This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/jUElcf1JFP10uCVqAsvtMStO4o0.roa File: jUElcf1JFP10uCVqAsvtMStO4o0.roa (raw, json) Hash identifier: xrxSdpsBwKaZISPc2IK2Gw1lDuUsBX/PpqeA4Z3a8cs= Subject key identifier: 8D:41:25:71:FD:49:14:FD:74:B8:25:6A:02:CB:ED:31:2B:4E:E2:8D Certificate issuer: /CN=d9fc0bec60d0bace1889677bd9bb90190cc4fd22 Certificate serial: 019B7F8357601CB0DF589102B00398CD4959 Authority key identifier: D9:FC:0B:EC:60:D0:BA:CE:18:89:67:7B:D9:BB:90:19:0C:C4:FD:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/jUElcf1JFP10uCVqAsvtMStO4o0.roa Signing time: Fri 02 Jan 2026 16:21:12 +0000 ROA not before: Fri 02 Jan 2026 16:21:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58326 IP address blocks: 91.106.208.0/21 maxlen: 24 185.66.160.0/22 maxlen: 24 185.177.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:57:60:1c:b0:df:58:91:02:b0:03:98:cd:49:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9fc0bec60d0bace1889677bd9bb90190cc4fd22 Validity Not Before: Jan 2 16:21:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8d412571fd4914fd74b8256a02cbed312b4ee28d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e5:4a:8b:a9:23:9a:82:76:7a:38:8b:9f:fd: 20:2b:98:84:51:5f:b0:17:99:04:f2:13:6d:50:ef: 7f:7b:88:d4:24:4f:98:f0:a2:51:c1:03:aa:29:60: 91:b5:f6:e6:7a:4e:3e:5d:2e:75:4d:23:db:1c:50: 47:5e:50:b0:e0:ab:5f:41:3f:7c:83:5c:c9:9c:60: 4d:5f:75:73:7d:0d:69:25:c0:e5:b1:5a:5e:54:86: 25:19:19:4a:86:b7:24:ae:d5:14:f4:58:49:63:42: f3:92:f9:c1:a6:78:d0:8e:61:c8:70:46:ab:e1:d7: cf:50:b1:7e:81:4c:d2:2d:b8:ad:f9:34:c9:58:9b: 99:e2:21:69:d6:64:2b:50:83:a5:a0:e4:93:fc:90: 81:a8:cc:f9:8d:63:c4:e6:72:c4:9f:09:16:d7:c3: 9d:f0:48:72:75:4e:35:8d:87:78:09:16:7c:e5:ba: 2b:cc:37:b2:45:20:ae:99:41:08:43:51:4d:05:b9: c9:37:64:eb:9b:a3:59:c7:f5:6a:33:cb:60:af:78: 81:5b:9d:91:54:1b:98:4e:b2:e9:6d:ce:8f:a3:9a: 74:68:82:40:b3:97:5c:4e:c4:c0:52:1b:2b:29:7a: fc:46:aa:5e:a7:d6:53:38:8d:9e:70:73:1a:e6:66: 4f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:41:25:71:FD:49:14:FD:74:B8:25:6A:02:CB:ED:31:2B:4E:E2:8D X509v3 Authority Key Identifier: keyid:D9:FC:0B:EC:60:D0:BA:CE:18:89:67:7B:D9:BB:90:19:0C:C4:FD:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/jUElcf1JFP10uCVqAsvtMStO4o0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.106.208.0/21 185.66.160.0/22 185.177.88.0/22 Signature Algorithm: sha256WithRSAEncryption 11:a0:0f:a3:39:bd:57:5b:fe:48:6c:39:6d:93:73:5c:4d:72: 6d:8b:b5:6b:2e:9d:56:15:78:ad:a1:ec:ae:66:22:9d:35:3e: 4a:47:ee:75:eb:6a:16:7e:f5:57:e5:e1:c4:e8:0d:8f:e1:55: 9a:12:35:f2:0f:f3:4e:a7:a4:a8:59:06:2e:69:0c:3a:c7:a8: a0:c6:7e:15:bf:e2:43:e5:8d:66:fe:2f:e8:60:c1:46:fe:0d: 2d:a3:db:e6:2c:26:95:25:0f:2f:09:34:52:46:57:dd:71:9f: 27:3e:db:f5:7f:2d:b1:80:2b:8c:44:bb:41:bf:9a:41:9e:5f: cd:51:77:de:61:15:dd:b5:0a:67:ee:74:46:66:26:de:77:b4: 43:a6:ae:49:2f:1a:a2:66:8d:c4:a1:9c:6a:55:aa:12:1e:b3: ec:25:17:8b:0d:42:58:fe:c2:e6:12:eb:3e:51:7a:e7:bd:3f: 24:7f:f3:6b:55:95:a5:b0:1b:c3:1f:93:bc:3a:b8:68:5b:d4: 85:c0:57:6f:37:e8:dc:f9:6e:91:97:0f:53:34:8e:00:c8:28: 82:bc:59:e9:ca:30:92:71:3f:4b:29:46:24:8e:73:bd:53:7b: af:63:3d:5c:7a:1e:a7:8e:33:72:fb:da:e1:15:09:7f:f7:0b: 00:d5:c3:f6 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/g1dgHLDfWJECsAOYzUlZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5ZmMwYmVjNjBkMGJhY2UxODg5Njc3YmQ5YmI5MDE5MGNj NGZkMjIwHhcNMjYwMTAyMTYyMTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZDQxMjU3MWZkNDkxNGZkNzRiODI1NmEwMmNiZWQzMTJiNGVlMjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1eVKi6kjmoJ2ejiLn/0gK5iEUV+w F5kE8hNtUO9/e4jUJE+Y8KJRwQOqKWCRtfbmek4+XS51TSPbHFBHXlCw4KtfQT98 g1zJnGBNX3VzfQ1pJcDlsVpeVIYlGRlKhrckrtUU9FhJY0LzkvnBpnjQjmHIcEar 4dfPULF+gUzSLbit+TTJWJuZ4iFp1mQrUIOloOST/JCBqMz5jWPE5nLEnwkW18Od 8EhydU41jYd4CRZ85borzDeyRSCumUEIQ1FNBbnJN2Trm6NZx/VqM8tgr3iBW52R VBuYTrLpbc6Po5p0aIJAs5dcTsTAUhsrKXr8Rqpep9ZTOI2ecHMa5mZPDwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFI1BJXH9SRT9dLglagLL7TErTuKNMB8GA1UdIwQY MBaAFNn8C+xg0LrOGIlne9m7kBkMxP0iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmZ3TDdHRFF1czRZaVdkNzJidVFHUXpFX1NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9iMGQ2ZTYtMmVkNy00OTI4LWFkNjkt MzQ2OTAzNGZhNDQxLzEvalVFbGNmMUpGUDEwdUNWcUFzdnRNU3RPNG8wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9iMGQ2ZTYtMmVkNy00OTI4LWFkNjktMzQ2OTAzNGZhNDQx LzEvMmZ3TDdHRFF1czRZaVdkNzJidVFHUXpFX1NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDW2rQAwQC uUKgAwQCubFYMA0GCSqGSIb3DQEBCwUAA4IBAQARoA+jOb1XW/5IbDltk3NcTXJt i7VrLp1WFXitoeyuZiKdNT5KR+5162oWfvVX5eHE6A2P4VWaEjXyD/NOp6SoWQYu aQw6x6igxn4Vv+JD5Y1m/i/oYMFG/g0to9vmLCaVJQ8vCTRSRlfdcZ8nPtv1fy2x gCuMRLtBv5pBnl/NUXfeYRXdtQpn7nRGZibed7RDpq5JLxqiZo3EoZxqVaoSHrPs JReLDUJY/sLmEus+UXrnvT8kf/NrVZWlsBvDH5O8OrhoW9SFwFdvN+jc+W6Rlw9T NI4AyCiCvFnpyjCScT9LKUYkjnO9U3uvYz1ceh6njjNy+9rhFQl/9wsA1cP2 -----END CERTIFICATE-----Generated at Sat Jan 10 22:32:29 2026 by rpki-client