This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/EUcrUeuArUfiLjyJq2CCJJXEbH0.roa File: EUcrUeuArUfiLjyJq2CCJJXEbH0.roa (raw, json) Hash identifier: j5ECLl2Rm4cPawtaMzFLRoWoVbB08uj29AlH0bIyc5s= Subject key identifier: 11:47:2B:51:EB:80:AD:47:E2:2E:3C:89:AB:60:82:24:95:C4:6C:7D Certificate issuer: /CN=cf4a717f8fa1bb0359274223acdae22b70e66bec Certificate serial: 019B7910CA3A89F5A209FF704A64CB4932D4 Authority key identifier: CF:4A:71:7F:8F:A1:BB:03:59:27:42:23:AC:DA:E2:2B:70:E6:6B:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z0pxf4-huwNZJ0IjrNriK3Dma-w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/EUcrUeuArUfiLjyJq2CCJJXEbH0.roa Signing time: Thu 01 Jan 2026 10:18:22 +0000 ROA not before: Thu 01 Jan 2026 10:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20485 IP address blocks: 188.168.34.0/23 maxlen: 23 188.168.60.0/22 maxlen: 22 188.168.68.0/23 maxlen: 23 188.168.80.0/21 maxlen: 21 188.168.88.0/22 maxlen: 22 188.168.100.0/22 maxlen: 22 188.168.136.0/22 maxlen: 22 188.168.138.0/23 maxlen: 23 188.168.184.0/23 maxlen: 23 188.168.186.0/24 maxlen: 24 188.168.208.0/22 maxlen: 22 188.168.248.0/21 maxlen: 21 188.244.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.mft rsync://rpki.ripe.net/repository/DEFAULT/z0pxf4-huwNZJ0IjrNriK3Dma-w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 01 Feb 2026 01:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:ca:3a:89:f5:a2:09:ff:70:4a:64:cb:49:32:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf4a717f8fa1bb0359274223acdae22b70e66bec Validity Not Before: Jan 1 10:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=11472b51eb80ad47e22e3c89ab60822495c46c7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a5:3a:c8:00:65:38:74:03:14:3d:3c:c7:af: a3:ed:9d:9c:22:36:ac:04:50:2c:f9:4a:cd:7b:84: 1f:89:c2:86:0c:42:d0:9b:5c:80:f5:96:5e:14:37: 3c:f3:c0:b8:b2:ec:a5:90:2d:ad:4d:d8:17:4b:4a: e7:41:15:db:3d:61:74:7e:f4:8b:4a:35:c8:eb:8d: 21:57:8e:b1:7d:45:70:f1:47:7c:24:97:5c:82:f6: df:5f:89:ad:65:4c:b1:ac:de:32:c3:ad:a1:fa:5c: 83:17:36:3f:fe:c7:7a:90:59:bc:a4:10:0c:fe:f7: ad:6e:cd:96:fd:07:05:42:db:4d:67:5e:22:5e:11: 33:6e:8b:8c:4d:9c:b0:cb:a9:03:6c:04:4c:78:42: c3:c3:84:c0:0a:cd:86:eb:d1:10:66:9e:2b:d3:49: dc:c9:e8:6e:5d:69:5b:f2:ff:79:5e:a2:4e:e2:05: 35:26:c8:4f:1a:c3:3b:18:ae:00:a2:99:f5:93:ce: 4c:08:c4:6d:9f:3d:fd:7d:5d:99:95:68:c1:5b:1c: f7:02:2c:5a:61:95:e2:1a:84:cf:40:06:90:1e:aa: 44:12:ce:78:4f:b1:11:a0:1a:d8:c9:ee:09:ce:6a: dd:42:7a:0c:12:81:de:ca:a2:60:0b:5d:d9:f4:2e: 29:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:47:2B:51:EB:80:AD:47:E2:2E:3C:89:AB:60:82:24:95:C4:6C:7D X509v3 Authority Key Identifier: keyid:CF:4A:71:7F:8F:A1:BB:03:59:27:42:23:AC:DA:E2:2B:70:E6:6B:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0pxf4-huwNZJ0IjrNriK3Dma-w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/EUcrUeuArUfiLjyJq2CCJJXEbH0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e50f54-6fdd-4fe9-9fe9-6aaa6b02160d/1/z0pxf4-huwNZJ0IjrNriK3Dma-w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.168.34.0/23 188.168.60.0/22 188.168.68.0/23 188.168.80.0-188.168.91.255 188.168.100.0/22 188.168.136.0/22 188.168.184.0-188.168.186.255 188.168.208.0/22 188.168.248.0/21 188.244.192.0/20 Signature Algorithm: sha256WithRSAEncryption 70:f3:d5:d3:d6:af:4b:3c:d3:a0:da:7d:0d:09:ca:59:d1:3d: 4c:81:e4:84:02:44:b4:e8:c3:dd:c4:4b:9f:28:b2:df:42:a1: a4:69:62:e0:1d:71:bc:6f:80:bc:c1:ce:74:a2:61:95:82:d5: 87:30:7b:e2:cc:67:fe:e8:b2:19:30:83:30:38:f8:74:b7:59: c1:f2:9c:18:35:55:d4:a8:0e:db:25:b5:39:ba:0d:1e:fd:fb: a8:d5:7e:1b:39:36:cb:ae:57:88:bf:25:ca:04:f0:04:5c:92: 05:b3:e2:a1:13:13:62:64:fe:fd:c6:c0:7e:11:a5:72:da:ef: 77:92:0c:7b:4e:bb:54:59:67:0b:e0:3a:0d:32:6d:e6:a2:d0: f7:d3:74:1f:71:3e:f1:96:78:83:98:9b:81:eb:bd:6c:6b:a5: 6f:63:43:39:e8:c6:96:ec:0d:ba:30:31:e5:ea:3b:9c:2a:09: a2:eb:8c:ec:46:1c:ec:ba:e9:75:87:47:8a:33:43:95:a1:cd: f8:1a:75:1a:e1:eb:94:cc:e6:db:5c:b5:c8:25:98:b8:f0:75: 1f:16:b9:3a:d9:39:2e:e5:96:da:f9:86:bb:a7:dd:c9:1e:9c: b4:a6:fa:b1:d6:78:25:b3:47:59:47:00:20:58:ad:e2:ec:c2: 53:8c:2f:99 -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgISAZt5EMo6ifWiCf9wSmTLSTLUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmNGE3MTdmOGZhMWJiMDM1OTI3NDIyM2FjZGFlMjJiNzBl NjZiZWMwHhcNMjYwMTAxMTAxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMTQ3MmI1MWViODBhZDQ3ZTIyZTNjODlhYjYwODIyNDk1YzQ2YzdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaU6yABlOHQDFD08x6+j7Z2cIjas BFAs+UrNe4QficKGDELQm1yA9ZZeFDc888C4suylkC2tTdgXS0rnQRXbPWF0fvSL SjXI640hV46xfUVw8Ud8JJdcgvbfX4mtZUyxrN4yw62h+lyDFzY//sd6kFm8pBAM /vetbs2W/QcFQttNZ14iXhEzbouMTZywy6kDbARMeELDw4TACs2G69EQZp4r00nc yehuXWlb8v95XqJO4gU1JshPGsM7GK4Aopn1k85MCMRtnz39fV2ZlWjBWxz3Aixa YZXiGoTPQAaQHqpEEs54T7ERoBrYye4JzmrdQnoMEoHeyqJgC13Z9C4p+QIDAQAB o4ICTzCCAkswHQYDVR0OBBYEFBFHK1HrgK1H4i48iatggiSVxGx9MB8GA1UdIwQY MBaAFM9KcX+PobsDWSdCI6za4itw5mvsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejBweGY0LWh1d05aSjBJanJOcmlLM0RtYS13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9lNTBmNTQtNmZkZC00ZmU5LTlmZTkt NmFhYTZiMDIxNjBkLzEvRVVjclVldUFyVWZpTGp5SnEyQ0NKSlhFYkgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9lNTBmNTQtNmZkZC00ZmU5LTlmZTktNmFhYTZiMDIxNjBk LzEvejBweGY0LWh1d05aSjBJanJOcmlLM0RtYS13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDBSBAIAATBMAwQBvKgiAwQC vKg8AwQBvKhEMAwDBAS8qFADBAK8qFgDBAK8qGQDBAK8qIgwDAMEA7youAMEALyo ugMEAryo0AMEA7yo+AMEBLz0wDANBgkqhkiG9w0BAQsFAAOCAQEAcPPV09avSzzT oNp9DQnKWdE9TIHkhAJEtOjD3cRLnyiy30KhpGli4B1xvG+AvMHOdKJhlYLVhzB7 4sxn/uiyGTCDMDj4dLdZwfKcGDVV1KgO2yW1OboNHv37qNV+Gzk2y65XiL8lygTw BFySBbPioRMTYmT+/cbAfhGlctrvd5IMe067VFlnC+A6DTJt5qLQ99N0H3E+8ZZ4 g5ibgeu9bGulb2NDOejGluwNujAx5eo7nCoJouuM7EYc7LrpdYdHijNDlaHN+Bp1 GuHrlMzm21y1yCWYuPB1Hxa5Otk5LuWW2vmGu6fdyR6ctKb6sdZ4JbNHWUcAIFit 4uzCU4wvmQ== -----END CERTIFICATE-----Generated at Sat Jan 31 10:53:35 2026 by rpki-client