This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/CYt9Nv9dBKT9g5TLwV4c4DEZGU0.roa File: CYt9Nv9dBKT9g5TLwV4c4DEZGU0.roa (raw, json) Hash identifier: rA9XhkKgyB7cXpzG2udSGKxNb3vtZoJSLVB744tVVnU= Subject key identifier: 09:8B:7D:36:FF:5D:04:A4:FD:83:94:CB:C1:5E:1C:E0:31:19:19:4D Certificate issuer: /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb Certificate serial: 019B797F0B3B3CFD6FBCE7A6407BE0F91C79 Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/CYt9Nv9dBKT9g5TLwV4c4DEZGU0.roa Signing time: Thu 01 Jan 2026 12:18:47 +0000 ROA not before: Thu 01 Jan 2026 12:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6584 IP address blocks: 194.69.96.0/19 maxlen: 19 194.69.96.0/22 maxlen: 24 194.69.100.0/22 maxlen: 22 194.69.126.0/23 maxlen: 24 2a01:110::/32 maxlen: 32 2a01:110:8008::/48 maxlen: 48 2a01:110:8012::/48 maxlen: 48 2a01:110:e050::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 13:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:0b:3b:3c:fd:6f:bc:e7:a6:40:7b:e0:f9:1c:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb Validity Not Before: Jan 1 12:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=098b7d36ff5d04a4fd8394cbc15e1ce03119194d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:73:b0:22:60:1a:23:d5:02:39:51:aa:5d:a1: 5e:3f:31:98:1c:77:f0:28:a6:1a:8b:e1:31:11:d4: 8b:f0:6f:cf:45:5a:6e:9b:e2:c4:fc:06:e6:74:e2: b6:52:1d:7e:75:5d:d0:74:1c:18:61:db:32:82:29: 7d:63:a9:1c:d5:fc:9b:82:08:56:46:90:67:d5:f2: 12:96:6c:e8:6c:e1:78:7d:0c:55:32:a2:d8:4b:db: 92:4c:58:29:b2:49:68:c1:fd:25:a5:be:11:2b:0b: 61:d9:9c:17:9a:8f:9d:eb:17:6e:ea:ba:bb:6a:5d: 03:32:e6:23:1b:3f:a5:c9:db:11:57:3a:d5:07:89: a5:c6:e7:e2:f0:dc:17:4a:b0:7e:16:5a:f7:7c:4c: 71:ce:18:61:af:ae:aa:f3:27:3f:cb:85:b4:f2:e1: 8f:0b:8d:63:99:70:80:24:e8:c1:4c:b9:10:7e:8a: 40:35:75:b8:00:89:28:78:51:78:8e:4f:0a:d5:7d: f9:2c:41:e5:0f:15:91:4c:54:b6:82:d7:74:2d:0f: 04:51:2a:33:99:e9:8c:02:f1:28:2a:0d:e4:24:0b: 81:84:c1:71:04:a7:83:1d:8b:23:0b:18:3a:9b:fc: 37:44:87:89:6e:ff:db:00:50:4e:06:b1:c0:cc:d2: 0a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:8B:7D:36:FF:5D:04:A4:FD:83:94:CB:C1:5E:1C:E0:31:19:19:4D X509v3 Authority Key Identifier: keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/CYt9Nv9dBKT9g5TLwV4c4DEZGU0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.69.96.0/19 IPv6: 2a01:110::/32 Signature Algorithm: sha256WithRSAEncryption 97:d7:36:fb:25:ae:86:1a:37:87:7c:d1:84:61:7a:8d:0d:36: d5:ca:92:18:54:d6:0f:d5:e5:90:d0:cc:5c:fa:cf:ce:57:67: 41:c9:7a:f3:58:30:36:c2:1b:50:f2:c3:2f:f7:f2:9f:74:db: 7a:19:4d:27:91:65:f4:de:b9:9e:6e:97:ef:cd:2c:41:a6:ba: cf:fb:94:97:70:ba:09:ca:2e:25:ee:28:e0:13:5f:88:64:21: 46:25:af:e4:b3:f1:f2:53:b6:a9:85:75:a6:4e:69:07:dc:d3: 13:c8:ae:ff:63:cf:c6:b6:45:2d:8f:4d:f2:13:93:4f:df:40: 59:3b:31:5b:56:02:69:5b:29:5c:59:7e:89:37:68:52:92:3a: 9e:36:50:c2:0d:08:3d:7a:88:7c:65:a1:68:f9:ef:b0:47:3b: e6:57:bf:dd:d3:4c:cc:f7:50:f9:f9:34:0e:46:af:d2:65:ec: 93:ec:e7:14:63:1d:9a:86:28:27:17:4c:ae:d4:26:16:a0:78: eb:b2:29:6e:20:7b:2e:a3:2c:e2:be:4b:f4:27:03:ef:61:ac: ac:74:d7:d2:2c:4d:ac:ac:b4:99:a6:83:13:e5:f0:cf:27:b7: af:ba:ae:c4:e5:01:2f:68:49:3b:a4:2c:a9:d3:2c:f5:24:6a: 4b:99:7e:b1 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5fws7PP1vvOemQHvg+Rx5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjZTY4ZGFmNWYwODk0NTZjMGUxZDAyMjQ1MzkzNTMxYWM1 YjhmY2IwHhcNMjYwMTAxMTIxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOThiN2QzNmZmNWQwNGE0ZmQ4Mzk0Y2JjMTVlMWNlMDMxMTkxOTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXOwImAaI9UCOVGqXaFePzGYHHfw KKYai+ExEdSL8G/PRVpum+LE/AbmdOK2Uh1+dV3QdBwYYdsygil9Y6kc1fybgghW RpBn1fISlmzobOF4fQxVMqLYS9uSTFgpsklowf0lpb4RKwth2ZwXmo+d6xdu6rq7 al0DMuYjGz+lydsRVzrVB4mlxufi8NwXSrB+Flr3fExxzhhhr66q8yc/y4W08uGP C41jmXCAJOjBTLkQfopANXW4AIkoeFF4jk8K1X35LEHlDxWRTFS2gtd0LQ8EUSoz memMAvEoKg3kJAuBhMFxBKeDHYsjCxg6m/w3RIeJbv/bAFBOBrHAzNIKUwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFAmLfTb/XQSk/YOUy8FeHOAxGRlNMB8GA1UdIwQY MBaAFHzmja9fCJRWwOHQIkU5NTGsW4/LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZk9hTnIxOElsRmJBNGRBaVJUazFNYXhiajhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lYzBiODktMWU2OC00NWEwLThiOTMt MTNhMDZhMjY5YWE4LzEvQ1l0OU52OWRCS1Q5ZzVUTHdWNGM0REVaR1UwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9lYzBiODktMWU2OC00NWEwLThiOTMtMTNhMDZhMjY5YWE4 LzEvZk9hTnIxOElsRmJBNGRBaVJUazFNYXhiajhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQFwkVgMA0E AgACMAcDBQAqAQEQMA0GCSqGSIb3DQEBCwUAA4IBAQCX1zb7Ja6GGjeHfNGEYXqN DTbVypIYVNYP1eWQ0Mxc+s/OV2dByXrzWDA2whtQ8sMv9/KfdNt6GU0nkWX03rme bpfvzSxBprrP+5SXcLoJyi4l7ijgE1+IZCFGJa/ks/HyU7aphXWmTmkH3NMTyK7/ Y8/GtkUtj03yE5NP30BZOzFbVgJpWylcWX6JN2hSkjqeNlDCDQg9eoh8ZaFo+e+w RzvmV7/d00zM91D5+TQORq/SZeyT7OcUYx2ahignF0yu1CYWoHjrsiluIHsuoyzi vkv0JwPvYaysdNfSLE2srLSZpoMT5fDPJ7evuq7E5QEvaEk7pCyp0yz1JGpLmX6x -----END CERTIFICATE-----Generated at Sun Jan 18 17:53:39 2026 by rpki-client