This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/ew27FqwZ4h_c8GrTvURwZtxGcP4.roa File: ew27FqwZ4h_c8GrTvURwZtxGcP4.roa (raw, json) Hash identifier: PYRXWNlrDolvfrk3G3iU1JEkhR7Ij1fQE13ZjjG+yMc= Subject key identifier: 7B:0D:BB:16:AC:19:E2:1F:DC:F0:6A:D3:BD:44:70:66:DC:46:70:FE Certificate issuer: /CN=c1098a1905bbd3381533828f6b7fd227170431ef Certificate serial: 019B7AC94DABB0935A504EFD7C088D4A157C Authority key identifier: C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/ew27FqwZ4h_c8GrTvURwZtxGcP4.roa Signing time: Thu 01 Jan 2026 18:19:31 +0000 ROA not before: Thu 01 Jan 2026 18:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 79.132.196.0/24 maxlen: 24 109.230.112.0/24 maxlen: 24 109.230.113.0/24 maxlen: 24 202.164.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.crl rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:4d:ab:b0:93:5a:50:4e:fd:7c:08:8d:4a:15:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1098a1905bbd3381533828f6b7fd227170431ef Validity Not Before: Jan 1 18:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7b0dbb16ac19e21fdcf06ad3bd447066dc4670fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:09:62:74:15:df:d1:5a:59:e9:c5:68:10:ab: a9:ea:a8:ef:cd:80:23:15:32:a4:00:da:46:25:7b: 9f:80:89:be:9b:34:3c:c6:01:91:99:71:51:7c:74: f7:06:a8:b6:b4:b3:cb:2c:32:05:e6:8d:32:5a:eb: 39:df:78:9b:2e:15:9b:b3:9c:8c:47:9d:36:8b:09: ae:76:97:31:33:e9:c2:c5:b9:76:5e:e5:44:44:91: 8f:30:ef:5a:0d:5f:3d:a4:55:2d:67:4a:48:e1:71: aa:f1:67:bf:4e:71:3d:20:d6:89:8a:92:98:10:f2: 09:76:8a:76:2e:c4:0a:72:c9:3a:79:1e:71:b0:d0: cd:3c:10:e0:e2:fa:5c:c8:89:28:99:5a:f5:3b:ea: b1:02:f6:68:bd:72:a0:9e:45:85:4a:25:da:a1:1a: 3e:ac:6e:a3:ae:ef:8b:6f:2c:e6:cc:e5:b2:21:a7: 5a:59:ad:55:92:86:e2:d5:24:45:46:ca:d2:00:04: 9d:9d:28:3c:d4:ac:ad:e0:30:09:99:da:92:0b:49: be:09:8b:8f:a0:d4:f3:71:dd:e8:72:34:ae:13:a7: 72:ee:d3:3d:86:7a:4a:6b:f0:ce:8a:ea:04:7b:ae: e2:f2:1d:b4:b3:8a:5f:b1:2e:06:b8:36:d6:dc:79: f8:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:0D:BB:16:AC:19:E2:1F:DC:F0:6A:D3:BD:44:70:66:DC:46:70:FE X509v3 Authority Key Identifier: keyid:C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/ew27FqwZ4h_c8GrTvURwZtxGcP4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.132.196.0/24 109.230.112.0/23 202.164.192.0/24 Signature Algorithm: sha256WithRSAEncryption 24:70:3a:ee:25:7f:61:10:d4:d2:1e:bb:19:07:2a:5e:0d:9f: 72:4f:9c:58:9c:cc:a3:d4:fe:9c:81:8f:68:b4:cc:58:f1:26: bf:b4:4b:aa:68:34:ce:21:13:3c:c4:26:5a:d9:87:fd:cb:d1: aa:2c:96:1a:9b:26:af:20:5a:b1:87:34:2b:db:55:1f:63:e8: f0:b9:8c:8c:8c:46:c3:e5:de:0f:b5:07:47:a3:8d:a4:41:50: a0:c8:2e:7e:c9:46:90:93:03:52:56:86:cb:05:14:38:c7:da: 47:9b:db:8b:7d:95:06:ec:04:8d:77:05:e0:86:28:e7:cc:91: e8:ce:29:8a:75:ab:c8:04:1e:79:3a:93:2c:8d:95:6f:cd:d1: 44:53:c9:bc:0d:81:c2:f7:70:9a:67:cd:37:72:6f:23:2b:7e: 8e:9b:aa:9e:3a:ba:0a:cf:ad:82:7b:cb:c9:25:11:62:3e:05: 4e:70:b4:ca:73:3b:d2:97:dc:2b:ec:47:0a:01:dc:ee:7a:ab: 2e:cc:f5:8a:c2:08:1c:9e:6a:e5:54:fb:5b:34:fd:77:38:3b: 27:75:97:17:bd:4d:dd:64:0a:2b:06:3d:d1:d9:ec:b6:70:14: dd:f5:23:d3:d8:d4:82:b1:08:fe:d9:64:3c:a5:90:d6:3c:62: ce:53:f7:d9 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt6yU2rsJNaUE79fAiNShV8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMDk4YTE5MDViYmQzMzgxNTMzODI4ZjZiN2ZkMjI3MTcw NDMxZWYwHhcNMjYwMTAxMTgxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YjBkYmIxNmFjMTllMjFmZGNmMDZhZDNiZDQ0NzA2NmRjNDY3MGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApglidBXf0VpZ6cVoEKup6qjvzYAj FTKkANpGJXufgIm+mzQ8xgGRmXFRfHT3Bqi2tLPLLDIF5o0yWus533ibLhWbs5yM R502iwmudpcxM+nCxbl2XuVERJGPMO9aDV89pFUtZ0pI4XGq8We/TnE9INaJipKY EPIJdop2LsQKcsk6eR5xsNDNPBDg4vpcyIkomVr1O+qxAvZovXKgnkWFSiXaoRo+ rG6jru+LbyzmzOWyIadaWa1Vkobi1SRFRsrSAASdnSg81Kyt4DAJmdqSC0m+CYuP oNTzcd3ocjSuE6dy7tM9hnpKa/DOiuoEe67i8h20s4pfsS4GuDbW3Hn49QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFHsNuxasGeIf3PBq071EcGbcRnD+MB8GA1UdIwQY MBaAFMEJihkFu9M4FTOCj2t/0icXBDHvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1FtS0dRVzcwemdWTTRLUGEzX1NKeGNFTWU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8yZWVkNzEtNDY2NS00OTQ4LWEzYzUt YjJhNzEzZDJlYWIyLzEvZXcyN0Zxd1o0aF9jOEdyVHZVUndadHhHY1A0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8yZWVkNzEtNDY2NS00OTQ4LWEzYzUtYjJhNzEzZDJlYWIy LzEvd1FtS0dRVzcwemdWTTRLUGEzX1NKeGNFTWU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAT4TEAwQB beZwAwQAyqTAMA0GCSqGSIb3DQEBCwUAA4IBAQAkcDruJX9hENTSHrsZBypeDZ9y T5xYnMyj1P6cgY9otMxY8Sa/tEuqaDTOIRM8xCZa2Yf9y9GqLJYamyavIFqxhzQr 21UfY+jwuYyMjEbD5d4PtQdHo42kQVCgyC5+yUaQkwNSVobLBRQ4x9pHm9uLfZUG 7ASNdwXghijnzJHozimKdavIBB55OpMsjZVvzdFEU8m8DYHC93CaZ803cm8jK36O m6qeOroKz62Ce8vJJRFiPgVOcLTKczvSl9wr7EcKAdzueqsuzPWKwggcnmrlVPtb NP13ODsndZcXvU3dZAorBj3R2ey2cBTd9SPT2NSCsQj+2WQ8pZDWPGLOU/fZ -----END CERTIFICATE-----Generated at Tue Jan 20 01:21:58 2026 by rpki-client