This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/sCKbGnkLwgEhS7pIIJjS0biYxrc.roa File: sCKbGnkLwgEhS7pIIJjS0biYxrc.roa (raw, json) Hash identifier: I2ey4PW/vo4FB5Fjc9jrXP4LPxpKbbEJ9En7gwlq4XQ= Subject key identifier: B0:22:9B:1A:79:0B:C2:01:21:4B:BA:48:20:98:D2:D1:B8:98:C6:B7 Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941 Certificate serial: 019B799AF7A31EA6E6B89A7B4ED6FB94D781 Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/sCKbGnkLwgEhS7pIIJjS0biYxrc.roa Signing time: Thu 01 Jan 2026 12:49:17 +0000 ROA not before: Thu 01 Jan 2026 12:49:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214025 IP address blocks: 85.237.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 19:27:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:9a:f7:a3:1e:a6:e6:b8:9a:7b:4e:d6:fb:94:d7:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941 Validity Not Before: Jan 1 12:49:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b0229b1a790bc201214bba482098d2d1b898c6b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:7a:57:92:f5:eb:ea:07:48:9f:f3:b6:47:5b: 5b:91:b7:2e:bc:d7:a2:32:16:d4:f3:e1:aa:26:0b: b2:b6:0b:9f:bd:b2:50:32:91:10:17:3c:aa:c1:dd: 1b:1a:9e:0c:fd:75:27:24:64:69:8c:d5:7f:15:c2: bf:51:c1:bf:09:c0:6f:07:00:24:ce:16:9e:56:7a: 95:6b:03:ca:b5:6f:c3:25:cc:27:cc:f2:c7:a4:4f: c2:93:da:d7:0b:ab:c0:c1:8c:9f:f9:09:fa:64:70: 94:bd:4b:c6:f8:75:98:2f:51:70:7f:c3:ff:2f:2c: 04:3b:ea:21:66:e4:95:61:13:61:dd:ac:da:0c:2d: b1:8e:f3:c5:b3:ab:87:97:06:cc:9b:01:a3:0d:8e: 5c:90:0b:2b:8b:88:4f:65:6e:48:5b:03:37:3f:df: 1f:66:70:0f:b4:32:4e:41:53:ec:38:95:60:df:97: 0b:88:12:77:5a:2e:fb:55:9b:c9:56:95:70:09:92: 3a:20:2e:53:61:dd:83:97:d0:66:a7:9f:a7:96:95: 9c:7b:fc:ec:f6:f0:6d:0a:0b:98:d9:78:eb:3e:55: 40:c8:bd:b5:0f:83:b9:32:1f:03:72:ad:08:a7:8f: 84:6b:a2:de:f3:06:20:a8:bd:72:52:d3:c1:67:0e: c8:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:22:9B:1A:79:0B:C2:01:21:4B:BA:48:20:98:D2:D1:B8:98:C6:B7 X509v3 Authority Key Identifier: keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/sCKbGnkLwgEhS7pIIJjS0biYxrc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.237.70.0/24 Signature Algorithm: sha256WithRSAEncryption 23:7b:40:d8:b4:07:d2:ba:f5:7a:bf:ce:fe:ea:34:81:71:6a: d5:6c:3a:43:38:99:58:27:00:a0:a1:1c:3a:c0:54:56:48:b7: ad:0b:54:47:c2:b9:9a:da:df:0c:43:de:4c:b0:a0:c5:41:bf: 40:c6:98:a0:7c:76:a6:4d:1f:75:d8:3a:47:38:a6:8b:6b:34: 11:0b:b1:4d:60:fe:68:82:e0:c5:0a:80:ed:91:1f:0b:da:f4: 95:e8:03:f8:1a:d1:d2:e5:2e:db:15:ee:35:f0:0f:c5:e0:d8: 63:d0:7e:6a:12:7f:86:e6:a1:bd:c2:ac:67:09:95:48:4d:7c: 4a:42:59:67:14:69:ee:a5:21:90:22:ec:9b:d0:c7:4e:c0:cb: ff:e2:29:1b:f8:f2:11:9e:50:bf:4b:32:11:2b:cc:f8:bf:c2: da:78:d6:aa:24:c1:4f:e3:a4:58:e6:59:14:41:97:f0:ed:7b: cc:83:d5:23:df:0f:fd:56:de:98:57:d5:a8:4a:98:cf:5a:1b: 07:af:f2:25:5e:c9:9c:f0:dd:54:0c:bc:46:4b:bb:fa:d5:48: 05:6d:1f:e5:54:68:7b:de:f7:25:2b:27:b8:dd:e0:96:33:66: 1a:e3:c7:94:4c:d4:c2:d2:ab:34:74:08:7d:7b:9a:07:05:a0: ac:36:e4:b4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5mvejHqbmuJp7Ttb7lNeBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NGJmODA3MGNlZTQzMDVkMWEzODllOTEwZmI1MTAyYmJj YzE5NDEwHhcNMjYwMTAxMTI0OTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDIyOWIxYTc5MGJjMjAxMjE0YmJhNDgyMDk4ZDJkMWI4OThjNmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3pXkvXr6gdIn/O2R1tbkbcuvNei MhbU8+GqJguytgufvbJQMpEQFzyqwd0bGp4M/XUnJGRpjNV/FcK/UcG/CcBvBwAk zhaeVnqVawPKtW/DJcwnzPLHpE/Ck9rXC6vAwYyf+Qn6ZHCUvUvG+HWYL1Fwf8P/ LywEO+ohZuSVYRNh3azaDC2xjvPFs6uHlwbMmwGjDY5ckAsri4hPZW5IWwM3P98f ZnAPtDJOQVPsOJVg35cLiBJ3Wi77VZvJVpVwCZI6IC5TYd2Dl9Bmp5+nlpWce/zs 9vBtCguY2XjrPlVAyL21D4O5Mh8Dcq0Ip4+Ea6Le8wYgqL1yUtPBZw7IfQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLAimxp5C8IBIUu6SCCY0tG4mMa3MB8GA1UdIwQY MBaAFIdL+AcM7kMF0aOJ6RD7UQK7zBlBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWIt NmZlNGQ4ZmVkMTYwLzEvc0NLYkdua0x3Z0VoUzdwSUlKalMwYmlZeHJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWItNmZlNGQ4ZmVkMTYw LzEvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVe1GMA0G CSqGSIb3DQEBCwUAA4IBAQAje0DYtAfSuvV6v87+6jSBcWrVbDpDOJlYJwCgoRw6 wFRWSLetC1RHwrma2t8MQ95MsKDFQb9AxpigfHamTR912DpHOKaLazQRC7FNYP5o guDFCoDtkR8L2vSV6AP4GtHS5S7bFe418A/F4Nhj0H5qEn+G5qG9wqxnCZVITXxK QllnFGnupSGQIuyb0MdOwMv/4ikb+PIRnlC/SzIRK8z4v8LaeNaqJMFP46RY5lkU QZfw7XvMg9Uj3w/9Vt6YV9WoSpjPWhsHr/IlXsmc8N1UDLxGS7v61UgFbR/lVGh7 3vclKye43eCWM2Ya48eUTNTC0qs0dAh9e5oHBaCsNuS0 -----END CERTIFICATE-----Generated at Mon Jan 19 05:23:00 2026 by rpki-client