This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/erMj6_BPZzZ6N-THoqzkSU_5ZBE.roa File: erMj6_BPZzZ6N-THoqzkSU_5ZBE.roa (raw, json) Hash identifier: bnkazQ4u4YMIRjjnZY2LKMN0VWRkbCsY7oQU+mXFFxg= Subject key identifier: 7A:B3:23:EB:F0:4F:67:36:7A:37:E4:C7:A2:AC:E4:49:4F:F9:64:11 Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019B78A2590670542003EA22059976A13159 Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/erMj6_BPZzZ6N-THoqzkSU_5ZBE.roa Signing time: Thu 01 Jan 2026 08:17:44 +0000 ROA not before: Thu 01 Jan 2026 08:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203020 IP address blocks: 92.244.161.0/24 maxlen: 24 92.244.178.0/23 maxlen: 24 92.244.186.0/23 maxlen: 24 92.244.188.0/23 maxlen: 24 109.204.102.0/24 maxlen: 24 109.204.114.0/24 maxlen: 24 109.204.127.0/24 maxlen: 24 195.40.86.0/24 maxlen: 24 195.40.104.0/23 maxlen: 24 195.40.112.0/23 maxlen: 24 195.40.116.0/23 maxlen: 24 195.40.188.0/23 maxlen: 24 195.172.98.0/23 maxlen: 24 195.172.106.0/23 maxlen: 24 195.172.194.0/23 maxlen: 24 195.172.212.0/23 maxlen: 24 212.134.72.0/23 maxlen: 24 212.134.76.0/23 maxlen: 24 212.135.5.0/24 maxlen: 24 212.135.218.0/24 maxlen: 24 212.135.234.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:59:06:70:54:20:03:ea:22:05:99:76:a1:31:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Jan 1 08:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7ab323ebf04f67367a37e4c7a2ace4494ff96411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a6:eb:ec:03:14:c2:7e:b9:8a:a3:59:4c:33: 69:85:30:e8:79:87:96:db:8c:61:c5:40:e8:df:bd: ea:7d:96:4c:fb:bc:bb:0f:f9:df:90:1d:1e:19:fb: 0c:27:67:77:3a:9c:e5:9a:22:6e:65:27:58:89:20: 72:e6:24:b8:72:37:7e:3d:2c:cd:26:b1:db:9b:c0: 10:1f:e0:da:2f:f4:d7:73:ca:bb:04:9c:0b:e1:d1: cb:0c:e3:67:a3:bc:a7:61:42:ac:f4:66:c8:02:3b: 0c:37:59:be:33:c8:2d:40:2b:44:b7:7d:a6:bf:e7: 3f:30:b9:fb:0e:27:dc:e4:b2:d5:db:3d:b0:3b:ab: 66:43:24:ad:d7:18:6d:fc:bf:1f:f6:5e:7b:a7:dd: b8:9f:cf:40:af:fd:c6:3e:4c:fa:f3:86:9b:17:18: bd:e6:1f:54:49:71:3e:fd:7f:a4:ba:61:36:96:2b: 44:90:c0:3e:eb:74:3d:4b:70:20:a3:11:1a:19:b2: 03:83:2d:0f:75:31:0e:0d:1a:ea:12:f8:88:a4:46: 69:96:d8:17:76:47:fa:e8:ae:03:1c:46:ad:58:af: 78:ab:0c:9e:39:08:97:e1:de:4f:e3:be:e3:2b:4d: cc:06:70:75:a7:0b:42:5a:11:8e:f7:61:ab:26:0a: c5:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:B3:23:EB:F0:4F:67:36:7A:37:E4:C7:A2:AC:E4:49:4F:F9:64:11 X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/erMj6_BPZzZ6N-THoqzkSU_5ZBE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.244.161.0/24 92.244.178.0/23 92.244.186.0-92.244.189.255 109.204.102.0/24 109.204.114.0/24 109.204.127.0/24 195.40.86.0/24 195.40.104.0/23 195.40.112.0/23 195.40.116.0/23 195.40.188.0/23 195.172.98.0/23 195.172.106.0/23 195.172.194.0/23 195.172.212.0/23 212.134.72.0/23 212.134.76.0/23 212.135.5.0/24 212.135.218.0/24 212.135.234.0/23 Signature Algorithm: sha256WithRSAEncryption 62:45:51:14:dd:88:15:20:b5:f2:ab:4b:48:fe:f6:f7:58:70: ee:29:2f:ff:e9:c0:56:62:b2:ed:91:17:22:e6:e8:9b:e7:9a: 49:62:ee:83:f2:9b:19:cb:25:d0:2e:e9:34:a1:50:11:2c:0b: 62:59:7e:68:1a:ac:14:48:be:1d:57:3d:dc:aa:dc:e2:b3:98: 3f:69:a1:16:d1:b9:32:22:cf:5a:2a:ec:ce:78:b6:54:3b:52: 16:fd:30:c5:91:43:3a:de:07:a2:07:f0:94:85:93:d8:ce:6c: 53:6a:54:9e:58:08:3f:20:71:89:bb:92:5e:f2:74:b6:63:20: e5:28:eb:81:42:56:b8:7c:30:b7:6f:35:6e:6a:e2:27:23:c5: 57:76:5e:05:bf:7e:e0:c1:9b:ee:fb:0a:0b:af:cd:ce:de:74: d5:74:91:7c:26:d9:a0:89:ce:f1:c9:28:22:5a:3d:27:91:b1: 4f:cd:82:61:c0:e0:25:3c:44:ff:7a:36:af:cf:a2:f8:6e:8c: cf:38:70:cb:d6:ff:cd:a8:e5:3b:4d:f9:af:61:7d:66:7a:93: c9:3b:97:12:94:b0:58:d0:53:6f:82:55:8a:a8:0c:5f:c9:10: b2:2a:41:b9:d1:6d:67:dd:6c:d9:6a:bb:a2:e7:a8:8d:5b:b5: 82:8e:e5:a9 -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgISAZt4olkGcFQgA+oiBZl2oTFZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjYwMTAxMDgxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YWIzMjNlYmYwNGY2NzM2N2EzN2U0YzdhMmFjZTQ0OTRmZjk2NDExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6br7AMUwn65iqNZTDNphTDoeYeW 24xhxUDo373qfZZM+7y7D/nfkB0eGfsMJ2d3OpzlmiJuZSdYiSBy5iS4cjd+PSzN JrHbm8AQH+DaL/TXc8q7BJwL4dHLDONno7ynYUKs9GbIAjsMN1m+M8gtQCtEt32m v+c/MLn7Difc5LLV2z2wO6tmQySt1xht/L8f9l57p924n89Ar/3GPkz684abFxi9 5h9USXE+/X+kumE2litEkMA+63Q9S3AgoxEaGbIDgy0PdTEODRrqEviIpEZpltgX dkf66K4DHEatWK94qwyeOQiX4d5P477jK03MBnB1pwtCWhGO92GrJgrFRQIDAQAB o4ICiDCCAoQwHQYDVR0OBBYEFHqzI+vwT2c2ejfkx6Ks5ElP+WQRMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvZXJNajZfQlBaelo2Ti1USG9xemtTVV81WkJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGdBggrBgEFBQcBBwEB/wSBjTCBijCBhwQCAAEwgYADBABc 9KEDBAFc9LIwDAMEAVz0ugMEAVz0vAMEAG3MZgMEAG3McgMEAG3MfwMEAMMoVgME AcMoaAMEAcMocAMEAcModAMEAcMovAMEAcOsYgMEAcOsagMEAcOswgMEAcOs1AME AdSGSAMEAdSGTAMEANSHBQMEANSH2gMEAdSH6jANBgkqhkiG9w0BAQsFAAOCAQEA YkVRFN2IFSC18qtLSP7291hw7ikv/+nAVmKy7ZEXIubom+eaSWLug/KbGcsl0C7p NKFQESwLYll+aBqsFEi+HVc93Krc4rOYP2mhFtG5MiLPWirszni2VDtSFv0wxZFD Ot4HogfwlIWT2M5sU2pUnlgIPyBxibuSXvJ0tmMg5SjrgUJWuHwwt281bmriJyPF V3ZeBb9+4MGb7vsKC6/Nzt501XSRfCbZoInO8ckoIlo9J5GxT82CYcDgJTxE/3o2 r8+i+G6Mzzhwy9b/zajlO035r2F9ZnqTyTuXEpSwWNBTb4JViqgMX8kQsipBudFt Z91s2Wq7oueojVu1go7lqQ== -----END CERTIFICATE-----Generated at Sun Jan 18 10:47:53 2026 by rpki-client