This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/_xskEv4E93buhDkLdrQYmZAO0nE.roa File: _xskEv4E93buhDkLdrQYmZAO0nE.roa (raw, json) Hash identifier: 3WE6gR3+njw3C/tk5YUDcQmv7NijA9ffNITk4lYJTtw= Subject key identifier: FF:1B:24:12:FE:04:F7:76:EE:84:39:0B:76:B4:18:99:90:0E:D2:71 Certificate issuer: /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd Certificate serial: 019B79107D0CD4D2959B0DDF10EF200C6882 Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/_xskEv4E93buhDkLdrQYmZAO0nE.roa Signing time: Thu 01 Jan 2026 10:18:02 +0000 ROA not before: Thu 01 Jan 2026 10:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 194.32.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:7d:0c:d4:d2:95:9b:0d:df:10:ef:20:0c:68:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd Validity Not Before: Jan 1 10:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ff1b2412fe04f776ee84390b76b41899900ed271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:eb:24:24:33:2a:a1:56:c9:65:34:95:31:c6: 52:31:22:af:fe:7d:28:5c:75:c0:0a:7b:a0:f2:77: a0:57:32:c6:30:d6:fb:54:fd:c5:7b:41:97:1d:e5: 32:97:d2:cf:53:47:3d:e7:7f:0c:24:49:73:b9:88: e8:34:91:94:ff:75:79:8a:cc:e3:1d:c9:1e:b4:49: 1a:2c:46:3b:19:56:e6:52:37:2e:27:61:fb:7f:e3: 87:f3:ec:8e:d2:4c:58:f7:46:cb:d6:cd:3c:e3:0a: 72:34:32:04:8b:01:70:9d:27:36:66:15:ea:13:f8: 6f:5f:ed:7d:bf:a2:bc:f1:eb:33:cd:fe:39:9f:05: 91:41:9d:91:f0:d8:c3:27:a9:9b:e0:23:8c:da:2d: c7:47:35:e4:f7:51:f8:6f:d9:b7:ef:9b:64:03:e2: 39:32:76:b9:ce:56:ba:a8:59:72:de:b7:bd:2e:96: 4c:e0:1c:86:26:39:5a:1b:55:87:61:32:52:72:cd: 86:8e:f7:d5:17:e6:bb:12:7a:0f:1c:70:ee:f2:e8: e8:e5:f5:4a:fd:c1:06:5b:2c:87:17:56:aa:77:ea: 34:07:2c:2a:90:0e:94:c4:ca:bd:7c:25:d9:79:db: 3c:91:6f:ce:7f:d5:e5:b7:7a:e5:35:cc:5a:1f:e3: 8c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:1B:24:12:FE:04:F7:76:EE:84:39:0B:76:B4:18:99:90:0E:D2:71 X509v3 Authority Key Identifier: keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/_xskEv4E93buhDkLdrQYmZAO0nE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.32.71.0/24 Signature Algorithm: sha256WithRSAEncryption 92:b6:42:47:6b:00:e4:ca:32:8e:44:f3:f6:52:ec:42:d6:9a: b5:01:5d:4a:d2:91:c5:f0:f8:01:fb:4d:62:73:b2:35:67:05: 06:23:68:a9:a9:70:6e:31:c7:3a:26:5f:17:62:68:4b:92:94: 74:17:d8:7a:3e:7e:83:4f:5c:0a:6c:a0:4a:48:37:d6:66:9e: 00:67:c2:ed:18:d8:18:77:f9:21:b6:43:9a:d7:48:d6:4f:b4: be:b8:58:c7:4b:fc:6b:3f:22:89:7c:d9:a7:40:8e:a4:46:7b: 1d:38:6a:86:07:a5:7d:5f:ba:c8:d4:f7:3c:37:0c:79:0a:fd: 90:36:cc:bb:e1:45:49:93:fb:85:3d:5d:e8:9b:47:5c:79:a5: 93:fa:0c:ce:ce:80:47:6f:ea:dc:c1:e0:44:e9:8b:ce:ba:24: 07:5e:2b:ee:ad:20:4c:e3:09:ea:35:af:25:9f:3f:fe:41:d3: e7:a5:d5:05:06:ee:48:67:26:11:72:3e:f3:01:4b:bb:e9:cf: 29:5d:eb:65:8a:3f:68:8d:7e:73:b3:36:2a:e4:83:05:f6:d5: e0:97:f3:36:f0:e9:58:43:57:a6:42:28:e5:3f:e5:c0:85:95: 74:0e:db:87:d9:14:e5:1c:d8:c5:f5:69:07:8a:10:0f:21:29: 38:47:29:1e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EH0M1NKVmw3fEO8gDGiCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkNWEyOTIxZmJlYjhhNDQ4ZTdhZTFlYzVhMTFiOGFiODk4 ZDIyZmQwHhcNMjYwMTAxMTAxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjFiMjQxMmZlMDRmNzc2ZWU4NDM5MGI3NmI0MTg5OTkwMGVkMjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+skJDMqoVbJZTSVMcZSMSKv/n0o XHXACnug8negVzLGMNb7VP3Fe0GXHeUyl9LPU0c9538MJElzuYjoNJGU/3V5iszj HcketEkaLEY7GVbmUjcuJ2H7f+OH8+yO0kxY90bL1s084wpyNDIEiwFwnSc2ZhXq E/hvX+19v6K88eszzf45nwWRQZ2R8NjDJ6mb4COM2i3HRzXk91H4b9m375tkA+I5 Mna5zla6qFly3re9LpZM4ByGJjlaG1WHYTJScs2GjvfVF+a7EnoPHHDu8ujo5fVK /cEGWyyHF1aqd+o0BywqkA6UxMq9fCXZeds8kW/Of9Xlt3rlNcxaH+OMPwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP8bJBL+BPd27oQ5C3a0GJmQDtJxMB8GA1UdIwQY MBaAFE1aKSH764pEjnrh7FoRuKuJjSL9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFZvcElmdnJpa1NPZXVIc1doRzRxNG1OSXYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9lZThiOTgtNzI0MC00YjYyLWFjYzUt NzgwYTI1Y2QwZGQ5LzEvX3hza0V2NEU5M2J1aERrTGRyUVltWkFPMG5FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9lZThiOTgtNzI0MC00YjYyLWFjYzUtNzgwYTI1Y2QwZGQ5 LzEvVFZvcElmdnJpa1NPZXVIc1doRzRxNG1OSXYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwiBHMA0G CSqGSIb3DQEBCwUAA4IBAQCStkJHawDkyjKORPP2UuxC1pq1AV1K0pHF8PgB+01i c7I1ZwUGI2ipqXBuMcc6Jl8XYmhLkpR0F9h6Pn6DT1wKbKBKSDfWZp4AZ8LtGNgY d/khtkOa10jWT7S+uFjHS/xrPyKJfNmnQI6kRnsdOGqGB6V9X7rI1Pc8Nwx5Cv2Q Nsy74UVJk/uFPV3om0dceaWT+gzOzoBHb+rcweBE6YvOuiQHXivurSBM4wnqNa8l nz/+QdPnpdUFBu5IZyYRcj7zAUu76c8pXetlij9ojX5zszYq5IMF9tXgl/M28OlY Q1emQijlP+XAhZV0DtuH2RTlHNjF9WkHihAPISk4Ryke -----END CERTIFICATE-----Generated at Wed Jan 7 23:48:12 2026 by rpki-client