This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/AuHoEVrnl-1LwAXvi9txhNUCs-o.roa File: AuHoEVrnl-1LwAXvi9txhNUCs-o.roa (raw, json) Hash identifier: LebcNjlhptCuSycNyI8Gq5rf+emsaNgyhh5yVvxRTjk= Subject key identifier: 02:E1:E8:11:5A:E7:97:ED:4B:C0:05:EF:8B:DB:71:84:D5:02:B3:EA Certificate issuer: /CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac Certificate serial: 019B76EB9A0E89C9027DE7333FED2C41DC22 Authority key identifier: B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/AuHoEVrnl-1LwAXvi9txhNUCs-o.roa Signing time: Thu 01 Jan 2026 00:18:30 +0000 ROA not before: Thu 01 Jan 2026 00:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215247 IP address blocks: 31.207.64.0/23 maxlen: 23 31.207.64.0/24 maxlen: 24 31.207.65.0/24 maxlen: 24 152.89.135.0/24 maxlen: 24 192.145.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:9a:0e:89:c9:02:7d:e7:33:3f:ed:2c:41:dc:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac Validity Not Before: Jan 1 00:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=02e1e8115ae797ed4bc005ef8bdb7184d502b3ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fa:6b:64:c8:c0:93:32:88:54:b0:19:26:f5: 3d:ac:73:04:a4:9b:72:f6:a7:d6:54:34:2e:1f:0a: 61:62:29:f5:55:db:26:16:c5:a3:84:a5:91:7c:f3: 95:2c:ca:c3:e9:eb:40:62:fa:76:40:aa:27:4d:b7: 1e:06:02:81:83:08:91:6f:26:ec:1c:d1:2d:fe:76: 53:b6:2b:85:9c:88:42:f6:5b:a3:0a:a2:e9:8a:c0: 94:17:16:8b:77:5f:52:4f:cc:1b:49:a2:88:f7:83: 42:f9:ef:24:89:6f:87:d2:39:cc:b6:05:ca:22:72: 97:b0:8e:1e:9d:09:bc:23:a1:7f:5f:19:08:8f:0f: 0a:2a:aa:a0:a4:3f:47:79:fb:ad:b4:80:6d:40:63: 46:e6:34:6b:c3:bc:e1:c8:13:63:a1:f8:96:73:29: e8:a4:7f:f3:3a:20:9d:ad:90:28:e4:5f:d1:38:3c: de:06:13:7d:38:4e:51:1c:b5:4f:ee:f6:99:39:a6: f0:af:bd:81:24:ab:ea:c1:f4:ac:29:be:15:32:98: 21:02:86:96:2c:99:d9:e1:d1:08:e6:e7:d3:bf:54: a7:1b:e7:01:71:39:9e:95:1e:c7:93:75:a5:c1:81: 87:dc:4a:e9:99:4b:09:69:40:9f:af:62:aa:0d:42: 30:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:E1:E8:11:5A:E7:97:ED:4B:C0:05:EF:8B:DB:71:84:D5:02:B3:EA X509v3 Authority Key Identifier: keyid:B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/AuHoEVrnl-1LwAXvi9txhNUCs-o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.207.64.0/23 152.89.135.0/24 192.145.19.0/24 Signature Algorithm: sha256WithRSAEncryption 06:6a:c1:f7:d6:10:27:94:b6:b0:30:a7:3e:89:eb:1d:24:04: 04:d0:cf:0b:f6:e5:1d:5e:4a:90:e2:92:93:a1:0b:e9:e5:61: e0:1f:93:9a:4d:28:77:59:83:c9:04:6f:65:f1:be:b1:84:01: 92:17:89:8b:0b:5d:88:59:7a:31:be:b7:27:f0:9e:f0:a3:d2: ec:99:69:ec:79:77:5e:3d:ce:da:1a:f6:ef:a8:7f:23:8e:bc: 69:50:b6:f7:a2:bf:64:55:64:ed:c2:95:71:00:15:4e:35:ff: 46:e9:83:f3:38:ad:c7:5b:5b:71:b4:60:62:e3:28:80:f9:e6: ed:bc:ef:35:97:75:1a:80:88:5b:68:5e:a4:ce:1e:23:9e:c8: 7a:cc:77:f8:c9:b5:76:ba:32:7f:ee:6f:11:62:c7:9f:ec:54: 4a:ff:f3:1e:74:55:a4:d0:58:45:a5:7a:81:62:7f:d4:d3:b9: 6c:f3:e1:89:5e:e5:8e:11:02:71:05:71:a4:06:05:b0:05:5e: 7a:89:2e:e2:34:d9:66:fb:83:c3:ec:98:15:c9:39:a3:c1:71: 03:d4:bd:0a:50:a6:cd:6d:d1:0f:7c:ba:43:36:f5:1e:84:25: 0b:c1:74:89:34:46:d0:a3:94:2f:10:0b:82:61:bb:6c:b2:84: 50:20:ef:76 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt265oOickCfeczP+0sQdwiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3MjU4OGMwMGVlZjcxNTgwOWViNWZkZDZkNjcxN2NjMjhj MGRmYWMwHhcNMjYwMTAxMDAxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMmUxZTgxMTVhZTc5N2VkNGJjMDA1ZWY4YmRiNzE4NGQ1MDJiM2VhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfprZMjAkzKIVLAZJvU9rHMEpJty 9qfWVDQuHwphYin1VdsmFsWjhKWRfPOVLMrD6etAYvp2QKonTbceBgKBgwiRbybs HNEt/nZTtiuFnIhC9lujCqLpisCUFxaLd19ST8wbSaKI94NC+e8kiW+H0jnMtgXK InKXsI4enQm8I6F/XxkIjw8KKqqgpD9HefuttIBtQGNG5jRrw7zhyBNjofiWcyno pH/zOiCdrZAo5F/RODzeBhN9OE5RHLVP7vaZOabwr72BJKvqwfSsKb4VMpghAoaW LJnZ4dEI5ufTv1SnG+cBcTmelR7Hk3WlwYGH3ErpmUsJaUCfr2KqDUIwXQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFALh6BFa55ftS8AF74vbcYTVArPqMB8GA1UdIwQY MBaAFLcliMAO73FYCetf3W1nF8wowN+sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUt N2E0MTI1NGVhYWNhLzEvQXVIb0VWcm5sLTFMd0FYdmk5dHhoTlVDcy1vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUtN2E0MTI1NGVhYWNh LzEvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBH89AAwQA mFmHAwQAwJETMA0GCSqGSIb3DQEBCwUAA4IBAQAGasH31hAnlLawMKc+iesdJAQE 0M8L9uUdXkqQ4pKToQvp5WHgH5OaTSh3WYPJBG9l8b6xhAGSF4mLC12IWXoxvrcn 8J7wo9LsmWnseXdePc7aGvbvqH8jjrxpULb3or9kVWTtwpVxABVONf9G6YPzOK3H W1txtGBi4yiA+ebtvO81l3UagIhbaF6kzh4jnsh6zHf4ybV2ujJ/7m8RYsef7FRK //MedFWk0FhFpXqBYn/U07ls8+GJXuWOEQJxBXGkBgWwBV56iS7iNNlm+4PD7JgV yTmjwXED1L0KUKbNbdEPfLpDNvUehCULwXSJNEbQo5QvEAuCYbtssoRQIO92 -----END CERTIFICATE-----Generated at Mon Jan 26 16:22:14 2026 by rpki-client