This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/EGhCTTfVVprxfgVg9w5atVlArWI.roa File: EGhCTTfVVprxfgVg9w5atVlArWI.roa (raw, json) Hash identifier: JDsw+DMZgV8QwOWY/aZzhS3S31WDwwwLV0nKa6xyF8c= Subject key identifier: 10:68:42:4D:37:D5:56:9A:F1:7E:05:60:F7:0E:5A:B5:59:40:AD:62 Certificate issuer: /CN=a00b42604b3f8e9e5b72f2329389af18ffbd20b8 Certificate serial: 019B7F817C58079F6D52782EA100C1F0C893 Authority key identifier: A0:0B:42:60:4B:3F:8E:9E:5B:72:F2:32:93:89:AF:18:FF:BD:20:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oAtCYEs_jp5bcvIyk4mvGP-9ILg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/EGhCTTfVVprxfgVg9w5atVlArWI.roa Signing time: Fri 02 Jan 2026 16:19:10 +0000 ROA not before: Fri 02 Jan 2026 16:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198060 IP address blocks: 193.56.209.0/24 maxlen: 24 193.56.211.0/24 maxlen: 24 193.56.231.0/24 maxlen: 24 2001:67c:1108::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.crl rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.mft rsync://rpki.ripe.net/repository/DEFAULT/oAtCYEs_jp5bcvIyk4mvGP-9ILg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:7c:58:07:9f:6d:52:78:2e:a1:00:c1:f0:c8:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a00b42604b3f8e9e5b72f2329389af18ffbd20b8 Validity Not Before: Jan 2 16:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1068424d37d5569af17e0560f70e5ab55940ad62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:42:c7:14:c0:a9:2e:b5:1f:04:91:71:c5:7d: 1d:73:24:44:4d:d0:29:1c:be:5b:9b:92:9b:be:47: a5:90:90:e6:59:cf:1e:2b:b7:4a:ec:0f:94:23:7b: 2d:43:70:1b:1c:bc:0b:39:70:be:ac:a3:47:18:f5: 07:c7:74:4d:ae:66:c4:18:e2:0f:84:78:16:03:08: bb:01:43:80:57:62:71:9f:ca:af:1a:69:8c:26:d1: 5e:4b:bd:f7:df:97:14:83:1b:bb:3a:d9:f8:8d:e6: 58:6f:7f:1b:15:20:d7:2f:27:30:67:cd:08:4a:40: b0:31:38:8e:e3:60:fb:f0:12:fb:55:c4:57:1b:53: 36:0f:ea:46:08:cf:22:c9:95:69:67:66:df:23:5e: f0:46:72:9e:73:7c:78:53:b2:7b:77:e6:cc:51:92: 7d:9d:3e:ff:b8:04:95:bd:95:22:23:cf:96:29:fc: 1a:a7:1f:cf:d2:d0:28:5c:b5:48:ff:f6:fb:da:b5: 93:9e:10:5c:67:1c:53:95:92:cb:7a:9f:60:4c:43: 25:38:14:5c:8e:85:13:17:13:b6:c3:74:e9:64:f5: 1e:6e:4d:1b:ef:e2:a3:4f:6e:6f:84:21:b1:fd:8c: e6:46:e0:c0:cb:9f:83:c9:54:7f:1e:0e:99:f8:f3: d1:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:68:42:4D:37:D5:56:9A:F1:7E:05:60:F7:0E:5A:B5:59:40:AD:62 X509v3 Authority Key Identifier: keyid:A0:0B:42:60:4B:3F:8E:9E:5B:72:F2:32:93:89:AF:18:FF:BD:20:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oAtCYEs_jp5bcvIyk4mvGP-9ILg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/EGhCTTfVVprxfgVg9w5atVlArWI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9f313-cd68-4fb5-bb8d-7396d8b640ad/1/oAtCYEs_jp5bcvIyk4mvGP-9ILg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.56.209.0/24 193.56.211.0/24 193.56.231.0/24 IPv6: 2001:67c:1108::/47 Signature Algorithm: sha256WithRSAEncryption 4e:6c:2c:64:ba:f7:d4:41:12:fb:d6:b5:64:49:62:cf:6f:96: 4d:f0:41:c1:e4:e1:ac:a1:66:06:70:3c:ba:f2:84:07:d2:ad: 38:09:4c:5b:07:76:ba:b5:48:ed:65:94:15:7a:9a:b4:64:d1: 31:e8:74:ae:fe:20:2c:84:b2:bc:9a:da:ca:4e:0d:79:a4:b1: 8c:f7:45:05:21:96:1b:05:74:cf:d8:0e:69:a8:25:a6:58:e5: 1a:65:be:e9:a2:64:6f:22:6e:07:4b:df:97:7d:f3:87:f1:b3: ce:9e:e4:46:35:8c:f3:91:2c:4c:99:60:9e:86:32:14:c8:db: 86:f7:f8:04:86:c6:f2:c2:90:ce:c4:d0:b9:7a:ba:58:8c:a4: bb:97:08:7d:d7:88:8d:f2:5d:06:de:7a:26:d4:af:30:01:69: ff:96:de:bc:b8:7e:52:55:e0:94:f8:e5:34:73:6f:8f:80:ed: c1:2b:14:70:da:e2:ff:b9:f8:7b:bb:46:7d:25:28:c7:02:a6: c4:e4:10:5f:19:5a:6d:12:0f:b2:57:d0:8a:98:13:21:62:c5: 6c:e8:2f:26:1f:9b:c9:57:51:08:9c:1b:18:17:4c:af:91:f8: 52:ae:28:32:a4:8c:59:6d:ce:e0:08:59:a6:ea:cd:6e:44:b6: 83:3a:52:6a -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt/gXxYB59tUnguoQDB8MiTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwMGI0MjYwNGIzZjhlOWU1YjcyZjIzMjkzODlhZjE4ZmZi ZDIwYjgwHhcNMjYwMTAyMTYxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDY4NDI0ZDM3ZDU1NjlhZjE3ZTA1NjBmNzBlNWFiNTU5NDBhZDYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxULHFMCpLrUfBJFxxX0dcyRETdAp HL5bm5KbvkelkJDmWc8eK7dK7A+UI3stQ3AbHLwLOXC+rKNHGPUHx3RNrmbEGOIP hHgWAwi7AUOAV2Jxn8qvGmmMJtFeS73335cUgxu7Otn4jeZYb38bFSDXLycwZ80I SkCwMTiO42D78BL7VcRXG1M2D+pGCM8iyZVpZ2bfI17wRnKec3x4U7J7d+bMUZJ9 nT7/uASVvZUiI8+WKfwapx/P0tAoXLVI//b72rWTnhBcZxxTlZLLep9gTEMlOBRc joUTFxO2w3TpZPUebk0b7+KjT25vhCGx/YzmRuDAy5+DyVR/Hg6Z+PPRVwIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFBBoQk031Vaa8X4FYPcOWrVZQK1iMB8GA1UdIwQY MBaAFKALQmBLP46eW3LyMpOJrxj/vSC4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0F0Q1lFc19qcDViY3ZJeWs0bXZHUC05SUxnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9lOWYzMTMtY2Q2OC00ZmI1LWJiOGQt NzM5NmQ4YjY0MGFkLzEvRUdoQ1RUZlZWcHJ4ZmdWZzl3NWF0VmxBcldJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9lOWYzMTMtY2Q2OC00ZmI1LWJiOGQtNzM5NmQ4YjY0MGFk LzEvb0F0Q1lFc19qcDViY3ZJeWs0bXZHUC05SUxnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQAwTjRAwQA wTjTAwQAwTjnMA8EAgACMAkDBwEgAQZ8EQgwDQYJKoZIhvcNAQELBQADggEBAE5s LGS699RBEvvWtWRJYs9vlk3wQcHk4ayhZgZwPLryhAfSrTgJTFsHdrq1SO1llBV6 mrRk0THodK7+ICyEsrya2spODXmksYz3RQUhlhsFdM/YDmmoJaZY5RplvumiZG8i bgdL35d984fxs86e5EY1jPORLEyZYJ6GMhTI24b3+ASGxvLCkM7E0Ll6uliMpLuX CH3XiI3yXQbeeibUrzABaf+W3ry4flJV4JT45TRzb4+A7cErFHDa4v+5+Hu7Rn0l KMcCpsTkEF8ZWm0SD7JX0IqYEyFixWzoLyYfm8lXUQicGxgXTK+R+FKuKDKkjFlt zuAIWabqzW5EtoM6Umo= -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:42 2026 by rpki-client