This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/e-YXzSqo-diMNWfq4Z-TzhdMAKc.roa File: e-YXzSqo-diMNWfq4Z-TzhdMAKc.roa (raw, json) Hash identifier: oC+ocV09AXnxKxFBaBEAaFvyphxKhACRBYHFRB7YC5U= Subject key identifier: 7B:E6:17:CD:2A:A8:F9:D8:8C:35:67:EA:E1:9F:93:CE:17:4C:00:A7 Certificate issuer: /CN=d9efe9d36f5f88fdf04742c4140c7532090ab770 Certificate serial: 019B7F859025DBE55A03227EEA00D2815973 Authority key identifier: D9:EF:E9:D3:6F:5F:88:FD:F0:47:42:C4:14:0C:75:32:09:0A:B7:70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/e-YXzSqo-diMNWfq4Z-TzhdMAKc.roa Signing time: Fri 02 Jan 2026 16:23:38 +0000 ROA not before: Fri 02 Jan 2026 16:23:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213038 IP address blocks: 185.131.144.0/24 maxlen: 24 185.131.145.0/24 maxlen: 24 194.88.108.0/24 maxlen: 24 194.88.109.0/24 maxlen: 24 194.88.110.0/24 maxlen: 24 194.88.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.mft rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:90:25:db:e5:5a:03:22:7e:ea:00:d2:81:59:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9efe9d36f5f88fdf04742c4140c7532090ab770 Validity Not Before: Jan 2 16:23:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7be617cd2aa8f9d88c3567eae19f93ce174c00a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ef:24:25:6a:84:94:0a:60:2a:fe:bd:f3:e1: bf:0f:1f:68:0d:b0:90:70:1b:73:09:0e:d7:8f:b7: 71:91:67:95:38:97:b6:16:c4:0f:43:e4:a2:df:39: c8:de:f2:44:85:03:e0:c3:7d:5e:3a:8b:46:dd:ed: 8c:56:97:92:a5:4b:10:e2:27:36:d5:ac:3e:46:98: 7b:b1:a9:59:c7:be:91:a5:68:ca:e7:9f:ba:75:6f: b1:d7:5a:32:f7:15:7e:8a:7d:62:87:7c:13:b1:0c: 47:e4:12:4e:d9:ea:bb:48:b5:a2:25:a6:7d:29:b3: e8:28:d6:18:4f:56:dd:8c:91:b3:c4:f5:90:c2:25: bb:75:2f:22:ce:f7:72:fb:66:6f:50:13:92:36:d3: 5e:87:e4:c9:2b:47:0a:ae:b2:8b:90:9e:34:ff:a0: 5d:3c:eb:c1:4b:86:e1:91:d8:43:d6:87:36:8d:7d: 55:36:a2:ef:f9:08:18:a2:70:8c:c1:0f:1c:92:c7: 22:fe:34:f6:8f:0d:ff:51:39:ba:bd:5f:5d:5f:cc: 66:12:c8:7d:5a:a3:d8:80:17:8d:b7:9b:01:f4:35: 2a:23:57:41:e5:58:c4:2a:70:f7:25:2a:e3:da:08: 88:a8:58:84:5f:13:b0:5a:bb:e0:51:50:5b:83:0a: ef:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:E6:17:CD:2A:A8:F9:D8:8C:35:67:EA:E1:9F:93:CE:17:4C:00:A7 X509v3 Authority Key Identifier: keyid:D9:EF:E9:D3:6F:5F:88:FD:F0:47:42:C4:14:0C:75:32:09:0A:B7:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e_p029fiP3wR0LEFAx1MgkKt3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/e-YXzSqo-diMNWfq4Z-TzhdMAKc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/55db34-fc79-4004-95c9-39f6d6425338/1/2e_p029fiP3wR0LEFAx1MgkKt3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.131.144.0/23 194.88.108.0/22 Signature Algorithm: sha256WithRSAEncryption 27:48:78:43:74:83:ef:ca:3d:88:48:1d:f6:87:96:92:3e:1c: d1:54:9a:8f:42:50:02:54:cd:fd:06:fb:b5:0e:d2:76:69:39: 50:aa:c3:2a:73:49:f7:e3:28:1a:5f:21:b9:ea:4c:23:65:57: f0:58:3e:5d:49:42:cb:2b:d5:88:66:ea:be:92:24:4c:d3:52: 14:f5:38:28:26:f3:23:36:bb:18:ec:c6:b9:7d:84:50:d1:5d: 59:4b:d7:32:d5:04:f3:a8:83:b3:ec:69:dc:eb:1f:41:97:3d: b8:b7:fc:d7:19:52:43:4f:d7:31:88:b9:0e:46:45:c9:9d:69: 7f:69:4d:52:a2:0f:5d:62:ff:88:43:92:b5:13:51:38:95:fd: cc:6f:dd:6a:9d:e0:a9:8b:f4:19:78:24:19:6c:4d:77:9a:44: 1c:41:35:36:fe:af:eb:82:9d:7c:de:52:96:af:32:92:26:1d: 7e:28:62:32:f7:6f:4f:e0:93:8a:96:80:82:fc:56:a0:0b:48: a8:eb:4d:c5:a3:ba:0e:ef:6a:ae:bb:72:1a:7a:42:70:cd:56: bb:be:aa:54:e6:ec:bf:19:e9:78:91:9a:be:51:ee:b5:31:24: d0:ba:9a:43:9b:ba:c5:d1:57:df:39:5b:ba:00:2e:43:b2:88: f6:8c:4f:bd -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hZAl2+VaAyJ+6gDSgVlzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5ZWZlOWQzNmY1Zjg4ZmRmMDQ3NDJjNDE0MGM3NTMyMDkw YWI3NzAwHhcNMjYwMTAyMTYyMzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YmU2MTdjZDJhYThmOWQ4OGMzNTY3ZWFlMTlmOTNjZTE3NGMwMGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxO8kJWqElApgKv698+G/Dx9oDbCQ cBtzCQ7Xj7dxkWeVOJe2FsQPQ+Si3znI3vJEhQPgw31eOotG3e2MVpeSpUsQ4ic2 1aw+Rph7salZx76RpWjK55+6dW+x11oy9xV+in1ih3wTsQxH5BJO2eq7SLWiJaZ9 KbPoKNYYT1bdjJGzxPWQwiW7dS8izvdy+2ZvUBOSNtNeh+TJK0cKrrKLkJ40/6Bd POvBS4bhkdhD1oc2jX1VNqLv+QgYonCMwQ8cksci/jT2jw3/UTm6vV9dX8xmEsh9 WqPYgBeNt5sB9DUqI1dB5VjEKnD3JSrj2giIqFiEXxOwWrvgUVBbgwrvuwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHvmF80qqPnYjDVn6uGfk84XTACnMB8GA1UdIwQY MBaAFNnv6dNvX4j98EdCxBQMdTIJCrdwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMmVfcDAyOWZpUDN3UjBMRUZBeDFNZ2tLdDNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC81NWRiMzQtZmM3OS00MDA0LTk1Yzkt MzlmNmQ2NDI1MzM4LzEvZS1ZWHpTcW8tZGlNTldmcTRaLVR6aGRNQUtjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC81NWRiMzQtZmM3OS00MDA0LTk1YzktMzlmNmQ2NDI1MzM4 LzEvMmVfcDAyOWZpUDN3UjBMRUZBeDFNZ2tLdDNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBuYOQAwQC wlhsMA0GCSqGSIb3DQEBCwUAA4IBAQAnSHhDdIPvyj2ISB32h5aSPhzRVJqPQlAC VM39Bvu1DtJ2aTlQqsMqc0n34ygaXyG56kwjZVfwWD5dSULLK9WIZuq+kiRM01IU 9TgoJvMjNrsY7Ma5fYRQ0V1ZS9cy1QTzqIOz7Gnc6x9Blz24t/zXGVJDT9cxiLkO RkXJnWl/aU1Sog9dYv+IQ5K1E1E4lf3Mb91qneCpi/QZeCQZbE13mkQcQTU2/q/r gp183lKWrzKSJh1+KGIy929P4JOKloCC/FagC0io603Fo7oO72quu3IaekJwzVa7 vqpU5uy/Gel4kZq+Ue61MSTQuppDm7rF0VffOVu6AC5Dsoj2jE+9 -----END CERTIFICATE-----Generated at Mon Jan 26 11:45:08 2026 by rpki-client