This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/eL0NgbnLQ4PNprs402X34zJ7OpQ.roa File: eL0NgbnLQ4PNprs402X34zJ7OpQ.roa (raw, json) Hash identifier: vd8iTH5yS9nCm6RDV9Y6kC+0LZ5Dg0OHmIfOqjJj2rQ= Subject key identifier: 78:BD:0D:81:B9:CB:43:83:CD:A6:BB:38:D3:65:F7:E3:32:7B:3A:94 Certificate issuer: /CN=4687dac0837ed31137a32496a6c93e9431c60784 Certificate serial: 019B7A5AD8455B04B6E4B5C13B4BA70B4F41 Authority key identifier: 46:87:DA:C0:83:7E:D3:11:37:A3:24:96:A6:C9:3E:94:31:C6:07:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/eL0NgbnLQ4PNprs402X34zJ7OpQ.roa Signing time: Thu 01 Jan 2026 16:18:52 +0000 ROA not before: Thu 01 Jan 2026 16:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 212.19.235.0/24 maxlen: 24 212.19.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.mft rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:d8:45:5b:04:b6:e4:b5:c1:3b:4b:a7:0b:4f:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4687dac0837ed31137a32496a6c93e9431c60784 Validity Not Before: Jan 1 16:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=78bd0d81b9cb4383cda6bb38d365f7e3327b3a94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e9:ef:5d:9c:12:cf:ad:b6:e6:b5:c0:91:9d: f2:ea:75:ee:a2:37:c6:f8:fd:d7:d1:79:99:18:05: 49:ab:be:0b:3c:ce:c6:9e:e8:db:c3:18:29:39:04: 17:d6:92:c5:e6:36:e5:27:cc:52:07:ef:54:d1:e0: 9c:19:7c:62:7e:c2:f1:49:6a:2c:ec:22:ea:e9:af: 7a:9f:b7:88:78:e9:3c:f0:a9:88:4e:63:53:c4:05: 35:d1:90:8b:23:96:e5:38:fe:f6:d4:80:31:4d:08: 05:e5:b9:8f:c5:2f:99:90:18:74:61:1c:9c:51:7f: 7a:e4:5d:cc:06:b4:a2:3f:97:8e:e0:60:16:31:8f: 5c:65:dc:e8:2e:7f:1f:b2:5f:fb:12:39:af:b7:c2: d8:32:74:da:6d:ba:b7:75:34:6c:9b:40:40:ca:97: 2e:7c:a3:ba:f2:aa:58:74:1c:52:de:59:c3:77:0a: 07:37:cc:ab:22:9e:a1:82:5b:85:28:cd:17:c6:c5: 71:5c:c0:95:77:30:0e:55:bb:c4:4e:85:02:fc:83: e7:98:b3:ac:4d:b6:3f:b2:51:ee:aa:55:5d:85:0d: e9:01:a0:16:8a:4e:82:a9:5f:bb:27:da:2c:10:4a: 60:94:a4:9c:9f:0d:1e:e6:f7:4e:97:94:ec:6f:cc: 93:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:BD:0D:81:B9:CB:43:83:CD:A6:BB:38:D3:65:F7:E3:32:7B:3A:94 X509v3 Authority Key Identifier: keyid:46:87:DA:C0:83:7E:D3:11:37:A3:24:96:A6:C9:3E:94:31:C6:07:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RofawIN-0xE3oySWpsk-lDHGB4Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/eL0NgbnLQ4PNprs402X34zJ7OpQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/1264f8-9c7d-40cd-9729-7089bc598d83/1/RofawIN-0xE3oySWpsk-lDHGB4Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.19.235.0-212.19.236.255 Signature Algorithm: sha256WithRSAEncryption 4e:12:b5:e2:10:12:7f:a6:38:cd:b4:cf:18:ac:98:8a:bb:4c: df:3d:e4:46:f0:00:bf:83:13:dd:f1:8f:6e:0e:ff:a3:21:e1: 12:bc:a3:e0:7a:d7:63:83:a3:ae:5f:cd:29:a8:f9:5a:2c:20: 0f:51:a4:2c:75:d9:ae:0e:18:2f:df:bd:17:5c:ec:08:96:6e: 5e:d2:9b:78:ba:ac:c0:37:14:37:44:50:8a:bd:ff:0f:d9:03: 9e:47:c6:35:ac:20:39:1a:51:cd:5c:cf:cd:59:87:b4:53:39: 31:1f:a0:36:0e:21:44:28:c1:4b:a8:5c:e2:a5:c5:27:c9:4e: f8:97:47:c2:68:72:94:1d:e4:b9:f8:a7:e7:ba:af:31:7e:47: a3:71:71:f2:13:1f:fb:1a:50:29:18:29:40:d7:2a:56:7f:82: e3:a5:06:c5:04:2f:83:fa:ae:45:80:72:14:7f:80:6e:3c:b9: b4:69:af:7b:8d:03:b3:45:6c:4a:2c:09:ae:6d:cc:48:0c:62: 04:c5:3d:1c:62:6b:67:8c:ec:ca:35:db:3b:ae:7d:d8:a0:fe: 1b:80:73:f4:8b:d4:06:da:ee:06:19:9f:bc:82:dd:36:e1:b9: 02:59:39:c5:66:7a:8b:89:d0:c2:d7:06:1b:6a:88:52:5f:09: 23:6f:ee:f7 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt6WthFWwS25LXBO0unC09BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2ODdkYWMwODM3ZWQzMTEzN2EzMjQ5NmE2YzkzZTk0MzFj NjA3ODQwHhcNMjYwMTAxMTYxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OGJkMGQ4MWI5Y2I0MzgzY2RhNmJiMzhkMzY1ZjdlMzMyN2IzYTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyenvXZwSz6225rXAkZ3y6nXuojfG +P3X0XmZGAVJq74LPM7GnujbwxgpOQQX1pLF5jblJ8xSB+9U0eCcGXxifsLxSWos 7CLq6a96n7eIeOk88KmITmNTxAU10ZCLI5blOP721IAxTQgF5bmPxS+ZkBh0YRyc UX965F3MBrSiP5eO4GAWMY9cZdzoLn8fsl/7Ejmvt8LYMnTabbq3dTRsm0BAypcu fKO68qpYdBxS3lnDdwoHN8yrIp6hgluFKM0XxsVxXMCVdzAOVbvEToUC/IPnmLOs TbY/slHuqlVdhQ3pAaAWik6CqV+7J9osEEpglKScnw0e5vdOl5Tsb8yT6wIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFHi9DYG5y0ODzaa7ONNl9+MyezqUMB8GA1UdIwQY MBaAFEaH2sCDftMRN6MklqbJPpQxxgeEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUm9mYXdJTi0weEUzb3lTV3Bzay1sREhHQjRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8xMjY0ZjgtOWM3ZC00MGNkLTk3Mjkt NzA4OWJjNTk4ZDgzLzEvZUwwTmdibkxRNFBOcHJzNDAyWDM0eko3T3BRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS8xMjY0ZjgtOWM3ZC00MGNkLTk3MjktNzA4OWJjNTk4ZDgz LzEvUm9mYXdJTi0weEUzb3lTV3Bzay1sREhHQjRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADUE+sD BADUE+wwDQYJKoZIhvcNAQELBQADggEBAE4SteIQEn+mOM20zxismIq7TN895Ebw AL+DE93xj24O/6Mh4RK8o+B612ODo65fzSmo+VosIA9RpCx12a4OGC/fvRdc7AiW bl7Sm3i6rMA3FDdEUIq9/w/ZA55HxjWsIDkaUc1cz81Zh7RTOTEfoDYOIUQowUuo XOKlxSfJTviXR8JocpQd5Ln4p+e6rzF+R6NxcfITH/saUCkYKUDXKlZ/guOlBsUE L4P6rkWAchR/gG48ubRpr3uNA7NFbEosCa5tzEgMYgTFPRxia2eM7Mo12zuufdig /huAc/SL1Aba7gYZn7yC3TbhuQJZOcVmeouJ0MLXBhtqiFJfCSNv7vc= -----END CERTIFICATE-----Generated at Fri Jan 9 17:05:12 2026 by rpki-client