This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/eP9Zj4VtBHmGTmZV-BTJVgUUM2w.roa File: eP9Zj4VtBHmGTmZV-BTJVgUUM2w.roa (raw, json) Hash identifier: WYeB62ZsHbPuqTvSpxGwefGN+P372Umh9fLZQeEfJRo= Subject key identifier: 78:FF:59:8F:85:6D:04:79:86:4E:66:55:F8:14:C9:56:05:14:33:6C Certificate issuer: /CN=e21df6a8aaa7041d725285d0dd0e180a649bc213 Certificate serial: 019B7AC7FBED889F1BFCF1F2879DE6E6820B Authority key identifier: E2:1D:F6:A8:AA:A7:04:1D:72:52:85:D0:DD:0E:18:0A:64:9B:C2:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/eP9Zj4VtBHmGTmZV-BTJVgUUM2w.roa Signing time: Thu 01 Jan 2026 18:18:05 +0000 ROA not before: Thu 01 Jan 2026 18:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39087 IP address blocks: 5.8.36.0/22 maxlen: 32 79.174.191.0/24 maxlen: 32 91.223.28.0/24 maxlen: 32 91.223.70.0/24 maxlen: 32 91.223.75.0/24 maxlen: 32 91.223.89.0/24 maxlen: 32 185.44.167.0/24 maxlen: 32 185.97.200.0/22 maxlen: 32 194.37.1.0/24 maxlen: 32 194.37.254.0/24 maxlen: 32 194.39.99.0/24 maxlen: 32 194.39.101.0/24 maxlen: 32 217.78.230.0/24 maxlen: 32 2a00:1b78::/29 maxlen: 64 2a0f:a3c0::/29 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:fb:ed:88:9f:1b:fc:f1:f2:87:9d:e6:e6:82:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e21df6a8aaa7041d725285d0dd0e180a649bc213 Validity Not Before: Jan 1 18:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=78ff598f856d0479864e6655f814c9560514336c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:88:7c:6c:15:68:6d:cc:80:2e:01:51:bf:b6: 95:86:bb:fe:c6:41:66:c3:74:a3:11:4f:15:48:ee: e1:59:25:85:aa:20:f5:99:f2:34:6e:3e:3c:73:70: 62:d8:d8:9b:19:51:8f:65:bb:c0:16:b3:f5:cf:f9: 42:4f:c0:59:f6:12:70:fb:ec:7b:6d:31:f2:cd:d7: 51:f8:a5:09:87:1c:bd:6f:55:9b:90:21:f2:71:93: 75:eb:e5:80:c6:45:e3:3a:3b:89:72:74:75:81:c2: ec:71:fc:e7:f1:6d:0f:57:12:28:d7:83:09:28:46: 8a:e0:bf:d1:a7:7c:17:0e:fe:c0:63:13:e9:cd:d3: 33:85:ed:35:94:5c:0a:b2:bf:3a:e9:9c:f0:57:94: 48:3e:25:b2:c7:c4:a6:9b:95:60:ee:e6:b9:36:7d: d5:a9:1d:a2:d1:28:1f:8e:91:7b:46:d3:3b:75:3b: 57:0a:07:b5:70:fa:10:70:05:7a:4f:66:c7:5b:c7: 61:1e:a9:29:70:be:34:5a:ff:2a:31:1c:7b:ac:f6: c0:ff:e6:00:50:19:23:04:bc:59:40:fd:2f:9f:b8: 5a:99:39:60:01:76:d3:9f:19:68:ec:71:5b:f7:e9: 08:17:8c:09:f8:94:16:ab:b3:a7:73:08:28:89:f8: cb:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:FF:59:8F:85:6D:04:79:86:4E:66:55:F8:14:C9:56:05:14:33:6C X509v3 Authority Key Identifier: keyid:E2:1D:F6:A8:AA:A7:04:1D:72:52:85:D0:DD:0E:18:0A:64:9B:C2:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/eP9Zj4VtBHmGTmZV-BTJVgUUM2w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.8.36.0/22 79.174.191.0/24 91.223.28.0/24 91.223.70.0/24 91.223.75.0/24 91.223.89.0/24 185.44.167.0/24 185.97.200.0/22 194.37.1.0/24 194.37.254.0/24 194.39.99.0/24 194.39.101.0/24 217.78.230.0/24 IPv6: 2a00:1b78::/29 2a0f:a3c0::/29 Signature Algorithm: sha256WithRSAEncryption 16:7b:19:9f:f3:ea:f1:a4:e4:cc:b5:3a:d1:2e:0f:fe:1b:08: d4:f3:bd:c7:f1:af:f8:9a:56:e4:3b:90:bf:e9:66:5e:78:6d: b8:1a:c4:70:d9:6b:2b:1c:85:a9:32:7d:3e:e2:02:8d:fb:13: e9:e4:ea:54:fc:58:b6:ae:a9:1c:07:79:17:29:02:06:cb:ca: eb:a6:00:db:89:53:0a:2c:b3:6c:7c:7d:20:56:d3:29:64:d2: e3:67:f6:f4:dd:bb:d5:a2:71:63:bc:63:d7:7f:73:0e:2c:6a: 9a:8d:07:7d:fd:be:02:5b:d5:f9:e6:03:1d:10:27:9f:55:9c: f2:d1:88:5b:01:63:6c:32:69:79:2a:84:fd:4c:53:07:33:67: f2:77:d7:81:09:4a:a9:50:60:46:7b:b0:99:b8:f9:72:ca:b3: 8d:4c:a6:fb:e1:e4:5f:af:86:c9:09:7f:2b:2c:4a:bc:de:6c: b7:fb:d8:4d:19:77:b2:da:b9:b2:5d:c7:81:6c:a7:8f:f4:b1: 61:3f:a5:e1:fc:c0:ba:bb:77:c5:bb:f8:03:5a:e7:eb:3f:fe: 4e:cf:b6:1f:06:c1:6c:a8:2f:03:7f:c8:20:5b:4f:71:b3:7e: 91:6f:e1:c8:9c:7b:c7:80:02:67:1c:8a:eb:72:7d:e1:e4:05: 44:50:9a:59 -----BEGIN CERTIFICATE----- MIIFWzCCBEOgAwIBAgISAZt6x/vtiJ8b/PHyh53m5oILMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyMWRmNmE4YWFhNzA0MWQ3MjUyODVkMGRkMGUxODBhNjQ5 YmMyMTMwHhcNMjYwMTAxMTgxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OGZmNTk4Zjg1NmQwNDc5ODY0ZTY2NTVmODE0Yzk1NjA1MTQzMzZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoh8bBVobcyALgFRv7aVhrv+xkFm w3SjEU8VSO7hWSWFqiD1mfI0bj48c3Bi2NibGVGPZbvAFrP1z/lCT8BZ9hJw++x7 bTHyzddR+KUJhxy9b1WbkCHycZN16+WAxkXjOjuJcnR1gcLscfzn8W0PVxIo14MJ KEaK4L/Rp3wXDv7AYxPpzdMzhe01lFwKsr866ZzwV5RIPiWyx8Smm5Vg7ua5Nn3V qR2i0SgfjpF7RtM7dTtXCge1cPoQcAV6T2bHW8dhHqkpcL40Wv8qMRx7rPbA/+YA UBkjBLxZQP0vn7hamTlgAXbTnxlo7HFb9+kIF4wJ+JQWq7OncwgoifjL8wIDAQAB o4ICZzCCAmMwHQYDVR0OBBYEFHj/WY+FbQR5hk5mVfgUyVYFFDNsMB8GA1UdIwQY MBaAFOId9qiqpwQdclKF0N0OGApkm8ITMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGgzMnFLcW5CQjF5VW9YUTNRNFlDbVNid2hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy82OTk4NGEtMjliZi00ZDc2LTk1NjEt NjJiYTNhNjg4NGM4LzEvZVA5Wmo0VnRCSG1HVG1aVi1CVEpWZ1VVTTJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy82OTk4NGEtMjliZi00ZDc2LTk1NjEtNjJiYTNhNjg4NGM4 LzEvNGgzMnFLcW5CQjF5VW9YUTNRNFlDbVNid2hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMH0GCCsGAQUFBwEHAQH/BG4wbDBUBAIAATBOAwQCBQgkAwQA T66/AwQAW98cAwQAW99GAwQAW99LAwQAW99ZAwQAuSynAwQCuWHIAwQAwiUBAwQA wiX+AwQAwidjAwQAwidlAwQA2U7mMBQEAgACMA4DBQMqABt4AwUDKg+jwDANBgkq hkiG9w0BAQsFAAOCAQEAFnsZn/Pq8aTkzLU60S4P/hsI1PO9x/Gv+JpW5DuQv+lm XnhtuBrEcNlrKxyFqTJ9PuICjfsT6eTqVPxYtq6pHAd5FykCBsvK66YA24lTCiyz bHx9IFbTKWTS42f29N271aJxY7xj139zDixqmo0Hff2+AlvV+eYDHRAnn1Wc8tGI WwFjbDJpeSqE/UxTBzNn8nfXgQlKqVBgRnuwmbj5csqzjUym++HkX6+GyQl/KyxK vN5st/vYTRl3stq5sl3HgWynj/SxYT+l4fzAurt3xbv4A1rn6z/+Ts+2HwbBbKgv A3/IIFtPcbN+kW/hyJx7x4ACZxyK63J94eQFRFCaWQ== -----END CERTIFICATE-----Generated at Mon Jan 12 04:21:09 2026 by rpki-client