This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/erYr6bfOlCYx5LcPfxDgsD2084o.roa File: erYr6bfOlCYx5LcPfxDgsD2084o.roa (raw, json) Hash identifier: FZdshjpSRnCez7+158zp3tfmHcE/A4Q8302IB6oZ3qU= Subject key identifier: 7A:B6:2B:E9:B7:CE:94:26:31:E4:B7:0F:7F:10:E0:B0:3D:B4:F3:8A Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071 Certificate serial: 019B7E3818F828141B8FB903889BF36CB213 Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/erYr6bfOlCYx5LcPfxDgsD2084o.roa Signing time: Fri 02 Jan 2026 10:19:24 +0000 ROA not before: Fri 02 Jan 2026 10:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9123 IP address blocks: 5.188.207.0/24 maxlen: 24 31.184.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:18:f8:28:14:1b:8f:b9:03:88:9b:f3:6c:b2:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071 Validity Not Before: Jan 2 10:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7ab62be9b7ce942631e4b70f7f10e0b03db4f38a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b8:67:15:7e:eb:ac:e0:a1:f1:d0:80:86:5d: 7f:4c:1c:b7:23:a8:2d:07:66:e7:04:60:7b:c4:26: bc:29:50:f2:1d:df:bd:e4:a5:d7:a9:55:65:d7:e9: 3c:8a:65:1c:08:d2:6a:cc:16:26:82:4f:85:78:de: 96:e2:28:d3:ce:29:f9:58:12:4f:cd:83:5a:2c:5b: 10:b9:2d:9a:7e:5c:20:69:9d:91:21:bb:d0:4b:e7: ec:a3:3a:dc:59:0c:11:f7:60:19:ec:d2:76:45:aa: 58:3d:e2:22:9a:67:2f:ba:e7:62:4e:5a:94:2a:68: b7:94:24:c4:ec:b1:0e:b2:8b:b6:53:43:77:90:ef: 01:29:df:e9:22:91:40:39:4b:6f:a0:31:d1:6d:0b: cd:03:a4:98:51:28:95:6c:ff:90:15:be:86:a2:86: a9:54:3d:c3:c3:5f:16:43:51:be:47:88:de:d1:e0: cf:e1:5e:0b:90:be:74:83:d6:e4:f9:eb:c3:8f:a6: 7c:df:e1:34:83:ce:70:15:af:4b:fe:69:8e:6b:80: 7b:ec:4f:ba:b6:bb:ed:5d:3e:79:d9:96:67:16:7e: f2:44:58:2b:43:4c:aa:38:33:2a:16:c2:14:9c:25: 49:bd:ff:83:7e:36:c9:e6:68:88:8a:66:33:60:0e: 0a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:B6:2B:E9:B7:CE:94:26:31:E4:B7:0F:7F:10:E0:B0:3D:B4:F3:8A X509v3 Authority Key Identifier: keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/erYr6bfOlCYx5LcPfxDgsD2084o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.188.207.0/24 31.184.231.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:55:07:1a:5b:5f:4e:75:db:9a:71:49:de:fb:ca:51:6f:bc: 50:f0:e2:1d:08:64:13:5a:58:9e:e1:c9:e5:c6:1c:ca:67:4e: a8:48:55:0b:59:76:7e:9e:35:eb:0d:9c:14:32:ca:21:1c:45: 13:96:83:48:9b:89:b0:f4:98:74:00:82:02:73:72:b6:ca:8b: 37:88:62:79:97:8e:7d:0b:77:42:63:7e:ab:ac:a5:77:6c:b0: 3e:62:15:ca:9d:4a:f9:a3:e8:14:09:82:9e:c3:5d:db:b4:df: a4:c2:d4:d2:e9:90:22:c2:2c:6d:02:af:c3:69:be:1d:d8:7f: 95:b6:cc:28:23:7f:b2:9e:14:6e:06:ee:89:9c:58:ef:7a:06: d6:60:a5:25:ac:e6:f1:fc:52:35:80:3f:88:9d:2f:85:c4:e5: 12:b3:19:e5:72:ba:52:f6:8f:3a:3d:d5:ee:50:07:6e:3a:80: 01:21:d2:f3:01:12:9c:89:4b:ca:db:a6:f1:34:27:33:a4:46: 6e:38:57:34:ef:37:a1:a9:06:56:30:81:1a:bb:ac:4a:bf:2b: 62:59:88:8f:28:e8:26:76:22:8c:55:2e:fc:28:48:35:23:da: e9:7c:ed:5f:6d:96:5f:51:78:29:7d:01:0e:5f:d9:61:15:a2: 1e:7a:c4:9f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+OBj4KBQbj7kDiJvzbLITMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl Y2EwNzEwHhcNMjYwMTAyMTAxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YWI2MmJlOWI3Y2U5NDI2MzFlNGI3MGY3ZjEwZTBiMDNkYjRmMzhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrhnFX7rrOCh8dCAhl1/TBy3I6gt B2bnBGB7xCa8KVDyHd+95KXXqVVl1+k8imUcCNJqzBYmgk+FeN6W4ijTzin5WBJP zYNaLFsQuS2aflwgaZ2RIbvQS+fsozrcWQwR92AZ7NJ2RapYPeIimmcvuudiTlqU Kmi3lCTE7LEOsou2U0N3kO8BKd/pIpFAOUtvoDHRbQvNA6SYUSiVbP+QFb6Gooap VD3Dw18WQ1G+R4je0eDP4V4LkL50g9bk+evDj6Z83+E0g85wFa9L/mmOa4B77E+6 trvtXT552ZZnFn7yRFgrQ0yqODMqFsIUnCVJvf+DfjbJ5miIimYzYA4KhQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHq2K+m3zpQmMeS3D38Q4LA9tPOKMB8GA1UdIwQY MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt ODlkMDkyNDBjNDNiLzEvZXJZcjZiZk9sQ1l4NUxjUGZ4RGdzRDIwODRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABbzPAwQA H7jnMA0GCSqGSIb3DQEBCwUAA4IBAQCNVQcaW19OdduacUne+8pRb7xQ8OIdCGQT Wlie4cnlxhzKZ06oSFULWXZ+njXrDZwUMsohHEUTloNIm4mw9Jh0AIICc3K2yos3 iGJ5l459C3dCY36rrKV3bLA+YhXKnUr5o+gUCYKew13btN+kwtTS6ZAiwixtAq/D ab4d2H+VtswoI3+ynhRuBu6JnFjvegbWYKUlrObx/FI1gD+InS+FxOUSsxnlcrpS 9o86PdXuUAduOoABIdLzARKciUvK26bxNCczpEZuOFc07zehqQZWMIEau6xKvyti WYiPKOgmdiKMVS78KEg1I9rpfO1fbZZfUXgpfQEOX9lhFaIeesSf -----END CERTIFICATE-----Generated at Tue Jan 20 09:21:59 2026 by rpki-client