This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/j575I3ZxuQSG6sUJanicuzsQ9ME.roa File: j575I3ZxuQSG6sUJanicuzsQ9ME.roa (raw, json) Hash identifier: MRXhloo4whFrLVxEGl5ycNzkpjmehaI6LH7jWYZpYC4= Subject key identifier: 8F:9E:F9:23:76:71:B9:04:86:EA:C5:09:6A:78:9C:BB:3B:10:F4:C1 Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941 Certificate serial: 019B78A2EAC81891EBF5FBFE455AFFE4BE4E Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/j575I3ZxuQSG6sUJanicuzsQ9ME.roa Signing time: Thu 01 Jan 2026 08:18:21 +0000 ROA not before: Thu 01 Jan 2026 08:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35053 IP address blocks: 85.237.64.0/22 maxlen: 22 85.237.69.0/24 maxlen: 24 85.237.84.0/22 maxlen: 22 85.237.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 23:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:ea:c8:18:91:eb:f5:fb:fe:45:5a:ff:e4:be:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941 Validity Not Before: Jan 1 08:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8f9ef9237671b90486eac5096a789cbb3b10f4c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b1:af:32:ea:d6:f2:99:52:59:d9:63:3c:d7: e7:03:59:48:20:d3:29:f1:29:19:9e:de:12:0c:80: 8a:1d:2f:9c:9c:f5:06:9a:9c:05:b4:57:f2:ee:54: b6:be:a2:6a:04:1d:19:94:21:e2:ad:44:fb:2d:d5: 2f:2d:3e:6d:17:68:ac:e5:3b:8f:0a:cb:e4:3c:49: fa:2d:e9:31:83:ee:51:77:0e:66:92:01:51:0d:31: db:5f:0d:00:82:26:4e:3f:2c:ff:02:85:16:cb:71: d7:84:f7:3e:cf:d1:5b:de:40:c0:c2:c2:8f:a0:ec: a5:a2:e7:4f:3c:e1:f1:f5:55:bf:01:2a:87:2e:dc: 93:13:13:28:9f:be:e2:a7:89:d8:bd:78:89:76:98: 3f:90:64:5a:14:c4:b0:87:8d:11:c3:45:58:cc:36: c9:ca:c0:0e:02:96:b4:7e:9d:bb:b0:67:9a:f0:06: d7:4c:dc:47:c8:08:10:d7:05:5d:d5:4a:90:12:c7: 9a:30:58:90:ff:ba:5e:46:c4:49:58:f5:14:66:f1: 4f:10:54:36:12:63:b7:7f:da:c1:fc:b3:a5:88:86: 2e:4c:50:5e:0d:b2:6a:6f:69:60:4d:06:fc:cf:1e: 59:1b:73:de:6f:38:ef:5d:04:9d:56:9c:38:7d:ba: 2f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:9E:F9:23:76:71:B9:04:86:EA:C5:09:6A:78:9C:BB:3B:10:F4:C1 X509v3 Authority Key Identifier: keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/j575I3ZxuQSG6sUJanicuzsQ9ME.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.237.64.0/22 85.237.69.0/24 85.237.84.0-85.237.88.255 Signature Algorithm: sha256WithRSAEncryption 92:d8:75:6e:1d:e4:22:21:69:11:d8:a4:6a:26:c0:a7:95:e3: be:a0:ae:c4:bc:f7:42:50:68:fe:a0:78:2e:6c:ac:fe:21:59: c0:d5:93:a3:8d:74:f0:46:13:d6:b2:5e:50:b0:00:92:10:78: a7:db:67:0f:35:a0:23:50:df:e2:81:32:16:3e:3c:fb:ed:a1: 6c:96:37:bd:dc:8b:6d:9a:b2:96:86:1a:e8:d2:19:b8:32:6a: 4e:4d:6e:b7:59:d6:b8:30:00:2f:a4:05:9d:7c:81:34:49:8d: e6:04:cb:a7:5d:40:f4:3d:3c:da:4e:47:70:a6:33:0b:b7:91: fc:30:7d:f8:08:4e:e0:51:f6:3e:8b:5f:db:c0:22:cc:a1:8b: b5:b8:ca:38:53:a9:8c:79:60:20:2c:77:72:b7:0f:31:6a:d1: 92:9e:21:6a:10:0b:5d:10:6b:f1:5c:04:a7:91:45:cb:7b:c3: 9c:91:0d:18:51:4a:1a:f3:2d:43:92:0c:33:7d:0d:4e:b4:53: a1:de:66:f8:56:36:b6:d7:bb:9d:77:d6:6f:03:94:99:4c:62: 78:5a:ae:00:a4:c3:ee:7a:70:e4:5e:33:7c:cd:00:0d:97:5d: 35:9a:07:5d:68:65:75:2f:dd:f0:79:e9:b6:82:e8:19:36:15: 11:84:56:d2 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt4ourIGJHr9fv+RVr/5L5OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NGJmODA3MGNlZTQzMDVkMWEzODllOTEwZmI1MTAyYmJj YzE5NDEwHhcNMjYwMTAxMDgxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZjllZjkyMzc2NzFiOTA0ODZlYWM1MDk2YTc4OWNiYjNiMTBmNGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLGvMurW8plSWdljPNfnA1lIINMp 8SkZnt4SDICKHS+cnPUGmpwFtFfy7lS2vqJqBB0ZlCHirUT7LdUvLT5tF2is5TuP CsvkPEn6Lekxg+5Rdw5mkgFRDTHbXw0AgiZOPyz/AoUWy3HXhPc+z9Fb3kDAwsKP oOyloudPPOHx9VW/ASqHLtyTExMon77ip4nYvXiJdpg/kGRaFMSwh40Rw0VYzDbJ ysAOApa0fp27sGea8AbXTNxHyAgQ1wVd1UqQEseaMFiQ/7peRsRJWPUUZvFPEFQ2 EmO3f9rB/LOliIYuTFBeDbJqb2lgTQb8zx5ZG3PebzjvXQSdVpw4fbovpwIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFI+e+SN2cbkEhurFCWp4nLs7EPTBMB8GA1UdIwQY MBaAFIdL+AcM7kMF0aOJ6RD7UQK7zBlBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWIt NmZlNGQ4ZmVkMTYwLzEvajU3NUkzWnh1UVNHNnNVSmFuaWN1enNROU1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWItNmZlNGQ4ZmVkMTYw LzEvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQCVe1AAwQA Ve1FMAwDBAJV7VQDBABV7VgwDQYJKoZIhvcNAQELBQADggEBAJLYdW4d5CIhaRHY pGomwKeV476grsS890JQaP6geC5srP4hWcDVk6ONdPBGE9ayXlCwAJIQeKfbZw81 oCNQ3+KBMhY+PPvtoWyWN73ci22aspaGGujSGbgyak5NbrdZ1rgwAC+kBZ18gTRJ jeYEy6ddQPQ9PNpOR3CmMwu3kfwwffgITuBR9j6LX9vAIsyhi7W4yjhTqYx5YCAs d3K3DzFq0ZKeIWoQC10Qa/FcBKeRRct7w5yRDRhRShrzLUOSDDN9DU60U6HeZvhW NrbXu5131m8DlJlMYnhargCkw+56cOReM3zNAA2XXTWaB11oZXUv3fB56baC6Bk2 FRGEVtI= -----END CERTIFICATE-----Generated at Wed Jan 21 04:21:59 2026 by rpki-client