This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/EdVEFpRvyfmus5D50IqsjqRdnGI.roa File: EdVEFpRvyfmus5D50IqsjqRdnGI.roa (raw, json) Hash identifier: m8eyhi/kt34U/q2dDMOlRAlwFy68zR85UjxnvWN0xhM= Subject key identifier: 11:D5:44:16:94:6F:C9:F9:AE:B3:90:F9:D0:8A:AC:8E:A4:5D:9C:62 Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019B797E062492E91B0D2FC62D24DC680DBA Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/EdVEFpRvyfmus5D50IqsjqRdnGI.roa Signing time: Thu 01 Jan 2026 12:17:40 +0000 ROA not before: Thu 01 Jan 2026 12:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214309 IP address blocks: 89.35.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:06:24:92:e9:1b:0d:2f:c6:2d:24:dc:68:0d:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Jan 1 12:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=11d54416946fc9f9aeb390f9d08aac8ea45d9c62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d2:93:d7:25:05:a5:bc:02:f4:48:2d:7b:16: 2e:c7:f6:54:d9:5c:b4:5d:46:f8:e4:28:30:a3:17: 9f:6d:76:95:e9:b2:85:8c:17:05:10:f9:4c:bb:d6: fb:b3:bd:60:d8:85:c9:06:57:3f:51:1d:db:e3:e8: 9e:27:ad:07:5c:ca:c7:cc:9e:e9:66:c8:bc:eb:46: f2:4e:ad:64:ce:3a:70:6b:56:36:ed:dd:ac:fa:d1: 0c:fe:8e:a4:33:a3:fb:8d:16:c0:07:ff:f8:a7:e6: 91:c4:53:b2:74:bf:87:dc:d2:30:88:83:02:da:b6: 71:eb:b6:f1:10:48:fa:e2:97:c1:96:0e:1c:97:d9: 24:24:c6:16:fe:90:fe:5b:25:a5:fe:74:0d:61:c3: 02:b3:18:5b:0e:a0:dc:53:d0:3f:62:39:8b:58:5b: 9f:3d:e7:7f:7a:24:97:b3:c9:65:ec:03:82:db:e0: 8f:49:7f:90:f9:61:6a:89:08:1b:ed:39:33:70:44: ee:b5:74:4a:76:b4:3a:a6:cb:2f:85:61:47:25:09: f9:f2:a7:bf:ff:97:50:50:2c:1e:7f:35:56:85:ed: f1:6b:de:92:9b:9e:80:16:1c:72:f9:5c:9e:7e:04: 2e:dc:c1:d5:7b:37:fb:e8:96:68:c1:5e:6f:4a:b8: 0b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:D5:44:16:94:6F:C9:F9:AE:B3:90:F9:D0:8A:AC:8E:A4:5D:9C:62 X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/EdVEFpRvyfmus5D50IqsjqRdnGI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.35.130.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:44:f5:39:cc:12:ad:c0:e4:6a:ff:68:1b:77:a1:98:7c:41: 20:ec:7d:f6:f9:cc:ce:1e:77:83:9f:28:d9:90:c6:20:8e:e6: 82:6e:6c:c4:f4:16:65:1a:7b:ed:e1:5c:52:7c:34:ee:a4:c7: 85:0a:2e:dc:b1:21:11:d2:cf:bd:3f:5f:6e:8e:e3:a2:2b:b3: 4c:53:a6:31:dc:29:20:b6:16:cf:e2:84:2b:b3:75:da:fd:a6: a7:81:29:10:a0:da:8d:34:b9:a0:ca:3a:39:d4:f3:d2:90:e3: f4:d7:50:3c:30:23:76:33:a4:8c:dc:9e:66:78:ab:8e:51:e2: cf:87:f0:f4:e9:eb:20:4f:78:4e:f0:e7:a4:c9:52:bd:74:7d: 7d:db:1d:b2:ca:6c:0c:7e:73:68:97:4e:de:78:50:e0:27:5b: e0:58:fc:52:6e:2c:82:84:c3:73:9f:6d:ac:aa:dd:0c:0e:bc: c3:cd:7b:44:29:02:d6:ea:6a:54:69:74:61:98:ae:63:95:34: 90:d9:0c:17:33:34:2a:a2:23:a6:75:5d:c4:9d:7f:24:ab:f9: 9a:9f:8a:29:e6:79:bc:69:38:1e:80:a4:09:ad:2c:d7:37:14: c1:d8:45:5f:0d:39:bb:03:d6:e0:a2:12:45:cd:14:fc:67:f0: ff:14:8d:8d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fgYkkukbDS/GLSTcaA26MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjYwMTAxMTIxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMWQ1NDQxNjk0NmZjOWY5YWViMzkwZjlkMDhhYWM4ZWE0NWQ5YzYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA19KT1yUFpbwC9EgtexYux/ZU2Vy0 XUb45CgwoxefbXaV6bKFjBcFEPlMu9b7s71g2IXJBlc/UR3b4+ieJ60HXMrHzJ7p Zsi860byTq1kzjpwa1Y27d2s+tEM/o6kM6P7jRbAB//4p+aRxFOydL+H3NIwiIMC 2rZx67bxEEj64pfBlg4cl9kkJMYW/pD+WyWl/nQNYcMCsxhbDqDcU9A/YjmLWFuf Ped/eiSXs8ll7AOC2+CPSX+Q+WFqiQgb7TkzcETutXRKdrQ6pssvhWFHJQn58qe/ /5dQUCwefzVWhe3xa96Sm56AFhxy+VyefgQu3MHVezf76JZowV5vSrgLuwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBHVRBaUb8n5rrOQ+dCKrI6kXZxiMB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvRWRWRUZwUnZ5Zm11czVENTBJcXNqcVJkbkdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSOCMA0G CSqGSIb3DQEBCwUAA4IBAQA+RPU5zBKtwORq/2gbd6GYfEEg7H32+czOHneDnyjZ kMYgjuaCbmzE9BZlGnvt4VxSfDTupMeFCi7csSER0s+9P19ujuOiK7NMU6Yx3Ckg thbP4oQrs3Xa/aangSkQoNqNNLmgyjo51PPSkOP011A8MCN2M6SM3J5meKuOUeLP h/D06esgT3hO8OekyVK9dH192x2yymwMfnNol07eeFDgJ1vgWPxSbiyChMNzn22s qt0MDrzDzXtEKQLW6mpUaXRhmK5jlTSQ2QwXMzQqoiOmdV3EnX8kq/man4op5nm8 aTgegKQJrSzXNxTB2EVfDTm7A9bgohJFzRT8Z/D/FI2N -----END CERTIFICATE-----Generated at Mon Jan 19 14:37:26 2026 by rpki-client