This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/evUKjjQ-64urf3ID9QQeEJmSrho.roa File: evUKjjQ-64urf3ID9QQeEJmSrho.roa (raw, json) Hash identifier: jHjvWcJHTbQkaqv1cxn7W2VQ1dY8D8A2yCIoe6SeCXk= Subject key identifier: 7A:F5:0A:8E:34:3E:EB:8B:AB:7F:72:03:F5:04:1E:10:99:92:AE:1A Certificate issuer: /CN=27fc21856cd8e037a7bb8c6392a6198213a8b4f6 Certificate serial: 019B7FF2891F9B123E04ED3DC398004ECEFA Authority key identifier: 27:FC:21:85:6C:D8:E0:37:A7:BB:8C:63:92:A6:19:82:13:A8:B4:F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_whhWzY4Denu4xjkqYZghOotPY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/evUKjjQ-64urf3ID9QQeEJmSrho.roa Signing time: Fri 02 Jan 2026 18:22:39 +0000 ROA not before: Fri 02 Jan 2026 18:22:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29166 IP address blocks: 193.5.8.0/23 maxlen: 23 193.5.42.0/23 maxlen: 23 193.135.31.0/24 maxlen: 24 194.40.212.0/22 maxlen: 22 194.40.216.0/22 maxlen: 22 194.40.220.0/22 maxlen: 22 194.40.224.0/22 maxlen: 22 194.40.228.0/22 maxlen: 22 194.40.232.0/24 maxlen: 24 194.40.234.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.mft rsync://rpki.ripe.net/repository/DEFAULT/J_whhWzY4Denu4xjkqYZghOotPY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:89:1f:9b:12:3e:04:ed:3d:c3:98:00:4e:ce:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27fc21856cd8e037a7bb8c6392a6198213a8b4f6 Validity Not Before: Jan 2 18:22:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7af50a8e343eeb8bab7f7203f5041e109992ae1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8e:f0:3d:ba:fc:b7:8a:66:0a:19:4e:df:f0: 87:fb:e9:f8:c7:4f:73:fc:fb:b9:6a:f2:4f:b1:84: d5:44:0f:37:d6:cc:44:6b:27:be:2e:96:16:46:8d: 73:e0:a5:ab:e6:92:57:0f:39:2c:57:eb:6f:84:49: 4f:2f:a0:c9:ef:10:b4:ad:a9:08:c3:18:73:37:52: a0:2a:b2:d3:ad:14:1f:c4:6c:2f:49:45:b5:ae:45: 53:db:c5:03:c8:60:44:de:87:58:34:7f:70:2c:f5: 24:e7:5d:b7:d8:44:58:74:59:56:3b:10:99:6b:d8: 20:c5:f2:a8:ca:41:07:08:d1:f9:2b:6e:f4:9d:fb: 5c:6a:05:eb:7a:28:87:79:a8:c4:18:be:6d:e5:1a: 62:c0:f0:79:fc:1c:31:e7:4e:c8:b7:4f:3d:36:fd: f0:cd:a7:24:77:e9:71:82:49:76:9f:3b:59:4f:75: 56:58:fd:44:6a:d1:56:8f:09:e7:5c:01:c0:61:8e: 79:2b:53:86:9a:61:16:6f:27:f8:4a:03:b6:7f:d8: 44:e3:ff:3a:97:e1:4f:86:e8:d4:e5:8f:74:32:25: db:fc:03:1f:5e:44:28:86:2f:47:72:51:7c:47:3d: e9:94:05:39:76:7a:03:89:bc:bc:c8:3c:cb:6a:19: 1e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:F5:0A:8E:34:3E:EB:8B:AB:7F:72:03:F5:04:1E:10:99:92:AE:1A X509v3 Authority Key Identifier: keyid:27:FC:21:85:6C:D8:E0:37:A7:BB:8C:63:92:A6:19:82:13:A8:B4:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_whhWzY4Denu4xjkqYZghOotPY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/evUKjjQ-64urf3ID9QQeEJmSrho.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.5.8.0/23 193.5.42.0/23 193.135.31.0/24 194.40.212.0-194.40.232.255 194.40.234.0/23 Signature Algorithm: sha256WithRSAEncryption ce:6c:90:cd:ca:70:e1:20:87:44:b5:a4:a4:81:71:27:36:9c: 0d:db:3f:1e:04:0e:32:b2:68:81:e4:65:34:69:cc:18:71:df: c5:e5:a3:12:88:7e:86:5c:e8:ef:c2:15:27:0b:46:08:5f:b8: 65:59:66:2b:f8:6f:22:a6:1e:94:f3:b0:fc:8d:97:79:7b:35: 84:91:2d:c0:7c:0b:93:e9:b1:63:38:48:11:4e:51:3c:10:47: 93:e7:2c:e4:8a:c7:fb:93:99:28:56:ee:19:6d:cb:2c:39:7d: a8:d4:d7:dd:1a:4f:6e:bf:3a:7a:29:e2:6b:9d:d2:8c:f9:d7: 5e:46:ee:7a:7f:5b:55:38:4b:86:bb:8a:f6:22:d5:79:67:f7: f8:b3:87:35:fe:ad:15:82:87:e2:6f:1f:62:ae:a5:17:7b:21: 12:1a:2d:79:c2:f5:d1:53:f9:e9:78:8f:3b:10:55:fa:cf:97: 3a:83:9e:d1:aa:ff:e6:74:23:64:4e:5e:c0:a8:c3:8c:e6:e7: 58:d9:e3:e1:23:a3:e2:a3:fc:db:c2:63:63:d6:30:c9:c8:db: ea:56:74:c7:12:c4:05:09:9b:29:5d:f7:c9:d9:ac:24:04:2b: 07:27:a4:d8:4d:7b:5e:e2:d0:41:cd:c8:10:eb:09:b6:c8:76: d1:cc:b7:0b -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt/8okfmxI+BO09w5gATs76MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3ZmMyMTg1NmNkOGUwMzdhN2JiOGM2MzkyYTYxOTgyMTNh OGI0ZjYwHhcNMjYwMTAyMTgyMjM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YWY1MGE4ZTM0M2VlYjhiYWI3ZjcyMDNmNTA0MWUxMDk5OTJhZTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArI7wPbr8t4pmChlO3/CH++n4x09z /Pu5avJPsYTVRA831sxEaye+LpYWRo1z4KWr5pJXDzksV+tvhElPL6DJ7xC0rakI wxhzN1KgKrLTrRQfxGwvSUW1rkVT28UDyGBE3odYNH9wLPUk51232ERYdFlWOxCZ a9ggxfKoykEHCNH5K270nftcagXreiiHeajEGL5t5RpiwPB5/Bwx507It089Nv3w zackd+lxgkl2nztZT3VWWP1EatFWjwnnXAHAYY55K1OGmmEWbyf4SgO2f9hE4/86 l+FPhujU5Y90MiXb/AMfXkQohi9HclF8Rz3plAU5dnoDiby8yDzLahkehwIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFHr1Co40PuuLq39yA/UEHhCZkq4aMB8GA1UdIwQY MBaAFCf8IYVs2OA3p7uMY5KmGYITqLT2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSl93aGhXelk0RGVudTR4amtxWVpnaE9vdFBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9jN2ZhNDgtMjg3Ni00MjJiLTg4MjUt ZTFmMzY3ZTc5NjIwLzEvZXZVS2pqUS02NHVyZjNJRDlRUWVFSm1TcmhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi9jN2ZhNDgtMjg3Ni00MjJiLTg4MjUtZTFmMzY3ZTc5NjIw LzEvSl93aGhXelk0RGVudTR4amtxWVpnaE9vdFBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQBwQUIAwQB wQUqAwQAwYcfMAwDBALCKNQDBADCKOgDBAHCKOowDQYJKoZIhvcNAQELBQADggEB AM5skM3KcOEgh0S1pKSBcSc2nA3bPx4EDjKyaIHkZTRpzBhx38XloxKIfoZc6O/C FScLRghfuGVZZiv4byKmHpTzsPyNl3l7NYSRLcB8C5PpsWM4SBFOUTwQR5PnLOSK x/uTmShW7hltyyw5fajU190aT26/Onop4mud0oz5115G7np/W1U4S4a7ivYi1Xln 9/izhzX+rRWCh+JvH2KupRd7IRIaLXnC9dFT+el4jzsQVfrPlzqDntGq/+Z0I2RO XsCow4zm51jZ4+Ejo+Kj/NvCY2PWMMnI2+pWdMcSxAUJmyld98nZrCQEKwcnpNhN e17i0EHNyBDrCbbIdtHMtws= -----END CERTIFICATE-----Generated at Mon Jan 26 20:41:37 2026 by rpki-client