This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/eWXuhLZOzQSkVnakv6XDZbQm47k.roa File: eWXuhLZOzQSkVnakv6XDZbQm47k.roa (raw, json) Hash identifier: 7jNn7zEJAzsZccVFp+ntzTl1B+U5CsfTk+0fguXEWaY= Subject key identifier: 79:65:EE:84:B6:4E:CD:04:A4:56:76:A4:BF:A5:C3:65:B4:26:E3:B9 Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f Certificate serial: 019B7A5A9F48033F00FE49CB209FDB21790D Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/eWXuhLZOzQSkVnakv6XDZbQm47k.roa Signing time: Thu 01 Jan 2026 16:18:37 +0000 ROA not before: Thu 01 Jan 2026 16:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 32097 IP address blocks: 83.147.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 11:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:9f:48:03:3f:00:fe:49:cb:20:9f:db:21:79:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f Validity Not Before: Jan 1 16:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7965ee84b64ecd04a45676a4bfa5c365b426e3b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ff:8d:fb:df:c4:0c:17:76:f5:52:e7:04:33: 3c:61:77:74:0f:13:e5:75:4d:2f:dd:46:64:94:fe: 74:38:de:c5:ba:ee:da:2a:d8:4c:e8:fd:c9:70:b9: fa:3d:3f:8c:d8:71:c4:24:d0:c1:f5:a1:26:02:14: 8e:ee:21:6a:83:e7:0f:de:34:bd:db:88:35:13:42: 7b:01:c5:e7:28:6f:ac:1a:47:90:fe:9b:6a:02:11: 7a:c5:00:77:4a:be:e1:34:f5:ee:82:86:91:54:bc: 59:0f:95:ad:c0:42:6b:c1:41:16:ef:7d:6f:95:19: 55:8c:96:2d:08:12:00:27:b2:4a:54:07:19:3a:41: bb:48:36:c0:ad:2d:3c:dd:e7:a7:00:f4:59:29:82: 21:fa:1c:e6:5d:87:e8:17:6a:02:9d:fa:4b:8d:e3: 8c:28:22:ad:a8:3b:5b:39:a4:b3:2f:01:03:8f:f7: 6d:b1:ee:f8:be:5e:7b:d7:e4:47:91:7e:f1:31:7e: da:e4:eb:ff:c5:b9:d6:ae:5d:60:0b:ab:a6:cd:da: 7a:c2:38:6b:d1:58:87:be:a0:e1:96:a7:7c:ad:99: 56:36:93:35:a5:c9:2a:8c:4c:5e:99:01:9b:07:23: 0f:bb:97:fb:4e:e3:ef:5c:2c:f5:51:4c:d4:fc:79: 26:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:65:EE:84:B6:4E:CD:04:A4:56:76:A4:BF:A5:C3:65:B4:26:E3:B9 X509v3 Authority Key Identifier: keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/eWXuhLZOzQSkVnakv6XDZbQm47k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.147.36.0/22 Signature Algorithm: sha256WithRSAEncryption 71:9f:c5:f4:00:41:6b:7e:3d:90:fe:d5:43:89:15:fd:4d:e6: 11:c5:14:05:92:d9:e5:b9:80:1a:2c:bf:95:53:3f:1a:62:d0: 9b:9f:cb:15:1e:c6:44:5d:0f:47:2f:9e:99:d8:ec:09:f1:57: e8:da:c4:30:7c:d2:da:75:89:c0:77:9a:0f:cb:62:33:81:2b: 74:49:95:f0:4b:a5:c1:06:cd:52:e9:08:09:00:c8:13:69:f1: fe:52:1c:24:bd:a7:f8:b0:56:20:d4:8a:22:d7:cc:32:71:b7: 9d:93:01:d6:38:d4:03:1d:b7:e1:f3:41:1b:78:70:e8:c1:eb: 64:73:41:cd:9e:f7:d2:13:fd:cd:1e:a1:83:6a:b5:90:97:13: a2:25:45:9d:33:c3:7e:be:0c:a9:04:51:c3:53:4a:e9:f2:86: cd:98:c1:f8:a2:d6:da:5b:b8:e1:e7:de:ee:c5:34:6c:3a:94: 92:b0:d9:de:c2:66:02:94:77:a2:a3:fe:53:e7:5c:12:f3:f9: 80:ab:5c:c4:61:a8:fa:d4:d2:07:2e:11:df:0a:05:17:8e:74: a8:45:05:17:ab:18:86:eb:1e:aa:f5:40:f2:ed:ae:7a:26:9d: 31:c9:8c:65:65:00:50:97:51:59:af:a2:47:cd:92:ba:56:60: 06:d5:a6:77 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wp9IAz8A/knLIJ/bIXkNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxOTNmZmU5ZGIzNzYyNmIxM2Y4NWQ3Y2M0NTdhYWQ1YzFm MzBjOWYwHhcNMjYwMTAxMTYxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OTY1ZWU4NGI2NGVjZDA0YTQ1Njc2YTRiZmE1YzM2NWI0MjZlM2I5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmP+N+9/EDBd29VLnBDM8YXd0DxPl dU0v3UZklP50ON7Fuu7aKthM6P3JcLn6PT+M2HHEJNDB9aEmAhSO7iFqg+cP3jS9 24g1E0J7AcXnKG+sGkeQ/ptqAhF6xQB3Sr7hNPXugoaRVLxZD5WtwEJrwUEW731v lRlVjJYtCBIAJ7JKVAcZOkG7SDbArS083eenAPRZKYIh+hzmXYfoF2oCnfpLjeOM KCKtqDtbOaSzLwEDj/dtse74vl571+RHkX7xMX7a5Ov/xbnWrl1gC6umzdp6wjhr 0ViHvqDhlqd8rZlWNpM1pckqjExemQGbByMPu5f7TuPvXCz1UUzU/HkmLwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHll7oS2Ts0EpFZ2pL+lw2W0JuO5MB8GA1UdIwQY MBaAFIGT/+nbN2JrE/hdfMRXqtXB8wyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODkt MDhkMTI3MGMyZTcxLzEvZVdYdWhMWk96UVNrVm5ha3Y2WERaYlFtNDdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODktMDhkMTI3MGMyZTcx LzEvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCU5MkMA0G CSqGSIb3DQEBCwUAA4IBAQBxn8X0AEFrfj2Q/tVDiRX9TeYRxRQFktnluYAaLL+V Uz8aYtCbn8sVHsZEXQ9HL56Z2OwJ8Vfo2sQwfNLadYnAd5oPy2IzgSt0SZXwS6XB Bs1S6QgJAMgTafH+Uhwkvaf4sFYg1Ioi18wycbedkwHWONQDHbfh80EbeHDowetk c0HNnvfSE/3NHqGDarWQlxOiJUWdM8N+vgypBFHDU0rp8obNmMH4otbaW7jh597u xTRsOpSSsNnewmYClHeio/5T51wS8/mAq1zEYaj61NIHLhHfCgUXjnSoRQUXqxiG 6x6q9UDy7a56Jp0xyYxlZQBQl1FZr6JHzZK6VmAG1aZ3 -----END CERTIFICATE-----Generated at Wed Jan 21 18:21:47 2026 by rpki-client