This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/eBQAo97kQ0n6BaHMVm2dZjDP8oE.roa File: eBQAo97kQ0n6BaHMVm2dZjDP8oE.roa (raw, json) Hash identifier: X4ZPh/wvO5yQsB9S3hDFndSj+7xXzQCq3S+mViqwfL8= Subject key identifier: 78:14:00:A3:DE:E4:43:49:FA:05:A1:CC:56:6D:9D:66:30:CF:F2:81 Certificate issuer: /CN=614b70ff9c22ffe0b77f43f41c08074de6f36e1b Certificate serial: 019B7D5BA60AD4698B9167B6C151F0832BEB Authority key identifier: 61:4B:70:FF:9C:22:FF:E0:B7:7F:43:F4:1C:08:07:4D:E6:F3:6E:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUtw_5wi_-C3f0P0HAgHTebzbhs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/eBQAo97kQ0n6BaHMVm2dZjDP8oE.roa Signing time: Fri 02 Jan 2026 06:18:36 +0000 ROA not before: Fri 02 Jan 2026 06:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57280 IP address blocks: 195.10.196.0/24 maxlen: 24 2a03:5580::/30 maxlen: 30 2a03:5584::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.mft rsync://rpki.ripe.net/repository/DEFAULT/YUtw_5wi_-C3f0P0HAgHTebzbhs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:a6:0a:d4:69:8b:91:67:b6:c1:51:f0:83:2b:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614b70ff9c22ffe0b77f43f41c08074de6f36e1b Validity Not Before: Jan 2 06:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=781400a3dee44349fa05a1cc566d9d6630cff281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:8e:fc:11:e8:66:c7:f7:75:2d:05:59:49:23: aa:61:bb:fa:70:eb:24:ec:a2:6d:d0:ca:04:a9:a8: 18:47:47:ea:24:72:51:df:09:f4:d4:ef:0c:5f:24: 29:2c:48:6c:a2:f4:fa:ae:ca:16:c3:9a:4f:36:27: 9d:4c:40:9e:da:2d:ec:0b:da:ac:3a:9c:04:db:af: 51:53:74:af:ff:b0:54:0c:12:e4:85:7b:9f:ab:bf: 5e:b6:1b:44:38:8f:12:8d:f9:ad:7d:30:90:48:57: da:53:56:eb:15:e1:a8:62:91:f9:73:a2:ec:54:fa: 53:02:88:87:63:c0:ff:80:4d:72:0f:23:73:c0:ae: e1:35:5f:bc:13:1f:2a:1d:4b:a2:bc:fe:49:ee:6d: 71:83:94:8f:66:31:47:e8:9c:8e:2f:be:cc:c9:3d: 45:4d:b9:78:bb:02:d1:6e:7d:53:7c:41:77:f8:eb: 48:17:de:6c:5c:a1:a4:8a:76:1f:29:34:27:5a:bb: 45:18:98:a2:04:1c:0b:e8:2f:2b:1c:a9:27:b9:8c: 23:46:53:fc:1d:80:6c:e5:b6:dd:05:d9:e3:f3:17: 7f:a1:34:3d:11:32:c6:ef:6b:b8:1a:a1:df:03:80: ba:37:3b:9b:78:97:5f:02:1c:90:5f:2a:6a:6b:cc: a7:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:14:00:A3:DE:E4:43:49:FA:05:A1:CC:56:6D:9D:66:30:CF:F2:81 X509v3 Authority Key Identifier: keyid:61:4B:70:FF:9C:22:FF:E0:B7:7F:43:F4:1C:08:07:4D:E6:F3:6E:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUtw_5wi_-C3f0P0HAgHTebzbhs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/eBQAo97kQ0n6BaHMVm2dZjDP8oE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/971f17-0bf8-4ba1-b768-55fec1252ab0/1/YUtw_5wi_-C3f0P0HAgHTebzbhs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.10.196.0/24 IPv6: 2a03:5580::/29 Signature Algorithm: sha256WithRSAEncryption 7a:b6:37:97:f7:1c:9a:47:26:b2:8d:48:9d:2c:f5:8f:6e:25: 7e:12:59:dd:21:aa:72:c9:97:62:a0:85:b7:d8:f8:a6:4b:f2: 27:96:bf:fc:e6:8b:95:67:74:37:02:38:fe:2c:95:77:ee:98: 13:71:74:ca:bb:9d:db:ae:6d:37:94:8f:65:52:c1:33:42:6c: 75:18:14:4b:37:33:c7:ae:80:de:41:9a:e9:2e:b3:be:e0:28: 7a:b2:32:2f:e5:a5:fb:5e:b2:a7:63:b3:e3:4c:2a:34:a5:37: 9e:b2:d6:1a:e6:b9:85:9f:34:52:f8:49:ff:9a:64:12:e4:1b: 53:98:e5:be:1f:52:21:ea:01:37:b3:fa:bb:78:9f:11:bb:0e: 2c:49:3c:a7:bf:d3:12:44:0e:e3:41:1f:28:af:87:80:33:c3: 92:13:b3:f7:91:ff:8f:03:0c:f1:19:f1:7e:64:85:8e:01:de: 57:a7:b0:72:e0:f8:37:ef:c0:6a:49:1c:28:36:90:cf:ca:dc: 79:8f:c3:6c:79:22:90:09:0b:90:c0:37:8b:4f:f9:23:2d:7b: 66:5d:2e:dc:34:6d:8e:9e:8b:54:24:97:94:c1:6f:54:84:56: 6a:f7:e3:65:f0:d2:9d:5d:71:af:0d:ea:e9:35:40:f4:74:4c: 17:70:be:23 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9W6YK1GmLkWe2wVHwgyvrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxNGI3MGZmOWMyMmZmZTBiNzdmNDNmNDFjMDgwNzRkZTZm MzZlMWIwHhcNMjYwMTAyMDYxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODE0MDBhM2RlZTQ0MzQ5ZmEwNWExY2M1NjZkOWQ2NjMwY2ZmMjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoY78Eehmx/d1LQVZSSOqYbv6cOsk 7KJt0MoEqagYR0fqJHJR3wn01O8MXyQpLEhsovT6rsoWw5pPNiedTECe2i3sC9qs OpwE269RU3Sv/7BUDBLkhXufq79ethtEOI8SjfmtfTCQSFfaU1brFeGoYpH5c6Ls VPpTAoiHY8D/gE1yDyNzwK7hNV+8Ex8qHUuivP5J7m1xg5SPZjFH6JyOL77MyT1F Tbl4uwLRbn1TfEF3+OtIF95sXKGkinYfKTQnWrtFGJiiBBwL6C8rHKknuYwjRlP8 HYBs5bbdBdnj8xd/oTQ9ETLG72u4GqHfA4C6NzubeJdfAhyQXypqa8ynSwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFHgUAKPe5ENJ+gWhzFZtnWYwz/KBMB8GA1UdIwQY MBaAFGFLcP+cIv/gt39D9BwIB03m824bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVV0d181d2lfLUMzZjBQMEhBZ0hUZWJ6YmhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi85NzFmMTctMGJmOC00YmExLWI3Njgt NTVmZWMxMjUyYWIwLzEvZUJRQW85N2tRMG42QmFITVZtMmRaakRQOG9FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi85NzFmMTctMGJmOC00YmExLWI3NjgtNTVmZWMxMjUyYWIw LzEvWVV0d181d2lfLUMzZjBQMEhBZ0hUZWJ6YmhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwwrEMA0E AgACMAcDBQMqA1WAMA0GCSqGSIb3DQEBCwUAA4IBAQB6tjeX9xyaRyayjUidLPWP biV+ElndIapyyZdioIW32PimS/Inlr/85ouVZ3Q3Ajj+LJV37pgTcXTKu53brm03 lI9lUsEzQmx1GBRLNzPHroDeQZrpLrO+4Ch6sjIv5aX7XrKnY7PjTCo0pTeestYa 5rmFnzRS+En/mmQS5BtTmOW+H1Ih6gE3s/q7eJ8Ruw4sSTynv9MSRA7jQR8or4eA M8OSE7P3kf+PAwzxGfF+ZIWOAd5Xp7By4Pg378BqSRwoNpDPytx5j8NseSKQCQuQ wDeLT/kjLXtmXS7cNG2OnotUJJeUwW9UhFZq9+Nl8NKdXXGvDerpNUD0dEwXcL4j -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:54 2026 by rpki-client