This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/eObhnSgoClkZSg4OphnzH9Kih4s.roa File: eObhnSgoClkZSg4OphnzH9Kih4s.roa (raw, json) Hash identifier: suuBBjjjYm5X0ydrhy9hau3hPxlzgCy0q7n74RUKwk4= Subject key identifier: 78:E6:E1:9D:28:28:0A:59:19:4A:0E:0E:A6:19:F3:1F:D2:A2:87:8B Certificate issuer: /CN=c2b5d3afd0b72eb734c21ed782329eb6e7c1ce41 Certificate serial: 019B7C80A76489E9E634622A05578DDD5EA1 Authority key identifier: C2:B5:D3:AF:D0:B7:2E:B7:34:C2:1E:D7:82:32:9E:B6:E7:C1:CE:41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wrXTr9C3Lrc0wh7XgjKetufBzkE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/eObhnSgoClkZSg4OphnzH9Kih4s.roa Signing time: Fri 02 Jan 2026 02:19:24 +0000 ROA not before: Fri 02 Jan 2026 02:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204802 IP address blocks: 185.239.108.0/24 maxlen: 24 2a10:4880::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.mft rsync://rpki.ripe.net/repository/DEFAULT/wrXTr9C3Lrc0wh7XgjKetufBzkE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:a7:64:89:e9:e6:34:62:2a:05:57:8d:dd:5e:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2b5d3afd0b72eb734c21ed782329eb6e7c1ce41 Validity Not Before: Jan 2 02:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=78e6e19d28280a59194a0e0ea619f31fd2a2878b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f5:59:36:1a:e5:1c:7d:05:66:fb:15:61:0a: 93:df:50:6e:aa:bf:b0:73:12:d1:3f:79:d8:26:96: 4b:04:c4:12:20:18:bc:64:95:3f:7b:a2:43:f9:6d: 35:5e:1e:18:db:35:0e:9c:fc:5f:b3:4f:bf:fa:69: 18:c0:7b:2e:ba:9d:68:6e:4a:88:46:60:99:0f:ed: 10:e8:bf:37:fd:a4:a0:00:b8:42:5c:79:06:2d:cf: 3f:b5:75:d6:30:78:33:fc:92:e9:1c:6c:3d:d0:af: 7e:fa:eb:c8:68:3f:24:20:79:f5:35:98:f3:00:66: a4:c5:0f:01:ca:e5:fb:f2:43:f1:d6:a4:fb:b1:f1: c0:05:6f:99:42:3b:df:3e:ce:79:ab:aa:3b:38:81: 9d:76:88:6a:af:4b:c9:a1:c9:90:c9:97:b2:d1:62: 5a:d6:c2:aa:09:90:2d:56:1f:63:49:5e:e4:b9:e3: fd:ca:a3:6d:05:9f:80:67:c2:b7:97:d0:b3:a9:9e: a8:82:42:64:60:ee:d5:14:be:b4:16:03:85:16:0a: 98:16:0c:4a:ea:53:ce:9c:2a:ee:e0:03:3d:bb:af: 1f:5d:dc:ae:58:a0:fa:c1:11:06:b1:e9:c2:f1:e7: 41:9a:82:6c:7b:e6:56:57:49:5d:a9:f7:82:61:ad: ab:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:E6:E1:9D:28:28:0A:59:19:4A:0E:0E:A6:19:F3:1F:D2:A2:87:8B X509v3 Authority Key Identifier: keyid:C2:B5:D3:AF:D0:B7:2E:B7:34:C2:1E:D7:82:32:9E:B6:E7:C1:CE:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wrXTr9C3Lrc0wh7XgjKetufBzkE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/eObhnSgoClkZSg4OphnzH9Kih4s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.239.108.0/24 IPv6: 2a10:4880::/29 Signature Algorithm: sha256WithRSAEncryption 09:bf:e0:9b:9d:18:a2:77:5b:51:7f:6d:5c:da:3d:17:53:90: 9d:fd:b7:e0:86:69:52:16:13:83:8c:6f:08:4e:63:dd:00:6d: 6b:90:ff:df:6b:92:c1:73:8c:64:93:4a:5c:69:59:8c:a7:5b: 99:d0:56:1d:4d:bd:6d:6c:fd:21:51:19:5b:41:0b:ab:43:cf: fe:04:c8:e9:23:db:05:d8:a2:36:27:66:31:4c:fb:6f:71:b7: 06:56:75:55:47:7d:cc:e9:51:8b:87:64:d0:08:90:5a:ee:5b: 93:75:56:26:ec:e4:c0:50:10:ad:ff:7f:54:6d:0b:f6:ee:86: 8a:10:de:84:b7:7e:6f:1a:ee:66:7c:f3:a4:ca:19:a8:0f:c4: e6:43:d5:a1:36:c2:20:0d:94:7f:7d:47:a0:55:cc:f2:21:e4: a2:b5:82:34:a4:20:0f:7c:c7:2a:c3:63:6d:d1:15:99:80:f9: 79:e6:7f:09:9d:aa:55:62:c6:9b:ce:67:13:fe:9e:1b:4b:50: e4:c2:c5:6d:8f:3c:80:d3:3f:3e:2d:76:3c:b7:65:62:23:f6: db:80:25:37:ef:82:e2:d2:3a:27:96:2e:73:96:ab:13:5e:bd: a6:27:44:15:8e:3c:ae:ed:8d:f1:94:79:eb:a6:a5:4c:e0:fc: 9e:8f:5c:38 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8gKdkienmNGIqBVeN3V6hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyYjVkM2FmZDBiNzJlYjczNGMyMWVkNzgyMzI5ZWI2ZTdj MWNlNDEwHhcNMjYwMTAyMDIxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OGU2ZTE5ZDI4MjgwYTU5MTk0YTBlMGVhNjE5ZjMxZmQyYTI4NzhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfVZNhrlHH0FZvsVYQqT31Buqr+w cxLRP3nYJpZLBMQSIBi8ZJU/e6JD+W01Xh4Y2zUOnPxfs0+/+mkYwHsuup1obkqI RmCZD+0Q6L83/aSgALhCXHkGLc8/tXXWMHgz/JLpHGw90K9++uvIaD8kIHn1NZjz AGakxQ8ByuX78kPx1qT7sfHABW+ZQjvfPs55q6o7OIGddohqr0vJocmQyZey0WJa 1sKqCZAtVh9jSV7kueP9yqNtBZ+AZ8K3l9CzqZ6ogkJkYO7VFL60FgOFFgqYFgxK 6lPOnCru4AM9u68fXdyuWKD6wREGsenC8edBmoJse+ZWV0ldqfeCYa2r3QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFHjm4Z0oKApZGUoODqYZ8x/SooeLMB8GA1UdIwQY MBaAFMK106/Qty63NMIe14Iynrbnwc5BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3JYVHI5QzNMcmMwd2g3WGdqS2V0dWZCemtFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9lMmUwNDgtMjc4OC00OWI4LTllZDUt NDUzYmQ4OTk1YmNhLzEvZU9iaG5TZ29DbGtaU2c0T3BobnpIOUtpaDRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9lMmUwNDgtMjc4OC00OWI4LTllZDUtNDUzYmQ4OTk1YmNh LzEvd3JYVHI5QzNMcmMwd2g3WGdqS2V0dWZCemtFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAue9sMA0E AgACMAcDBQMqEEiAMA0GCSqGSIb3DQEBCwUAA4IBAQAJv+CbnRiid1tRf21c2j0X U5Cd/bfghmlSFhODjG8ITmPdAG1rkP/fa5LBc4xkk0pcaVmMp1uZ0FYdTb1tbP0h URlbQQurQ8/+BMjpI9sF2KI2J2YxTPtvcbcGVnVVR33M6VGLh2TQCJBa7luTdVYm 7OTAUBCt/39UbQv27oaKEN6Et35vGu5mfPOkyhmoD8TmQ9WhNsIgDZR/fUegVczy IeSitYI0pCAPfMcqw2Nt0RWZgPl55n8JnapVYsabzmcT/p4bS1DkwsVtjzyA0z8+ LXY8t2ViI/bbgCU374Li0jonli5zlqsTXr2mJ0QVjjyu7Y3xlHnrpqVM4Pyej1w4 -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:23 2026 by rpki-client