This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/edqU5MKwXcmk9R3TQ5gBNPRdqGc.roa File: edqU5MKwXcmk9R3TQ5gBNPRdqGc.roa (raw, json) Hash identifier: wGxvsNFfMorfKE6W1muGItXAkaMQ6W5tB9Mwhk4a6c4= Subject key identifier: 79:DA:94:E4:C2:B0:5D:C9:A4:F5:1D:D3:43:98:01:34:F4:5D:A8:67 Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d Certificate serial: 019B7C12F0A0F6319FD96608876A2860B5F2 Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/edqU5MKwXcmk9R3TQ5gBNPRdqGc.roa Signing time: Fri 02 Jan 2026 00:19:34 +0000 ROA not before: Fri 02 Jan 2026 00:19:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24949 IP address blocks: 194.209.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:f0:a0:f6:31:9f:d9:66:08:87:6a:28:60:b5:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d Validity Not Before: Jan 2 00:19:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=79da94e4c2b05dc9a4f51dd343980134f45da867 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:d9:cb:fb:2f:e5:18:75:b4:89:fb:e3:ae:12: 59:29:ed:a0:1e:fd:01:b4:c4:fd:a1:28:2a:bd:4f: ec:db:13:fa:24:a7:97:81:f6:54:a2:06:7a:6f:84: 84:e0:66:93:e8:6b:de:7e:b6:a2:8f:2e:7b:b2:e7: df:ba:cd:85:b4:27:98:e1:47:8e:cf:89:b1:07:26: 4e:e1:9d:fe:dd:d9:68:b7:d4:ea:c8:48:ef:c9:57: 78:80:7c:a2:b4:68:cb:01:5e:fc:f8:60:5d:2e:64: c6:82:c0:9f:c9:1f:fc:70:5f:eb:2c:1f:be:51:61: af:07:84:f6:15:06:ce:95:d4:fc:fc:0b:01:28:53: e9:6c:1e:e3:3c:82:d0:e2:37:a1:c4:d5:05:0e:2e: 1f:5d:58:65:1c:6c:d0:31:94:36:5a:10:d2:fb:b6: 89:41:49:bd:b5:1f:ec:d5:bf:e3:e8:7d:97:26:7d: be:13:7a:ca:6c:9f:45:a3:f1:87:00:a9:3c:af:89: 86:22:a9:27:92:9d:59:1e:44:e0:88:e5:2d:a6:0b: ac:bf:33:6d:79:63:a6:58:31:98:95:d8:62:a1:d8: 8d:ce:1a:05:83:ac:fd:f9:75:44:f6:b2:f2:14:00: f5:2c:cf:f4:37:7d:d9:a8:41:cd:49:3f:39:3e:c4: 46:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:DA:94:E4:C2:B0:5D:C9:A4:F5:1D:D3:43:98:01:34:F4:5D:A8:67 X509v3 Authority Key Identifier: keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/edqU5MKwXcmk9R3TQ5gBNPRdqGc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.209.146.0/24 Signature Algorithm: sha256WithRSAEncryption b9:8f:ff:aa:49:af:96:35:fe:8c:1f:ec:59:5b:ad:fc:09:3b: ca:aa:11:2f:0f:88:69:93:13:ef:88:5b:e0:0b:73:e1:ba:ad: 4e:a4:bc:ca:ad:fd:30:37:39:7e:c5:d9:c7:42:e0:4b:66:86: 0b:93:1b:c1:1f:11:58:2f:b7:fa:f6:56:95:e2:65:85:65:31: f6:ee:ee:ec:49:6f:4c:ab:a8:b9:6b:21:00:1f:75:40:d7:95: 57:4a:cc:ff:e2:0c:d6:4e:7a:f0:f4:db:5c:ba:f1:0e:8e:51: e9:e9:e9:02:e3:71:63:d7:0c:80:8a:56:26:41:0e:12:e5:61: ea:d6:67:74:57:ef:e7:5c:e0:b2:eb:a8:76:71:22:dc:b1:d3: f0:cb:95:ab:6b:ea:40:02:1a:4c:4a:c4:53:f9:8c:f8:16:47: f3:cf:a6:30:52:8c:be:ff:b8:1d:22:33:39:1a:59:3d:94:fe: a8:67:be:ec:75:91:37:e1:07:eb:e6:1c:a9:74:02:85:61:fb: 9a:36:02:79:03:67:fa:49:6b:91:b4:01:4f:c6:01:1a:10:3e: 56:c9:72:2d:19:5b:de:f7:e7:8e:65:1d:43:f1:4c:c4:a2:d7: 45:fc:d2:02:26:33:c5:87:ab:96:4d:12:b8:f6:07:71:3a:50: 88:fe:ab:51 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EvCg9jGf2WYIh2ooYLXyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NjNmM2RiMTUyZTA1NWFjMTQ1YmRiYjQyOWUwMTg2NTQy MDRjOGQwHhcNMjYwMTAyMDAxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OWRhOTRlNGMyYjA1ZGM5YTRmNTFkZDM0Mzk4MDEzNGY0NWRhODY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtnL+y/lGHW0ifvjrhJZKe2gHv0B tMT9oSgqvU/s2xP6JKeXgfZUogZ6b4SE4GaT6Gvefraijy57suffus2FtCeY4UeO z4mxByZO4Z3+3dlot9TqyEjvyVd4gHyitGjLAV78+GBdLmTGgsCfyR/8cF/rLB++ UWGvB4T2FQbOldT8/AsBKFPpbB7jPILQ4jehxNUFDi4fXVhlHGzQMZQ2WhDS+7aJ QUm9tR/s1b/j6H2XJn2+E3rKbJ9Fo/GHAKk8r4mGIqknkp1ZHkTgiOUtpgusvzNt eWOmWDGYldhiodiNzhoFg6z9+XVE9rLyFAD1LM/0N33ZqEHNST85PsRGzQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHnalOTCsF3JpPUd00OYATT0XahnMB8GA1UdIwQY MBaAFCZj89sVLgVawUW9u0KeAYZUIEyNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt YmQxOTI2NzZjOWJiLzEvZWRxVTVNS3dYY21rOVIzVFE1Z0JOUFJkcUdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi LzEvSm1QejJ4VXVCVnJCUmIyN1FwNEJobFFnVEkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwtGSMA0G CSqGSIb3DQEBCwUAA4IBAQC5j/+qSa+WNf6MH+xZW638CTvKqhEvD4hpkxPviFvg C3Phuq1OpLzKrf0wNzl+xdnHQuBLZoYLkxvBHxFYL7f69laV4mWFZTH27u7sSW9M q6i5ayEAH3VA15VXSsz/4gzWTnrw9NtcuvEOjlHp6ekC43Fj1wyAilYmQQ4S5WHq 1md0V+/nXOCy66h2cSLcsdPwy5Wra+pAAhpMSsRT+Yz4Fkfzz6YwUoy+/7gdIjM5 Glk9lP6oZ77sdZE34Qfr5hypdAKFYfuaNgJ5A2f6SWuRtAFPxgEaED5WyXItGVve 9+eOZR1D8UzEotdF/NICJjPFh6uWTRK49gdxOlCI/qtR -----END CERTIFICATE-----Generated at Mon Jan 26 17:46:32 2026 by rpki-client