This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/e-PGryCKPVYVZQ4a0ucbiF-IKko.roa File: e-PGryCKPVYVZQ4a0ucbiF-IKko.roa (raw, json) Hash identifier: I6xOBjO/hgVperV3b00ycb8iwKnWcTOA7utz+CTNOoU= Subject key identifier: 7B:E3:C6:AF:20:8A:3D:56:15:65:0E:1A:D2:E7:1B:88:5F:88:2A:4A Certificate issuer: /CN=4f14397e3021beff3b5fd30daaab62514cfa166b Certificate serial: 019B7BA4E41F297EE192212DAC3A1D4765BD Authority key identifier: 4F:14:39:7E:30:21:BE:FF:3B:5F:D3:0D:AA:AB:62:51:4C:FA:16:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQ5fjAhvv87X9MNqqtiUUz6Fms.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/e-PGryCKPVYVZQ4a0ucbiF-IKko.roa Signing time: Thu 01 Jan 2026 22:19:22 +0000 ROA not before: Thu 01 Jan 2026 22:19:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57348 IP address blocks: 194.8.250.0/24 maxlen: 24 194.8.251.0/24 maxlen: 24 2001:67c:1814::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft rsync://rpki.ripe.net/repository/DEFAULT/TxQ5fjAhvv87X9MNqqtiUUz6Fms.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 16:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:e4:1f:29:7e:e1:92:21:2d:ac:3a:1d:47:65:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f14397e3021beff3b5fd30daaab62514cfa166b Validity Not Before: Jan 1 22:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7be3c6af208a3d5615650e1ad2e71b885f882a4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a9:9f:2e:65:2f:93:b1:4c:fb:c6:4e:b2:c9: 6b:96:3c:bf:45:36:2b:01:82:ad:ba:ac:02:1a:f6: b4:8b:d0:fe:7d:b4:c3:d2:dc:94:ed:2f:5f:12:87: 7e:ec:d8:f2:75:ad:8d:8b:38:61:b6:30:cf:52:e6: c8:f0:bd:15:26:3c:26:34:1f:ab:35:d5:3d:41:08: b8:1e:2d:a5:74:d1:b4:29:0e:05:b4:67:fb:6e:25: 1e:a2:6a:71:28:fb:48:f2:47:5a:fa:bb:78:f2:4a: e0:ac:1d:a1:6d:b0:05:da:f2:17:35:36:c1:df:25: 48:6c:8c:7a:8e:f5:82:96:ac:fd:56:f0:60:8c:69: 9f:1b:7c:a3:a0:34:bf:79:8f:9e:ea:9d:b8:a8:43: 59:0d:06:80:2a:77:dc:ae:6f:9e:e1:32:41:8f:2f: 4d:38:e4:03:b7:1e:7d:f1:10:dc:d7:d8:31:d8:dd: 1f:b6:f1:09:81:b0:6e:d7:37:57:cd:5e:7d:a8:16: 36:3d:2c:0e:27:5e:8b:41:82:b5:38:82:93:80:6c: 92:c8:2f:5e:f6:f2:23:f4:d1:27:f8:16:c9:81:7b: d6:e2:f7:25:68:4b:6c:c3:fb:6f:42:7b:58:c2:c0: 58:75:1a:07:cb:d9:75:71:e0:0d:07:20:02:1c:b6: a5:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:E3:C6:AF:20:8A:3D:56:15:65:0E:1A:D2:E7:1B:88:5F:88:2A:4A X509v3 Authority Key Identifier: keyid:4F:14:39:7E:30:21:BE:FF:3B:5F:D3:0D:AA:AB:62:51:4C:FA:16:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQ5fjAhvv87X9MNqqtiUUz6Fms.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/e-PGryCKPVYVZQ4a0ucbiF-IKko.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.8.250.0/23 IPv6: 2001:67c:1814::/48 Signature Algorithm: sha256WithRSAEncryption 4f:3e:20:b2:3a:9f:14:73:45:58:77:82:66:f6:e4:aa:1b:c6: d6:0c:37:0b:0c:4e:0a:7b:7a:2e:c8:0b:d6:96:ef:5e:28:03: 9f:8d:54:5e:26:1a:df:9f:2f:51:c2:49:8c:2f:9c:a0:13:19: 9f:b1:1e:91:60:6b:80:c4:ea:22:2c:91:07:93:71:07:41:da: b4:b3:70:3a:d6:f5:47:20:9c:0f:2b:43:c7:27:4e:44:fb:9a: 20:cd:f9:c9:82:e1:d5:18:d2:4e:be:2d:9a:43:6a:f5:58:e9: 62:88:b2:00:de:54:d2:67:cc:95:a1:32:a2:e6:27:b6:77:c3: 24:2c:7f:4d:db:5e:cf:ac:42:26:3d:3d:6c:66:9a:be:86:b8: 49:87:26:96:f2:9d:d5:3e:d3:42:8e:d5:c9:4b:f3:9d:2b:ec: 13:c7:fe:0e:3b:9a:92:4e:94:9a:e0:0e:fa:e2:16:60:b0:c1: 55:46:ff:e3:55:4b:d5:2e:02:34:5e:17:d1:3f:59:0a:12:5d: 6d:73:5f:89:48:1a:09:e5:54:3e:89:62:0c:ba:98:3c:6f:60: dd:8f:81:68:f0:bc:dd:70:1a:cd:de:27:c2:b8:f3:50:8c:42: 98:19:63:f2:e7:b0:d4:ab:77:c2:5f:31:3a:bc:49:82:0a:bf: b9:ab:87:fe -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt7pOQfKX7hkiEtrDodR2W9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMTQzOTdlMzAyMWJlZmYzYjVmZDMwZGFhYWI2MjUxNGNm YTE2NmIwHhcNMjYwMTAxMjIxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YmUzYzZhZjIwOGEzZDU2MTU2NTBlMWFkMmU3MWI4ODVmODgyYTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6mfLmUvk7FM+8ZOsslrljy/RTYr AYKtuqwCGva0i9D+fbTD0tyU7S9fEod+7Njyda2NizhhtjDPUubI8L0VJjwmNB+r NdU9QQi4Hi2ldNG0KQ4FtGf7biUeompxKPtI8kda+rt48krgrB2hbbAF2vIXNTbB 3yVIbIx6jvWClqz9VvBgjGmfG3yjoDS/eY+e6p24qENZDQaAKnfcrm+e4TJBjy9N OOQDtx598RDc19gx2N0ftvEJgbBu1zdXzV59qBY2PSwOJ16LQYK1OIKTgGySyC9e 9vIj9NEn+BbJgXvW4vclaEtsw/tvQntYwsBYdRoHy9l1ceANByACHLalAQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFHvjxq8gij1WFWUOGtLnG4hfiCpKMB8GA1UdIwQY MBaAFE8UOX4wIb7/O1/TDaqrYlFM+hZrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhRNWZqQWh2djg3WDlNTnFxdGlVVXo2Rm1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZWVkNmMtZmI1YS00ODAyLWFlNTAt YTJmNzI4YmRjMjc1LzEvZS1QR3J5Q0tQVllWWlE0YTB1Y2JpRi1JS2tvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9iZWVkNmMtZmI1YS00ODAyLWFlNTAtYTJmNzI4YmRjMjc1 LzEvVHhRNWZqQWh2djg3WDlNTnFxdGlVVXo2Rm1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBwgj6MA8E AgACMAkDBwAgAQZ8GBQwDQYJKoZIhvcNAQELBQADggEBAE8+ILI6nxRzRVh3gmb2 5KobxtYMNwsMTgp7ei7IC9aW714oA5+NVF4mGt+fL1HCSYwvnKATGZ+xHpFga4DE 6iIskQeTcQdB2rSzcDrW9UcgnA8rQ8cnTkT7miDN+cmC4dUY0k6+LZpDavVY6WKI sgDeVNJnzJWhMqLmJ7Z3wyQsf03bXs+sQiY9PWxmmr6GuEmHJpbyndU+00KO1clL 850r7BPH/g47mpJOlJrgDvriFmCwwVVG/+NVS9UuAjReF9E/WQoSXW1zX4lIGgnl VD6JYgy6mDxvYN2PgWjwvN1wGs3eJ8K481CMQpgZY/LnsNSrd8JfMTq8SYIKv7mr h/4= -----END CERTIFICATE-----Generated at Thu Jan 29 23:35:14 2026 by rpki-client