This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EvYaMnO8iuW5cBkFIRoD_nhendI.roa File: EvYaMnO8iuW5cBkFIRoD_nhendI.roa (raw, json) Hash identifier: v4CkHhI/skWxg/dd6iMZ2P6Y9SZcQGoDEFALE6/zmFY= Subject key identifier: 12:F6:1A:32:73:BC:8A:E5:B9:70:19:05:21:1A:03:FE:78:5E:9D:D2 Certificate issuer: /CN=11660f0a05fc4cf7332230852d9d78bd7ac2f24b Certificate serial: 019B7910C9272A14498879BC26282BDF1473 Authority key identifier: 11:66:0F:0A:05:FC:4C:F7:33:22:30:85:2D:9D:78:BD:7A:C2:F2:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EWYPCgX8TPczIjCFLZ14vXrC8ks.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EvYaMnO8iuW5cBkFIRoD_nhendI.roa Signing time: Thu 01 Jan 2026 10:18:21 +0000 ROA not before: Thu 01 Jan 2026 10:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211713 IP address blocks: 185.93.24.0/22 maxlen: 24 2a03:8e20::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.crl rsync://rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.mft rsync://rpki.ripe.net/repository/DEFAULT/EWYPCgX8TPczIjCFLZ14vXrC8ks.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:c9:27:2a:14:49:88:79:bc:26:28:2b:df:14:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11660f0a05fc4cf7332230852d9d78bd7ac2f24b Validity Not Before: Jan 1 10:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=12f61a3273bc8ae5b9701905211a03fe785e9dd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:5e:92:d1:dd:85:9d:2c:6d:f8:7e:a6:5f:72: e5:fb:b5:bf:23:5a:1f:d4:25:d5:20:74:47:87:1a: e8:c7:d8:a7:87:63:a2:c3:43:f8:66:70:af:62:fc: ae:e9:3f:b4:f3:ec:79:d4:89:6a:d1:f2:3f:03:1d: ea:71:f8:cb:8c:85:d4:2c:8d:3c:dc:97:bb:56:63: ae:56:50:c0:2d:ea:78:d8:66:fa:bf:7b:ef:93:3f: 76:ad:6a:01:69:e7:78:0f:49:53:15:24:c9:dd:bc: e1:23:4e:92:15:a1:e2:d1:f4:64:cf:f3:e5:59:9e: 9b:09:0f:db:eb:71:2b:b0:8a:b2:e8:44:d2:95:97: f7:e8:94:f2:a1:41:25:ad:10:03:83:2f:85:85:71: c8:31:19:f8:f3:27:c9:d8:4c:69:ae:d5:f8:60:10: e5:79:e2:b9:f1:f4:c1:6c:69:6a:13:84:98:e6:c2: ef:01:9e:8f:d5:47:14:ad:d7:72:72:ef:76:f4:6f: cc:c6:8f:dd:67:15:01:6c:c5:f5:ce:95:52:13:f5: b7:45:04:2d:c6:07:d1:d9:21:66:20:42:4d:00:e6: 0f:af:bc:7b:5d:24:40:a5:3e:cd:54:d6:59:94:d7: ef:17:61:1e:7e:4f:34:ee:fa:f4:c7:b0:ef:7c:14: c4:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:F6:1A:32:73:BC:8A:E5:B9:70:19:05:21:1A:03:FE:78:5E:9D:D2 X509v3 Authority Key Identifier: keyid:11:66:0F:0A:05:FC:4C:F7:33:22:30:85:2D:9D:78:BD:7A:C2:F2:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EWYPCgX8TPczIjCFLZ14vXrC8ks.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EvYaMnO8iuW5cBkFIRoD_nhendI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/81b2c7-f454-4119-894a-7a06ff002517/1/EWYPCgX8TPczIjCFLZ14vXrC8ks.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.93.24.0/22 IPv6: 2a03:8e20::/32 Signature Algorithm: sha256WithRSAEncryption 9d:8e:54:39:f0:f6:dd:52:45:39:77:21:4a:62:1e:d3:6e:12: 4b:09:48:64:41:03:55:b6:29:1d:bc:7f:ae:71:b2:47:0a:ca: f3:04:85:60:a8:77:6d:5c:b2:8b:53:32:39:1a:c9:e1:1e:0e: 89:6c:a1:1d:aa:f0:5a:d1:b6:d0:6c:0a:28:72:98:0e:c8:89: b7:06:d9:fe:19:92:cb:7d:92:ae:66:a1:96:de:1c:1a:eb:bf: 6c:32:d6:d7:b5:f9:fd:83:e1:99:ca:e0:72:2c:87:17:f8:19: 85:c4:65:37:6d:e2:9d:fb:38:32:90:51:3c:55:d9:1b:68:01: cf:f7:ab:d1:a3:7b:98:95:6c:cc:92:ae:a5:32:39:a8:cf:38: 32:54:77:e6:83:d2:3a:04:f8:79:2d:65:e1:96:00:49:ed:a7: f7:0e:78:c7:2e:ba:22:02:a3:fb:19:82:57:c2:f4:0c:32:18: d1:7c:05:d3:ea:b8:a2:09:53:6c:19:c0:b8:04:d9:0b:4b:11: cb:08:47:39:dd:d0:fc:78:59:b5:71:21:ca:75:07:e5:f0:22: aa:da:ce:39:ea:44:30:cc:c5:2b:19:89:4c:ab:86:af:8f:bf: c8:9b:a7:37:91:17:8f:6f:0f:87:fe:05:0a:ba:57:a2:7f:d6: 5d:c2:ad:a1 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5EMknKhRJiHm8Jigr3xRzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExNjYwZjBhMDVmYzRjZjczMzIyMzA4NTJkOWQ3OGJkN2Fj MmYyNGIwHhcNMjYwMTAxMTAxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMmY2MWEzMjczYmM4YWU1Yjk3MDE5MDUyMTFhMDNmZTc4NWU5ZGQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1l6S0d2FnSxt+H6mX3Ll+7W/I1of 1CXVIHRHhxrox9inh2Oiw0P4ZnCvYvyu6T+08+x51Ilq0fI/Ax3qcfjLjIXULI08 3Je7VmOuVlDALep42Gb6v3vvkz92rWoBaed4D0lTFSTJ3bzhI06SFaHi0fRkz/Pl WZ6bCQ/b63ErsIqy6ETSlZf36JTyoUElrRADgy+FhXHIMRn48yfJ2ExprtX4YBDl eeK58fTBbGlqE4SY5sLvAZ6P1UcUrddycu929G/Mxo/dZxUBbMX1zpVSE/W3RQQt xgfR2SFmIEJNAOYPr7x7XSRApT7NVNZZlNfvF2Eefk807vr0x7DvfBTESwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBL2GjJzvIrluXAZBSEaA/54Xp3SMB8GA1UdIwQY MBaAFBFmDwoF/Ez3MyIwhS2deL16wvJLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVdZUENnWDhUUGN6SWpDRkxaMTR2WHJDOGtzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS84MWIyYzctZjQ1NC00MTE5LTg5NGEt N2EwNmZmMDAyNTE3LzEvRXZZYU1uTzhpdVc1Y0JrRklSb0RfbmhlbmRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS84MWIyYzctZjQ1NC00MTE5LTg5NGEtN2EwNmZmMDAyNTE3 LzEvRVdZUENnWDhUUGN6SWpDRkxaMTR2WHJDOGtzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuV0YMA0E AgACMAcDBQAqA44gMA0GCSqGSIb3DQEBCwUAA4IBAQCdjlQ58PbdUkU5dyFKYh7T bhJLCUhkQQNVtikdvH+ucbJHCsrzBIVgqHdtXLKLUzI5GsnhHg6JbKEdqvBa0bbQ bAoocpgOyIm3Btn+GZLLfZKuZqGW3hwa679sMtbXtfn9g+GZyuByLIcX+BmFxGU3 beKd+zgykFE8VdkbaAHP96vRo3uYlWzMkq6lMjmozzgyVHfmg9I6BPh5LWXhlgBJ 7af3DnjHLroiAqP7GYJXwvQMMhjRfAXT6riiCVNsGcC4BNkLSxHLCEc53dD8eFm1 cSHKdQfl8CKq2s456kQwzMUrGYlMq4avj7/Im6c3kRePbw+H/gUKuleif9Zdwq2h -----END CERTIFICATE-----Generated at Tue Feb 10 06:08:20 2026 by rpki-client