This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e26339-2c1c-4073-93ba-5b4231865fe6/1/ervwmGawL-thKbJfx2ElT0DQgDY.roa File: ervwmGawL-thKbJfx2ElT0DQgDY.roa (raw, json) Hash identifier: TI9OOBAPfi9DEXNUQAHoh0tvYvEvDl+N98+osWmM5yU= Subject key identifier: 7A:BB:F0:98:66:B0:2F:EB:61:29:B2:5F:C7:61:25:4F:40:D0:80:36 Certificate issuer: /CN=989adef1b1a979af372ec6755a0b5421a06771bb Certificate serial: 019C29A45D9C4B58A234C10E544D325D9598 Authority key identifier: 98:9A:DE:F1:B1:A9:79:AF:37:2E:C6:75:5A:0B:54:21:A0:67:71:BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJre8bGpea83LsZ1WgtUIaBncbs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e26339-2c1c-4073-93ba-5b4231865fe6/1/ervwmGawL-thKbJfx2ElT0DQgDY.roa Signing time: Wed 04 Feb 2026 17:12:43 +0000 ROA not before: Wed 04 Feb 2026 17:12:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35062 IP address blocks: 80.87.112.0/20 maxlen: 20 80.87.119.0/24 maxlen: 24 80.87.122.0/24 maxlen: 24 2001:4c98::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/e26339-2c1c-4073-93ba-5b4231865fe6/1/mJre8bGpea83LsZ1WgtUIaBncbs.crl rsync://rpki.ripe.net/repository/DEFAULT/05/e26339-2c1c-4073-93ba-5b4231865fe6/1/mJre8bGpea83LsZ1WgtUIaBncbs.mft rsync://rpki.ripe.net/repository/DEFAULT/mJre8bGpea83LsZ1WgtUIaBncbs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:29:a4:5d:9c:4b:58:a2:34:c1:0e:54:4d:32:5d:95:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=989adef1b1a979af372ec6755a0b5421a06771bb Validity Not Before: Feb 4 17:12:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7abbf09866b02feb6129b25fc761254f40d08036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:47:80:1d:e6:b1:8c:e7:63:27:8f:f9:96:47: f9:1e:11:52:5f:73:c7:08:10:c1:f6:9e:9c:82:45: fe:b7:03:5a:54:ee:4e:a2:25:aa:b2:5d:c5:ca:7a: 0a:99:aa:1b:c3:f9:66:8f:36:5f:f4:95:2c:50:88: 25:ff:f5:51:a7:6f:9c:a8:a0:b0:f3:56:47:f1:1a: 71:28:11:18:e2:95:bb:8f:5f:f6:99:97:67:b8:59: 96:1c:b1:b0:1e:f6:e8:81:8e:91:ef:76:57:23:ad: b2:ed:42:b4:3c:8f:40:63:57:ea:af:59:f4:df:4c: be:20:26:b8:69:17:4d:0d:61:31:e7:e3:6b:f0:19: 5b:49:36:37:ab:37:81:49:4b:34:e5:6c:e4:d1:07: f3:da:e0:75:8f:d1:31:04:a1:0d:92:81:a5:48:e5: 6c:bc:e8:21:b5:07:0b:b7:d6:8d:51:b8:7a:3f:2e: 58:91:67:16:e5:15:48:6a:b2:ff:c4:33:1d:ce:bb: 35:81:0e:50:03:ec:fb:25:e8:d0:cf:e8:8a:92:32: 28:bf:bf:0c:4d:52:cd:52:bf:62:05:eb:0a:e9:54: 0a:e0:d1:35:18:23:d9:8b:53:42:da:21:36:1e:03: 0a:49:8b:15:f4:30:b8:07:32:d1:b5:b9:bc:4b:70: 62:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:BB:F0:98:66:B0:2F:EB:61:29:B2:5F:C7:61:25:4F:40:D0:80:36 X509v3 Authority Key Identifier: keyid:98:9A:DE:F1:B1:A9:79:AF:37:2E:C6:75:5A:0B:54:21:A0:67:71:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJre8bGpea83LsZ1WgtUIaBncbs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e26339-2c1c-4073-93ba-5b4231865fe6/1/ervwmGawL-thKbJfx2ElT0DQgDY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e26339-2c1c-4073-93ba-5b4231865fe6/1/mJre8bGpea83LsZ1WgtUIaBncbs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.87.112.0/20 IPv6: 2001:4c98::/32 Signature Algorithm: sha256WithRSAEncryption ae:59:c8:63:6f:f4:7f:7c:9e:3b:30:2f:c2:93:b2:3d:08:68: 26:29:f9:c5:af:97:45:8c:e2:cc:f7:4b:34:cb:42:98:b8:6b: 62:8e:ae:21:7d:ec:42:d0:0a:b3:8b:8b:f2:f1:1f:39:21:35: 15:8a:10:90:d7:54:38:a2:44:ab:c1:b4:fb:1d:f1:38:55:e7: 5a:08:b0:61:38:ca:89:1f:ef:d7:8e:b6:72:0b:a7:59:4c:ff: 71:7f:35:7a:62:57:d6:a9:6c:97:95:02:ae:84:cb:1a:f6:21: f7:59:c6:0c:28:09:61:9f:82:e4:eb:7e:18:62:61:c6:76:b2: de:35:b3:53:8e:4c:5c:40:84:e8:f7:08:f1:b6:7a:9e:f4:0f: e1:d0:81:7c:a5:5e:84:98:20:1e:7a:f6:33:1b:e6:40:51:de: a6:a7:03:7c:11:91:06:69:f8:42:2a:05:b4:2c:b4:dd:bb:1f: c3:4a:d8:be:bc:8e:20:2a:f9:5e:a2:eb:a1:10:5b:c4:7c:b0: b2:52:0e:c2:91:21:3b:5a:94:2f:40:e7:d9:92:74:6e:2d:37: ea:78:90:67:d7:24:4b:ec:df:39:5c:30:af:5f:0c:7b:c3:4d: 63:69:fa:fe:e8:58:5d:ec:17:2a:36:b7:50:04:e6:05:e3:9d: e3:f2:4c:79 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZwppF2cS1iiNMEOVE0yXZWYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4OWFkZWYxYjFhOTc5YWYzNzJlYzY3NTVhMGI1NDIxYTA2 NzcxYmIwHhcNMjYwMjA0MTcxMjQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YWJiZjA5ODY2YjAyZmViNjEyOWIyNWZjNzYxMjU0ZjQwZDA4MDM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUeAHeaxjOdjJ4/5lkf5HhFSX3PH CBDB9p6cgkX+twNaVO5OoiWqsl3FynoKmaobw/lmjzZf9JUsUIgl//VRp2+cqKCw 81ZH8RpxKBEY4pW7j1/2mZdnuFmWHLGwHvbogY6R73ZXI62y7UK0PI9AY1fqr1n0 30y+ICa4aRdNDWEx5+Nr8BlbSTY3qzeBSUs05Wzk0Qfz2uB1j9ExBKENkoGlSOVs vOghtQcLt9aNUbh6Py5YkWcW5RVIarL/xDMdzrs1gQ5QA+z7JejQz+iKkjIov78M TVLNUr9iBesK6VQK4NE1GCPZi1NC2iE2HgMKSYsV9DC4BzLRtbm8S3Bi1QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFHq78JhmsC/rYSmyX8dhJU9A0IA2MB8GA1UdIwQY MBaAFJia3vGxqXmvNy7GdVoLVCGgZ3G7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUpyZThiR3BlYTgzTHNaMVdndFVJYUJuY2JzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9lMjYzMzktMmMxYy00MDczLTkzYmEt NWI0MjMxODY1ZmU2LzEvZXJ2d21HYXdMLXRoS2JKZngyRWxUMERRZ0RZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9lMjYzMzktMmMxYy00MDczLTkzYmEtNWI0MjMxODY1ZmU2 LzEvbUpyZThiR3BlYTgzTHNaMVdndFVJYUJuY2JzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQEUFdwMA0E AgACMAcDBQAgAUyYMA0GCSqGSIb3DQEBCwUAA4IBAQCuWchjb/R/fJ47MC/Ck7I9 CGgmKfnFr5dFjOLM90s0y0KYuGtijq4hfexC0Aqzi4vy8R85ITUVihCQ11Q4okSr wbT7HfE4VedaCLBhOMqJH+/XjrZyC6dZTP9xfzV6YlfWqWyXlQKuhMsa9iH3WcYM KAlhn4Lk634YYmHGdrLeNbNTjkxcQITo9wjxtnqe9A/h0IF8pV6EmCAeevYzG+ZA Ud6mpwN8EZEGafhCKgW0LLTdux/DSti+vI4gKvleouuhEFvEfLCyUg7CkSE7WpQv QOfZknRuLTfqeJBn1yRL7N85XDCvXwx7w01jafr+6Fhd7BcqNrdQBOYF453j8kx5 -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:31 2026 by rpki-client