This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/esdDEmlA_vp-DUa3L78lRMSFDrg.roa File: esdDEmlA_vp-DUa3L78lRMSFDrg.roa (raw, json) Hash identifier: 89EU1646sjMts7fuWu8bk/NpsMoyPAALSAlqPCHzEdo= Subject key identifier: 7A:C7:43:12:69:40:FE:FA:7E:0D:46:B7:2F:BF:25:44:C4:85:0E:B8 Certificate issuer: /CN=1bdba013655b9bb0caa285d75c142c1ee30f8854 Certificate serial: 019B7EA6D0E6A9017A1F31EBEB19C58762D6 Authority key identifier: 1B:DB:A0:13:65:5B:9B:B0:CA:A2:85:D7:5C:14:2C:1E:E3:0F:88:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/esdDEmlA_vp-DUa3L78lRMSFDrg.roa Signing time: Fri 02 Jan 2026 12:20:20 +0000 ROA not before: Fri 02 Jan 2026 12:20:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62054 IP address blocks: 193.176.252.0/24 maxlen: 24 193.176.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:d0:e6:a9:01:7a:1f:31:eb:eb:19:c5:87:62:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bdba013655b9bb0caa285d75c142c1ee30f8854 Validity Not Before: Jan 2 12:20:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7ac743126940fefa7e0d46b72fbf2544c4850eb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:af:86:4c:eb:5d:79:36:83:12:88:66:5f:bc: dc:ad:35:bb:51:44:f2:08:4c:af:c8:f9:df:14:89: ca:a7:7a:22:b4:31:98:2c:0e:7b:3a:b3:72:19:95: 49:86:16:e0:a7:80:fa:41:1a:3f:4d:8d:ae:d6:35: 7b:f1:51:71:86:c5:98:94:05:e5:82:44:cd:55:6a: b6:bc:eb:47:9c:15:61:86:e0:a8:33:05:68:a4:dc: 5b:b9:0a:e5:89:8f:56:2d:c3:39:a1:18:ca:56:d9: 8d:14:2b:a2:ba:d0:58:5c:91:1d:5c:7c:a1:dd:e1: aa:53:08:fb:30:76:f3:ea:b3:56:5d:d8:eb:ae:41: b0:81:64:d4:e8:5f:78:47:9e:44:4a:07:20:4a:52: 41:63:1a:17:f9:f4:a9:ba:e5:39:2c:6b:e3:89:5a: 8b:f9:e3:19:af:df:86:ed:7b:14:00:c3:d9:35:69: 34:2a:7c:c6:7b:ed:85:cd:b9:10:d7:7d:1f:15:39: 28:3c:94:e1:e7:8f:cd:b1:96:15:80:2b:ff:8d:b7: 77:93:6e:f5:27:06:ea:37:28:96:74:5e:33:48:66: 83:45:cb:5b:19:ae:69:cf:5f:61:66:29:43:55:75: 4c:97:d9:93:ce:49:0e:e2:d2:63:1d:ae:60:0c:7a: bd:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:C7:43:12:69:40:FE:FA:7E:0D:46:B7:2F:BF:25:44:C4:85:0E:B8 X509v3 Authority Key Identifier: keyid:1B:DB:A0:13:65:5B:9B:B0:CA:A2:85:D7:5C:14:2C:1E:E3:0F:88:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/esdDEmlA_vp-DUa3L78lRMSFDrg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.176.252.0/24 193.176.254.0/24 Signature Algorithm: sha256WithRSAEncryption 79:56:7f:e6:e6:dc:a9:b3:99:0c:36:dd:c4:be:7d:c9:fc:a4: d3:9b:56:ee:ee:6d:47:95:51:07:7f:0f:4e:33:ee:a3:46:b6: 90:96:c0:fa:06:f0:dc:4a:28:26:4d:26:c2:fb:eb:fb:9c:70: 7b:74:e7:2d:44:b8:35:10:f0:9c:c0:d2:b8:81:42:03:78:db: 94:43:84:23:3e:5c:5c:d5:20:25:5d:f5:80:34:eb:27:d3:4e: 71:df:72:b9:34:4c:96:da:24:23:df:e2:31:15:9d:64:7c:fe: 68:d0:52:1a:b8:de:34:61:8c:60:fc:33:ba:fd:01:af:0e:b0: 40:96:ac:d6:0a:88:a2:7b:ee:95:7c:10:e6:dd:f6:fb:e6:c3: e8:dd:48:3c:d7:91:8d:5b:66:04:14:0d:5a:57:22:8d:c3:00: 47:86:ba:21:3d:4a:fa:62:2c:64:c4:cd:9e:d1:34:e5:61:7e: cf:89:f1:86:be:61:a2:24:0b:a8:cc:6c:34:16:9d:8a:c4:e8: 00:a2:fb:24:05:fd:1b:71:84:71:af:b2:74:42:3e:12:00:58: 3f:8e:69:c4:1a:b6:c8:ae:73:93:68:72:2c:7d:4e:f0:2c:68: b8:db:57:8f:a9:18:a9:d8:64:6b:36:fa:52:ec:20:81:8c:9c: 91:9d:70:3c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+ptDmqQF6HzHr6xnFh2LWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiZGJhMDEzNjU1YjliYjBjYWEyODVkNzVjMTQyYzFlZTMw Zjg4NTQwHhcNMjYwMTAyMTIyMDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YWM3NDMxMjY5NDBmZWZhN2UwZDQ2YjcyZmJmMjU0NGM0ODUwZWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16+GTOtdeTaDEohmX7zcrTW7UUTy CEyvyPnfFInKp3oitDGYLA57OrNyGZVJhhbgp4D6QRo/TY2u1jV78VFxhsWYlAXl gkTNVWq2vOtHnBVhhuCoMwVopNxbuQrliY9WLcM5oRjKVtmNFCuiutBYXJEdXHyh 3eGqUwj7MHbz6rNWXdjrrkGwgWTU6F94R55ESgcgSlJBYxoX+fSpuuU5LGvjiVqL +eMZr9+G7XsUAMPZNWk0KnzGe+2FzbkQ130fFTkoPJTh54/NsZYVgCv/jbd3k271 JwbqNyiWdF4zSGaDRctbGa5pz19hZilDVXVMl9mTzkkO4tJjHa5gDHq9kwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHrHQxJpQP76fg1Gty+/JUTEhQ64MB8GA1UdIwQY MBaAFBvboBNlW5uwyqKF11wULB7jD4hUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzl1Z0UyVmJtN0RLb29YWFhCUXNIdU1QaUZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi82YTI5NDYtZjBhNC00ZTg1LTkzMGUt ZDRlZGYxNmUwOTc4LzEvZXNkREVtbEFfdnAtRFVhM0w3OGxSTVNGRHJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi82YTI5NDYtZjBhNC00ZTg1LTkzMGUtZDRlZGYxNmUwOTc4 LzEvRzl1Z0UyVmJtN0RLb29YWFhCUXNIdU1QaUZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwbD8AwQA wbD+MA0GCSqGSIb3DQEBCwUAA4IBAQB5Vn/m5typs5kMNt3Evn3J/KTTm1bu7m1H lVEHfw9OM+6jRraQlsD6BvDcSigmTSbC++v7nHB7dOctRLg1EPCcwNK4gUIDeNuU Q4QjPlxc1SAlXfWANOsn005x33K5NEyW2iQj3+IxFZ1kfP5o0FIauN40YYxg/DO6 /QGvDrBAlqzWCoiie+6VfBDm3fb75sPo3Ug815GNW2YEFA1aVyKNwwBHhrohPUr6 YixkxM2e0TTlYX7PifGGvmGiJAuozGw0Fp2KxOgAovskBf0bcYRxr7J0Qj4SAFg/ jmnEGrbIrnOTaHIsfU7wLGi421ePqRip2GRrNvpS7CCBjJyRnXA8 -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:56 2026 by rpki-client