This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/EvH3doWBTY4fyL5WPp2H-GkyEew.roa File: EvH3doWBTY4fyL5WPp2H-GkyEew.roa (raw, json) Hash identifier: 22wTI0vwTm8O372x/w8nuNJMOHJy0ekZTdOAKD7lcp4= Subject key identifier: 12:F1:F7:76:85:81:4D:8E:1F:C8:BE:56:3E:9D:87:F8:69:32:11:EC Certificate issuer: /CN=03a6dc2f2668ebdcf86b6c0258a8187e5f7ce270 Certificate serial: 019B7BA534DB83ECA8636E5150C8EE8D46D8 Authority key identifier: 03:A6:DC:2F:26:68:EB:DC:F8:6B:6C:02:58:A8:18:7E:5F:7C:E2:70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A6bcLyZo69z4a2wCWKgYfl984nA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/EvH3doWBTY4fyL5WPp2H-GkyEew.roa Signing time: Thu 01 Jan 2026 22:19:43 +0000 ROA not before: Thu 01 Jan 2026 22:19:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20799 IP address blocks: 77.241.176.0/20 maxlen: 24 80.68.32.0/19 maxlen: 24 185.115.68.0/22 maxlen: 24 2a02:df8::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.crl rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.mft rsync://rpki.ripe.net/repository/DEFAULT/A6bcLyZo69z4a2wCWKgYfl984nA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:34:db:83:ec:a8:63:6e:51:50:c8:ee:8d:46:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03a6dc2f2668ebdcf86b6c0258a8187e5f7ce270 Validity Not Before: Jan 1 22:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=12f1f77685814d8e1fc8be563e9d87f8693211ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e4:cf:8b:69:f1:57:80:fb:a5:52:60:6a:91: 9c:8a:8b:7a:bd:97:25:3b:f4:3d:9e:ad:66:67:ff: d8:55:41:db:90:c8:72:2b:b0:63:cd:cf:ed:15:94: 1f:68:1e:b6:bd:81:de:11:db:38:bd:59:54:03:2a: c6:0c:be:d0:de:0a:ec:a6:c6:eb:67:86:55:c2:0c: 10:cf:65:11:d5:ed:de:4b:7a:4b:75:c0:bb:9e:ec: 5d:90:16:65:8b:b9:94:f3:9d:38:32:91:2a:b3:ac: c3:96:c2:a7:9d:f2:1e:0c:82:a2:75:73:98:3f:37: 37:5c:dd:c6:a9:b0:09:ff:81:a6:e7:39:3d:a3:82: c4:74:f2:75:aa:48:df:ae:98:4b:ac:c8:80:a9:2f: 23:a3:e7:8f:c2:ab:f5:5a:d8:67:76:35:7e:dd:80: a4:30:85:f4:4d:e2:8b:61:2a:c3:63:cf:78:c8:c5: 12:67:fd:7d:1b:b2:89:b8:62:4c:bb:28:77:74:ce: 43:e0:0f:2e:26:7a:02:9b:39:1d:fa:f8:80:df:99: c9:c6:78:6a:1d:54:8f:50:39:39:71:a4:90:cd:ec: 90:e0:15:fe:fb:f1:f3:8d:b5:b5:2e:27:da:0f:dd: 59:aa:28:44:1f:42:78:09:a6:15:51:f8:43:39:33: 53:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:F1:F7:76:85:81:4D:8E:1F:C8:BE:56:3E:9D:87:F8:69:32:11:EC X509v3 Authority Key Identifier: keyid:03:A6:DC:2F:26:68:EB:DC:F8:6B:6C:02:58:A8:18:7E:5F:7C:E2:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A6bcLyZo69z4a2wCWKgYfl984nA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/EvH3doWBTY4fyL5WPp2H-GkyEew.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.241.176.0/20 80.68.32.0/19 185.115.68.0/22 IPv6: 2a02:df8::/29 Signature Algorithm: sha256WithRSAEncryption 28:37:65:53:04:b8:1b:b4:1c:3e:4f:9e:7b:5c:02:ba:0c:27: 10:05:3c:71:74:3c:09:de:96:df:99:1a:bc:05:2c:5a:f5:76: 1c:fb:3a:b5:dc:c4:93:cc:ae:73:b0:b7:30:ca:cd:c4:3f:9e: 88:c4:9d:df:2d:44:5d:df:bd:dc:93:88:1d:5e:3b:aa:13:11: ae:91:4e:b8:16:47:04:dc:56:e7:2d:50:e9:62:ab:02:33:c4: 95:ba:99:29:73:80:92:e2:a3:7f:76:5e:95:fe:ad:0c:aa:d2: ae:af:36:ce:05:a4:1f:de:70:7a:13:ee:66:ad:9e:13:b1:e1: 9c:9f:91:02:4f:1e:39:21:a9:e8:2f:9d:46:d5:05:ed:b3:ca: d5:c3:3f:94:87:7e:19:39:59:c3:1e:cf:89:1a:02:68:40:9f: 5a:ed:27:54:e0:ef:2c:73:e3:8d:55:0e:62:fa:3e:98:d6:50: 9a:50:28:08:60:c9:b3:c3:97:92:02:de:b4:fa:39:51:4a:a1: eb:06:4a:89:6e:32:d3:17:54:67:c2:1a:ed:ef:ea:77:d7:80: 98:7b:9b:b1:ad:a4:4e:31:98:f2:87:4c:a2:46:b4:af:d1:a0: a2:cf:14:3e:19:4b:d0:3b:07:19:80:e6:83:e0:cc:d1:fe:9f: e1:88:29:51 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt7pTTbg+yoY25RUMjujUbYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzYTZkYzJmMjY2OGViZGNmODZiNmMwMjU4YTgxODdlNWY3 Y2UyNzAwHhcNMjYwMTAxMjIxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMmYxZjc3Njg1ODE0ZDhlMWZjOGJlNTYzZTlkODdmODY5MzIxMWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneTPi2nxV4D7pVJgapGciot6vZcl O/Q9nq1mZ//YVUHbkMhyK7Bjzc/tFZQfaB62vYHeEds4vVlUAyrGDL7Q3grspsbr Z4ZVwgwQz2UR1e3eS3pLdcC7nuxdkBZli7mU8504MpEqs6zDlsKnnfIeDIKidXOY Pzc3XN3GqbAJ/4Gm5zk9o4LEdPJ1qkjfrphLrMiAqS8jo+ePwqv1WthndjV+3YCk MIX0TeKLYSrDY894yMUSZ/19G7KJuGJMuyh3dM5D4A8uJnoCmzkd+viA35nJxnhq HVSPUDk5caSQzeyQ4BX++/HzjbW1LifaD91ZqihEH0J4CaYVUfhDOTNTJwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFBLx93aFgU2OH8i+Vj6dh/hpMhHsMB8GA1UdIwQY MBaAFAOm3C8maOvc+GtsAlioGH5ffOJwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTZiY0x5Wm82OXo0YTJ3Q1dLZ1lmbDk4NG5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8yOGIzMDMtNDdhNS00YTkyLWIwMmUt ZWJkMGMzZWU0NGFlLzEvRXZIM2RvV0JUWTRmeUw1V1BwMkgtR2t5RWV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8yOGIzMDMtNDdhNS00YTkyLWIwMmUtZWJkMGMzZWU0NGFl LzEvQTZiY0x5Wm82OXo0YTJ3Q1dLZ1lmbDk4NG5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQETfGwAwQF UEQgAwQCuXNEMA0EAgACMAcDBQMqAg34MA0GCSqGSIb3DQEBCwUAA4IBAQAoN2VT BLgbtBw+T557XAK6DCcQBTxxdDwJ3pbfmRq8BSxa9XYc+zq13MSTzK5zsLcwys3E P56IxJ3fLURd373ck4gdXjuqExGukU64FkcE3FbnLVDpYqsCM8SVupkpc4CS4qN/ dl6V/q0MqtKurzbOBaQf3nB6E+5mrZ4TseGcn5ECTx45IanoL51G1QXts8rVwz+U h34ZOVnDHs+JGgJoQJ9a7SdU4O8sc+ONVQ5i+j6Y1lCaUCgIYMmzw5eSAt60+jlR SqHrBkqJbjLTF1Rnwhrt7+p314CYe5uxraROMZjyh0yiRrSv0aCizxQ+GUvQOwcZ gOaD4MzR/p/hiClR -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:15 2026 by rpki-client