This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/INE61DSnT0byRQAlBRacyXpwM4M.roa File: INE61DSnT0byRQAlBRacyXpwM4M.roa (raw, json) Hash identifier: ZjFf2bVbEAR4MMNRtk1mizzAeZIxKBJHJE2Ioiflxw4= Subject key identifier: 20:D1:3A:D4:34:A7:4F:46:F2:45:00:25:05:16:9C:C9:7A:70:33:83 Certificate issuer: /CN=de51c3c5ddc4fb61381c3bea24c1ba4f74998eab Certificate serial: 019B7910A99A3058AD956694EE6E6DFF6544 Authority key identifier: DE:51:C3:C5:DD:C4:FB:61:38:1C:3B:EA:24:C1:BA:4F:74:99:8E:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/INE61DSnT0byRQAlBRacyXpwM4M.roa Signing time: Thu 01 Jan 2026 10:18:13 +0000 ROA not before: Thu 01 Jan 2026 10:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200773 IP address blocks: 89.38.176.0/21 maxlen: 24 185.71.200.0/22 maxlen: 24 185.242.96.0/22 maxlen: 24 188.247.136.0/21 maxlen: 24 188.247.144.0/20 maxlen: 24 194.38.44.0/22 maxlen: 24 2a03:3ba0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.mft rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:a9:9a:30:58:ad:95:66:94:ee:6e:6d:ff:65:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de51c3c5ddc4fb61381c3bea24c1ba4f74998eab Validity Not Before: Jan 1 10:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=20d13ad434a74f46f245002505169cc97a703383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:25:f4:4a:3e:72:d8:8a:b1:ef:97:84:83:b0: c2:27:9c:aa:f4:7b:b3:7e:7c:ce:b1:b7:5d:eb:6a: 08:ca:29:58:0d:f0:e1:23:53:87:5c:7d:75:0c:af: 8a:85:d9:c3:db:b2:0a:65:59:2c:9e:7a:3f:dc:9e: cf:47:05:37:58:80:1d:9c:63:67:52:8f:59:95:33: ee:7e:49:fc:22:0e:ed:d7:fd:c9:c4:04:ee:f8:38: f5:bc:7d:07:18:f5:41:65:71:3c:48:4d:bd:f5:a0: 9a:2f:76:ff:a5:0d:d8:7f:f3:99:f9:15:1a:45:c8: d0:6a:00:6f:e6:67:e0:cd:de:a9:9e:48:07:b5:2c: ff:3a:6d:4c:74:46:e9:70:d0:b6:e8:85:70:c6:84: 9e:8d:c1:f1:62:cf:5c:c2:f3:6a:2f:8a:9a:6c:1b: 6f:02:99:53:2f:24:01:18:1c:78:6e:67:5a:2b:35: 10:6c:89:0c:ce:cd:f5:9a:cc:b9:85:bc:e4:e5:69: 28:e1:55:e6:8b:cf:d7:2e:e9:62:0b:b0:bf:88:cc: 08:d9:e7:60:5e:ff:e3:02:c5:6d:5a:3e:54:dd:34: 8d:93:82:ca:2d:3d:bb:56:c2:4a:5d:c2:99:15:c7: e7:72:f4:bf:52:ae:a8:4f:81:47:c2:95:dd:66:64: 9b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:D1:3A:D4:34:A7:4F:46:F2:45:00:25:05:16:9C:C9:7A:70:33:83 X509v3 Authority Key Identifier: keyid:DE:51:C3:C5:DD:C4:FB:61:38:1C:3B:EA:24:C1:BA:4F:74:99:8E:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lHDxd3E-2E4HDvqJMG6T3SZjqs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/INE61DSnT0byRQAlBRacyXpwM4M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6de65e-04bd-4346-85b1-a5325d441702/1/3lHDxd3E-2E4HDvqJMG6T3SZjqs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.38.176.0/21 185.71.200.0/22 185.242.96.0/22 188.247.136.0-188.247.159.255 194.38.44.0/22 IPv6: 2a03:3ba0::/32 Signature Algorithm: sha256WithRSAEncryption 77:d6:1a:5c:d2:6e:26:2a:87:28:ad:fa:0d:0f:c1:29:80:df: 61:4b:54:04:64:7e:fc:54:e5:b3:fb:22:75:07:98:eb:2a:62: f1:5f:e2:c2:44:8f:96:dd:9b:89:f6:56:64:df:0e:a1:4f:17: 58:c9:02:e4:3f:fc:a5:38:4d:dc:04:56:fa:df:7b:40:be:27: 04:b6:cc:33:38:43:b5:38:44:b7:d4:d9:c2:7e:49:52:28:9e: 65:a0:c6:49:36:7f:c0:2f:5f:18:1c:2a:8f:8c:40:99:3b:dd: 11:7f:44:22:8e:06:7f:c3:2d:b4:05:3c:4b:a2:08:ac:58:b4: c0:ee:dd:46:33:d6:b7:36:f3:a2:d4:87:4a:0d:45:d0:8b:78: b0:ed:c5:2e:ac:3d:80:29:df:97:0b:ec:b2:80:d5:86:5f:81: d7:27:d2:49:e3:cf:04:22:fc:ad:72:7a:36:43:f8:1b:89:11: 99:0e:57:fb:74:52:e4:54:d0:c7:c6:a5:6f:ba:e7:c4:18:42: 2f:de:68:dd:14:ee:fd:a0:71:bd:6d:82:91:00:33:96:f7:14: ba:5d:ca:77:52:ff:da:67:d7:c5:74:66:99:04:86:b6:27:f4: 31:dd:57:db:55:bf:66:5b:6b:5f:64:87:24:f7:9d:61:a0:d4: ef:7b:eb:cb -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgISAZt5EKmaMFitlWaU7m5t/2VEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlNTFjM2M1ZGRjNGZiNjEzODFjM2JlYTI0YzFiYTRmNzQ5 OThlYWIwHhcNMjYwMTAxMTAxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMGQxM2FkNDM0YTc0ZjQ2ZjI0NTAwMjUwNTE2OWNjOTdhNzAzMzgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryX0Sj5y2Iqx75eEg7DCJ5yq9Huz fnzOsbdd62oIyilYDfDhI1OHXH11DK+KhdnD27IKZVksnno/3J7PRwU3WIAdnGNn Uo9ZlTPufkn8Ig7t1/3JxATu+Dj1vH0HGPVBZXE8SE299aCaL3b/pQ3Yf/OZ+RUa RcjQagBv5mfgzd6pnkgHtSz/Om1MdEbpcNC26IVwxoSejcHxYs9cwvNqL4qabBtv AplTLyQBGBx4bmdaKzUQbIkMzs31msy5hbzk5Wko4VXmi8/XLuliC7C/iMwI2edg Xv/jAsVtWj5U3TSNk4LKLT27VsJKXcKZFcfncvS/Uq6oT4FHwpXdZmSb5QIDAQAB o4ICODCCAjQwHQYDVR0OBBYEFCDROtQ0p09G8kUAJQUWnMl6cDODMB8GA1UdIwQY MBaAFN5Rw8XdxPthOBw76iTBuk90mY6rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2xIRHhkM0UtMkU0SER2cUpNRzZUM1NaanFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS82ZGU2NWUtMDRiZC00MzQ2LTg1YjEt YTUzMjVkNDQxNzAyLzEvSU5FNjFEU25UMGJ5UlFBbEJSYWN5WHB3TTRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS82ZGU2NWUtMDRiZC00MzQ2LTg1YjEtYTUzMjVkNDQxNzAy LzEvM2xIRHhkM0UtMkU0SER2cUpNRzZUM1NaanFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTAsBAIAATAmAwQDWSawAwQC uUfIAwQCufJgMAwDBAO894gDBAW894ADBALCJiwwDQQCAAIwBwMFACoDO6AwDQYJ KoZIhvcNAQELBQADggEBAHfWGlzSbiYqhyit+g0PwSmA32FLVARkfvxU5bP7InUH mOsqYvFf4sJEj5bdm4n2VmTfDqFPF1jJAuQ//KU4TdwEVvrfe0C+JwS2zDM4Q7U4 RLfU2cJ+SVIonmWgxkk2f8AvXxgcKo+MQJk73RF/RCKOBn/DLbQFPEuiCKxYtMDu 3UYz1rc286LUh0oNRdCLeLDtxS6sPYAp35cL7LKA1YZfgdcn0knjzwQi/K1yejZD +BuJEZkOV/t0UuRU0MfGpW+658QYQi/eaN0U7v2gcb1tgpEAM5b3FLpdyndS/9pn 18V0ZpkEhrYn9DHdV9tVv2Zba19khyT3nWGg1O9768s= -----END CERTIFICATE-----Generated at Mon Feb 9 20:10:25 2026 by rpki-client