This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/rEInJXVubCXsDlLwKl5QbIfXcOY.roa File: rEInJXVubCXsDlLwKl5QbIfXcOY.roa (raw, json) Hash identifier: yyq+ohOUBDUSWaIzAvRCewTEb6H+H1isbq2xJIR+iJc= Subject key identifier: AC:42:27:25:75:6E:6C:25:EC:0E:52:F0:2A:5E:50:6C:87:D7:70:E6 Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 019B7F85550A7A084A37DB81488D42ACACAE Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/rEInJXVubCXsDlLwKl5QbIfXcOY.roa Signing time: Fri 02 Jan 2026 16:23:23 +0000 ROA not before: Fri 02 Jan 2026 16:23:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57043 IP address blocks: 62.76.236.0/24 maxlen: 24 62.76.237.0/24 maxlen: 24 193.124.17.0/24 maxlen: 24 193.124.206.0/24 maxlen: 24 194.58.56.0/24 maxlen: 24 194.58.154.0/24 maxlen: 24 194.58.155.0/24 maxlen: 24 194.87.51.0/24 maxlen: 24 194.87.54.0/24 maxlen: 24 194.87.55.0/24 maxlen: 24 194.87.125.0/24 maxlen: 24 194.87.233.0/24 maxlen: 24 194.87.255.0/24 maxlen: 24 195.133.9.0/24 maxlen: 24 212.193.20.0/24 maxlen: 24 212.193.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:55:0a:7a:08:4a:37:db:81:48:8d:42:ac:ac:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Jan 2 16:23:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ac422725756e6c25ec0e52f02a5e506c87d770e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a8:d9:37:07:8d:7c:7d:9d:f6:c6:9f:47:1b: ee:eb:43:83:9b:a7:2a:a7:d3:4e:38:0e:e0:fc:cf: 50:ed:ff:13:0f:cd:54:7d:7e:d4:4f:c5:c9:18:e0: d1:11:a8:2b:d5:93:2e:8c:d8:12:05:cb:47:15:81: 2a:65:92:93:d1:72:5b:0d:25:61:8a:6e:6e:90:26: c9:53:50:c0:24:7d:c4:2a:1d:b4:40:1e:94:5d:68: a3:90:47:2b:6a:96:39:12:cb:8d:8e:7f:ab:e3:3d: 45:68:72:3c:b4:1d:d3:e6:e3:b9:ba:e8:0e:d9:91: bc:a8:a2:7e:00:86:82:fd:ab:f6:6c:7f:6c:3b:e9: fb:76:ce:79:b7:89:9f:a0:ca:4b:26:b7:01:32:44: 17:f8:ba:2c:2e:d7:67:fa:21:e4:d4:c2:53:d9:ae: 9a:a1:45:50:95:a8:28:14:ab:35:db:0b:89:04:e5: ba:58:62:95:d5:2d:24:94:e5:04:75:1a:8e:1b:da: e8:a7:81:b7:f1:7f:62:84:9f:cc:ce:00:00:d6:70: fa:53:a3:a9:f1:00:13:83:3f:06:6c:91:0c:6a:97: 4e:ce:8a:fe:ea:fd:c3:10:57:68:e3:ff:01:ba:73: 1e:61:38:6a:b8:49:aa:26:60:86:b3:bd:d1:45:45: 70:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:42:27:25:75:6E:6C:25:EC:0E:52:F0:2A:5E:50:6C:87:D7:70:E6 X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/rEInJXVubCXsDlLwKl5QbIfXcOY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.76.236.0/23 193.124.17.0/24 193.124.206.0/24 194.58.56.0/24 194.58.154.0/23 194.87.51.0/24 194.87.54.0/23 194.87.125.0/24 194.87.233.0/24 194.87.255.0/24 195.133.9.0/24 212.193.20.0/24 212.193.23.0/24 Signature Algorithm: sha256WithRSAEncryption 66:e3:99:95:6e:2f:85:fb:03:d8:d8:f7:64:f0:eb:80:8c:6b: 32:97:35:d2:74:8a:41:49:93:b9:27:d1:e4:93:f9:b4:36:aa: 0a:4e:f0:96:5b:bd:14:71:5c:5f:19:22:16:8f:61:c7:c0:e5: 83:ce:b5:86:66:14:2f:46:c6:f0:3c:fb:81:0a:b2:75:c5:8a: d8:2a:5c:c9:99:c6:5c:bc:d4:a2:ea:04:c5:5a:87:2f:de:b8: 1b:db:cb:07:40:79:05:13:a3:80:47:67:9b:d0:74:99:c8:8e: c8:e6:af:03:d3:26:8e:4d:49:88:27:62:ba:2e:c0:d3:f8:5a: 9d:ba:16:ef:fe:00:25:59:82:22:b0:70:ad:e0:73:9e:71:8e: be:50:e7:31:24:5c:2a:8e:90:79:36:96:61:76:7a:1a:2d:96: d4:ed:38:11:2b:d0:b2:7c:19:13:f4:0c:63:4f:e5:68:ef:10: 19:0c:27:31:73:ae:39:6d:31:9e:b6:46:eb:9a:a3:c8:8c:8e: 38:81:a8:5a:f1:60:3c:1f:77:ce:03:3c:a8:41:24:06:b1:f7: c8:41:56:70:dc:1d:ff:8c:3d:19:ae:29:26:18:10:7a:84:8c: ea:f0:6e:ea:30:c2:75:ad:9c:dd:26:e6:09:7f:70:a2:bf:79: 84:0e:53:fd -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgISAZt/hVUKeghKN9uBSI1CrKyuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjYwMTAyMTYyMzIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzQyMjcyNTc1NmU2YzI1ZWMwZTUyZjAyYTVlNTA2Yzg3ZDc3MGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqjZNweNfH2d9safRxvu60ODm6cq p9NOOA7g/M9Q7f8TD81UfX7UT8XJGODREagr1ZMujNgSBctHFYEqZZKT0XJbDSVh im5ukCbJU1DAJH3EKh20QB6UXWijkEcrapY5EsuNjn+r4z1FaHI8tB3T5uO5uugO 2ZG8qKJ+AIaC/av2bH9sO+n7ds55t4mfoMpLJrcBMkQX+LosLtdn+iHk1MJT2a6a oUVQlagoFKs12wuJBOW6WGKV1S0klOUEdRqOG9rop4G38X9ihJ/MzgAA1nD6U6Op 8QATgz8GbJEMapdOzor+6v3DEFdo4/8BunMeYThquEmqJmCGs73RRUVwJwIDAQAB o4ICUTCCAk0wHQYDVR0OBBYEFKxCJyV1bmwl7A5S8CpeUGyH13DmMB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEvckVJbkpYVnViQ1hzRGxMd0tsNVFiSWZYY09ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOAwQBPkzsAwQA wXwRAwQAwXzOAwQAwjo4AwQBwjqaAwQAwlczAwQBwlc2AwQAwld9AwQAwlfpAwQA wlf/AwQAw4UJAwQA1MEUAwQA1MEXMA0GCSqGSIb3DQEBCwUAA4IBAQBm45mVbi+F +wPY2Pdk8OuAjGsylzXSdIpBSZO5J9Hkk/m0NqoKTvCWW70UcVxfGSIWj2HHwOWD zrWGZhQvRsbwPPuBCrJ1xYrYKlzJmcZcvNSi6gTFWocv3rgb28sHQHkFE6OAR2eb 0HSZyI7I5q8D0yaOTUmIJ2K6LsDT+Fqduhbv/gAlWYIisHCt4HOecY6+UOcxJFwq jpB5NpZhdnoaLZbU7TgRK9CyfBkT9AxjT+Vo7xAZDCcxc645bTGetkbrmqPIjI44 gaha8WA8H3fOAzyoQSQGsffIQVZw3B3/jD0ZrikmGBB6hIzq8G7qMMJ1rZzdJuYJ f3Civ3mEDlP9 -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:53 2026 by rpki-client