This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/e9146a-8ec9-4c31-ad9e-ad256643052b/1/ehhS-PlShngxUe_B1uzjREBHyds.roa File: ehhS-PlShngxUe_B1uzjREBHyds.roa (raw, json) Hash identifier: wXojw0rsAtH+WtMEf5EbeLc9pSbiMo3/LWAM/pzQOy0= Subject key identifier: 7A:18:52:F8:F9:52:86:78:31:51:EF:C1:D6:EC:E3:44:40:47:C9:DB Certificate issuer: /CN=b81b03e22875bb070b1b7c58eada2e4bb1aabe7f Certificate serial: 019B7D5C5B913CF09CFCF892471DF25DDCEB Authority key identifier: B8:1B:03:E2:28:75:BB:07:0B:1B:7C:58:EA:DA:2E:4B:B1:AA:BE:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uBsD4ih1uwcLG3xY6touS7Gqvn8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/e9146a-8ec9-4c31-ad9e-ad256643052b/1/ehhS-PlShngxUe_B1uzjREBHyds.roa Signing time: Fri 02 Jan 2026 06:19:23 +0000 ROA not before: Fri 02 Jan 2026 06:19:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202377 IP address blocks: 185.255.140.0/22 maxlen: 22 185.255.140.0/24 maxlen: 24 185.255.141.0/24 maxlen: 24 185.255.142.0/23 maxlen: 23 2a0c:6540::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/e9146a-8ec9-4c31-ad9e-ad256643052b/1/uBsD4ih1uwcLG3xY6touS7Gqvn8.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/e9146a-8ec9-4c31-ad9e-ad256643052b/1/uBsD4ih1uwcLG3xY6touS7Gqvn8.mft rsync://rpki.ripe.net/repository/DEFAULT/uBsD4ih1uwcLG3xY6touS7Gqvn8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:5b:91:3c:f0:9c:fc:f8:92:47:1d:f2:5d:dc:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b81b03e22875bb070b1b7c58eada2e4bb1aabe7f Validity Not Before: Jan 2 06:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a1852f8f95286783151efc1d6ece3444047c9db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:3c:33:19:d8:94:45:4d:50:5e:c5:ac:32:da: ba:21:ea:a1:78:ae:b0:dc:1a:b9:f1:67:53:81:08: c8:29:05:b1:c2:13:d1:29:6d:59:88:8a:cc:d7:1b: a7:7e:e4:87:a4:7e:19:c1:54:3d:26:dc:f7:0d:51: ca:2c:e0:50:bd:53:f9:fc:28:ae:93:8a:ae:aa:98: ff:2b:00:b8:a6:1e:92:93:7f:24:5b:dd:dc:05:9b: f4:31:a9:13:5f:2e:9f:50:64:cd:bc:7e:fc:10:6c: b1:01:ef:70:43:4b:fa:aa:cd:81:7c:8c:bc:f1:27: 13:9e:fd:58:4c:55:02:ab:6c:66:b2:e0:f5:02:a7: f4:87:86:bd:d3:ce:b1:c3:8a:17:74:96:8c:59:e7: 93:fd:df:b0:47:6e:54:3a:b9:c9:56:ad:48:0a:b8: 53:13:d0:87:9c:74:c2:9f:8a:37:ce:7e:2a:23:1d: 48:24:fe:66:c1:e2:5b:84:ea:d9:30:18:74:69:a0: 7f:e3:51:8d:52:29:df:e6:0b:5e:4d:14:bb:c8:ac: 66:85:78:75:42:42:71:76:21:92:db:da:b6:30:03: 6e:35:48:a8:fe:1f:1b:dc:19:42:e2:31:04:88:5a: 8f:0a:03:61:da:89:a9:04:93:05:0c:ca:39:db:44: 52:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:18:52:F8:F9:52:86:78:31:51:EF:C1:D6:EC:E3:44:40:47:C9:DB X509v3 Authority Key Identifier: keyid:B8:1B:03:E2:28:75:BB:07:0B:1B:7C:58:EA:DA:2E:4B:B1:AA:BE:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBsD4ih1uwcLG3xY6touS7Gqvn8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e9146a-8ec9-4c31-ad9e-ad256643052b/1/ehhS-PlShngxUe_B1uzjREBHyds.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e9146a-8ec9-4c31-ad9e-ad256643052b/1/uBsD4ih1uwcLG3xY6touS7Gqvn8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.255.140.0/22 IPv6: 2a0c:6540::/32 Signature Algorithm: sha256WithRSAEncryption 94:98:aa:94:9e:29:41:a3:b8:3a:20:d9:4f:e8:5d:48:69:32: 88:42:4b:8d:ba:a6:1f:37:41:eb:bd:02:2d:9d:b5:15:d0:80: d4:d7:73:63:86:bd:74:05:d2:53:00:47:02:1b:27:4a:00:80: d8:a3:46:84:7a:f0:53:16:4f:63:bb:cd:a8:06:da:7b:d1:23: 82:33:01:b0:ea:66:da:e3:cc:33:32:70:c2:1c:9b:46:4c:83: 02:8e:3b:8e:46:6a:b3:a6:27:0e:50:c6:ea:dd:60:ee:da:6a: 16:82:95:5b:56:e9:51:8d:3f:b1:46:82:39:27:b5:70:53:d8: b3:69:18:74:d9:53:e4:f4:8d:30:3c:0a:78:7b:5b:32:de:07: 4f:15:20:2b:05:b8:d6:3d:53:57:d8:9c:24:ec:cb:87:33:96: 09:de:3c:c9:9b:ec:05:2a:af:d2:12:ee:a1:12:7a:de:aa:6b: d2:c2:52:2f:bf:78:91:1f:05:da:92:4d:e6:61:f0:9c:ac:55: 99:37:e0:6d:28:0a:24:b8:93:78:05:14:b0:2f:cb:09:13:5e: 24:22:68:4d:aa:78:25:74:6e:0f:03:ac:7a:11:73:f7:9f:ab: 32:f4:f8:a3:56:db:11:9a:54:8f:80:38:ce:36:4e:8d:4e:cf: 2f:db:7d:0a -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9XFuRPPCc/PiSRx3yXdzrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MWIwM2UyMjg3NWJiMDcwYjFiN2M1OGVhZGEyZTRiYjFh YWJlN2YwHhcNMjYwMTAyMDYxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTE4NTJmOGY5NTI4Njc4MzE1MWVmYzFkNmVjZTM0NDQwNDdjOWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DwzGdiURU1QXsWsMtq6IeqheK6w 3Bq58WdTgQjIKQWxwhPRKW1ZiIrM1xunfuSHpH4ZwVQ9Jtz3DVHKLOBQvVP5/Ciu k4quqpj/KwC4ph6Sk38kW93cBZv0MakTXy6fUGTNvH78EGyxAe9wQ0v6qs2BfIy8 8ScTnv1YTFUCq2xmsuD1Aqf0h4a9086xw4oXdJaMWeeT/d+wR25UOrnJVq1ICrhT E9CHnHTCn4o3zn4qIx1IJP5mweJbhOrZMBh0aaB/41GNUinf5gteTRS7yKxmhXh1 QkJxdiGS29q2MANuNUio/h8b3BlC4jEEiFqPCgNh2ompBJMFDMo520RS3wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFHoYUvj5UoZ4MVHvwdbs40RAR8nbMB8GA1UdIwQY MBaAFLgbA+IodbsHCxt8WOraLkuxqr5/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUJzRDRpaDF1d2NMRzN4WTZ0b3VTN0dxdm44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9lOTE0NmEtOGVjOS00YzMxLWFkOWUt YWQyNTY2NDMwNTJiLzEvZWhoUy1QbFNobmd4VWVfQjF1empSRUJIeWRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9lOTE0NmEtOGVjOS00YzMxLWFkOWUtYWQyNTY2NDMwNTJi LzEvdUJzRDRpaDF1d2NMRzN4WTZ0b3VTN0dxdm44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuf+MMA0E AgACMAcDBQAqDGVAMA0GCSqGSIb3DQEBCwUAA4IBAQCUmKqUnilBo7g6INlP6F1I aTKIQkuNuqYfN0HrvQItnbUV0IDU13Njhr10BdJTAEcCGydKAIDYo0aEevBTFk9j u82oBtp70SOCMwGw6mba48wzMnDCHJtGTIMCjjuORmqzpicOUMbq3WDu2moWgpVb VulRjT+xRoI5J7VwU9izaRh02VPk9I0wPAp4e1sy3gdPFSArBbjWPVNX2Jwk7MuH M5YJ3jzJm+wFKq/SEu6hEnreqmvSwlIvv3iRHwXakk3mYfCcrFWZN+BtKAokuJN4 BRSwL8sJE14kImhNqngldG4PA6x6EXP3n6sy9PijVtsRmlSPgDjONk6NTs8v230K -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:35 2026 by rpki-client