This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/EvECJZ9dWiaHYR65uz1Aq8sOKvQ.roa File: EvECJZ9dWiaHYR65uz1Aq8sOKvQ.roa (raw, json) Hash identifier: rLhNbaW2rQcALEMcLtAZW5Aj0Xn+r7lUlDTM5cxIeSM= Subject key identifier: 12:F1:02:25:9F:5D:5A:26:87:61:1E:B9:BB:3D:40:AB:CB:0E:2A:F4 Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019B7BA422AD8F63C05174E3E4053C290C9C Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/EvECJZ9dWiaHYR65uz1Aq8sOKvQ.roa Signing time: Thu 01 Jan 2026 22:18:32 +0000 ROA not before: Thu 01 Jan 2026 22:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216119 IP address blocks: 194.67.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:22:ad:8f:63:c0:51:74:e3:e4:05:3c:29:0c:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Jan 1 22:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=12f102259f5d5a2687611eb9bb3d40abcb0e2af4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:44:d4:c3:07:a7:04:02:cb:0b:8c:5a:82:26: 62:2c:91:85:87:7f:e2:1f:64:8b:03:54:52:61:ea: a6:b6:76:3c:63:c6:cc:99:e6:c9:c6:26:31:99:47: fd:21:98:1c:ba:a8:7d:86:0f:16:d4:64:6b:95:e2: d0:4a:5a:28:d9:95:c6:ad:78:a7:1c:14:4f:0b:25: 88:14:0b:5a:75:84:ee:cc:5e:a4:bc:13:9b:5a:28: 17:52:0d:35:c1:51:2d:6b:e7:43:ef:88:dc:26:b4: f1:17:79:a5:68:5f:9d:c7:71:fb:6e:b8:93:af:ce: 59:3e:c1:00:43:09:f5:a8:3c:37:64:f1:99:b9:e8: 5c:1d:c5:b2:c7:7b:04:52:9c:9d:ad:0f:ad:be:67: 46:1f:6d:3b:2b:73:9f:5e:33:e7:c6:97:c9:53:2a: 41:aa:8a:80:03:a3:22:5f:bb:14:5f:73:02:80:b1: ab:9e:e6:2f:cd:44:0c:0d:50:b4:2a:10:ca:8b:20: 38:b1:1e:2e:79:68:16:22:e3:c1:7e:be:5c:f7:c2: 3e:4d:6f:14:d7:6f:1f:d0:23:23:33:93:ea:82:76: e0:71:0e:ec:05:f7:ce:57:f9:56:ac:18:2f:b1:a8: 6c:f8:ae:78:90:ad:88:9f:91:47:49:f7:78:85:f3: 7d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:F1:02:25:9F:5D:5A:26:87:61:1E:B9:BB:3D:40:AB:CB:0E:2A:F4 X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/EvECJZ9dWiaHYR65uz1Aq8sOKvQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.67.195.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:6f:ad:a4:a7:16:9e:e5:96:f2:ba:f9:72:fa:3d:f6:6c:f6: fc:6c:bd:2c:06:de:92:b2:98:4e:68:9f:04:e0:a5:b5:1b:f9: 34:d8:08:e1:11:a0:0e:2f:21:e8:16:73:fc:ab:53:d5:93:ed: 8e:dd:9c:72:55:24:01:ad:dd:19:9b:b0:07:d5:79:02:37:b2: 4f:88:33:c8:2d:0a:7b:4e:d4:da:be:ac:f5:e8:82:1b:f5:fa: fa:11:a5:75:89:39:66:18:e4:05:77:20:99:1d:79:61:c1:2a: a8:17:00:3e:e8:36:00:a3:38:12:e2:58:f2:7f:9c:79:23:31: 53:57:bd:fb:64:1c:82:dd:49:28:9e:6a:0e:0f:37:fa:0d:50: af:74:2f:f5:d2:5d:92:45:e3:1e:85:6f:df:99:fa:58:09:ae: 34:32:62:68:d2:3d:66:b6:f6:d8:3c:44:6c:21:34:c9:ee:7e: 93:a8:68:d5:01:26:a0:dd:c7:eb:83:03:fa:f1:49:3c:15:4e: 4c:25:73:b7:1e:f6:01:7f:3c:8a:40:1d:84:23:b0:f6:0a:14: 5c:10:00:d8:a4:c0:a4:97:a5:91:b8:b2:9e:44:66:20:63:0d: 5f:81:95:c0:92:5f:99:3e:3d:7c:c8:42:e8:97:3c:93:de:f5: 16:42:a4:9d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pCKtj2PAUXTj5AU8KQycMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjYwMTAxMjIxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMmYxMDIyNTlmNWQ1YTI2ODc2MTFlYjliYjNkNDBhYmNiMGUyYWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArETUwwenBALLC4xagiZiLJGFh3/i H2SLA1RSYeqmtnY8Y8bMmebJxiYxmUf9IZgcuqh9hg8W1GRrleLQSloo2ZXGrXin HBRPCyWIFAtadYTuzF6kvBObWigXUg01wVEta+dD74jcJrTxF3mlaF+dx3H7briT r85ZPsEAQwn1qDw3ZPGZuehcHcWyx3sEUpydrQ+tvmdGH207K3OfXjPnxpfJUypB qoqAA6MiX7sUX3MCgLGrnuYvzUQMDVC0KhDKiyA4sR4ueWgWIuPBfr5c98I+TW8U 128f0CMjM5PqgnbgcQ7sBffOV/lWrBgvsahs+K54kK2In5FHSfd4hfN9BwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBLxAiWfXVomh2Eeubs9QKvLDir0MB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEvRXZFQ0paOWRXaWFIWVI2NXV6MUFxOHNPS3ZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwkPDMA0G CSqGSIb3DQEBCwUAA4IBAQA8b62kpxae5Zbyuvly+j32bPb8bL0sBt6SsphOaJ8E 4KW1G/k02AjhEaAOLyHoFnP8q1PVk+2O3ZxyVSQBrd0Zm7AH1XkCN7JPiDPILQp7 TtTavqz16IIb9fr6EaV1iTlmGOQFdyCZHXlhwSqoFwA+6DYAozgS4ljyf5x5IzFT V737ZByC3UkonmoODzf6DVCvdC/10l2SReMehW/fmfpYCa40MmJo0j1mtvbYPERs ITTJ7n6TqGjVASag3cfrgwP68Uk8FU5MJXO3HvYBfzyKQB2EI7D2ChRcEADYpMCk l6WRuLKeRGYgYw1fgZXAkl+ZPj18yELolzyT3vUWQqSd -----END CERTIFICATE-----Generated at Tue Jan 20 02:47:18 2026 by rpki-client