This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/64rrEASv-BoNZyRK9yZ16W29oTQ.roa File: 64rrEASv-BoNZyRK9yZ16W29oTQ.roa (raw, json) Hash identifier: w8eD21Xmt1XkyLoIbHqWreG+9516iIJY6+/unbkEvgA= Subject key identifier: EB:8A:EB:10:04:AF:F8:1A:0D:67:24:4A:F7:26:75:E9:6D:BD:A1:34 Certificate issuer: /CN=a3513d288dabde7dee069bdb636573ce9c3ecb60 Certificate serial: 019B7BA46197327E8DF086F7F5E4151540C1 Authority key identifier: A3:51:3D:28:8D:AB:DE:7D:EE:06:9B:DB:63:65:73:CE:9C:3E:CB:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/64rrEASv-BoNZyRK9yZ16W29oTQ.roa Signing time: Thu 01 Jan 2026 22:18:48 +0000 ROA not before: Thu 01 Jan 2026 22:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397423 IP address blocks: 88.214.59.0/24 maxlen: 24 185.249.196.0/24 maxlen: 24 194.156.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 10:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:61:97:32:7e:8d:f0:86:f7:f5:e4:15:15:40:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3513d288dabde7dee069bdb636573ce9c3ecb60 Validity Not Before: Jan 1 22:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eb8aeb1004aff81a0d67244af72675e96dbda134 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:1e:5b:c8:c7:61:a5:08:83:a2:11:7a:8b:cf: d8:86:9f:66:fe:50:3a:f5:51:70:80:32:a9:de:33: 52:43:ba:85:a9:d6:a4:68:6d:21:36:77:cc:e6:c1: 1e:e1:0b:42:f1:ef:db:2c:fa:c6:95:bb:5c:85:50: fd:93:14:c3:0f:b4:53:51:7e:bb:02:bb:49:09:f0: 24:a8:b4:d8:d7:a4:05:da:7d:07:b9:74:3c:7f:49: 24:6f:56:d5:31:a5:31:78:1e:30:45:90:d6:84:88: ef:32:f5:53:b0:06:cb:6e:cf:ed:97:13:d7:83:89: 24:ad:b8:50:09:65:2c:65:a9:d2:bd:ad:75:30:19: 2c:ea:93:71:63:ff:8e:c2:4d:75:a0:16:cf:2e:63: 70:8b:09:5c:e4:04:21:e9:ca:01:bf:c8:94:09:e0: 41:e2:7e:13:d0:16:a0:6e:e0:40:f6:22:4c:f6:16: 0d:94:be:3d:4e:d8:bc:fe:69:57:74:0c:3b:4b:a9: da:fe:71:9f:a0:42:df:07:1a:c5:2a:39:1e:91:70: 95:9d:c6:2c:56:72:ef:22:ae:1e:26:dd:0f:59:d7: 4b:ec:5a:81:8a:20:4f:57:06:12:0b:cd:be:aa:a5: 35:0f:17:72:4c:22:04:0c:09:4c:eb:7c:7a:67:04: f2:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:8A:EB:10:04:AF:F8:1A:0D:67:24:4A:F7:26:75:E9:6D:BD:A1:34 X509v3 Authority Key Identifier: keyid:A3:51:3D:28:8D:AB:DE:7D:EE:06:9B:DB:63:65:73:CE:9C:3E:CB:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/64rrEASv-BoNZyRK9yZ16W29oTQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.214.59.0/24 185.249.196.0/24 194.156.89.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:e0:59:39:ff:e5:ad:6c:d3:e6:ed:07:7e:8f:59:b7:70:aa: 1f:58:24:e5:c1:d0:99:bb:f9:cd:f9:01:5c:49:79:f5:5b:d1: d3:ad:5f:df:9f:e3:2e:a8:fd:12:5e:b0:5d:70:27:37:b0:0a: a9:1f:94:a4:ee:a7:67:72:c8:40:20:a2:9d:be:56:d5:4f:e0: 77:a5:3e:74:25:06:26:44:9d:02:fb:e3:48:24:ff:c3:ca:d3: d8:26:d1:87:a0:63:13:9c:94:49:b0:ce:91:e4:bd:f8:13:2c: 6f:8c:1a:f7:83:34:d7:1a:b5:db:8f:ac:fc:a1:9a:58:8b:d9: 4f:48:d6:89:3a:59:c5:89:b5:d0:6f:ec:84:a6:38:b3:2b:cd: 07:7c:16:1b:b1:e3:1a:0c:c7:a2:3c:0f:0e:a9:12:23:56:2a: 5c:f1:8d:a5:a1:2f:55:f8:dd:d1:f9:a3:32:56:1f:b3:4a:d1: f1:d0:3f:f9:ff:82:96:92:65:6d:21:8b:45:7f:23:3b:5f:62: da:94:d9:41:43:fd:d4:91:5f:b0:40:20:fd:5b:4a:61:90:64: 1e:6e:a6:41:b4:cc:bd:83:ff:be:af:fc:8a:79:0b:21:d0:69: af:fd:73:db:ee:8f:25:9e:90:59:06:2f:99:b0:93:b7:19:f7: 5f:27:cb:5b -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7pGGXMn6N8Ib39eQVFUDBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNTEzZDI4OGRhYmRlN2RlZTA2OWJkYjYzNjU3M2NlOWMz ZWNiNjAwHhcNMjYwMTAxMjIxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYjhhZWIxMDA0YWZmODFhMGQ2NzI0NGFmNzI2NzVlOTZkYmRhMTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7x5byMdhpQiDohF6i8/Yhp9m/lA6 9VFwgDKp3jNSQ7qFqdakaG0hNnfM5sEe4QtC8e/bLPrGlbtchVD9kxTDD7RTUX67 ArtJCfAkqLTY16QF2n0HuXQ8f0kkb1bVMaUxeB4wRZDWhIjvMvVTsAbLbs/tlxPX g4kkrbhQCWUsZanSva11MBks6pNxY/+Owk11oBbPLmNwiwlc5AQh6coBv8iUCeBB 4n4T0BagbuBA9iJM9hYNlL49Tti8/mlXdAw7S6na/nGfoELfBxrFKjkekXCVncYs VnLvIq4eJt0PWddL7FqBiiBPVwYSC82+qqU1DxdyTCIEDAlM63x6ZwTyjwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFOuK6xAEr/gaDWckSvcmdeltvaE0MB8GA1UdIwQY MBaAFKNRPSiNq9597gab22Nlc86cPstgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzFFOUtJMnIzbjN1QnB2YlkyVnp6cHcteTJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS83OTIxMTMtZTEzYy00M2VlLTg0ZDct ZTBkN2RkNWUyZTZmLzEvNjRyckVBU3YtQm9OWnlSSzl5WjE2VzI5b1RRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS83OTIxMTMtZTEzYy00M2VlLTg0ZDctZTBkN2RkNWUyZTZm LzEvbzFFOUtJMnIzbjN1QnB2YlkyVnp6cHcteTJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAWNY7AwQA ufnEAwQAwpxZMA0GCSqGSIb3DQEBCwUAA4IBAQCb4Fk5/+WtbNPm7Qd+j1m3cKof WCTlwdCZu/nN+QFcSXn1W9HTrV/fn+MuqP0SXrBdcCc3sAqpH5Sk7qdncshAIKKd vlbVT+B3pT50JQYmRJ0C++NIJP/DytPYJtGHoGMTnJRJsM6R5L34EyxvjBr3gzTX GrXbj6z8oZpYi9lPSNaJOlnFibXQb+yEpjizK80HfBYbseMaDMeiPA8OqRIjVipc 8Y2loS9V+N3R+aMyVh+zStHx0D/5/4KWkmVtIYtFfyM7X2LalNlBQ/3UkV+wQCD9 W0phkGQebqZBtMy9g/++r/yKeQsh0Gmv/XPb7o8lnpBZBi+ZsJO3GfdfJ8tb -----END CERTIFICATE-----Generated at Fri Jan 9 17:59:16 2026 by rpki-client