wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9jZGJiNDktNTdjNS00NTRmLTliMDUt ZTY1MjkyMTU4ZjQzLzEvZVhCTDBJWThtbWduUUxXMXhJNzRzd2Y2UzZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9jZGJiNDktNTdjNS00NTRmLTliMDUtZTY1MjkyMTU4ZjQz LzEvZXFnU055dURwZURKX0tGYVZTdTJOamlqZ24wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDV+w4MA0E AgACMAcDBQAqA7MAMA0GCSqGSIb3DQEBCwUAA4IBAQADMKow54lY02MOtyjAy3X+ lMqYN3CNwO3km7qd67DgHyaBWusr/EJGS13f/dUEMWJUpNZA6Ea5Loq9R8fCmo4N yNfrXs2lBpGudrH9tcBmTrWN0+Zj202scup9WDB1FX5mqW9uV8WNYNcpgChdN85z Aqbk6SH4co32FADtFgi/nAhH0mtljhUKhwXyizGgiATyzq8dFUbUE72ndAv92LBp 4eLqWImFSXr6spdQcTrNR3n/kXmYzyegpg3c/Dw4hL9S7oSC6mMWLKSMZf/Gmfq3 wYIe3wOFwCzM2KXerZUKiO+rTHL658j8+WlZg1rcLHgfsYkYvVUHvv91NS1z/Op1 -----END CERTIFICATE-----Generated at Tue Feb 10 01:13:39 2026 by rpki-client