This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/ern80PQ2T3G_qKDK6t20LOqQ8gw.roa File: ern80PQ2T3G_qKDK6t20LOqQ8gw.roa (raw, json) Hash identifier: X2r8d/o7xpedzqavTUyAlNgew6uYD1MitnUmwmxuOUE= Subject key identifier: 7A:B9:FC:D0:F4:36:4F:71:BF:A8:A0:CA:EA:DD:B4:2C:EA:90:F2:0C Certificate issuer: /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2 Certificate serial: 019B7F139F2AC11F7B1A4EA3A1448E5912E0 Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/ern80PQ2T3G_qKDK6t20LOqQ8gw.roa Signing time: Fri 02 Jan 2026 14:19:10 +0000 ROA not before: Fri 02 Jan 2026 14:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61317 IP address blocks: 176.113.99.0/24 maxlen: 24 178.212.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 05:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:9f:2a:c1:1f:7b:1a:4e:a3:a1:44:8e:59:12:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2 Validity Not Before: Jan 2 14:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7ab9fcd0f4364f71bfa8a0caeaddb42cea90f20c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:57:58:f6:28:1e:eb:be:05:72:97:aa:16:e8: 0b:fe:a1:85:f1:c8:e9:e6:70:bc:37:78:77:3d:b6: a4:27:1f:aa:28:52:03:af:ab:b5:0e:ea:6f:84:7d: c9:8a:97:d7:e0:52:7f:96:65:e3:d0:ed:6b:e4:87: ae:4b:e5:71:7a:5d:8b:56:0c:a0:ac:97:44:4a:fe: 47:ec:aa:be:6c:2f:27:e8:a6:25:ad:ec:82:64:04: 60:57:1f:bf:69:7b:f2:8b:42:47:d6:fb:08:18:aa: 59:63:38:66:07:7a:da:ab:20:da:2a:cc:d2:fe:64: a1:2b:f6:37:72:04:ac:a8:4a:83:b3:ed:52:9e:79: 41:d7:96:e1:1f:5d:35:b4:7d:0d:07:50:a9:98:06: 46:cb:0d:83:c4:dd:c9:fb:1f:0b:57:fc:36:b4:45: 79:a9:e1:d4:9c:78:30:94:b5:6d:bf:ab:e0:9c:12: 06:56:ce:07:90:3a:ea:75:d7:63:fe:dd:1c:96:36: 84:2e:8e:29:e9:44:7d:d4:fb:e8:66:a9:64:67:33: 63:2e:93:13:0c:34:1a:eb:4a:d3:64:23:21:5b:2c: c7:d4:5d:15:9e:bc:24:f9:0a:bd:c3:e3:95:cf:f0: fe:13:38:7d:b0:dc:4d:5c:76:28:d6:20:44:8a:f0: 4b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:B9:FC:D0:F4:36:4F:71:BF:A8:A0:CA:EA:DD:B4:2C:EA:90:F2:0C X509v3 Authority Key Identifier: keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/ern80PQ2T3G_qKDK6t20LOqQ8gw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.113.99.0/24 178.212.202.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:e4:e7:5f:44:27:4c:03:67:89:11:83:fb:5d:ba:1a:33:65: 92:eb:db:b6:63:74:b2:cd:a5:90:97:53:e0:cb:e2:7d:2b:e0: b9:da:94:5e:68:be:18:cb:dc:1e:9d:6e:bd:0d:6b:4e:ca:56: 33:c7:8e:c3:a6:1f:8e:ef:db:5e:4d:73:36:27:23:b3:7e:1a: 7b:70:8e:9d:5d:53:51:62:ae:c8:9c:cf:db:15:ff:0c:8f:c8: 20:c6:54:c3:61:5a:eb:f8:66:a0:93:43:44:2c:4c:d0:e1:97: 9b:76:7f:45:5f:32:00:83:a7:8d:c3:84:46:27:45:14:e1:f7: 3e:dc:bb:e1:8d:64:67:c5:b2:e5:90:c8:44:b7:71:b9:bb:9d: f5:2a:74:25:f7:1d:ed:22:94:ba:5c:a5:ea:ad:68:90:97:22: 53:ed:69:84:f9:ef:75:35:fc:6b:fd:98:3b:0f:b9:18:fc:74: 18:2b:1f:21:2d:42:e7:a1:89:93:74:29:d0:bd:e3:fd:8b:d6: 58:26:48:67:63:06:66:b9:da:48:97:7f:17:dc:b9:41:9f:71: 4b:9d:df:92:aa:bd:02:dd:58:50:63:54:ba:11:86:71:da:87: 1c:cd:72:e3:dd:ce:12:9a:eb:93:59:94:ea:11:ee:1d:98:20: 12:fe:c0:24 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/E58qwR97Gk6joUSOWRLgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyZjJjMmU3YmMxZGE1NGQ5MTljYTViNTk0MWQzNzg4OTJi MmNjYjIwHhcNMjYwMTAyMTQxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YWI5ZmNkMGY0MzY0ZjcxYmZhOGEwY2FlYWRkYjQyY2VhOTBmMjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFdY9ige674FcpeqFugL/qGF8cjp 5nC8N3h3PbakJx+qKFIDr6u1DupvhH3JipfX4FJ/lmXj0O1r5IeuS+Vxel2LVgyg rJdESv5H7Kq+bC8n6KYlreyCZARgVx+/aXvyi0JH1vsIGKpZYzhmB3raqyDaKszS /mShK/Y3cgSsqEqDs+1SnnlB15bhH101tH0NB1CpmAZGyw2DxN3J+x8LV/w2tEV5 qeHUnHgwlLVtv6vgnBIGVs4HkDrqdddj/t0cljaELo4p6UR91PvoZqlkZzNjLpMT DDQa60rTZCMhWyzH1F0Vnrwk+Qq9w+OVz/D+Ezh9sNxNXHYo1iBEivBLCQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHq5/ND0Nk9xv6igyurdtCzqkPIMMB8GA1UdIwQY MBaAFCLywue8HaVNkZyltZQdN4iSssyyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXZMQzU3d2RwVTJSbktXMWxCMDNpSkt5ekxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi82MDI1MzAtNmQyMi00NmYxLThlMDUt MDJkZWY2ZTg0YzkxLzEvZXJuODBQUTJUM0dfcUtESzZ0MjBMT3FROGd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi82MDI1MzAtNmQyMi00NmYxLThlMDUtMDJkZWY2ZTg0Yzkx LzEvSXZMQzU3d2RwVTJSbktXMWxCMDNpSkt5ekxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAsHFjAwQA stTKMA0GCSqGSIb3DQEBCwUAA4IBAQBr5OdfRCdMA2eJEYP7XboaM2WS69u2Y3Sy zaWQl1Pgy+J9K+C52pReaL4Yy9wenW69DWtOylYzx47Dph+O79teTXM2JyOzfhp7 cI6dXVNRYq7InM/bFf8Mj8ggxlTDYVrr+Gagk0NELEzQ4Zebdn9FXzIAg6eNw4RG J0UU4fc+3LvhjWRnxbLlkMhEt3G5u531KnQl9x3tIpS6XKXqrWiQlyJT7WmE+e91 Nfxr/Zg7D7kY/HQYKx8hLULnoYmTdCnQveP9i9ZYJkhnYwZmudpIl38X3LlBn3FL nd+Sqr0C3VhQY1S6EYZx2occzXLj3c4SmuuTWZTqEe4dmCAS/sAk -----END CERTIFICATE-----Generated at Thu Jan 8 12:55:40 2026 by rpki-client