This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/ehFRVj_TXPwQ0rPF1XZNBg0Qd-I.roa File: ehFRVj_TXPwQ0rPF1XZNBg0Qd-I.roa (raw, json) Hash identifier: rTBvSqvCO1yVewsD3TnK3oF62RT8jXzzKUsjw4v3zO4= Subject key identifier: 7A:11:51:56:3F:D3:5C:FC:10:D2:B3:C5:D5:76:4D:06:0D:10:77:E2 Certificate issuer: /CN=d4c0d694d59d7d36ba421a3050f4ec7dd3781efd Certificate serial: 019B7E38B316174E4E6AB6695238C3F6C6EA Authority key identifier: D4:C0:D6:94:D5:9D:7D:36:BA:42:1A:30:50:F4:EC:7D:D3:78:1E:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1MDWlNWdfTa6QhowUPTsfdN4Hv0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/ehFRVj_TXPwQ0rPF1XZNBg0Qd-I.roa Signing time: Fri 02 Jan 2026 10:20:03 +0000 ROA not before: Fri 02 Jan 2026 10:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39121 IP address blocks: 193.105.126.0/24 maxlen: 24 195.66.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.mft rsync://rpki.ripe.net/repository/DEFAULT/1MDWlNWdfTa6QhowUPTsfdN4Hv0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:b3:16:17:4e:4e:6a:b6:69:52:38:c3:f6:c6:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4c0d694d59d7d36ba421a3050f4ec7dd3781efd Validity Not Before: Jan 2 10:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a1151563fd35cfc10d2b3c5d5764d060d1077e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3e:ad:eb:0e:e9:76:47:5f:ae:86:42:3d:26: 04:0e:d8:36:22:eb:e9:a5:00:43:b4:47:10:be:21: a4:62:30:93:3e:eb:f3:39:ee:f8:6a:23:f3:82:15: c4:44:d0:d1:37:23:4a:e1:fa:52:4f:85:fb:df:ca: e0:ae:0e:57:a6:f5:16:bc:8f:8f:a2:10:a3:fc:99: 95:ae:33:cd:78:d9:40:8c:89:16:03:8b:b3:1d:9f: 70:68:44:bc:cb:e6:48:e8:43:4d:cf:f7:d6:1a:00: 98:e2:3e:07:ea:9e:1a:4c:86:29:e6:55:2b:0b:d3: 42:b4:c8:3c:d6:ab:ca:71:79:c4:72:bb:69:24:c5: 91:fd:0e:51:29:80:53:5f:7d:5b:bb:cc:0d:dd:0c: 42:67:f3:ec:36:4b:59:2d:fd:b7:f1:2c:1d:c2:03: 30:ae:5d:26:1c:3d:48:84:01:57:d3:79:1f:14:f8: 16:5c:ef:1b:19:b8:2f:2c:93:b8:17:69:d1:9d:f2: 26:4b:c4:4b:b2:18:9d:0b:d6:a9:97:f4:14:56:87: a9:3a:0b:4e:8d:e0:b6:54:14:ed:ee:cc:66:f6:50: 45:bf:e3:98:5b:56:6b:d6:f7:8f:5e:1a:9e:10:58: 56:b4:17:fb:3a:95:2c:22:b5:d5:cf:2e:8d:58:83: 2a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:11:51:56:3F:D3:5C:FC:10:D2:B3:C5:D5:76:4D:06:0D:10:77:E2 X509v3 Authority Key Identifier: keyid:D4:C0:D6:94:D5:9D:7D:36:BA:42:1A:30:50:F4:EC:7D:D3:78:1E:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MDWlNWdfTa6QhowUPTsfdN4Hv0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/ehFRVj_TXPwQ0rPF1XZNBg0Qd-I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.105.126.0/24 195.66.89.0/24 Signature Algorithm: sha256WithRSAEncryption b5:bc:92:47:1e:0e:82:85:39:c4:d9:c6:9c:74:17:28:86:82: e3:66:14:88:77:93:eb:85:18:d4:c4:d4:3d:1a:2b:47:14:7f: c4:33:aa:f6:66:f5:df:9e:37:df:4a:86:57:53:f8:e6:21:2f: d5:67:2e:2f:56:ae:cf:94:70:a0:81:76:f1:87:42:fe:96:3b: 1e:b3:c3:22:98:60:7b:68:b2:29:06:10:d1:83:c0:f8:c5:d5: eb:ad:7a:28:1b:53:a9:7e:9d:e9:14:a0:fa:fc:8e:fe:7d:14: 45:c4:34:37:2f:a3:ba:7c:7e:2e:10:78:b4:a5:b8:c1:da:9f: a6:f3:09:5c:f9:f9:98:12:c6:d1:c2:bc:b8:f7:21:08:eb:7f: 18:5c:ce:65:8d:0b:d6:2e:fe:a3:71:b4:42:86:df:66:4e:44: 4e:0b:0a:70:9b:6e:3e:83:96:45:73:74:58:b9:6b:df:a3:fb: 1f:84:bf:0a:31:f8:c2:d1:13:7b:36:1b:fc:0d:e6:c2:df:16: 8a:80:12:53:92:80:9a:70:c5:76:77:0d:0b:97:ef:e9:64:67: aa:9c:36:99:1d:be:64:ab:53:31:02:1f:32:5e:38:8c:ea:36: 03:6e:ef:38:82:8d:29:e6:aa:fd:2a:e1:a8:27:79:9d:98:dc: 24:32:50:26 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+OLMWF05OarZpUjjD9sbqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0YzBkNjk0ZDU5ZDdkMzZiYTQyMWEzMDUwZjRlYzdkZDM3 ODFlZmQwHhcNMjYwMTAyMTAyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTExNTE1NjNmZDM1Y2ZjMTBkMmIzYzVkNTc2NGQwNjBkMTA3N2UyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtT6t6w7pdkdfroZCPSYEDtg2Iuvp pQBDtEcQviGkYjCTPuvzOe74aiPzghXERNDRNyNK4fpST4X738rgrg5XpvUWvI+P ohCj/JmVrjPNeNlAjIkWA4uzHZ9waES8y+ZI6ENNz/fWGgCY4j4H6p4aTIYp5lUr C9NCtMg81qvKcXnEcrtpJMWR/Q5RKYBTX31bu8wN3QxCZ/PsNktZLf238SwdwgMw rl0mHD1IhAFX03kfFPgWXO8bGbgvLJO4F2nRnfImS8RLshidC9apl/QUVoepOgtO jeC2VBTt7sxm9lBFv+OYW1Zr1vePXhqeEFhWtBf7OpUsIrXVzy6NWIMqzwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHoRUVY/01z8ENKzxdV2TQYNEHfiMB8GA1UdIwQY MBaAFNTA1pTVnX02ukIaMFD07H3TeB79MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU1EV2xOV2RmVGE2UWhvd1VQVHNmZE40SHYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80MWNjY2UtYWNkOC00ZmI4LWIxNDgt YTc5NTEwZTYxM2U4LzEvZWhGUlZqX1RYUHdRMHJQRjFYWk5CZzBRZC1JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS80MWNjY2UtYWNkOC00ZmI4LWIxNDgtYTc5NTEwZTYxM2U4 LzEvMU1EV2xOV2RmVGE2UWhvd1VQVHNmZE40SHYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwWl+AwQA w0JZMA0GCSqGSIb3DQEBCwUAA4IBAQC1vJJHHg6ChTnE2cacdBcohoLjZhSId5Pr hRjUxNQ9GitHFH/EM6r2ZvXfnjffSoZXU/jmIS/VZy4vVq7PlHCggXbxh0L+ljse s8MimGB7aLIpBhDRg8D4xdXrrXooG1Opfp3pFKD6/I7+fRRFxDQ3L6O6fH4uEHi0 pbjB2p+m8wlc+fmYEsbRwry49yEI638YXM5ljQvWLv6jcbRCht9mTkROCwpwm24+ g5ZFc3RYuWvfo/sfhL8KMfjC0RN7Nhv8DebC3xaKgBJTkoCacMV2dw0Ll+/pZGeq nDaZHb5kq1MxAh8yXjiM6jYDbu84go0p5qr9KuGoJ3mdmNwkMlAm -----END CERTIFICATE-----Generated at Tue Feb 10 02:54:38 2026 by rpki-client