This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/1zEvIox69c2lph8To4y01za8sxk.roa File: 1zEvIox69c2lph8To4y01za8sxk.roa (raw, json) Hash identifier: NK/LeMgA4R1YoY3PIzw3AAc8sU/wtNG17ZKOs8j1HAs= Subject key identifier: D7:31:2F:22:8C:7A:F5:CD:A5:A6:1F:13:A3:8C:B4:D7:36:BC:B3:19 Certificate issuer: /CN=ed8e8797ea068357ad6bb03a35c95bd7034e1541 Certificate serial: 019B797F0BA2963D6D9D92E07FA37C5068CE Authority key identifier: ED:8E:87:97:EA:06:83:57:AD:6B:B0:3A:35:C9:5B:D7:03:4E:15:41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/1zEvIox69c2lph8To4y01za8sxk.roa Signing time: Thu 01 Jan 2026 12:18:47 +0000 ROA not before: Thu 01 Jan 2026 12:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51840 IP address blocks: 185.27.58.0/24 maxlen: 24 185.27.59.0/24 maxlen: 24 185.218.148.0/22 maxlen: 22 185.218.148.0/24 maxlen: 24 185.218.149.0/24 maxlen: 24 185.218.150.0/24 maxlen: 24 185.218.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.crl rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft rsync://rpki.ripe.net/repository/DEFAULT/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:0b:a2:96:3d:6d:9d:92:e0:7f:a3:7c:50:68:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed8e8797ea068357ad6bb03a35c95bd7034e1541 Validity Not Before: Jan 1 12:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d7312f228c7af5cda5a61f13a38cb4d736bcb319 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1d:59:dc:a3:21:09:8d:ae:b7:c7:e0:ed:f3: 32:0e:e1:01:0c:d4:81:78:9f:bf:64:b5:d3:91:d0: d4:5f:1e:69:a3:96:a0:09:d0:3d:f5:ee:4d:d7:0e: 9b:0d:25:3f:ab:96:84:e3:68:a2:c2:fb:87:6c:20: 9e:5d:29:2f:54:73:0f:84:7a:95:e6:f9:af:ce:b4: 03:f7:7d:ea:f8:0b:03:e4:28:8c:c3:3b:20:d8:08: f6:96:9f:14:52:46:98:76:14:ed:72:f8:ca:22:45: a4:83:3d:61:2c:3c:66:c1:8a:e9:ad:cb:ea:16:99: 41:ee:25:fe:63:4f:d4:a9:af:5d:6b:c5:80:9e:66: 7f:93:11:9b:4b:98:b0:97:c0:4f:a8:1a:76:32:1f: 83:b2:5a:2a:39:41:e9:7f:8b:52:69:b0:88:0a:3c: 64:fb:4c:ae:71:83:59:7d:ea:04:f4:6f:9b:80:90: 5d:04:d8:a0:32:4a:8a:fa:3c:ce:10:7b:8c:98:73: 17:7e:85:2a:59:39:44:12:97:ac:41:53:56:b6:51: e9:7b:15:3c:fc:5c:0d:37:69:87:81:90:4a:19:4d: 7c:26:5b:de:db:89:44:01:13:c9:05:88:93:88:f7: 49:2b:8a:6f:ba:9a:93:b5:38:7f:70:38:00:94:bb: b6:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:31:2F:22:8C:7A:F5:CD:A5:A6:1F:13:A3:8C:B4:D7:36:BC:B3:19 X509v3 Authority Key Identifier: keyid:ED:8E:87:97:EA:06:83:57:AD:6B:B0:3A:35:C9:5B:D7:03:4E:15:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/1zEvIox69c2lph8To4y01za8sxk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.27.58.0/23 185.218.148.0/22 Signature Algorithm: sha256WithRSAEncryption 8a:b5:02:15:6d:ea:4c:59:d0:b3:ac:aa:cb:f1:17:b1:8a:d8: 7c:ce:a5:0e:bb:03:1a:44:2a:ca:36:b5:17:2f:77:f3:12:d6: ca:c5:65:23:22:2f:85:6b:e4:fb:f6:88:cc:99:e0:ad:8a:b9: 50:29:eb:4f:8b:49:30:87:0c:12:43:91:39:f5:4c:ec:4c:8f: 69:54:c3:4e:23:4d:56:28:f0:76:01:33:77:a8:46:b7:62:58: 6b:c0:07:83:91:00:10:28:3f:83:50:02:a9:de:ca:07:eb:69: 5f:d2:8b:4c:97:d6:76:16:d0:a9:27:e2:20:8a:49:8c:4b:58: 23:4a:3c:11:7a:3c:e5:25:51:c6:31:ab:d2:07:86:d2:2a:b3: dc:b2:0d:74:bc:6c:c5:3d:e1:7f:ea:e2:3b:f6:8c:24:f5:33: 45:38:f9:64:eb:d0:f0:79:60:aa:64:24:e8:f1:16:31:5e:19: ad:c8:8b:ae:c7:7e:b4:5c:d1:4a:ba:08:38:a6:81:88:7f:f6: 4c:f1:ef:18:cb:a8:1f:77:33:fc:71:b0:ed:36:7b:61:70:3d: 59:c9:ba:13:71:f3:75:b3:7e:97:3a:2b:65:bb:18:46:35:f6: ac:8c:55:02:ef:b6:68:5b:1a:a4:b0:da:e4:01:61:f3:31:17: 44:ed:b2:4e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5fwuilj1tnZLgf6N8UGjOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkOGU4Nzk3ZWEwNjgzNTdhZDZiYjAzYTM1Yzk1YmQ3MDM0 ZTE1NDEwHhcNMjYwMTAxMTIxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzMxMmYyMjhjN2FmNWNkYTVhNjFmMTNhMzhjYjRkNzM2YmNiMzE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsx1Z3KMhCY2ut8fg7fMyDuEBDNSB eJ+/ZLXTkdDUXx5po5agCdA99e5N1w6bDSU/q5aE42iiwvuHbCCeXSkvVHMPhHqV 5vmvzrQD933q+AsD5CiMwzsg2Aj2lp8UUkaYdhTtcvjKIkWkgz1hLDxmwYrprcvq FplB7iX+Y0/Uqa9da8WAnmZ/kxGbS5iwl8BPqBp2Mh+DsloqOUHpf4tSabCICjxk +0yucYNZfeoE9G+bgJBdBNigMkqK+jzOEHuMmHMXfoUqWTlEEpesQVNWtlHpexU8 /FwNN2mHgZBKGU18Jlve24lEARPJBYiTiPdJK4pvupqTtTh/cDgAlLu2XQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNcxLyKMevXNpaYfE6OMtNc2vLMZMB8GA1UdIwQY MBaAFO2Oh5fqBoNXrWuwOjXJW9cDThVBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1k2SGwtb0dnMWV0YTdBNk5jbGIxd05PRlVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS83ZWI0MDktN2YxMy00ODZkLTg2YTgt YWUxYjBhY2QyOGE4LzEvMXpFdklveDY5YzJscGg4VG80eTAxemE4c3hrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS83ZWI0MDktN2YxMy00ODZkLTg2YTgtYWUxYjBhY2QyOGE4 LzEvN1k2SGwtb0dnMWV0YTdBNk5jbGIxd05PRlVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBuRs6AwQC udqUMA0GCSqGSIb3DQEBCwUAA4IBAQCKtQIVbepMWdCzrKrL8Rexith8zqUOuwMa RCrKNrUXL3fzEtbKxWUjIi+Fa+T79ojMmeCtirlQKetPi0kwhwwSQ5E59UzsTI9p VMNOI01WKPB2ATN3qEa3YlhrwAeDkQAQKD+DUAKp3soH62lf0otMl9Z2FtCpJ+Ig ikmMS1gjSjwRejzlJVHGMavSB4bSKrPcsg10vGzFPeF/6uI79owk9TNFOPlk69Dw eWCqZCTo8RYxXhmtyIuux360XNFKugg4poGIf/ZM8e8Yy6gfdzP8cbDtNnthcD1Z yboTcfN1s36XOitluxhGNfasjFUC77ZoWxqksNrkAWHzMRdE7bJO -----END CERTIFICATE-----Generated at Mon Feb 9 18:44:06 2026 by rpki-client