This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/E0aSDdZfP72L7_SFs-g8edNPPo4.roa File: E0aSDdZfP72L7_SFs-g8edNPPo4.roa (raw, json) Hash identifier: usHCFKh4oFPJVQyyrmmtbljoMq5HKHOL7m7rE3OnnxU= Subject key identifier: 13:46:92:0D:D6:5F:3F:BD:8B:EF:F4:85:B3:E8:3C:79:D3:4F:3E:8E Certificate issuer: /CN=38879a78a58a485ccd8970f0432db8f3d771725b Certificate serial: 019B79ED677AA8313118F891EF3053BAF122 Authority key identifier: 38:87:9A:78:A5:8A:48:5C:CD:89:70:F0:43:2D:B8:F3:D7:71:72:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OIeaeKWKSFzNiXDwQy2489dxcls.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/E0aSDdZfP72L7_SFs-g8edNPPo4.roa Signing time: Thu 01 Jan 2026 14:19:20 +0000 ROA not before: Thu 01 Jan 2026 14:19:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207006 IP address blocks: 185.196.232.0/22 maxlen: 24 2a0a:73c0::/29 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft rsync://rpki.ripe.net/repository/DEFAULT/OIeaeKWKSFzNiXDwQy2489dxcls.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:67:7a:a8:31:31:18:f8:91:ef:30:53:ba:f1:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38879a78a58a485ccd8970f0432db8f3d771725b Validity Not Before: Jan 1 14:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1346920dd65f3fbd8beff485b3e83c79d34f3e8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f4:59:5f:6b:10:fa:1f:a3:84:da:2d:f7:0f: cb:8d:58:35:ea:58:2c:4e:dd:70:14:2c:de:90:21: 7f:9c:63:a7:b9:1a:1c:35:03:03:87:38:07:35:34: f2:36:be:e4:e9:89:94:52:f1:a0:ad:7e:7d:9f:a6: 2a:da:9d:c1:60:a4:a1:d3:e1:84:2c:8c:cf:29:c4: 2d:3f:4b:da:21:0d:a2:8a:02:61:e2:3d:a3:56:0f: a9:7e:5d:79:c9:e9:11:2f:b6:72:88:48:d8:b0:85: 69:33:0a:f4:d8:7c:71:67:41:e0:0f:0b:fc:a0:07: 61:ef:ec:4e:dd:3f:d1:d1:f6:a4:36:fd:47:84:5f: 80:c1:43:2a:d5:df:79:78:f4:a8:1b:02:91:7f:de: 1d:cf:90:85:e9:5e:10:d6:e2:94:fd:ac:eb:ad:7d: 4a:dd:0b:b3:10:11:4e:93:5a:0b:3f:3d:44:f1:3f: 4a:56:d0:a8:c8:af:5c:22:75:63:48:55:2a:1a:12: 96:be:45:b5:fe:26:82:ef:04:8c:94:8e:3e:e8:49: 18:d5:95:bc:c8:ce:7e:03:2e:36:9b:5e:21:aa:a6: 2d:e7:08:6f:20:b5:bb:82:3e:37:94:ba:bb:9b:92: d2:64:49:ce:cc:0c:36:15:aa:ab:c9:6f:c0:b9:33: 93:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:46:92:0D:D6:5F:3F:BD:8B:EF:F4:85:B3:E8:3C:79:D3:4F:3E:8E X509v3 Authority Key Identifier: keyid:38:87:9A:78:A5:8A:48:5C:CD:89:70:F0:43:2D:B8:F3:D7:71:72:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OIeaeKWKSFzNiXDwQy2489dxcls.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/E0aSDdZfP72L7_SFs-g8edNPPo4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.196.232.0/22 IPv6: 2a0a:73c0::/29 Signature Algorithm: sha256WithRSAEncryption 11:27:8e:7a:a1:65:2b:27:a5:c3:40:22:ce:8b:0c:23:85:aa: 97:aa:fd:91:61:e9:f2:0d:03:e1:c9:1a:a3:64:3c:40:2a:f8: f5:e4:f4:3a:61:07:1b:fc:21:fb:d6:af:13:d2:6e:12:68:12: 58:19:ba:1c:01:67:e0:31:4c:f2:b0:64:b6:ee:57:46:29:56: 56:ba:84:40:8a:86:d3:f1:ef:75:d0:6e:32:d0:b2:ae:61:b8: 66:f1:c3:0a:71:e7:9d:84:81:d2:4e:20:68:f4:bf:02:34:a0: 92:af:57:b1:33:b4:46:9b:b2:c1:a1:ec:33:72:75:43:3b:fa: 10:d3:fa:eb:04:40:8e:de:67:31:05:7b:f1:90:e8:44:f5:fa: 7a:91:7e:c9:95:d0:e8:26:8a:c4:eb:ee:ab:81:ec:49:44:00: 81:7d:2c:fc:6e:1a:f0:2f:22:15:6c:0d:2a:a2:22:e1:6c:09: 83:b6:31:d6:a9:69:86:44:87:b8:f1:29:f6:cc:c3:42:de:69: 27:a5:09:36:e6:7c:66:88:ff:98:8d:8d:a7:e8:c0:ef:f7:db: 96:a3:f8:bc:23:40:8e:0c:fe:ea:51:99:20:f6:22:13:31:0a: ff:cf:dd:10:b6:a7:e5:fd:5e:1b:f6:2c:3d:21:8a:72:4d:84: b4:96:f6:93 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt57Wd6qDExGPiR7zBTuvEiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4ODc5YTc4YTU4YTQ4NWNjZDg5NzBmMDQzMmRiOGYzZDc3 MTcyNWIwHhcNMjYwMTAxMTQxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzQ2OTIwZGQ2NWYzZmJkOGJlZmY0ODViM2U4M2M3OWQzNGYzZThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PRZX2sQ+h+jhNot9w/LjVg16lgs Tt1wFCzekCF/nGOnuRocNQMDhzgHNTTyNr7k6YmUUvGgrX59n6Yq2p3BYKSh0+GE LIzPKcQtP0vaIQ2iigJh4j2jVg+pfl15yekRL7ZyiEjYsIVpMwr02HxxZ0HgDwv8 oAdh7+xO3T/R0fakNv1HhF+AwUMq1d95ePSoGwKRf94dz5CF6V4Q1uKU/azrrX1K 3QuzEBFOk1oLPz1E8T9KVtCoyK9cInVjSFUqGhKWvkW1/iaC7wSMlI4+6EkY1ZW8 yM5+Ay42m14hqqYt5whvILW7gj43lLq7m5LSZEnOzAw2FaqryW/AuTOTfwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBNGkg3WXz+9i+/0hbPoPHnTTz6OMB8GA1UdIwQY MBaAFDiHmnilikhczYlw8EMtuPPXcXJbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0llYWVLV0tTRnpOaVhEd1F5MjQ4OWR4Y2xzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9jMzg3OTctZDdmYS00YTU3LTlmODMt YTE2YTM0YzQ2ZjMwLzEvRTBhU0RkWmZQNzJMN19TRnMtZzhlZE5QUG80LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9jMzg3OTctZDdmYS00YTU3LTlmODMtYTE2YTM0YzQ2ZjMw LzEvT0llYWVLV0tTRnpOaVhEd1F5MjQ4OWR4Y2xzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCucToMA0E AgACMAcDBQMqCnPAMA0GCSqGSIb3DQEBCwUAA4IBAQARJ456oWUrJ6XDQCLOiwwj haqXqv2RYenyDQPhyRqjZDxAKvj15PQ6YQcb/CH71q8T0m4SaBJYGbocAWfgMUzy sGS27ldGKVZWuoRAiobT8e910G4y0LKuYbhm8cMKceedhIHSTiBo9L8CNKCSr1ex M7RGm7LBoewzcnVDO/oQ0/rrBECO3mcxBXvxkOhE9fp6kX7JldDoJorE6+6rgexJ RACBfSz8bhrwLyIVbA0qoiLhbAmDtjHWqWmGRIe48Sn2zMNC3mknpQk25nxmiP+Y jY2n6MDv99uWo/i8I0CODP7qUZkg9iITMQr/z90Qtqfl/V4b9iw9IYpyTYS0lvaT -----END CERTIFICATE-----Generated at Tue Feb 10 07:11:07 2026 by rpki-client