This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/E9sGD-Zo2QlPCyUc_pMMMyQ7YBc.roa File: E9sGD-Zo2QlPCyUc_pMMMyQ7YBc.roa (raw, json) Hash identifier: i0vK1MQyCYsVIkVwzgwXsqiWrYmcLTBHxIv0G7Tn/rY= Subject key identifier: 13:DB:06:0F:E6:68:D9:09:4F:0B:25:1C:FE:93:0C:33:24:3B:60:17 Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 019B7F85646FFD147674FC315B7E6135669B Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/E9sGD-Zo2QlPCyUc_pMMMyQ7YBc.roa Signing time: Fri 02 Jan 2026 16:23:26 +0000 ROA not before: Fri 02 Jan 2026 16:23:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205007 IP address blocks: 194.87.85.0/24 maxlen: 24 195.133.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 22:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:64:6f:fd:14:76:74:fc:31:5b:7e:61:35:66:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Jan 2 16:23:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=13db060fe668d9094f0b251cfe930c33243b6017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:75:c0:67:89:6a:a8:11:03:70:6c:d4:b8:d8: 1b:f9:49:15:11:50:2b:7d:85:e2:3c:ac:28:91:b9: 23:f5:f5:bd:c2:d8:8c:8d:49:4c:d9:fe:d7:18:fb: 38:b2:9c:1a:e7:18:56:59:8a:09:7b:c9:b3:8f:41: b8:b7:a6:62:46:83:e6:20:e4:8f:b4:36:6c:c2:ee: 00:63:6e:09:89:11:c1:e2:01:ba:59:e5:fd:21:41: c1:b7:6b:c2:9e:eb:9f:9c:99:92:95:18:18:76:16: 59:6b:0e:da:e5:c0:c8:15:f5:33:f3:9f:bf:be:d8: 6c:ac:11:26:ad:92:da:bf:e6:89:5b:95:ff:56:b1: 31:c1:89:fc:db:fb:f1:86:97:e4:a4:3e:f7:a7:ce: 94:30:3d:3e:ab:13:ea:4b:b0:f7:4c:4c:13:56:1b: d3:11:9b:25:31:40:25:f2:1a:aa:a1:73:6b:3a:c8: 84:e8:2d:b5:ef:9b:17:fb:32:0d:6c:aa:6d:6b:7b: 52:c0:69:6c:26:06:75:14:60:2b:6e:70:d7:ca:32: f3:96:30:6b:f2:39:af:56:ea:07:e3:e6:65:b9:58: c2:cb:bd:de:f6:5f:cc:c9:a5:b7:02:0b:c1:4f:b9: 93:54:80:ed:15:9c:d9:1d:6c:0e:02:cc:f8:77:81: d5:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:DB:06:0F:E6:68:D9:09:4F:0B:25:1C:FE:93:0C:33:24:3B:60:17 X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/E9sGD-Zo2QlPCyUc_pMMMyQ7YBc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.87.85.0/24 195.133.18.0/24 Signature Algorithm: sha256WithRSAEncryption 97:ad:3e:b0:a2:68:1c:8f:8c:56:41:7a:7c:4f:b1:0c:1e:91: 80:a1:84:e5:45:0d:76:ef:79:98:76:d7:3f:0a:af:0b:73:3c: 96:40:30:1c:8c:cf:9e:57:fa:0a:95:5a:bf:8d:f8:b3:51:5a: ad:7f:ab:cc:5c:4a:05:3d:38:cf:39:38:af:14:52:cd:42:87: 4c:63:16:2e:aa:46:a7:91:74:2d:de:d2:28:57:ea:52:15:49: 54:67:07:76:b7:58:a5:aa:52:00:03:3f:14:97:a3:63:42:6c: 8f:b7:86:4c:f0:ab:5e:a3:a7:50:1f:65:7a:e5:69:09:87:75: 0c:14:95:40:b5:07:c9:34:4e:98:58:81:28:83:24:78:05:80: e4:de:3e:61:aa:c2:db:5e:42:0c:6d:49:82:0f:62:51:6d:c2: a0:fe:b0:80:26:d3:e1:94:97:e5:f5:9b:53:b7:ec:90:19:a9: 84:dd:37:df:e7:3f:28:0c:e9:3f:af:76:59:93:12:c6:81:d5: f4:24:ea:16:e8:d2:65:8b:82:e9:32:77:f0:54:d2:00:9a:be: 2f:ce:ac:d5:3e:c5:1e:0d:73:d5:9b:c9:ce:62:03:d0:63:56: 58:16:af:a4:b9:1b:ae:1a:f4:66:a4:7a:16:da:39:e7:6c:30: 74:40:6a:5a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hWRv/RR2dPwxW35hNWabMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjYwMTAyMTYyMzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxM2RiMDYwZmU2NjhkOTA5NGYwYjI1MWNmZTkzMGMzMzI0M2I2MDE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonXAZ4lqqBEDcGzUuNgb+UkVEVAr fYXiPKwokbkj9fW9wtiMjUlM2f7XGPs4spwa5xhWWYoJe8mzj0G4t6ZiRoPmIOSP tDZswu4AY24JiRHB4gG6WeX9IUHBt2vCnuufnJmSlRgYdhZZaw7a5cDIFfUz85+/ vthsrBEmrZLav+aJW5X/VrExwYn82/vxhpfkpD73p86UMD0+qxPqS7D3TEwTVhvT EZslMUAl8hqqoXNrOsiE6C2175sX+zINbKpta3tSwGlsJgZ1FGArbnDXyjLzljBr 8jmvVuoH4+ZluVjCy73e9l/MyaW3AgvBT7mTVIDtFZzZHWwOAsz4d4HV9QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBPbBg/maNkJTwslHP6TDDMkO2AXMB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEvRTlzR0QtWm8yUWxQQ3lVY19wTU1NeVE3WUJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwldVAwQA w4USMA0GCSqGSIb3DQEBCwUAA4IBAQCXrT6womgcj4xWQXp8T7EMHpGAoYTlRQ12 73mYdtc/Cq8LczyWQDAcjM+eV/oKlVq/jfizUVqtf6vMXEoFPTjPOTivFFLNQodM YxYuqkankXQt3tIoV+pSFUlUZwd2t1ilqlIAAz8Ul6NjQmyPt4ZM8Kteo6dQH2V6 5WkJh3UMFJVAtQfJNE6YWIEogyR4BYDk3j5hqsLbXkIMbUmCD2JRbcKg/rCAJtPh lJfl9ZtTt+yQGamE3Tff5z8oDOk/r3ZZkxLGgdX0JOoW6NJli4LpMnfwVNIAmr4v zqzVPsUeDXPVm8nOYgPQY1ZYFq+kuRuuGvRmpHoW2jnnbDB0QGpa -----END CERTIFICATE-----Generated at Wed Jan 7 06:55:23 2026 by rpki-client