This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/EXDHXL2MP6KoCIsPYPDyHx2NmRw.roa File: EXDHXL2MP6KoCIsPYPDyHx2NmRw.roa (raw, json) Hash identifier: MzFuVkE+lV5nrji6J6kV91+q5koTRHZxBo16GNvtQoQ= Subject key identifier: 11:70:C7:5C:BD:8C:3F:A2:A8:08:8B:0F:60:F0:F2:1F:1D:8D:99:1C Certificate issuer: /CN=5259e000c991f78f243fde5980cd5cef649409e6 Certificate serial: 019B7BA47B389DFF11FC9E0B21B86D332279 Authority key identifier: 52:59:E0:00:C9:91:F7:8F:24:3F:DE:59:80:CD:5C:EF:64:94:09:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/EXDHXL2MP6KoCIsPYPDyHx2NmRw.roa Signing time: Thu 01 Jan 2026 22:18:55 +0000 ROA not before: Thu 01 Jan 2026 22:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34549 IP address blocks: 87.239.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.mft rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:7b:38:9d:ff:11:fc:9e:0b:21:b8:6d:33:22:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5259e000c991f78f243fde5980cd5cef649409e6 Validity Not Before: Jan 1 22:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1170c75cbd8c3fa2a8088b0f60f0f21f1d8d991c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:48:5f:24:3e:d3:04:b0:19:6c:91:39:de:69: 32:3a:70:fe:1e:e3:dd:af:4b:8f:62:30:c2:4b:7c: e5:80:04:6c:3f:b1:8f:cd:f3:4a:37:c2:83:b9:a0: 54:e9:2f:10:4c:88:a4:fc:b6:ef:1b:ae:05:e5:71: 4e:b0:23:d9:b6:d9:11:51:f4:7a:d2:d7:76:93:fe: 91:9c:15:ce:a9:17:08:e9:19:5c:ea:20:fb:b8:b6: 58:e6:43:0c:7a:74:8f:e2:87:7d:a7:13:76:e8:c5: 82:14:26:c5:1b:23:dc:ef:97:07:2d:d5:b3:31:6e: 04:13:85:0e:db:42:91:cf:71:8b:17:b2:7e:84:9a: d5:75:0b:cd:1d:51:28:de:3d:e8:b8:4f:92:ba:90: 66:e5:28:aa:ba:cb:61:45:36:3e:eb:8d:3d:7d:23: 21:98:2a:c6:c1:c4:6f:0d:02:90:3a:83:37:f8:1d: 3d:aa:b8:5a:16:4c:f6:03:f8:b4:0e:ee:8d:57:d3: 97:23:cb:fd:14:ec:75:57:71:00:4e:8a:cd:de:8d: 11:4b:23:90:ed:e2:c5:df:db:80:09:42:aa:89:30: 2c:70:47:e1:34:74:14:60:1d:c5:01:66:c1:b0:ed: aa:f1:c3:44:e1:77:ae:1f:0e:e3:b1:a1:87:31:cc: e4:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:70:C7:5C:BD:8C:3F:A2:A8:08:8B:0F:60:F0:F2:1F:1D:8D:99:1C X509v3 Authority Key Identifier: keyid:52:59:E0:00:C9:91:F7:8F:24:3F:DE:59:80:CD:5C:EF:64:94:09:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UlngAMmR948kP95ZgM1c72SUCeY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/EXDHXL2MP6KoCIsPYPDyHx2NmRw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef98e4-01e5-4b88-bbf1-0483d1c01b25/1/UlngAMmR948kP95ZgM1c72SUCeY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.239.143.0/24 Signature Algorithm: sha256WithRSAEncryption 72:eb:18:e9:ca:4e:52:f1:ed:00:3a:18:6e:be:7c:bf:22:2c: 20:aa:9a:55:e7:9d:3c:16:29:ca:6c:48:47:44:50:63:ff:31: 51:6f:38:22:6d:9c:65:ac:2b:61:fc:83:e2:a0:d0:cf:23:1c: e1:54:8d:c1:71:75:b9:4e:57:e6:ab:fe:59:d9:d9:b8:d6:79: 91:26:98:8f:b8:e3:40:f5:02:6d:a2:f8:3b:6c:59:72:78:f4: ac:36:49:c3:3b:13:30:7a:df:1d:4a:5b:99:5e:84:0d:a4:91: a0:07:a8:ba:62:0b:cd:8a:69:5e:a4:e6:f4:34:5e:2a:bd:20: 9a:7c:86:aa:fe:11:f0:7f:c6:32:86:78:58:cb:81:a4:43:74: c8:ba:3c:17:dc:03:bc:36:76:94:54:a8:65:01:2e:df:ef:12: 60:58:2b:64:c7:1a:67:6b:69:51:d5:ff:fe:f0:8d:f0:d9:d0: 09:8a:aa:d0:a4:69:b8:6f:59:ae:5a:c8:30:d6:45:62:2f:ab: 25:00:64:78:15:e6:e2:7e:92:1e:18:ff:a3:e9:70:8e:fe:b9: 08:d9:1b:64:fb:48:ad:be:31:fc:ec:0d:1d:e3:07:b0:e0:a1: 60:8f:b4:73:66:42:aa:5c:2f:af:ad:be:5f:82:9a:99:8d:34: c6:3a:58:02 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pHs4nf8R/J4LIbhtMyJ5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyNTllMDAwYzk5MWY3OGYyNDNmZGU1OTgwY2Q1Y2VmNjQ5 NDA5ZTYwHhcNMjYwMTAxMjIxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMTcwYzc1Y2JkOGMzZmEyYTgwODhiMGY2MGYwZjIxZjFkOGQ5OTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA70hfJD7TBLAZbJE53mkyOnD+HuPd r0uPYjDCS3zlgARsP7GPzfNKN8KDuaBU6S8QTIik/LbvG64F5XFOsCPZttkRUfR6 0td2k/6RnBXOqRcI6Rlc6iD7uLZY5kMMenSP4od9pxN26MWCFCbFGyPc75cHLdWz MW4EE4UO20KRz3GLF7J+hJrVdQvNHVEo3j3ouE+SupBm5SiqusthRTY+6409fSMh mCrGwcRvDQKQOoM3+B09qrhaFkz2A/i0Du6NV9OXI8v9FOx1V3EATorN3o0RSyOQ 7eLF39uACUKqiTAscEfhNHQUYB3FAWbBsO2q8cNE4XeuHw7jsaGHMczkdQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBFwx1y9jD+iqAiLD2Dw8h8djZkcMB8GA1UdIwQY MBaAFFJZ4ADJkfePJD/eWYDNXO9klAnmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWxuZ0FNbVI5NDhrUDk1WmdNMWM3MlNVQ2VZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9lZjk4ZTQtMDFlNS00Yjg4LWJiZjEt MDQ4M2QxYzAxYjI1LzEvRVhESFhMMk1QNktvQ0lzUFlQRHlIeDJObVJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9lZjk4ZTQtMDFlNS00Yjg4LWJiZjEtMDQ4M2QxYzAxYjI1 LzEvVWxuZ0FNbVI5NDhrUDk1WmdNMWM3MlNVQ2VZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV++PMA0G CSqGSIb3DQEBCwUAA4IBAQBy6xjpyk5S8e0AOhhuvny/IiwgqppV5508FinKbEhH RFBj/zFRbzgibZxlrCth/IPioNDPIxzhVI3BcXW5Tlfmq/5Z2dm41nmRJpiPuONA 9QJtovg7bFlyePSsNknDOxMwet8dSluZXoQNpJGgB6i6YgvNimlepOb0NF4qvSCa fIaq/hHwf8YyhnhYy4GkQ3TIujwX3AO8NnaUVKhlAS7f7xJgWCtkxxpna2lR1f/+ 8I3w2dAJiqrQpGm4b1muWsgw1kViL6slAGR4FebifpIeGP+j6XCO/rkI2Rtk+0it vjH87A0d4wew4KFgj7RzZkKqXC+vrb5fgpqZjTTGOlgC -----END CERTIFICATE-----Generated at Wed Jan 21 21:48:33 2026 by rpki-client