This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/E0HXCx5zsxlU4Ou_J-4bgx-8A3s.roa File: E0HXCx5zsxlU4Ou_J-4bgx-8A3s.roa (raw, json) Hash identifier: AM4W95wMVxmufbKvADXIfhnh/oxXBRJzCA12EQepcN0= Subject key identifier: 13:41:D7:0B:1E:73:B3:19:54:E0:EB:BF:27:EE:1B:83:1F:BC:03:7B Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Certificate serial: 019B7E389380FBDFF2F9538E50B8FE74AB6D Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/E0HXCx5zsxlU4Ou_J-4bgx-8A3s.roa Signing time: Fri 02 Jan 2026 10:19:55 +0000 ROA not before: Fri 02 Jan 2026 10:19:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33394 IP address blocks: 83.125.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 12:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:93:80:fb:df:f2:f9:53:8e:50:b8:fe:74:ab:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Validity Not Before: Jan 2 10:19:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1341d70b1e73b31954e0ebbf27ee1b831fbc037b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:96:b9:d0:32:6a:e4:ba:0a:a0:b2:ad:18:ef: 55:02:0d:61:69:09:26:34:9e:d6:4f:65:54:68:31: 35:11:97:24:d0:b0:44:d7:d8:34:99:0b:76:13:bf: 8c:6d:99:d7:c7:e3:b3:38:0d:b1:f4:c2:6b:f4:19: 56:68:04:e3:38:a8:fb:95:aa:1d:18:bf:6e:dc:a4: 61:28:11:ea:61:3d:72:b8:cf:ab:06:a0:b8:55:65: 70:27:53:27:cd:3c:0f:ae:a6:78:1d:3f:5f:46:9a: 39:e1:8a:70:0d:da:4c:b7:1f:7e:83:1f:ec:90:37: 39:97:5c:ea:a8:a3:8b:d9:12:f9:41:ff:35:76:bb: d7:c4:e5:90:f3:ca:ca:ee:aa:56:91:ae:90:0d:ab: 3d:e6:2a:fb:c8:55:be:8c:ce:5c:dd:de:fa:e2:06: 32:a4:df:94:eb:56:b4:9a:f6:f9:17:73:c1:bd:09: c4:01:11:e2:83:38:0f:db:ad:ac:01:7b:ba:2b:d9: 69:91:e5:73:f5:36:a7:8c:1c:f6:7b:4f:05:fe:18: b0:43:9b:eb:d9:2b:41:d2:9a:38:c2:f1:49:ae:f0: 80:cb:93:b4:02:ba:89:95:9b:f5:0c:bb:6b:c5:ad: 19:fb:fe:16:41:4f:67:3f:5f:6a:cb:51:a6:fe:81: 9e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:41:D7:0B:1E:73:B3:19:54:E0:EB:BF:27:EE:1B:83:1F:BC:03:7B X509v3 Authority Key Identifier: keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/E0HXCx5zsxlU4Ou_J-4bgx-8A3s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.125.25.0/24 Signature Algorithm: sha256WithRSAEncryption 97:ed:d9:aa:42:fe:05:24:22:2b:b2:ff:cf:43:85:83:55:93: 34:1b:85:15:20:80:8b:e0:c5:6d:a9:d3:a5:0f:85:53:97:f6: cf:b3:ae:ca:1b:7d:f8:bd:e9:42:8b:40:8d:89:29:9b:11:8c: 31:b3:fc:31:52:16:37:eb:94:08:2e:aa:4c:02:3c:29:b7:3d: d1:ae:d2:78:46:87:67:f3:8f:cf:57:a7:1d:1b:22:30:c5:79: be:81:5d:13:d5:0b:e5:c9:bb:f6:74:93:f3:b1:89:cf:84:c7: e2:85:46:88:ee:db:6a:94:63:5a:2d:39:98:57:7a:4d:cb:7e: c9:c4:68:5c:61:fa:45:fd:06:60:45:e8:98:67:0e:77:31:28: f6:e0:0e:64:ae:a9:c7:ae:a1:0f:68:54:ed:b7:0e:91:53:07: bb:eb:a8:94:de:45:74:97:66:e0:6d:51:e0:4e:2e:f1:a9:66: 36:ba:14:c2:12:53:04:75:e7:50:e8:b0:51:da:6f:37:91:99: 22:2c:73:eb:28:87:5d:24:35:41:34:b8:63:cb:7e:ea:4c:e0: 63:12:41:d6:7f:23:11:76:f9:3f:7b:e1:4d:92:8b:04:7c:67: a4:ea:94:0d:26:2b:9d:e0:b1:2b:c9:a0:82:d3:a1:84:88:07: 3e:73:8e:e7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OJOA+9/y+VOOULj+dKttMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmZTkwZmRlOTc4NGE5MWQ5M2E3YTJhZjU5ZDRkMDQzZjEx NzFmYmEwHhcNMjYwMTAyMTAxOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzQxZDcwYjFlNzNiMzE5NTRlMGViYmYyN2VlMWI4MzFmYmMwMzdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJa50DJq5LoKoLKtGO9VAg1haQkm NJ7WT2VUaDE1EZck0LBE19g0mQt2E7+MbZnXx+OzOA2x9MJr9BlWaATjOKj7laod GL9u3KRhKBHqYT1yuM+rBqC4VWVwJ1MnzTwPrqZ4HT9fRpo54YpwDdpMtx9+gx/s kDc5l1zqqKOL2RL5Qf81drvXxOWQ88rK7qpWka6QDas95ir7yFW+jM5c3d764gYy pN+U61a0mvb5F3PBvQnEARHigzgP262sAXu6K9lpkeVz9TanjBz2e08F/hiwQ5vr 2StB0po4wvFJrvCAy5O0ArqJlZv1DLtrxa0Z+/4WQU9nP19qy1Gm/oGeIwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBNB1wsec7MZVODrvyfuG4MfvAN7MB8GA1UdIwQY MBaAFB/pD96XhKkdk6eir1nU0EPxFx+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQt MjM3NzJlN2Y5MmUzLzEvRTBIWEN4NXpzeGxVNE91X0otNGJneC04QTNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQtMjM3NzJlN2Y5MmUz LzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU30ZMA0G CSqGSIb3DQEBCwUAA4IBAQCX7dmqQv4FJCIrsv/PQ4WDVZM0G4UVIICL4MVtqdOl D4VTl/bPs67KG334velCi0CNiSmbEYwxs/wxUhY365QILqpMAjwptz3RrtJ4Rodn 84/PV6cdGyIwxXm+gV0T1Qvlybv2dJPzsYnPhMfihUaI7ttqlGNaLTmYV3pNy37J xGhcYfpF/QZgReiYZw53MSj24A5krqnHrqEPaFTttw6RUwe766iU3kV0l2bgbVHg Ti7xqWY2uhTCElMEdedQ6LBR2m83kZkiLHPrKIddJDVBNLhjy37qTOBjEkHWfyMR dvk/e+FNkosEfGek6pQNJiud4LEryaCC06GEiAc+c47n -----END CERTIFICATE-----Generated at Thu Feb 5 13:56:10 2026 by rpki-client