This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/EsVKmOu6uyxuiNYOoPvvDwlXKWQ.roa File: EsVKmOu6uyxuiNYOoPvvDwlXKWQ.roa (raw, json) Hash identifier: ZJQ/gzwRRi9pvpHLyfjBfpX4ec0DDSgkEdKketimbco= Subject key identifier: 12:C5:4A:98:EB:BA:BB:2C:6E:88:D6:0E:A0:FB:EF:0F:09:57:29:64 Certificate issuer: /CN=3edf7b2d68ba76a0bd1ba7e9d29fac5852316b9c Certificate serial: 019B78A308636F781828F727D0329A6305F3 Authority key identifier: 3E:DF:7B:2D:68:BA:76:A0:BD:1B:A7:E9:D2:9F:AC:58:52:31:6B:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pt97LWi6dqC9G6fp0p-sWFIxa5w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/EsVKmOu6uyxuiNYOoPvvDwlXKWQ.roa Signing time: Thu 01 Jan 2026 08:18:29 +0000 ROA not before: Thu 01 Jan 2026 08:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44489 IP address blocks: 45.92.236.0/22 maxlen: 22 89.31.40.0/21 maxlen: 21 91.235.200.0/23 maxlen: 23 92.62.224.0/20 maxlen: 20 109.164.0.0/17 maxlen: 17 109.164.108.0/22 maxlen: 22 109.164.116.0/24 maxlen: 24 109.164.117.0/24 maxlen: 24 109.164.118.0/24 maxlen: 24 178.217.144.0/21 maxlen: 21 178.255.168.0/21 maxlen: 21 178.255.168.0/22 maxlen: 22 178.255.172.0/22 maxlen: 22 185.15.144.0/22 maxlen: 22 185.131.60.0/22 maxlen: 22 185.173.248.0/22 maxlen: 22 2a02:768::/32 maxlen: 32 2a03:3a00::/29 maxlen: 29 2a0b:7f00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/Pt97LWi6dqC9G6fp0p-sWFIxa5w.crl rsync://rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/Pt97LWi6dqC9G6fp0p-sWFIxa5w.mft rsync://rpki.ripe.net/repository/DEFAULT/Pt97LWi6dqC9G6fp0p-sWFIxa5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:08:63:6f:78:18:28:f7:27:d0:32:9a:63:05:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3edf7b2d68ba76a0bd1ba7e9d29fac5852316b9c Validity Not Before: Jan 1 08:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=12c54a98ebbabb2c6e88d60ea0fbef0f09572964 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:db:a7:25:f0:3f:81:62:e6:7c:04:e4:4b:5a: a7:f2:35:98:f8:0f:60:2a:ce:e9:74:d0:cd:ff:ec: fe:64:02:42:97:80:24:be:47:be:9e:b3:67:66:b5: ab:87:59:c0:35:3f:35:40:69:86:63:2b:53:6b:a3: 78:a2:00:c7:08:15:a8:f4:7a:f9:b5:82:53:c8:17: ed:9d:ce:59:7e:98:81:80:52:f0:83:79:b4:76:dc: 5c:1f:37:94:27:b7:87:0b:8b:e0:75:d2:e9:47:3d: 11:d9:9e:54:5e:de:fa:4e:80:66:95:3b:63:1e:22: 8e:02:05:3f:b4:a1:fe:ab:d5:a7:7d:98:e6:55:6f: b2:0e:c6:b5:67:12:9f:a2:b0:38:07:6f:91:f7:d1: ca:98:e9:ce:4c:23:21:80:60:32:f2:e3:0e:c7:0f: a3:01:64:9e:89:af:2a:1c:c6:cd:32:0e:2d:93:3e: 5a:a8:2d:fd:2d:fa:85:56:ea:59:c4:e9:07:ce:26: ca:15:e2:6a:c5:ee:47:74:5d:83:54:52:30:d2:9e: 00:f8:50:43:34:b0:d7:04:e1:88:5b:d3:cc:c7:32: 33:f2:d2:e4:10:69:19:c9:b4:01:30:93:34:9a:81: 88:2f:e1:b1:4e:2b:31:98:15:e2:ed:34:fb:32:32: ee:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:C5:4A:98:EB:BA:BB:2C:6E:88:D6:0E:A0:FB:EF:0F:09:57:29:64 X509v3 Authority Key Identifier: keyid:3E:DF:7B:2D:68:BA:76:A0:BD:1B:A7:E9:D2:9F:AC:58:52:31:6B:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pt97LWi6dqC9G6fp0p-sWFIxa5w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/EsVKmOu6uyxuiNYOoPvvDwlXKWQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/fe9d1d-4ade-4630-8aba-f8f0c7d662e7/1/Pt97LWi6dqC9G6fp0p-sWFIxa5w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.92.236.0/22 89.31.40.0/21 91.235.200.0/23 92.62.224.0/20 109.164.0.0/17 178.217.144.0/21 178.255.168.0/21 185.15.144.0/22 185.131.60.0/22 185.173.248.0/22 IPv6: 2a02:768::/32 2a03:3a00::/29 2a0b:7f00::/29 Signature Algorithm: sha256WithRSAEncryption d4:9b:ea:db:fc:9c:af:ef:4f:3b:75:ec:6a:56:25:59:6f:e0: 0a:87:0e:c1:93:eb:b8:6f:80:fc:3f:1e:66:2f:8e:85:5f:bc: 05:46:1b:d7:c5:6b:16:27:50:b1:ac:a9:8c:b4:ff:c4:6a:ec: ec:09:33:80:24:4f:a5:fc:bb:37:da:d1:d0:81:2c:f9:9e:44: 4d:9b:2e:80:b7:26:d1:27:00:4d:e9:b0:1f:89:a2:6d:a7:aa: 5e:2b:05:6c:72:4a:cf:f6:30:c2:fc:cf:3e:a2:9f:96:b9:b7: 93:f8:a3:21:49:43:47:02:c3:ef:ce:b7:1c:af:6c:8b:54:14: 6b:18:35:48:18:94:ff:72:cb:1e:12:36:d8:94:05:c8:bc:a6: 7b:b8:bb:f4:5a:04:ed:90:7b:f1:4b:b0:7c:76:3d:ba:84:3b: 00:e4:67:a0:34:29:c4:b1:84:6a:c0:5d:7f:cd:fd:99:46:de: 6a:55:c0:89:72:f2:67:35:30:78:b4:ed:a6:de:d2:b0:fe:77: 33:09:dc:28:37:25:87:3b:2d:a8:ad:49:cd:6a:0c:13:86:c5: 77:e4:74:e1:31:94:b1:2c:31:58:9e:12:df:74:ce:3f:b4:00: 60:dd:6d:ba:17:56:dc:8d:80:06:67:80:12:25:7c:aa:8f:09: a6:c8:cc:b2 -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgISAZt4owhjb3gYKPcn0DKaYwXzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlZGY3YjJkNjhiYTc2YTBiZDFiYTdlOWQyOWZhYzU4NTIz MTZiOWMwHhcNMjYwMTAxMDgxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMmM1NGE5OGViYmFiYjJjNmU4OGQ2MGVhMGZiZWYwZjA5NTcyOTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA69unJfA/gWLmfATkS1qn8jWY+A9g Ks7pdNDN/+z+ZAJCl4Akvke+nrNnZrWrh1nANT81QGmGYytTa6N4ogDHCBWo9Hr5 tYJTyBftnc5ZfpiBgFLwg3m0dtxcHzeUJ7eHC4vgddLpRz0R2Z5UXt76ToBmlTtj HiKOAgU/tKH+q9WnfZjmVW+yDsa1ZxKforA4B2+R99HKmOnOTCMhgGAy8uMOxw+j AWSeia8qHMbNMg4tkz5aqC39LfqFVupZxOkHzibKFeJqxe5HdF2DVFIw0p4A+FBD NLDXBOGIW9PMxzIz8tLkEGkZybQBMJM0moGIL+GxTisxmBXi7TT7MjLuwwIDAQAB o4ICXDCCAlgwHQYDVR0OBBYEFBLFSpjrurssbojWDqD77w8JVylkMB8GA1UdIwQY MBaAFD7fey1ounagvRun6dKfrFhSMWucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHQ5N0xXaTZkcUM5RzZmcDBwLXNXRkl4YTV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9mZTlkMWQtNGFkZS00NjMwLThhYmEt ZjhmMGM3ZDY2MmU3LzEvRXNWS21PdTZ1eXh1aU5ZT29QdnZEd2xYS1dRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9mZTlkMWQtNGFkZS00NjMwLThhYmEtZjhmMGM3ZDY2MmU3 LzEvUHQ5N0xXaTZkcUM5RzZmcDBwLXNXRkl4YTV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHIGCCsGAQUFBwEHAQH/BGMwYTBCBAIAATA8AwQCLVzsAwQD WR8oAwQBW+vIAwQEXD7gAwQHbaQAAwQDstmQAwQDsv+oAwQCuQ+QAwQCuYM8AwQC ua34MBsEAgACMBUDBQAqAgdoAwUDKgM6AAMFAyoLfwAwDQYJKoZIhvcNAQELBQAD ggEBANSb6tv8nK/vTzt17GpWJVlv4AqHDsGT67hvgPw/HmYvjoVfvAVGG9fFaxYn ULGsqYy0/8Rq7OwJM4AkT6X8uzfa0dCBLPmeRE2bLoC3JtEnAE3psB+Jom2nql4r BWxySs/2MML8zz6in5a5t5P4oyFJQ0cCw+/OtxyvbItUFGsYNUgYlP9yyx4SNtiU Bci8pnu4u/RaBO2Qe/FLsHx2PbqEOwDkZ6A0KcSxhGrAXX/N/ZlG3mpVwIly8mc1 MHi07abe0rD+dzMJ3Cg3JYc7LaitSc1qDBOGxXfkdOExlLEsMVieEt90zj+0AGDd bboXVtyNgAZngBIlfKqPCabIzLI= -----END CERTIFICATE-----Generated at Mon Feb 9 20:03:29 2026 by rpki-client