This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/e8E7CZUAUckXh4bcKKwuRzIom-U.roa File: e8E7CZUAUckXh4bcKKwuRzIom-U.roa (raw, json) Hash identifier: lALjysVYHSzqDpZrz4VJufsPGn7d6TgnW+zEsP4UHHo= Subject key identifier: 7B:C1:3B:09:95:00:51:C9:17:87:86:DC:28:AC:2E:47:32:28:9B:E5 Certificate issuer: /CN=6e7f22beeb52c6e51a2422b139142eea03fb5d4d Certificate serial: 019B7AC86C14868D1CD2249801CD19236568 Authority key identifier: 6E:7F:22:BE:EB:52:C6:E5:1A:24:22:B1:39:14:2E:EA:03:FB:5D:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bn8ivutSxuUaJCKxORQu6gP7XU0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/e8E7CZUAUckXh4bcKKwuRzIom-U.roa Signing time: Thu 01 Jan 2026 18:18:33 +0000 ROA not before: Thu 01 Jan 2026 18:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49986 IP address blocks: 78.31.236.0/22 maxlen: 22 78.31.236.0/23 maxlen: 23 78.31.238.0/23 maxlen: 23 2a05:c000::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.mft rsync://rpki.ripe.net/repository/DEFAULT/bn8ivutSxuUaJCKxORQu6gP7XU0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:6c:14:86:8d:1c:d2:24:98:01:cd:19:23:65:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e7f22beeb52c6e51a2422b139142eea03fb5d4d Validity Not Before: Jan 1 18:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7bc13b09950051c9178786dc28ac2e4732289be5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:07:ee:3c:d4:7f:32:85:a3:60:6e:6c:d4:ac: 95:a8:21:93:07:a5:d3:00:d1:4e:b0:c6:4b:5f:6e: 60:e0:40:7d:ee:31:9c:91:af:2a:46:0f:08:b2:bf: 5a:ab:d0:cb:51:72:64:11:9b:e0:5f:ca:e5:cc:a3: 48:d1:b7:ae:11:b5:3f:9a:ab:3a:4e:68:6e:ab:79: bf:ef:50:74:53:0a:76:92:f8:66:25:15:22:82:e7: 66:94:f5:3e:0e:aa:e3:2b:f5:93:dd:57:d8:b0:4d: 6b:98:f8:04:cb:a2:6b:45:f9:fb:68:42:6c:51:ba: 6d:b3:ae:e3:73:83:5b:4c:0c:f1:65:d2:9a:42:5b: f1:37:a1:db:67:c9:00:36:3e:a6:a3:73:32:3b:d2: 4e:40:76:0e:f8:72:af:5d:4b:d0:7a:bb:e0:cd:4b: 96:29:10:48:cc:79:7b:cf:cd:01:0e:91:a6:a4:4f: 4b:c1:55:85:d9:53:cb:f8:77:68:ba:dd:ee:ca:ab: 0a:81:6e:b5:bb:54:27:fa:89:bc:ff:43:be:e0:d2: a7:29:a7:e7:cb:e4:3e:6a:b3:df:1d:a1:75:30:c1: 40:3a:cb:5e:ae:90:e9:51:f5:86:69:e2:20:8d:a9: fa:88:49:d0:c5:ec:37:31:5e:8b:45:d2:5a:83:29: e2:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:C1:3B:09:95:00:51:C9:17:87:86:DC:28:AC:2E:47:32:28:9B:E5 X509v3 Authority Key Identifier: keyid:6E:7F:22:BE:EB:52:C6:E5:1A:24:22:B1:39:14:2E:EA:03:FB:5D:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bn8ivutSxuUaJCKxORQu6gP7XU0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/e8E7CZUAUckXh4bcKKwuRzIom-U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.31.236.0/22 IPv6: 2a05:c000::/32 Signature Algorithm: sha256WithRSAEncryption 5f:9d:0f:7d:f4:03:9b:44:ee:be:d0:db:fc:77:bb:73:cc:38: 81:28:da:29:7f:d4:d0:68:86:31:21:91:42:b6:d9:50:c3:3e: 3d:8f:a5:c9:95:75:fc:14:ec:ff:68:72:44:da:ae:49:5d:82: 26:3a:9a:85:75:fa:0d:2d:91:79:8d:18:26:06:69:14:37:7a: ac:b8:f4:35:85:97:af:b5:12:e8:e3:c4:09:9d:15:71:04:7d: d1:a2:64:3d:84:83:49:8a:ab:72:0d:3f:9f:10:04:d4:b1:1b: 75:02:78:18:ca:3c:8a:63:11:54:80:1d:65:b3:9c:e6:2b:ec: f5:f1:78:a4:59:1d:70:3f:97:ca:6a:3c:62:aa:e8:11:f8:03: b1:5a:3a:78:7f:ed:05:f9:a2:5b:25:78:b1:f5:7b:8a:e3:2a: 3d:66:3e:33:25:3f:dc:07:21:b0:08:ce:e2:d7:30:1e:db:6e: e0:4b:3d:cb:58:0c:ee:52:cb:d8:05:56:88:e7:25:73:fb:35: 52:5d:e7:a9:3b:90:6f:5b:8a:ec:8f:5d:4d:ac:fb:1e:69:8d: 4c:34:bf:ce:f3:7b:ec:b2:74:30:d1:23:99:96:f1:29:5c:c0: d0:1d:f3:1e:e0:9e:49:be:93:ba:4f:28:d9:88:f5:70:c4:c5: 96:b3:15:ec -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6yGwUho0c0iSYAc0ZI2VoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlN2YyMmJlZWI1MmM2ZTUxYTI0MjJiMTM5MTQyZWVhMDNm YjVkNGQwHhcNMjYwMTAxMTgxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YmMxM2IwOTk1MDA1MWM5MTc4Nzg2ZGMyOGFjMmU0NzMyMjg5YmU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7wfuPNR/MoWjYG5s1KyVqCGTB6XT ANFOsMZLX25g4EB97jGcka8qRg8Isr9aq9DLUXJkEZvgX8rlzKNI0beuEbU/mqs6 Tmhuq3m/71B0Uwp2kvhmJRUigudmlPU+DqrjK/WT3VfYsE1rmPgEy6JrRfn7aEJs Ubpts67jc4NbTAzxZdKaQlvxN6HbZ8kANj6mo3MyO9JOQHYO+HKvXUvQervgzUuW KRBIzHl7z80BDpGmpE9LwVWF2VPL+Hdout3uyqsKgW61u1Qn+om8/0O+4NKnKafn y+Q+arPfHaF1MMFAOsterpDpUfWGaeIgjan6iEnQxew3MV6LRdJagyniQQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFHvBOwmVAFHJF4eG3CisLkcyKJvlMB8GA1UdIwQY MBaAFG5/Ir7rUsblGiQisTkULuoD+11NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm44aXZ1dFN4dVVhSkNLeE9SUXU2Z1A3WFUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS80MmY1NGItNTdjMC00MjRhLWFjZjUt NGRkNGQwZjUzODQ5LzEvZThFN0NaVUFVY2tYaDRiY0tLd3VSeklvbS1VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS80MmY1NGItNTdjMC00MjRhLWFjZjUtNGRkNGQwZjUzODQ5 LzEvYm44aXZ1dFN4dVVhSkNLeE9SUXU2Z1A3WFUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCTh/sMA0E AgACMAcDBQAqBcAAMA0GCSqGSIb3DQEBCwUAA4IBAQBfnQ999AObRO6+0Nv8d7tz zDiBKNopf9TQaIYxIZFCttlQwz49j6XJlXX8FOz/aHJE2q5JXYImOpqFdfoNLZF5 jRgmBmkUN3qsuPQ1hZevtRLo48QJnRVxBH3RomQ9hINJiqtyDT+fEATUsRt1AngY yjyKYxFUgB1ls5zmK+z18XikWR1wP5fKajxiqugR+AOxWjp4f+0F+aJbJXix9XuK 4yo9Zj4zJT/cByGwCM7i1zAe227gSz3LWAzuUsvYBVaI5yVz+zVSXeepO5BvW4rs j11NrPseaY1MNL/O83vssnQw0SOZlvEpXMDQHfMe4J5JvpO6TyjZiPVwxMWWsxXs -----END CERTIFICATE-----Generated at Tue Feb 10 07:11:18 2026 by rpki-client