This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/eTeZJkz6TZKR9fBABuCYkveSXH4.roa File: eTeZJkz6TZKR9fBABuCYkveSXH4.roa (raw, json) Hash identifier: IXje/wOsdswfN7bHHCSup3yOBkGIBAgKtGMcyKtHLG4= Subject key identifier: 79:37:99:26:4C:FA:4D:92:91:F5:F0:40:06:E0:98:92:F7:92:5C:7E Certificate issuer: /CN=49378660f5f01923946c35d94be5ccd7d2b71051 Certificate serial: 019B7A5AC47DC7A8558766F4139C07D1AD8B Authority key identifier: 49:37:86:60:F5:F0:19:23:94:6C:35:D9:4B:E5:CC:D7:D2:B7:10:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/STeGYPXwGSOUbDXZS-XM19K3EFE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/eTeZJkz6TZKR9fBABuCYkveSXH4.roa Signing time: Thu 01 Jan 2026 16:18:47 +0000 ROA not before: Thu 01 Jan 2026 16:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203593 IP address blocks: 157.97.163.0/24 maxlen: 24 185.129.252.0/22 maxlen: 24 193.254.202.0/23 maxlen: 24 213.244.32.0/20 maxlen: 24 2a06:d680::/29 maxlen: 32 2a0a:6840::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.mft rsync://rpki.ripe.net/repository/DEFAULT/STeGYPXwGSOUbDXZS-XM19K3EFE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:c4:7d:c7:a8:55:87:66:f4:13:9c:07:d1:ad:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49378660f5f01923946c35d94be5ccd7d2b71051 Validity Not Before: Jan 1 16:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=793799264cfa4d9291f5f04006e09892f7925c7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:43:d1:2e:ad:1e:ac:f2:23:48:5b:e1:bf:fd: 4a:ef:aa:0f:5f:f9:d9:15:25:36:54:4e:61:f3:2a: 47:a7:06:c1:16:27:85:7c:8b:54:e3:0e:cd:a1:c6: 6e:f3:65:9b:93:91:fe:a6:bf:20:f4:f7:e3:6a:97: ea:3f:b6:97:ac:07:2d:54:74:cf:02:56:41:0d:2c: 3e:8a:e2:3d:33:a0:00:98:98:87:15:ec:39:64:3e: d1:fc:c7:1c:d5:f4:94:e7:5e:93:73:13:9f:6d:f2: 68:ad:d5:33:5e:cc:86:23:74:65:c3:1d:6d:ae:f4: ce:5a:e2:23:90:11:77:3d:de:a4:d7:b7:89:fb:d5: ce:04:4f:97:21:5b:63:42:85:a5:8d:df:86:b4:98: 70:f5:ca:8f:f7:80:aa:dd:a9:70:57:0e:e8:93:e1: 4f:9d:f8:a9:0b:bf:ca:97:d6:b9:13:eb:2f:7b:03: f9:5a:a9:e7:8a:14:8d:7d:69:84:eb:4c:61:d6:a8: 6d:2e:24:a5:c5:d0:87:f9:81:8d:c3:54:e3:a7:74: 5c:bd:2e:d5:55:f2:33:0f:00:10:36:e7:54:32:a5: 47:cc:c8:b2:de:e7:49:af:1c:ec:ae:e6:e6:0d:04: 01:e0:c0:ac:a9:d2:aa:98:40:b7:23:18:73:d3:bc: 5b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:37:99:26:4C:FA:4D:92:91:F5:F0:40:06:E0:98:92:F7:92:5C:7E X509v3 Authority Key Identifier: keyid:49:37:86:60:F5:F0:19:23:94:6C:35:D9:4B:E5:CC:D7:D2:B7:10:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STeGYPXwGSOUbDXZS-XM19K3EFE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/eTeZJkz6TZKR9fBABuCYkveSXH4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.97.163.0/24 185.129.252.0/22 193.254.202.0/23 213.244.32.0/20 IPv6: 2a06:d680::/29 2a0a:6840::/29 Signature Algorithm: sha256WithRSAEncryption 41:32:b5:42:46:56:98:66:80:0f:5e:56:68:b9:59:ab:52:db: 21:d7:1a:d2:a9:db:f9:95:4b:6b:35:ac:0f:69:2e:5b:83:af: 8b:de:c5:12:cf:6c:e5:95:e9:b2:d8:35:77:91:bf:7c:6d:81: 96:01:3e:f2:d6:3b:e5:cb:83:94:1c:0a:c8:5e:a0:33:c4:99: 2d:2c:0c:f7:f0:b0:3b:9e:b2:95:ee:0a:e6:0b:d1:67:f4:54: 2c:8f:3b:d7:dc:cc:d4:bb:0b:93:51:5b:8f:10:58:78:46:de: 82:23:86:c3:aa:49:a6:63:11:fb:b7:7b:93:4a:ff:35:4c:49: 2c:eb:a7:d2:c3:d5:bc:d9:44:3c:d3:56:e0:a9:23:d8:2d:98: 3d:45:db:ba:d7:1b:e3:97:fe:6f:f1:c2:f3:3c:47:53:7b:3e: a3:f3:96:1c:e6:07:b4:bb:53:f9:1e:c3:e1:7e:52:41:08:4a: b2:d3:88:ab:d9:0f:a8:0b:a0:5b:34:6f:81:e0:54:f7:87:7d: a8:3b:7f:9f:3e:1c:c0:81:ea:91:6f:46:46:36:fb:12:d6:95: 23:94:99:d5:bb:db:fe:a6:0b:ea:ca:a1:3d:19:f9:8e:1b:ad: 9a:b8:9f:f7:d9:25:5c:fa:ef:62:b1:73:9c:f1:66:96:fa:b3: 01:98:29:b0 -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgISAZt6WsR9x6hVh2b0E5wH0a2LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5Mzc4NjYwZjVmMDE5MjM5NDZjMzVkOTRiZTVjY2Q3ZDJi NzEwNTEwHhcNMjYwMTAxMTYxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OTM3OTkyNjRjZmE0ZDkyOTFmNWYwNDAwNmUwOTg5MmY3OTI1YzdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9UPRLq0erPIjSFvhv/1K76oPX/nZ FSU2VE5h8ypHpwbBFieFfItU4w7NocZu82Wbk5H+pr8g9PfjapfqP7aXrActVHTP AlZBDSw+iuI9M6AAmJiHFew5ZD7R/Mcc1fSU516TcxOfbfJordUzXsyGI3Rlwx1t rvTOWuIjkBF3Pd6k17eJ+9XOBE+XIVtjQoWljd+GtJhw9cqP94Cq3alwVw7ok+FP nfipC7/Kl9a5E+svewP5WqnnihSNfWmE60xh1qhtLiSlxdCH+YGNw1Tjp3RcvS7V VfIzDwAQNudUMqVHzMiy3udJrxzsrubmDQQB4MCsqdKqmEC3Ixhz07xbDwIDAQAB o4ICMTCCAi0wHQYDVR0OBBYEFHk3mSZM+k2SkfXwQAbgmJL3klx+MB8GA1UdIwQY MBaAFEk3hmD18BkjlGw12UvlzNfStxBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1RlR1lQWHdHU09VYkRYWlMtWE0xOUszRUZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8wN2NkY2YtODg3NS00NzcwLThjNzUt NDFiNzQ1YmY1M2RiLzEvZVRlWkprejZUWktSOWZCQUJ1Q1lrdmVTWEg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8wN2NkY2YtODg3NS00NzcwLThjNzUtNDFiNzQ1YmY1M2Ri LzEvU1RlR1lQWHdHU09VYkRYWlMtWE0xOUszRUZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjAeBAIAATAYAwQAnWGjAwQC uYH8AwQBwf7KAwQE1fQgMBQEAgACMA4DBQMqBtaAAwUDKgpoQDANBgkqhkiG9w0B AQsFAAOCAQEAQTK1QkZWmGaAD15WaLlZq1LbIdca0qnb+ZVLazWsD2kuW4Ovi97F Es9s5ZXpstg1d5G/fG2BlgE+8tY75cuDlBwKyF6gM8SZLSwM9/CwO56yle4K5gvR Z/RULI8719zM1LsLk1FbjxBYeEbegiOGw6pJpmMR+7d7k0r/NUxJLOun0sPVvNlE PNNW4Kkj2C2YPUXbutcb45f+b/HC8zxHU3s+o/OWHOYHtLtT+R7D4X5SQQhKstOI q9kPqAugWzRvgeBU94d9qDt/nz4cwIHqkW9GRjb7EtaVI5SZ1bvb/qYL6sqhPRn5 jhutmrif99klXPrvYrFznPFmlvqzAZgpsA== -----END CERTIFICATE-----Generated at Tue Feb 10 00:08:40 2026 by rpki-client