This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/EGT7w7ccRY_aHsT2waQrmkTQOg0.roa File: EGT7w7ccRY_aHsT2waQrmkTQOg0.roa (raw, json) Hash identifier: G3orlxt1QVzhu0rMV7kl3OzYV++O6Mm3e1uJ14Jtm3Q= Subject key identifier: 10:64:FB:C3:B7:1C:45:8F:DA:1E:C4:F6:C1:A4:2B:9A:44:D0:3A:0D Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5 Certificate serial: 019B77C695B58422D4BB8602FAA87F36885E Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/EGT7w7ccRY_aHsT2waQrmkTQOg0.roa Signing time: Thu 01 Jan 2026 04:17:41 +0000 ROA not before: Thu 01 Jan 2026 04:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3257 IP address blocks: 138.226.16.0/20 maxlen: 20 138.226.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 07:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:95:b5:84:22:d4:bb:86:02:fa:a8:7f:36:88:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5 Validity Not Before: Jan 1 04:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1064fbc3b71c458fda1ec4f6c1a42b9a44d03a0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ef:57:f7:d2:68:03:37:6a:fa:c8:43:b8:f5: a4:5c:81:96:9b:67:ba:df:70:5c:0a:2d:55:84:ee: 2d:b7:52:c1:a2:a5:53:c9:3d:7e:75:ea:9c:40:ce: d8:4a:a1:79:67:e5:8f:fa:a3:ac:1a:6a:06:3a:11: 1f:80:45:ba:eb:94:7f:cb:8c:a7:28:aa:7d:f0:7d: 1f:9a:9a:31:be:82:74:0e:09:74:b7:e5:ec:12:46: 0e:bb:24:c5:e4:91:3b:db:95:ed:97:f9:7a:71:73: 01:71:8f:48:32:d2:75:15:5a:24:06:ce:f8:de:91: f9:48:dc:ea:c8:38:9c:31:02:88:ad:66:e4:09:e6: 50:4d:6d:33:d3:93:cc:bb:03:1a:15:80:6e:d6:45: f5:41:79:64:b9:0a:c8:8c:fa:ae:cf:a1:e6:28:1c: b9:dc:f9:e7:61:ff:4b:2f:c6:8a:65:44:ad:2d:02: 6c:52:5f:fb:5f:18:5b:ec:80:cf:f3:5c:fe:3e:0c: 5b:bd:8b:54:38:24:2e:a7:ce:78:b7:af:e1:a7:e2: 4f:53:b9:db:75:d2:52:39:e5:28:4c:be:72:f8:15: a6:53:f9:43:71:f5:93:0e:af:c7:30:be:7e:b5:17: 6c:a9:7f:28:e0:c2:a8:d3:1c:a9:d9:b9:be:72:44: 6d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:64:FB:C3:B7:1C:45:8F:DA:1E:C4:F6:C1:A4:2B:9A:44:D0:3A:0D X509v3 Authority Key Identifier: keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/EGT7w7ccRY_aHsT2waQrmkTQOg0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.226.16.0/20 138.226.96.0/20 Signature Algorithm: sha256WithRSAEncryption 7b:1b:6a:1e:81:fd:77:bd:a4:8e:5e:0a:b6:a3:93:04:87:eb: b9:42:a4:ef:9c:3e:42:19:64:e9:3f:83:f5:11:7e:88:98:66: d2:7e:70:f1:0c:6a:f8:37:91:ce:fb:d0:2d:75:b9:46:e8:e9: 72:38:35:70:8d:9f:57:0b:1b:34:68:8d:cd:17:1b:ba:c7:b9: 3e:75:e3:d5:a5:9d:16:b5:3d:d2:44:ef:42:23:41:0c:f8:f0: be:ef:42:02:55:ef:19:7c:7c:0d:2b:1c:95:4a:a0:50:14:cd: 49:87:18:02:d9:0b:71:4c:d7:16:df:8a:fd:58:9b:e0:41:4a: 58:88:d4:9e:44:b6:cc:cc:c6:94:67:c2:bd:b4:e0:f8:f9:67: cf:7f:58:9b:4b:87:1f:88:e9:7c:8c:28:07:48:08:2f:d1:e8: b2:f1:fc:61:7c:08:1d:f9:c7:dd:a2:c6:3b:93:87:3d:9d:59: bd:a3:49:64:af:e2:c3:c7:47:d0:7b:1d:1a:b5:6a:eb:5e:cd: be:45:f5:59:f3:10:2f:0c:c7:d5:e7:b6:31:df:99:a5:0e:4d: c6:62:1e:70:64:1d:c5:1b:f8:4b:11:a9:7b:a3:3f:d7:75:aa: 2a:62:bf:b9:60:da:25:0f:c9:4c:c0:d1:e9:37:43:c2:41:6f: 5e:3b:51:42 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xpW1hCLUu4YC+qh/NoheMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0M2U0NDdlZGI4YTVlMGUxYjFkN2Y1Y2RjMjg3YzM2NGE1 ZmIwYjUwHhcNMjYwMTAxMDQxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDY0ZmJjM2I3MWM0NThmZGExZWM0ZjZjMWE0MmI5YTQ0ZDAzYTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+9X99JoAzdq+shDuPWkXIGWm2e6 33BcCi1VhO4tt1LBoqVTyT1+deqcQM7YSqF5Z+WP+qOsGmoGOhEfgEW665R/y4yn KKp98H0fmpoxvoJ0Dgl0t+XsEkYOuyTF5JE725Xtl/l6cXMBcY9IMtJ1FVokBs74 3pH5SNzqyDicMQKIrWbkCeZQTW0z05PMuwMaFYBu1kX1QXlkuQrIjPquz6HmKBy5 3PnnYf9LL8aKZUStLQJsUl/7Xxhb7IDP81z+PgxbvYtUOCQup854t6/hp+JPU7nb ddJSOeUoTL5y+BWmU/lDcfWTDq/HML5+tRdsqX8o4MKo0xyp2bm+ckRtOwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBBk+8O3HEWP2h7E9sGkK5pE0DoNMB8GA1UdIwQY MBaAFHQ+RH7bil4OGx1/XNwofDZKX7C1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9hMWFlNzAtNzk5Ni00Njg3LWEwZDct NWUwZjRhYjgwOWJiLzEvRUdUN3c3Y2NSWV9hSHNUMndhUXJta1RRT2cwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9hMWFlNzAtNzk5Ni00Njg3LWEwZDctNWUwZjRhYjgwOWJi LzEvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEiuIQAwQE iuJgMA0GCSqGSIb3DQEBCwUAA4IBAQB7G2oegf13vaSOXgq2o5MEh+u5QqTvnD5C GWTpP4P1EX6ImGbSfnDxDGr4N5HO+9AtdblG6OlyODVwjZ9XCxs0aI3NFxu6x7k+ dePVpZ0WtT3SRO9CI0EM+PC+70ICVe8ZfHwNKxyVSqBQFM1JhxgC2QtxTNcW34r9 WJvgQUpYiNSeRLbMzMaUZ8K9tOD4+WfPf1ibS4cfiOl8jCgHSAgv0eiy8fxhfAgd +cfdosY7k4c9nVm9o0lkr+LDx0fQex0atWrrXs2+RfVZ8xAvDMfV57Yx35mlDk3G Yh5wZB3FG/hLEal7oz/XdaoqYr+5YNolD8lMwNHpN0PCQW9eO1FC -----END CERTIFICATE-----Generated at Fri Jan 2 16:26:01 2026 by rpki-client