This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/eCyziES9pqG-mQfeLtr0n6C5-NA.roa File: eCyziES9pqG-mQfeLtr0n6C5-NA.roa (raw, json) Hash identifier: l6vsyJV9WvrG97VV98IwTWvWh3E/Ue4n2AyaMsNRcxE= Subject key identifier: 78:2C:B3:88:44:BD:A6:A1:BE:99:07:DE:2E:DA:F4:9F:A0:B9:F8:D0 Certificate issuer: /CN=032d39ce91be867cf5ce1b6009d5262c28b65209 Certificate serial: 019B9388DCA0F4537F9888CBFA56F12B5C32 Authority key identifier: 03:2D:39:CE:91:BE:86:7C:F5:CE:1B:60:09:D5:26:2C:28:B6:52:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/eCyziES9pqG-mQfeLtr0n6C5-NA.roa Signing time: Tue 06 Jan 2026 13:39:38 +0000 ROA not before: Tue 06 Jan 2026 13:39:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204274 IP address blocks: 85.184.128.0/19 maxlen: 19 85.184.160.0/19 maxlen: 19 85.191.0.0/17 maxlen: 17 87.104.64.0/18 maxlen: 18 185.107.200.0/22 maxlen: 22 2a01:7dc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.mft rsync://rpki.ripe.net/repository/DEFAULT/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:93:88:dc:a0:f4:53:7f:98:88:cb:fa:56:f1:2b:5c:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=032d39ce91be867cf5ce1b6009d5262c28b65209 Validity Not Before: Jan 6 13:39:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=782cb38844bda6a1be9907de2edaf49fa0b9f8d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:26:5f:67:3c:43:86:76:ef:15:d7:21:13:db: fb:de:a8:e0:04:5b:1f:5d:dc:e2:6f:6c:9b:01:16: c9:17:4c:d7:98:55:61:38:2a:2b:6e:4a:f8:90:9a: ae:85:a9:74:77:86:55:46:d8:50:1c:f9:cd:f2:2e: dd:b0:00:66:60:37:b9:dc:03:2a:de:0e:8c:8e:77: 09:b1:13:77:73:02:26:8f:60:ed:7f:88:56:43:ae: 36:e0:e0:38:d5:92:ae:03:76:74:2f:4d:2b:e1:56: 95:8b:6a:68:23:89:f3:da:3a:63:02:85:4f:92:f4: a6:44:4a:9c:d3:87:d8:1d:7e:8d:c5:bb:74:c0:17: f4:47:79:85:4d:14:1c:ed:ec:5f:cc:cb:b9:a8:8e: 2c:91:d0:aa:99:6c:a3:54:36:11:e2:f8:6e:94:5c: 79:5e:38:3e:6d:52:c1:c4:b8:33:95:57:f3:76:25: 6b:f9:94:cc:ef:f9:98:31:b8:90:21:43:cc:b6:0f: e7:ae:4f:28:df:f2:16:bb:6d:db:e3:52:be:ec:9d: 05:3f:a3:1b:fe:b5:69:c5:73:1a:77:1b:5e:4c:06: 45:68:52:c5:27:89:46:b0:86:42:1b:9f:47:dc:d8: 87:59:04:c2:7a:0f:6f:32:b9:f3:63:7b:f0:43:ce: 43:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:2C:B3:88:44:BD:A6:A1:BE:99:07:DE:2E:DA:F4:9F:A0:B9:F8:D0 X509v3 Authority Key Identifier: keyid:03:2D:39:CE:91:BE:86:7C:F5:CE:1B:60:09:D5:26:2C:28:B6:52:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/eCyziES9pqG-mQfeLtr0n6C5-NA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.184.128.0/18 85.191.0.0/17 87.104.64.0/18 185.107.200.0/22 IPv6: 2a01:7dc0::/32 Signature Algorithm: sha256WithRSAEncryption a1:8d:a8:66:f7:fe:aa:8c:ec:5c:af:f8:e9:11:4a:90:60:6d: 80:9b:fc:f3:b8:d3:86:a6:fc:f5:a2:17:c6:46:88:b1:8f:47: 15:2a:e3:5e:70:6c:6a:d8:ad:90:01:35:05:4e:a5:f2:b1:73: 5a:8b:35:7e:a3:57:dc:f8:52:7e:4d:46:24:e1:01:c5:92:99: d5:8d:a3:cc:af:2a:52:bb:97:6c:91:12:59:13:88:33:ac:fc: 2d:d9:fc:14:12:0c:8b:01:01:1c:a8:11:16:79:43:43:f7:dc: ba:0f:3c:f0:ea:5b:df:63:17:b1:4f:05:2f:4b:bd:b2:ce:a9: af:c3:f7:7f:47:1d:db:5a:24:2f:e8:c4:fa:27:c1:1f:1f:e3: 76:dd:35:60:97:ab:6a:05:65:16:74:22:fa:29:26:82:60:a8: 45:c3:82:72:72:ec:7a:26:19:15:e9:6a:c0:69:ed:a6:a7:a3: cf:1b:f1:eb:e2:fd:b4:fb:34:c3:0d:7a:5c:41:c9:d7:a5:e3: d8:8c:96:72:09:bf:36:0d:58:1b:da:31:10:38:09:73:cb:5f: 87:48:f6:82:f7:a8:78:53:4f:17:ef:fa:bd:f7:a3:81:13:23: 2e:86:bc:6b:8e:70:32:b6:d8:be:a4:86:57:6a:89:0b:02:36: 12:2d:1b:74 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZuTiNyg9FN/mIjL+lbxK1wyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzMmQzOWNlOTFiZTg2N2NmNWNlMWI2MDA5ZDUyNjJjMjhi NjUyMDkwHhcNMjYwMTA2MTMzOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODJjYjM4ODQ0YmRhNmExYmU5OTA3ZGUyZWRhZjQ5ZmEwYjlmOGQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCZfZzxDhnbvFdchE9v73qjgBFsf Xdzib2ybARbJF0zXmFVhOCorbkr4kJquhal0d4ZVRthQHPnN8i7dsABmYDe53AMq 3g6MjncJsRN3cwImj2Dtf4hWQ6424OA41ZKuA3Z0L00r4VaVi2poI4nz2jpjAoVP kvSmREqc04fYHX6Nxbt0wBf0R3mFTRQc7exfzMu5qI4skdCqmWyjVDYR4vhulFx5 Xjg+bVLBxLgzlVfzdiVr+ZTM7/mYMbiQIUPMtg/nrk8o3/IWu23b41K+7J0FP6Mb /rVpxXMadxteTAZFaFLFJ4lGsIZCG59H3NiHWQTCeg9vMrnzY3vwQ85DEwIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFHgss4hEvaahvpkH3i7a9J+gufjQMB8GA1UdIwQY MBaAFAMtOc6RvoZ89c4bYAnVJiwotlIJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXkwNXpwRy1obnoxemh0Z0NkVW1MQ2kyVWdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9jYmU4ZTctNWE3OC00NTU4LTk5NTEt ODRhY2NlY2M1MWYwLzEvZUN5emlFUzlwcUctbVFmZUx0cjBuNkM1LU5BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9jYmU4ZTctNWE3OC00NTU4LTk5NTEtODRhY2NlY2M1MWYw LzEvQXkwNXpwRy1obnoxemh0Z0NkVW1MQ2kyVWdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQGVbiAAwQH Vb8AAwQGV2hAAwQCuWvIMA0EAgACMAcDBQAqAX3AMA0GCSqGSIb3DQEBCwUAA4IB AQChjahm9/6qjOxcr/jpEUqQYG2Am/zzuNOGpvz1ohfGRoixj0cVKuNecGxq2K2Q ATUFTqXysXNaizV+o1fc+FJ+TUYk4QHFkpnVjaPMrypSu5dskRJZE4gzrPwt2fwU EgyLAQEcqBEWeUND99y6Dzzw6lvfYxexTwUvS72yzqmvw/d/Rx3bWiQv6MT6J8Ef H+N23TVgl6tqBWUWdCL6KSaCYKhFw4Jycux6JhkV6WrAae2mp6PPG/Hr4v20+zTD DXpcQcnXpePYjJZyCb82DVgb2jEQOAlzy1+HSPaC96h4U08X7/q996OBEyMuhrxr jnAytti+pIZXaokLAjYSLRt0 -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:03 2026 by rpki-client