This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/e69PQnEzusQYZ-DbIlnf2eJlsBE.roa File: e69PQnEzusQYZ-DbIlnf2eJlsBE.roa (raw, json) Hash identifier: 4zZYbNl+2JdQefSGJOQxcNxDZWIZe2qXFHWTtyVsmQU= Subject key identifier: 7B:AF:4F:42:71:33:BA:C4:18:67:E0:DB:22:59:DF:D9:E2:65:B0:11 Certificate issuer: /CN=e50c44ae981e7492d3ba21e28472080180398d64 Certificate serial: 019B7E381187438D959B0349C23BEC821646 Authority key identifier: E5:0C:44:AE:98:1E:74:92:D3:BA:21:E2:84:72:08:01:80:39:8D:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QxErpgedJLTuiHihHIIAYA5jWQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/e69PQnEzusQYZ-DbIlnf2eJlsBE.roa Signing time: Fri 02 Jan 2026 10:19:22 +0000 ROA not before: Fri 02 Jan 2026 10:19:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20932 IP address blocks: 185.68.204.0/22 maxlen: 22 194.11.221.0/24 maxlen: 24 217.169.128.0/20 maxlen: 20 217.169.144.0/20 maxlen: 20 2001:41e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.mft rsync://rpki.ripe.net/repository/DEFAULT/5QxErpgedJLTuiHihHIIAYA5jWQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:11:87:43:8d:95:9b:03:49:c2:3b:ec:82:16:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e50c44ae981e7492d3ba21e28472080180398d64 Validity Not Before: Jan 2 10:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7baf4f427133bac41867e0db2259dfd9e265b011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:71:06:f0:5a:37:dc:e7:14:10:da:34:ae:f2: c9:73:75:c6:74:d9:76:2f:4d:7f:15:be:22:74:a3: ba:77:39:28:d8:d2:17:11:de:02:9d:ce:b1:11:d1: ff:38:58:a9:eb:e7:b7:1b:20:4e:54:08:ee:15:08: 8e:87:3a:e0:81:a8:b6:09:8a:d7:b4:62:59:bc:f8: fe:a3:59:23:40:37:7b:56:a1:bb:95:0f:0b:9c:bb: e0:42:b0:06:11:b2:88:d8:05:9b:3e:e6:0a:d1:00: a8:97:be:c2:d3:2c:85:d4:3c:a6:12:c7:05:96:be: e7:74:da:19:f3:87:35:78:3c:4a:7d:cd:1c:83:e8: d4:69:f6:5b:a9:71:b4:83:ec:d0:29:17:f4:0d:11: 9d:a2:e6:66:58:85:c8:87:ee:e8:68:2e:f2:3f:61: e5:21:65:a4:84:46:45:9c:93:6f:fb:31:96:64:b3: 65:5a:9a:10:72:c3:8c:ea:95:78:2e:c0:0c:3a:36: 3d:59:ab:3a:38:ee:b1:8e:8a:2f:af:28:00:9d:fa: 1c:19:34:95:63:a2:e2:c9:e5:85:ff:7e:d7:47:39: ea:66:9f:24:34:2f:47:c8:7c:cb:48:fc:29:2d:84: 4c:c1:45:15:43:3a:f3:aa:bf:75:0c:61:be:3d:4a: 41:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:AF:4F:42:71:33:BA:C4:18:67:E0:DB:22:59:DF:D9:E2:65:B0:11 X509v3 Authority Key Identifier: keyid:E5:0C:44:AE:98:1E:74:92:D3:BA:21:E2:84:72:08:01:80:39:8D:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QxErpgedJLTuiHihHIIAYA5jWQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/e69PQnEzusQYZ-DbIlnf2eJlsBE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.68.204.0/22 194.11.221.0/24 217.169.128.0/19 IPv6: 2001:41e0::/32 Signature Algorithm: sha256WithRSAEncryption 09:a6:d0:e9:24:02:58:a5:c9:85:6a:e4:05:36:dc:f6:ab:8f: 52:86:a5:62:3e:65:08:c7:aa:dc:ee:b1:62:c4:fe:11:41:23: 65:7c:ed:7d:85:99:c6:bd:a0:41:30:ad:e7:78:74:d8:ef:80: e3:e0:b3:fd:65:db:ed:bd:fe:df:e4:35:64:2e:d4:8c:32:6b: 36:49:fe:70:37:ce:31:a2:8c:4b:3a:76:2c:8b:3a:cb:bf:47: 4a:a3:89:c9:d3:7f:9e:2b:5c:64:b0:c0:9f:a6:ea:79:f8:7b: 53:b5:07:50:36:1d:da:29:4a:2c:ba:34:a4:38:33:d0:72:cb: 3d:d6:34:ae:10:8c:99:20:f8:f9:87:39:51:6f:ce:28:7d:3d: 85:62:15:04:77:ff:35:b6:ff:f6:6f:f8:fb:c8:5c:c7:c8:3e: 55:8b:6f:a2:95:44:18:a0:0e:cc:fd:38:2f:30:2e:eb:2c:c4: 43:9b:8f:de:0a:e6:ed:bb:ff:9f:d5:24:5a:ae:e9:f8:be:cf: 29:14:52:95:a8:bd:13:2e:5d:7c:64:cc:a0:93:21:84:2a:98: c3:28:0f:34:ba:70:b0:f0:c0:47:cb:39:78:46:a6:55:a0:f6: 5b:f7:fe:b4:7c:bb:5b:59:8a:4f:13:32:36:64:22:18:fb:37: 9a:6f:fd:6f -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt+OBGHQ42VmwNJwjvsghZGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1MGM0NGFlOTgxZTc0OTJkM2JhMjFlMjg0NzIwODAxODAz OThkNjQwHhcNMjYwMTAyMTAxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YmFmNGY0MjcxMzNiYWM0MTg2N2UwZGIyMjU5ZGZkOWUyNjViMDExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3EG8Fo33OcUENo0rvLJc3XGdNl2 L01/Fb4idKO6dzko2NIXEd4Cnc6xEdH/OFip6+e3GyBOVAjuFQiOhzrggai2CYrX tGJZvPj+o1kjQDd7VqG7lQ8LnLvgQrAGEbKI2AWbPuYK0QCol77C0yyF1DymEscF lr7ndNoZ84c1eDxKfc0cg+jUafZbqXG0g+zQKRf0DRGdouZmWIXIh+7oaC7yP2Hl IWWkhEZFnJNv+zGWZLNlWpoQcsOM6pV4LsAMOjY9Was6OO6xjoovrygAnfocGTSV Y6LiyeWF/37XRznqZp8kNC9HyHzLSPwpLYRMwUUVQzrzqr91DGG+PUpBAwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFHuvT0JxM7rEGGfg2yJZ39niZbARMB8GA1UdIwQY MBaAFOUMRK6YHnSS07oh4oRyCAGAOY1kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVF4RXJwZ2VkSkxUdWlIaWhISUlBWUE1aldRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8yMjYwMTgtMGUwNi00MzVlLWFiZmQt ZjVmZmVlMTcyMGMxLzEvZTY5UFFuRXp1c1FZWi1EYklsbmYyZUpsc0JFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy8yMjYwMTgtMGUwNi00MzVlLWFiZmQtZjVmZmVlMTcyMGMx LzEvNVF4RXJwZ2VkSkxUdWlIaWhISUlBWUE1aldRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCuUTMAwQA wgvdAwQF2amAMA0EAgACMAcDBQAgAUHgMA0GCSqGSIb3DQEBCwUAA4IBAQAJptDp JAJYpcmFauQFNtz2q49ShqViPmUIx6rc7rFixP4RQSNlfO19hZnGvaBBMK3neHTY 74Dj4LP9Zdvtvf7f5DVkLtSMMms2Sf5wN84xooxLOnYsizrLv0dKo4nJ03+eK1xk sMCfpup5+HtTtQdQNh3aKUosujSkODPQcss91jSuEIyZIPj5hzlRb84ofT2FYhUE d/81tv/2b/j7yFzHyD5Vi2+ilUQYoA7M/TgvMC7rLMRDm4/eCubtu/+f1SRarun4 vs8pFFKVqL0TLl18ZMygkyGEKpjDKA80unCw8MBHyzl4RqZVoPZb9/60fLtbWYpP EzI2ZCIY+zeab/1v -----END CERTIFICATE-----Generated at Mon Feb 9 21:05:18 2026 by rpki-client