This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/eXvJz8E5f7iflgzprLFIuUaQJPE.roa File: eXvJz8E5f7iflgzprLFIuUaQJPE.roa (raw, json) Hash identifier: 2rs37Oc0ml+kJciqioNIy6wlcqnOKKr/edO5meeZYZg= Subject key identifier: 79:7B:C9:CF:C1:39:7F:B8:9F:96:0C:E9:AC:B1:48:B9:46:90:24:F1 Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Certificate serial: 019B7AC7C74C71E1C860C91C966A57641120 Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/eXvJz8E5f7iflgzprLFIuUaQJPE.roa Signing time: Thu 01 Jan 2026 18:17:51 +0000 ROA not before: Thu 01 Jan 2026 18:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28699 IP address blocks: 109.205.120.0/21 maxlen: 21 109.205.126.0/24 maxlen: 24 185.27.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:c7:4c:71:e1:c8:60:c9:1c:96:6a:57:64:11:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Validity Not Before: Jan 1 18:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=797bc9cfc1397fb89f960ce9acb148b9469024f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:84:b2:4b:61:7e:db:83:5e:86:0b:90:c2:dc: 23:31:64:34:34:24:ed:2f:82:ce:47:11:a2:75:23: ee:e5:4e:4d:6b:2c:92:fb:3b:c6:16:b5:94:17:66: c7:de:eb:1e:27:17:1c:ec:ba:12:34:3d:89:0c:03: 6e:a3:64:56:db:08:68:64:2c:4b:80:fe:b7:ad:2b: 6c:51:09:f9:3a:b9:2c:50:53:7d:e3:af:20:07:8a: 7f:8b:1d:79:88:ba:88:f5:a7:40:91:5f:5b:47:f3: 9d:f1:b4:24:a2:1c:47:95:dd:f4:5d:a6:c6:f8:1c: ac:ca:01:00:00:d7:42:98:ba:75:62:84:25:c0:3c: fa:07:71:50:e4:6f:8c:db:d6:65:30:88:82:8a:3d: 37:a8:53:96:db:07:0d:d5:b2:31:01:0c:46:09:b2: 14:ac:92:c5:e0:09:e1:dc:2e:3f:65:98:e2:75:23: ef:c4:30:a2:83:68:8a:94:42:4f:07:4d:97:99:b4: 8c:36:34:dd:11:6f:9c:6c:1d:c7:2d:c1:74:ed:b3: 43:b2:88:c8:29:0a:df:18:19:97:c0:74:46:5d:c7: a0:86:0a:b2:f4:d5:2f:24:9d:4a:e5:ec:01:2f:ac: f8:0b:a7:fc:b3:71:0a:44:8b:cf:e7:8a:60:26:8b: 4f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:7B:C9:CF:C1:39:7F:B8:9F:96:0C:E9:AC:B1:48:B9:46:90:24:F1 X509v3 Authority Key Identifier: keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/eXvJz8E5f7iflgzprLFIuUaQJPE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.205.120.0/21 185.27.92.0/22 Signature Algorithm: sha256WithRSAEncryption 98:4b:f3:b8:77:9d:f9:65:84:7b:b5:0f:cf:1d:1f:a0:b9:19: 21:a3:70:20:06:2e:4d:63:33:06:73:41:ea:49:53:fc:79:a6: d9:de:95:6a:92:03:ef:30:e1:70:0f:48:74:b1:85:84:8e:59: 7c:e7:f9:08:7e:b7:32:ea:84:30:33:23:1c:15:80:85:1f:96: fc:b0:0c:bd:83:c6:9b:d5:3a:2b:a3:76:dc:26:d3:68:dd:56: bb:7b:bf:45:d4:5b:39:d8:c9:5d:00:ab:c2:6c:49:c9:19:65: 06:b3:65:03:cb:02:70:99:0b:e4:0a:62:fa:48:91:9f:03:d8: d1:25:35:b7:65:1d:65:dc:0c:fc:e4:eb:d3:32:de:0a:4f:4e: ea:d7:92:a7:cd:d7:4b:05:15:0e:34:ac:ce:15:86:3e:eb:ae: 4f:73:cf:e6:c4:91:9c:b6:c0:f4:07:c1:22:9c:5b:a8:b4:2c: 41:b9:29:2a:9c:0c:a1:18:23:2d:ff:47:92:ca:a7:2b:36:13: ff:df:ac:e6:e7:ec:8e:27:69:d1:2f:e2:22:af:ff:29:e1:19: 15:dc:74:7c:cf:ea:9d:8f:d7:75:c0:81:0a:df:b9:f3:b7:b8: 9b:ca:1f:9e:86:fa:76:71:56:11:f4:6f:56:53:d6:37:49:0f: db:08:03:fd -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6x8dMceHIYMkclmpXZBEgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm YzQxZWMwHhcNMjYwMTAxMTgxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OTdiYzljZmMxMzk3ZmI4OWY5NjBjZTlhY2IxNDhiOTQ2OTAyNGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoSyS2F+24NehguQwtwjMWQ0NCTt L4LORxGidSPu5U5NayyS+zvGFrWUF2bH3useJxcc7LoSND2JDANuo2RW2whoZCxL gP63rStsUQn5OrksUFN9468gB4p/ix15iLqI9adAkV9bR/Od8bQkohxHld30XabG +BysygEAANdCmLp1YoQlwDz6B3FQ5G+M29ZlMIiCij03qFOW2wcN1bIxAQxGCbIU rJLF4Anh3C4/ZZjidSPvxDCig2iKlEJPB02XmbSMNjTdEW+cbB3HLcF07bNDsojI KQrfGBmXwHRGXceghgqy9NUvJJ1K5ewBL6z4C6f8s3EKRIvP54pgJotPJwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHl7yc/BOX+4n5YM6ayxSLlGkCTxMB8GA1UdIwQY MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt NTU1NGQ2ZTE2ODZmLzEvZVh2Sno4RTVmN2lmbGd6cHJMRkl1VWFRSlBFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDbc14AwQC uRtcMA0GCSqGSIb3DQEBCwUAA4IBAQCYS/O4d535ZYR7tQ/PHR+guRkho3AgBi5N YzMGc0HqSVP8eabZ3pVqkgPvMOFwD0h0sYWEjll85/kIfrcy6oQwMyMcFYCFH5b8 sAy9g8ab1Toro3bcJtNo3Va7e79F1Fs52MldAKvCbEnJGWUGs2UDywJwmQvkCmL6 SJGfA9jRJTW3ZR1l3Az85OvTMt4KT07q15KnzddLBRUONKzOFYY+665Pc8/mxJGc tsD0B8EinFuotCxBuSkqnAyhGCMt/0eSyqcrNhP/36zm5+yOJ2nRL+Iir/8p4RkV 3HR8z+qdj9d1wIEK37nzt7ibyh+ehvp2cVYR9G9WU9Y3SQ/bCAP9 -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:52 2026 by rpki-client