This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/eTOwOWQzkIQMSFcd7XvHaxwHhHg.roa File: eTOwOWQzkIQMSFcd7XvHaxwHhHg.roa (raw, json) Hash identifier: wPtbDFR3QsqzxzI7/DNrIndvuS59lQkNZu8MuJSmfaE= Subject key identifier: 79:33:B0:39:64:33:90:84:0C:48:57:1D:ED:7B:C7:6B:1C:07:84:78 Certificate issuer: /CN=0471881778a1e12f6d97c5288efd4cb9563d1d49 Certificate serial: 019B7CECC776617D8CAEADEF7EB5B195E968 Authority key identifier: 04:71:88:17:78:A1:E1:2F:6D:97:C5:28:8E:FD:4C:B9:56:3D:1D:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BHGIF3ih4S9tl8Uojv1MuVY9HUk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/eTOwOWQzkIQMSFcd7XvHaxwHhHg.roa Signing time: Fri 02 Jan 2026 04:17:30 +0000 ROA not before: Fri 02 Jan 2026 04:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204050 IP address blocks: 185.116.53.0/24 maxlen: 24 185.116.54.0/24 maxlen: 24 185.116.55.0/24 maxlen: 24 2a06:7a40:1::/48 maxlen: 48 2a06:7a40:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.mft rsync://rpki.ripe.net/repository/DEFAULT/BHGIF3ih4S9tl8Uojv1MuVY9HUk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 19:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:c7:76:61:7d:8c:ae:ad:ef:7e:b5:b1:95:e9:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0471881778a1e12f6d97c5288efd4cb9563d1d49 Validity Not Before: Jan 2 04:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7933b039643390840c48571ded7bc76b1c078478 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:89:73:5d:e3:8d:85:01:c3:ed:30:97:dd:fc: ea:e1:bf:c1:33:52:6e:29:7d:4b:c9:2d:95:3b:19: aa:2a:50:6d:9f:a2:66:c0:84:0c:02:4e:fd:f3:4d: 33:7f:5c:0c:f8:7e:71:d8:f6:ce:9e:58:62:39:ac: 1d:6f:e2:f4:eb:fe:ad:a4:5c:d6:68:6a:03:f6:e3: cb:48:69:f4:79:35:67:4e:cc:b1:11:57:4c:de:91: 93:95:6b:13:85:1c:aa:45:3d:19:ec:f9:ea:5b:a3: 74:69:b2:46:72:51:42:54:59:82:49:3e:6e:ad:fc: 11:11:b6:d2:b9:09:a4:cb:0f:07:4a:48:9e:ed:5f: 9d:d9:20:71:82:43:3a:f1:24:20:0c:0e:ca:60:cc: 80:17:29:d3:56:48:a3:81:e1:ed:ae:04:4d:db:66: 6a:c9:a7:e6:1f:b6:57:00:7e:08:c9:2f:3b:d7:38: d7:46:c7:9c:73:8d:aa:8f:1b:f3:bf:a5:e9:ef:10: 62:8a:f7:ba:f4:5e:89:8c:4f:8f:7f:c9:a9:4b:c0: 68:d3:0f:78:0c:64:e4:a2:b3:63:20:71:5b:29:43: 06:89:79:37:f0:f2:1a:4f:44:e8:88:eb:be:1f:27: c1:e3:a9:d6:f5:1f:23:09:c2:ed:93:ef:06:36:44: a4:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:33:B0:39:64:33:90:84:0C:48:57:1D:ED:7B:C7:6B:1C:07:84:78 X509v3 Authority Key Identifier: keyid:04:71:88:17:78:A1:E1:2F:6D:97:C5:28:8E:FD:4C:B9:56:3D:1D:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHGIF3ih4S9tl8Uojv1MuVY9HUk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/eTOwOWQzkIQMSFcd7XvHaxwHhHg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.116.53.0-185.116.55.255 IPv6: 2a06:7a40:1::-2a06:7a40:2:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 71:31:7d:7a:4a:bc:ce:4d:d4:23:e2:5f:d3:0b:35:ae:ae:ed: 65:56:52:58:ad:a9:fa:cc:92:dc:04:67:24:89:60:5d:1f:87: 16:bf:bd:74:98:f7:e6:b9:9e:eb:21:2d:46:d4:54:c1:56:a1: 12:93:da:34:e1:01:0a:c7:6e:5a:a3:0f:8f:7b:68:58:5e:59: 8e:bf:a4:3b:eb:7b:7d:8f:7f:09:2e:ec:bb:7a:bb:96:20:4d: ac:ed:45:09:8d:e9:13:72:28:a8:b7:d2:62:e4:c0:0a:7a:5b: 4f:7e:c3:c7:c8:e0:8a:39:67:7b:e5:cf:48:82:3a:0f:32:4f: 2e:33:40:41:a1:de:d6:2c:6b:ac:74:d4:60:22:f3:7a:1e:1f: f4:86:ca:c3:fc:9f:bc:ef:59:8f:12:d9:95:15:84:e4:ed:9f: 7c:93:f8:20:2e:40:91:93:32:87:13:8f:25:92:59:d7:30:06: 66:eb:f0:13:a3:70:dc:45:61:ea:8d:dc:c7:2b:23:3d:59:57: 33:74:1d:19:96:13:b4:3a:8b:b8:69:a7:ae:d4:33:9e:67:af: 56:cc:12:58:c1:bf:47:f9:a1:3c:ea:00:3f:38:6d:6d:1a:2f: 71:a6:81:c9:47:94:55:98:94:40:b2:aa:f1:6d:e1:ad:61:01: d5:8b:00:7e -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt87Md2YX2Mrq3vfrWxleloMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NzE4ODE3NzhhMWUxMmY2ZDk3YzUyODhlZmQ0Y2I5NTYz ZDFkNDkwHhcNMjYwMTAyMDQxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OTMzYjAzOTY0MzM5MDg0MGM0ODU3MWRlZDdiYzc2YjFjMDc4NDc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYlzXeONhQHD7TCX3fzq4b/BM1Ju KX1LyS2VOxmqKlBtn6JmwIQMAk79800zf1wM+H5x2PbOnlhiOawdb+L06/6tpFzW aGoD9uPLSGn0eTVnTsyxEVdM3pGTlWsThRyqRT0Z7PnqW6N0abJGclFCVFmCST5u rfwREbbSuQmkyw8HSkie7V+d2SBxgkM68SQgDA7KYMyAFynTVkijgeHtrgRN22Zq yafmH7ZXAH4IyS871zjXRsecc42qjxvzv6Xp7xBiive69F6JjE+Pf8mpS8Bo0w94 DGTkorNjIHFbKUMGiXk38PIaT0ToiOu+HyfB46nW9R8jCcLtk+8GNkSkEwIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFHkzsDlkM5CEDEhXHe17x2scB4R4MB8GA1UdIwQY MBaAFARxiBd4oeEvbZfFKI79TLlWPR1JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkhHSUYzaWg0Uzl0bDhVb2p2MU11Vlk5SFVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy80YThjZmEtNTQyYi00MGIyLThhMDgt NDJlYTQ3YjEyNTM3LzEvZVRPd09XUXprSVFNU0ZjZDdYdkhheHdIaEhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy80YThjZmEtNTQyYi00MGIyLThhMDgtNDJlYTQ3YjEyNTM3 LzEvQkhHSUYzaWg0Uzl0bDhVb2p2MU11Vlk5SFVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAUBAIAATAOMAwDBAC5dDUD BAO5dDAwGgQCAAIwFDASAwcAKgZ6QAABAwcAKgZ6QAACMA0GCSqGSIb3DQEBCwUA A4IBAQBxMX16SrzOTdQj4l/TCzWuru1lVlJYran6zJLcBGckiWBdH4cWv710mPfm uZ7rIS1G1FTBVqESk9o04QEKx25aow+Pe2hYXlmOv6Q763t9j38JLuy7eruWIE2s 7UUJjekTciiot9Ji5MAKeltPfsPHyOCKOWd75c9IgjoPMk8uM0BBod7WLGusdNRg IvN6Hh/0hsrD/J+871mPEtmVFYTk7Z98k/ggLkCRkzKHE48lklnXMAZm6/ATo3Dc RWHqjdzHKyM9WVczdB0ZlhO0Oou4aaeu1DOeZ69WzBJYwb9H+aE86gA/OG1tGi9x poHJR5RVmJRAsqrxbeGtYQHViwB+ -----END CERTIFICATE-----Generated at Tue Jan 20 04:45:26 2026 by rpki-client