This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/Ew3S5Sfhv_PNXhxVof3aevMbKtQ.roa File: Ew3S5Sfhv_PNXhxVof3aevMbKtQ.roa (raw, json) Hash identifier: deUDIfKP8EAYYGoQ4lRaCxh8/fRxNHbmoAk7A20/nwU= Subject key identifier: 13:0D:D2:E5:27:E1:BF:F3:CD:5E:1C:55:A1:FD:DA:7A:F3:1B:2A:D4 Certificate issuer: /CN=0f9c5ae94caded875c8db2f5833ca88d2f68ed0e Certificate serial: 019B7C7FBAB5CE3A2F8C268D973C13E29257 Authority key identifier: 0F:9C:5A:E9:4C:AD:ED:87:5C:8D:B2:F5:83:3C:A8:8D:2F:68:ED:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/Ew3S5Sfhv_PNXhxVof3aevMbKtQ.roa Signing time: Fri 02 Jan 2026 02:18:24 +0000 ROA not before: Fri 02 Jan 2026 02:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21339 IP address blocks: 176.124.68.0/23 maxlen: 24 185.61.164.0/22 maxlen: 24 193.187.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.crl rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.mft rsync://rpki.ripe.net/repository/DEFAULT/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:ba:b5:ce:3a:2f:8c:26:8d:97:3c:13:e2:92:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f9c5ae94caded875c8db2f5833ca88d2f68ed0e Validity Not Before: Jan 2 02:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=130dd2e527e1bff3cd5e1c55a1fdda7af31b2ad4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3a:93:e1:d4:f7:c5:34:3b:f2:96:cc:47:7d: 3f:02:ed:54:bc:c5:4e:24:10:e7:49:32:90:29:6d: c2:0e:dd:80:7f:63:ed:58:84:64:25:9e:89:1f:1d: 39:bd:17:99:43:6c:4a:d4:e4:39:5c:cd:f6:c4:b5: 51:90:1e:cb:dd:23:f2:aa:9e:81:83:8b:9e:71:49: 46:32:13:ee:84:6c:f8:df:cc:68:f7:4e:5c:8d:15: d3:6a:ab:cd:96:c1:cf:40:51:41:dc:51:a0:30:5d: 9a:bd:d0:bc:87:ca:ab:d5:eb:b7:4c:06:75:69:3f: ed:a9:62:88:fe:3e:54:a6:a1:ee:21:d2:65:4d:3b: 8f:f8:5a:20:0e:89:14:9c:5f:60:4b:c1:76:9e:13: 16:ca:ad:ec:68:d3:a1:9f:18:26:5c:81:d9:38:e9: 03:7b:b9:2c:cc:cb:ee:6f:f5:c4:a6:df:a6:6c:b2: ff:84:28:8a:d5:3d:58:de:a7:4c:9f:0f:c1:79:b7: ee:cb:da:4b:67:bb:9a:04:a5:3b:bd:01:b9:9b:2f: 99:f4:34:f1:83:bf:16:64:4d:9d:3c:cc:61:ac:9f: 87:0e:cc:97:66:c7:6d:5d:9b:e1:2d:b7:c7:8d:b7: 69:db:97:8c:0d:c5:26:b1:b2:16:e7:c7:90:f7:aa: 4a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:0D:D2:E5:27:E1:BF:F3:CD:5E:1C:55:A1:FD:DA:7A:F3:1B:2A:D4 X509v3 Authority Key Identifier: keyid:0F:9C:5A:E9:4C:AD:ED:87:5C:8D:B2:F5:83:3C:A8:8D:2F:68:ED:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/Ew3S5Sfhv_PNXhxVof3aevMbKtQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/fd1dd5-3294-4550-a3e6-9aabb99fa10c/1/D5xa6Uyt7YdcjbL1gzyojS9o7Q4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.124.68.0/23 185.61.164.0/22 193.187.99.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:99:c1:99:a1:9c:eb:49:b2:c9:db:68:9e:73:73:9f:4c:fc: 10:eb:15:2b:51:ac:6e:1c:5b:19:dd:f6:80:d8:b3:81:bc:3c: 87:e4:ef:4c:43:ec:b0:ce:f8:b8:46:ad:4e:a5:2f:26:bb:a3: b9:69:e3:43:54:f5:68:37:f5:e7:20:f6:c6:65:8b:e5:96:2b: 90:22:9f:b3:ee:8e:92:3c:91:61:43:75:9e:e5:ac:50:64:75: 43:00:ad:07:2d:de:4c:12:c7:72:1d:37:b2:f7:bc:cd:b1:69: 03:02:9a:f1:b8:05:34:f4:35:cd:dc:fb:a4:f9:54:33:80:3a: 76:c3:eb:1a:00:4f:43:93:e7:65:ca:b5:5b:06:ca:2a:29:4a: b1:b3:0e:7e:6f:84:02:1b:7b:f0:38:a1:cc:0b:25:de:6a:50: 29:37:b4:b1:95:1d:c6:0d:db:03:fa:ee:bf:17:b5:ec:bb:f1: 47:a7:0f:c4:29:04:93:24:8c:e6:c0:9e:b0:bf:93:24:a2:f6: f3:5b:2d:e5:ea:a3:40:19:f5:40:4e:53:b9:fb:a9:5e:72:86: 6c:44:b8:1c:ca:02:c8:7d:5c:80:af:28:47:54:5a:66:25:f9: 6d:6c:09:81:92:fa:4d:16:6b:1c:85:28:f4:73:32:cf:1d:22: 63:9c:59:b8 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8f7q1zjovjCaNlzwT4pJXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmOWM1YWU5NGNhZGVkODc1YzhkYjJmNTgzM2NhODhkMmY2 OGVkMGUwHhcNMjYwMTAyMDIxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzBkZDJlNTI3ZTFiZmYzY2Q1ZTFjNTVhMWZkZGE3YWYzMWIyYWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDqT4dT3xTQ78pbMR30/Au1UvMVO JBDnSTKQKW3CDt2Af2PtWIRkJZ6JHx05vReZQ2xK1OQ5XM32xLVRkB7L3SPyqp6B g4uecUlGMhPuhGz438xo905cjRXTaqvNlsHPQFFB3FGgMF2avdC8h8qr1eu3TAZ1 aT/tqWKI/j5UpqHuIdJlTTuP+FogDokUnF9gS8F2nhMWyq3saNOhnxgmXIHZOOkD e7kszMvub/XEpt+mbLL/hCiK1T1Y3qdMnw/Bebfuy9pLZ7uaBKU7vQG5my+Z9DTx g78WZE2dPMxhrJ+HDsyXZsdtXZvhLbfHjbdp25eMDcUmsbIW58eQ96pK7QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFBMN0uUn4b/zzV4cVaH92nrzGyrUMB8GA1UdIwQY MBaAFA+cWulMre2HXI2y9YM8qI0vaO0OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDV4YTZVeXQ3WWRjamJMMWd6eW9qUzlvN1E0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9mZDFkZDUtMzI5NC00NTUwLWEzZTYt OWFhYmI5OWZhMTBjLzEvRXczUzVTZmh2X1BOWGh4Vm9mM2Fldk1iS3RRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9mZDFkZDUtMzI5NC00NTUwLWEzZTYtOWFhYmI5OWZhMTBj LzEvRDV4YTZVeXQ3WWRjamJMMWd6eW9qUzlvN1E0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBsHxEAwQC uT2kAwQAwbtjMA0GCSqGSIb3DQEBCwUAA4IBAQB6mcGZoZzrSbLJ22iec3OfTPwQ 6xUrUaxuHFsZ3faA2LOBvDyH5O9MQ+ywzvi4Rq1OpS8mu6O5aeNDVPVoN/XnIPbG ZYvlliuQIp+z7o6SPJFhQ3We5axQZHVDAK0HLd5MEsdyHTey97zNsWkDAprxuAU0 9DXN3Puk+VQzgDp2w+saAE9Dk+dlyrVbBsoqKUqxsw5+b4QCG3vwOKHMCyXealAp N7SxlR3GDdsD+u6/F7Xsu/FHpw/EKQSTJIzmwJ6wv5MkovbzWy3l6qNAGfVATlO5 +6lecoZsRLgcygLIfVyAryhHVFpmJfltbAmBkvpNFmschSj0czLPHSJjnFm4 -----END CERTIFICATE-----Generated at Mon Feb 9 21:24:13 2026 by rpki-client