This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/nLprKdrMRzPeJXL9QJaCu2iaWQA.roa File: nLprKdrMRzPeJXL9QJaCu2iaWQA.roa (raw, json) Hash identifier: yHFQtY87SyBjc63nzUiLzWjw5L0xfoofMzuerU2tuZ0= Subject key identifier: 9C:BA:6B:29:DA:CC:47:33:DE:25:72:FD:40:96:82:BB:68:9A:59:00 Certificate issuer: /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb Certificate serial: 019B797F0CA326A2209694A56BF79C6F08B7 Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/nLprKdrMRzPeJXL9QJaCu2iaWQA.roa Signing time: Thu 01 Jan 2026 12:18:48 +0000 ROA not before: Thu 01 Jan 2026 12:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8070 IP address blocks: 51.54.0.0/15 maxlen: 15 62.10.0.0/15 maxlen: 15 194.41.16.0/24 maxlen: 24 194.41.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 13:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:0c:a3:26:a2:20:96:94:a5:6b:f7:9c:6f:08:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb Validity Not Before: Jan 1 12:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9cba6b29dacc4733de2572fd409682bb689a5900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8f:c9:7a:8a:0b:5e:4a:e4:2c:42:c0:ee:8f: 48:9f:7d:af:f1:36:0e:90:6f:8c:90:6f:b1:7f:af: f1:24:b9:c2:b5:0b:a5:b2:0d:8a:5b:49:93:f5:fe: 2c:5e:05:96:ec:56:4d:66:f8:4a:2f:7a:fa:03:31: 28:fe:76:a4:00:75:03:7c:aa:e4:04:be:4e:66:41: 66:35:51:6a:c8:01:de:5d:0a:32:a6:07:85:83:7e: 18:e3:34:39:f0:2d:62:ad:f7:df:17:05:66:42:5a: 1c:31:8b:a3:20:f9:ff:0c:a9:bd:e6:b5:a5:00:d5: 35:92:f9:96:2b:b7:7c:e9:0f:1d:a7:cb:bc:0f:54: dd:53:e5:4d:bf:04:67:20:6c:f9:8b:91:5c:b6:6d: 2d:b7:9d:6b:5a:09:fb:f2:69:0e:3a:a9:e8:48:b2: e6:b9:58:0e:94:ca:a8:ae:9b:95:25:02:6c:a5:98: 67:e3:4c:9c:ea:58:90:78:54:7a:da:e9:31:69:04: 9d:14:2f:0b:ec:22:66:c7:b1:0e:b4:44:80:34:fe: d7:9f:f9:be:04:2e:f4:13:c3:1f:46:50:ab:6a:5c: 69:64:56:42:da:0b:8f:a2:e5:8e:8e:fa:43:02:e5: d5:d1:29:33:41:55:8e:92:8c:b4:25:85:27:ab:c2: 26:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:BA:6B:29:DA:CC:47:33:DE:25:72:FD:40:96:82:BB:68:9A:59:00 X509v3 Authority Key Identifier: keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/nLprKdrMRzPeJXL9QJaCu2iaWQA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 51.54.0.0/15 62.10.0.0/15 194.41.16.0/23 Signature Algorithm: sha256WithRSAEncryption 25:b8:39:5b:70:f4:e7:b8:33:7a:85:e6:31:5b:75:40:65:7e: 6f:29:10:3c:89:c4:99:b4:fe:03:f6:44:ad:a1:d1:8a:3d:02: e5:f5:80:5f:28:99:ab:e0:98:5a:12:d6:98:c6:46:e1:cc:f5: ad:47:8f:46:7a:4b:cf:ac:68:ea:e1:6d:f1:12:20:7c:76:12: e8:08:fd:ff:c1:a2:98:2c:10:94:b5:a5:03:70:27:04:7b:4b: 9c:69:44:10:24:bc:5a:92:8c:08:be:d9:fe:17:08:46:9d:a6: 61:ec:6d:dc:24:a6:58:d3:4a:e0:e5:5c:cb:8f:c9:b1:9e:b9: ee:6e:e1:dd:5f:88:62:56:30:d0:3c:9e:5b:96:fa:90:2b:9b: 15:97:c9:f5:c1:67:75:4f:04:00:ee:84:5b:6f:34:d8:48:10: 7a:c9:5b:5d:85:5b:26:63:18:cc:35:ad:74:2c:bb:b0:d6:ff: ec:28:b0:ab:3d:e0:bb:d2:29:a1:b5:17:82:a2:23:5d:04:d9: 30:cc:60:76:60:d7:b9:ca:47:fd:09:ac:df:fb:0c:52:3b:1c: 52:f3:70:50:cf:70:46:5e:ce:3a:af:69:54:16:c1:d9:de:ae: cc:3e:bb:15:38:dc:f9:ec:9f:18:29:2c:f1:0d:ce:d9:ee:0c: 50:1e:e7:13 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgISAZt5fwyjJqIglpSla/ecbwi3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjZTY4ZGFmNWYwODk0NTZjMGUxZDAyMjQ1MzkzNTMxYWM1 YjhmY2IwHhcNMjYwMTAxMTIxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Y2JhNmIyOWRhY2M0NzMzZGUyNTcyZmQ0MDk2ODJiYjY4OWE1OTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxo/JeooLXkrkLELA7o9In32v8TYO kG+MkG+xf6/xJLnCtQulsg2KW0mT9f4sXgWW7FZNZvhKL3r6AzEo/nakAHUDfKrk BL5OZkFmNVFqyAHeXQoypgeFg34Y4zQ58C1irfffFwVmQlocMYujIPn/DKm95rWl ANU1kvmWK7d86Q8dp8u8D1TdU+VNvwRnIGz5i5Fctm0tt51rWgn78mkOOqnoSLLm uVgOlMqorpuVJQJspZhn40yc6liQeFR62ukxaQSdFC8L7CJmx7EOtESANP7Xn/m+ BC70E8MfRlCralxpZFZC2guPouWOjvpDAuXV0SkzQVWOkoy0JYUnq8Im1wIDAQAB o4ICEzCCAg8wHQYDVR0OBBYEFJy6aynazEcz3iVy/UCWgrtomlkAMB8GA1UdIwQY MBaAFHzmja9fCJRWwOHQIkU5NTGsW4/LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZk9hTnIxOElsRmJBNGRBaVJUazFNYXhiajhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lYzBiODktMWU2OC00NWEwLThiOTMt MTNhMDZhMjY5YWE4LzEvbkxwcktkck1SelBlSlhMOVFKYUN1MmlhV1FBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9lYzBiODktMWU2OC00NWEwLThiOTMtMTNhMDZhMjY5YWE4 LzEvZk9hTnIxOElsRmJBNGRBaVJUazFNYXhiajhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAATAQAwMBMzYDAwE+ CgMEAcIpEDANBgkqhkiG9w0BAQsFAAOCAQEAJbg5W3D057gzeoXmMVt1QGV+bykQ PInEmbT+A/ZEraHRij0C5fWAXyiZq+CYWhLWmMZG4cz1rUePRnpLz6xo6uFt8RIg fHYS6Aj9/8GimCwQlLWlA3AnBHtLnGlEECS8WpKMCL7Z/hcIRp2mYext3CSmWNNK 4OVcy4/JsZ657m7h3V+IYlYw0DyeW5b6kCubFZfJ9cFndU8EAO6EW2802EgQeslb XYVbJmMYzDWtdCy7sNb/7Ciwqz3gu9IpobUXgqIjXQTZMMxgdmDXucpH/Qms3/sM UjscUvNwUM9wRl7OOq9pVBbB2d6uzD67FTjc+eyfGCks8Q3O2e4MUB7nEw== -----END CERTIFICATE-----Generated at Sun Jan 18 17:56:53 2026 by rpki-client