This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/a3JMeBjtG8p-K8DB-gMejb1J5gI.roa File: a3JMeBjtG8p-K8DB-gMejb1J5gI.roa (raw, json) Hash identifier: /hvaDpNLcY8jqI3PSI+KI1FyULWGiSrZDc4FkjdXsPM= Subject key identifier: 6B:72:4C:78:18:ED:1B:CA:7E:2B:C0:C1:FA:03:1E:8D:BD:49:E6:02 Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941 Certificate serial: 019B78A2E95F9E2C9B65819D034006CDB15D Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/a3JMeBjtG8p-K8DB-gMejb1J5gI.roa Signing time: Thu 01 Jan 2026 08:18:21 +0000 ROA not before: Thu 01 Jan 2026 08:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25369 IP address blocks: 85.237.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:e9:5f:9e:2c:9b:65:81:9d:03:40:06:cd:b1:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941 Validity Not Before: Jan 1 08:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b724c7818ed1bca7e2bc0c1fa031e8dbd49e602 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:b1:a2:6c:8a:8e:ce:5c:da:bf:f1:e4:bb:0b: f2:e9:15:12:e6:bc:83:9e:18:fc:4b:40:d2:e1:cd: ec:e8:f8:7a:ae:16:39:b6:ce:b3:01:28:6a:22:5d: ed:04:4a:33:7b:00:ff:41:e8:41:01:5b:6b:0a:08: 64:17:3b:90:60:66:15:ec:a5:22:f3:60:24:12:2d: eb:07:77:46:85:e0:03:c2:d7:3f:42:42:52:03:ba: 2d:8d:c0:44:74:31:c5:29:a8:0e:15:c6:01:47:f8: c7:5a:95:d6:06:ea:eb:84:4f:7f:a3:18:a5:72:5c: 83:ce:f0:7f:bc:93:7b:2a:47:3b:a4:1c:68:4d:6f: 6b:22:e8:13:08:2c:31:7c:75:02:76:03:e9:9a:f9: c8:27:6b:85:d9:80:6f:40:18:00:23:a4:e9:62:ad: 37:46:c8:bf:6a:ce:69:a1:e4:50:5b:c6:7a:bd:e8: a1:50:22:69:6f:43:79:38:52:a5:a5:99:24:ae:0b: a6:6d:68:5a:b9:30:e3:a4:f1:35:f4:74:50:2e:ed: be:62:3a:7b:35:7e:e0:8f:e4:7a:70:9c:af:38:65: fc:58:8b:78:f1:4d:1f:15:66:c2:b6:32:7e:6e:f1: e7:9c:36:b1:ad:b1:5e:23:88:d1:e8:99:3b:a4:16: 9f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:72:4C:78:18:ED:1B:CA:7E:2B:C0:C1:FA:03:1E:8D:BD:49:E6:02 X509v3 Authority Key Identifier: keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/a3JMeBjtG8p-K8DB-gMejb1J5gI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.237.68.0/24 Signature Algorithm: sha256WithRSAEncryption 91:c6:9a:62:1a:7a:37:13:aa:46:77:24:b0:51:09:3c:62:d3: 83:42:f8:d0:f8:39:92:48:11:15:70:0f:d9:30:a6:cb:41:68: 68:6d:35:81:42:67:7b:07:fb:0a:20:6c:56:b1:84:c1:e4:d2: 7b:44:4b:f1:b7:4b:cf:3e:94:6b:ca:6c:3b:52:80:02:e0:d2: 1b:90:eb:b2:77:03:98:ee:3d:2e:01:47:cc:aa:90:93:bb:e2: ab:be:d0:69:0b:d3:30:8c:9d:26:ce:07:55:5c:80:a2:49:86: 2c:3f:60:70:d9:ca:e2:c3:35:47:be:22:87:f0:03:72:55:b3: 85:e9:dd:2f:ab:87:09:b3:42:4b:d4:16:d2:65:60:32:3c:67: f9:d9:7f:09:b1:d9:ce:df:d9:dd:a3:93:f2:38:ff:5c:20:b2: 2f:34:3c:9a:10:aa:08:ee:d6:e7:a2:aa:ea:08:80:4a:49:e3: f5:a1:52:81:91:da:71:2b:9b:24:27:51:97:2f:38:d0:1d:12: 17:1a:3c:bc:6c:33:ab:87:e1:ea:92:94:77:7b:2b:16:42:3f: 2a:75:7b:98:fb:af:cd:b5:d0:20:d5:38:7a:3f:18:d6:03:4b: e1:f4:81:03:b4:17:48:5c:11:a7:ec:40:f9:bc:ac:d1:b2:8a: 06:0d:c2:3f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oulfniybZYGdA0AGzbFdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NGJmODA3MGNlZTQzMDVkMWEzODllOTEwZmI1MTAyYmJj YzE5NDEwHhcNMjYwMTAxMDgxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjcyNGM3ODE4ZWQxYmNhN2UyYmMwYzFmYTAzMWU4ZGJkNDllNjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4LGibIqOzlzav/Hkuwvy6RUS5ryD nhj8S0DS4c3s6Ph6rhY5ts6zAShqIl3tBEozewD/QehBAVtrCghkFzuQYGYV7KUi 82AkEi3rB3dGheADwtc/QkJSA7otjcBEdDHFKagOFcYBR/jHWpXWBurrhE9/oxil clyDzvB/vJN7Kkc7pBxoTW9rIugTCCwxfHUCdgPpmvnIJ2uF2YBvQBgAI6TpYq03 Rsi/as5poeRQW8Z6veihUCJpb0N5OFKlpZkkrgumbWhauTDjpPE19HRQLu2+Yjp7 NX7gj+R6cJyvOGX8WIt48U0fFWbCtjJ+bvHnnDaxrbFeI4jR6Jk7pBafFwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGtyTHgY7RvKfivAwfoDHo29SeYCMB8GA1UdIwQY MBaAFIdL+AcM7kMF0aOJ6RD7UQK7zBlBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWIt NmZlNGQ4ZmVkMTYwLzEvYTNKTWVCanRHOHAtSzhEQi1nTWVqYjFKNWdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWItNmZlNGQ4ZmVkMTYw LzEvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVe1EMA0G CSqGSIb3DQEBCwUAA4IBAQCRxppiGno3E6pGdySwUQk8YtODQvjQ+DmSSBEVcA/Z MKbLQWhobTWBQmd7B/sKIGxWsYTB5NJ7REvxt0vPPpRrymw7UoAC4NIbkOuydwOY 7j0uAUfMqpCTu+KrvtBpC9MwjJ0mzgdVXICiSYYsP2Bw2criwzVHviKH8ANyVbOF 6d0vq4cJs0JL1BbSZWAyPGf52X8JsdnO39ndo5PyOP9cILIvNDyaEKoI7tbnoqrq CIBKSeP1oVKBkdpxK5skJ1GXLzjQHRIXGjy8bDOrh+HqkpR3eysWQj8qdXuY+6/N tdAg1Th6PxjWA0vh9IEDtBdIXBGn7ED5vKzRsooGDcI/ -----END CERTIFICATE-----Generated at Mon Jan 19 17:05:12 2026 by rpki-client