This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/53f458-761a-4382-827c-494f08c21497/1/EgkLrTbqfCqKtc1_HO_4N3RqgDA.roa File: EgkLrTbqfCqKtc1_HO_4N3RqgDA.roa (raw, json) Hash identifier: hSie2Ig7NXZ8GW1BlGvPkiht1lHg7Q/uBsfmB2XjW4k= Subject key identifier: 12:09:0B:AD:36:EA:7C:2A:8A:B5:CD:7F:1C:EF:F8:37:74:6A:80:30 Certificate issuer: /CN=afd23cc55aeeaf337edb73eae25b59097a27784c Certificate serial: 019B7EA57196AB613004E63A804D72AB3245 Authority key identifier: AF:D2:3C:C5:5A:EE:AF:33:7E:DB:73:EA:E2:5B:59:09:7A:27:78:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r9I8xVrurzN-23Pq4ltZCXoneEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/53f458-761a-4382-827c-494f08c21497/1/EgkLrTbqfCqKtc1_HO_4N3RqgDA.roa Signing time: Fri 02 Jan 2026 12:18:50 +0000 ROA not before: Fri 02 Jan 2026 12:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25358 IP address blocks: 109.70.168.0/21 maxlen: 24 185.25.40.0/22 maxlen: 24 193.189.104.0/23 maxlen: 24 195.140.148.0/22 maxlen: 24 2a00:14e8::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/53f458-761a-4382-827c-494f08c21497/1/r9I8xVrurzN-23Pq4ltZCXoneEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/53f458-761a-4382-827c-494f08c21497/1/r9I8xVrurzN-23Pq4ltZCXoneEw.mft rsync://rpki.ripe.net/repository/DEFAULT/r9I8xVrurzN-23Pq4ltZCXoneEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:71:96:ab:61:30:04:e6:3a:80:4d:72:ab:32:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afd23cc55aeeaf337edb73eae25b59097a27784c Validity Not Before: Jan 2 12:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=12090bad36ea7c2a8ab5cd7f1ceff837746a8030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:61:d9:4a:1a:ce:62:82:3c:10:d5:a4:3a:8f: 12:e5:9a:13:6e:5b:66:72:8b:91:cc:94:09:c5:5a: ec:86:d0:85:f6:ce:4a:56:58:cd:ec:a9:47:00:f1: 2f:13:2d:46:12:f8:cc:da:5a:01:6d:70:8d:e8:f0: fb:bb:d2:12:a8:10:7a:25:81:9b:ef:68:da:37:c9: 65:a8:92:41:9c:82:10:ec:6b:3b:71:4c:8f:a3:91: 27:af:08:11:8d:af:d4:10:01:50:35:09:f8:ae:41: 0a:9f:f1:7e:6c:54:b9:e1:cf:5e:70:5f:68:3f:6c: 15:30:40:17:5a:ca:6f:11:66:08:7e:b7:d5:0b:5d: b9:1c:d1:3c:5a:65:6a:e2:8d:f5:ac:0e:23:97:d0: 3c:84:80:a1:64:a6:83:00:2f:b6:36:a1:49:25:77: b4:da:18:ea:e9:c7:d4:d4:a3:78:b1:2b:d2:6a:0a: 6b:4e:a9:e1:24:0b:4c:fa:f1:14:04:4a:af:3b:b0: 5e:3e:96:43:db:8e:40:61:8c:2c:d8:7b:4c:36:39: 7f:29:ba:60:37:9f:bd:30:5f:c5:e8:f1:2f:dd:db: 85:94:c2:9b:55:31:2c:34:66:57:82:d2:2d:75:3a: 86:b6:20:60:36:12:e1:c5:4e:20:ad:81:7b:ab:f7: 5e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:09:0B:AD:36:EA:7C:2A:8A:B5:CD:7F:1C:EF:F8:37:74:6A:80:30 X509v3 Authority Key Identifier: keyid:AF:D2:3C:C5:5A:EE:AF:33:7E:DB:73:EA:E2:5B:59:09:7A:27:78:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r9I8xVrurzN-23Pq4ltZCXoneEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/53f458-761a-4382-827c-494f08c21497/1/EgkLrTbqfCqKtc1_HO_4N3RqgDA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/53f458-761a-4382-827c-494f08c21497/1/r9I8xVrurzN-23Pq4ltZCXoneEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.70.168.0/21 185.25.40.0/22 193.189.104.0/23 195.140.148.0/22 IPv6: 2a00:14e8::/29 Signature Algorithm: sha256WithRSAEncryption 19:2c:de:7b:76:9f:ca:36:97:f3:a3:6f:45:bb:2c:4e:b7:c1: 61:a7:4a:47:59:83:1e:e7:85:1e:10:3f:92:38:13:29:ab:bc: 6e:ed:45:b8:1a:32:bf:e7:77:0d:67:b2:af:94:eb:79:50:d5: 10:ac:49:a8:b5:99:a8:01:8c:5e:13:2f:14:70:fa:58:78:08: c8:44:ff:56:ca:aa:1d:ba:df:c1:3c:b8:b8:e4:a3:4a:bb:34: 8c:18:94:5c:da:37:de:ff:b4:f0:3c:1d:1b:c9:e9:10:9d:87: 9a:85:d5:d3:e4:58:d6:2c:4f:3d:9c:f1:14:30:ba:13:99:d8: c5:ff:21:9c:6e:42:2d:75:24:de:17:4f:16:78:e8:0a:0b:76: b7:4e:49:3a:54:d1:a1:55:48:c5:f8:12:77:54:06:6b:c9:a4: a2:f6:3a:f9:01:11:07:a3:99:60:a9:f3:9c:94:aa:30:aa:85: 58:d0:4b:b0:82:45:c2:6e:b3:9a:22:7c:44:8e:81:88:29:d5: 2e:ed:ce:b3:8b:ba:fe:42:53:61:ff:24:d5:4d:12:3c:c3:ba: 3b:aa:13:39:8e:9b:d5:a3:c7:92:85:bf:4b:aa:c7:29:bf:ad: 32:61:d4:4f:9c:e7:af:87:1c:1e:13:48:7d:5b:47:77:93:f6: 41:11:85:9f -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt+pXGWq2EwBOY6gE1yqzJFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmZDIzY2M1NWFlZWFmMzM3ZWRiNzNlYWUyNWI1OTA5N2Ey Nzc4NGMwHhcNMjYwMTAyMTIxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjA5MGJhZDM2ZWE3YzJhOGFiNWNkN2YxY2VmZjgzNzc0NmE4MDMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2HZShrOYoI8ENWkOo8S5ZoTbltm couRzJQJxVrshtCF9s5KVljN7KlHAPEvEy1GEvjM2loBbXCN6PD7u9ISqBB6JYGb 72jaN8llqJJBnIIQ7Gs7cUyPo5EnrwgRja/UEAFQNQn4rkEKn/F+bFS54c9ecF9o P2wVMEAXWspvEWYIfrfVC125HNE8WmVq4o31rA4jl9A8hIChZKaDAC+2NqFJJXe0 2hjq6cfU1KN4sSvSagprTqnhJAtM+vEUBEqvO7BePpZD245AYYws2HtMNjl/Kbpg N5+9MF/F6PEv3duFlMKbVTEsNGZXgtItdTqGtiBgNhLhxU4grYF7q/de7wIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFBIJC6026nwqirXNfxzv+Dd0aoAwMB8GA1UdIwQY MBaAFK/SPMVa7q8zfttz6uJbWQl6J3hMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjlJOHhWcnVyek4tMjNQcTRsdFpDWG9uZUV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy81M2Y0NTgtNzYxYS00MzgyLTgyN2Mt NDk0ZjA4YzIxNDk3LzEvRWdrTHJUYnFmQ3FLdGMxX0hPXzROM1JxZ0RBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy81M2Y0NTgtNzYxYS00MzgyLTgyN2MtNDk0ZjA4YzIxNDk3 LzEvcjlJOHhWcnVyek4tMjNQcTRsdFpDWG9uZUV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDbUaoAwQC uRkoAwQBwb1oAwQCw4yUMA0EAgACMAcDBQMqABToMA0GCSqGSIb3DQEBCwUAA4IB AQAZLN57dp/KNpfzo29FuyxOt8Fhp0pHWYMe54UeED+SOBMpq7xu7UW4GjK/53cN Z7KvlOt5UNUQrEmotZmoAYxeEy8UcPpYeAjIRP9Wyqodut/BPLi45KNKuzSMGJRc 2jfe/7TwPB0byekQnYeahdXT5FjWLE89nPEUMLoTmdjF/yGcbkItdSTeF08WeOgK C3a3Tkk6VNGhVUjF+BJ3VAZryaSi9jr5AREHo5lgqfOclKowqoVY0EuwgkXCbrOa InxEjoGIKdUu7c6zi7r+QlNh/yTVTRI8w7o7qhM5jpvVo8eShb9Lqscpv60yYdRP nOevhxweE0h9W0d3k/ZBEYWf -----END CERTIFICATE-----Generated at Mon Feb 9 21:20:28 2026 by rpki-client