This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/eVHX86Z5BUrMshf-zyfKQYxN0ao.roa File: eVHX86Z5BUrMshf-zyfKQYxN0ao.roa (raw, json) Hash identifier: 52NfErShygwUz/Jha+lSZaO5oAHArVutPPK1QEHMLQU= Subject key identifier: 79:51:D7:F3:A6:79:05:4A:CC:B2:17:FE:CF:27:CA:41:8C:4D:D1:AA Certificate issuer: /CN=e45d0adc294dd366df6ada880134dbd0e688ccf7 Certificate serial: 019B7FF05E1DA7C38DC87A6121B8F2C4C8AC Authority key identifier: E4:5D:0A:DC:29:4D:D3:66:DF:6A:DA:88:01:34:DB:D0:E6:88:CC:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5F0K3ClN02bfatqIATTb0OaIzPc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/eVHX86Z5BUrMshf-zyfKQYxN0ao.roa Signing time: Fri 02 Jan 2026 18:20:17 +0000 ROA not before: Fri 02 Jan 2026 18:20:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57007 IP address blocks: 91.229.252.0/22 maxlen: 22 2001:678:84c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.mft rsync://rpki.ripe.net/repository/DEFAULT/5F0K3ClN02bfatqIATTb0OaIzPc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f0:5e:1d:a7:c3:8d:c8:7a:61:21:b8:f2:c4:c8:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e45d0adc294dd366df6ada880134dbd0e688ccf7 Validity Not Before: Jan 2 18:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7951d7f3a679054accb217fecf27ca418c4dd1aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:5b:b8:67:94:2c:8f:56:57:0d:b9:ae:0e:ba: af:b0:a3:27:90:cb:3a:33:8f:91:a8:74:aa:91:b2: 0f:1b:55:55:ae:43:0c:1f:88:49:2a:3d:f7:6b:ef: b7:95:61:98:e8:6a:fd:0b:10:34:a7:cd:83:58:fe: 5c:17:86:53:05:83:cb:92:35:f9:33:73:64:47:f4: 2b:2e:2c:9c:45:de:41:a9:c9:8e:e6:ea:88:96:73: 75:af:f5:03:23:40:ff:b6:10:c6:26:1a:80:04:df: db:97:91:40:a7:93:d0:b1:51:73:f4:c4:9d:49:66: 36:6a:b8:b7:8b:c2:d1:cd:9e:4e:b5:67:ae:c4:7b: 8a:30:0c:82:d6:c5:ed:27:69:56:68:86:3f:6f:a9: cf:cc:b0:3b:2a:ba:60:f3:17:bb:d8:e8:ab:94:c3: 30:93:01:12:52:e2:81:d0:99:f9:fd:3c:8b:08:66: d8:36:02:8f:08:99:9c:fc:43:98:06:99:93:2f:31: ff:02:7f:42:71:be:da:fe:42:81:9b:1c:af:de:77: f9:98:19:ec:24:25:81:61:ce:2e:8a:03:98:fa:57: 8c:47:20:07:fa:38:57:ca:e4:9c:d1:66:a7:d9:0c: cf:da:f1:c4:4d:dc:cc:65:39:78:57:07:6c:fd:9e: c8:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:51:D7:F3:A6:79:05:4A:CC:B2:17:FE:CF:27:CA:41:8C:4D:D1:AA X509v3 Authority Key Identifier: keyid:E4:5D:0A:DC:29:4D:D3:66:DF:6A:DA:88:01:34:DB:D0:E6:88:CC:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5F0K3ClN02bfatqIATTb0OaIzPc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/eVHX86Z5BUrMshf-zyfKQYxN0ao.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ddf1e1-f07e-4bad-84a8-fe27359fd7ea/1/5F0K3ClN02bfatqIATTb0OaIzPc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.229.252.0/22 IPv6: 2001:678:84c::/48 Signature Algorithm: sha256WithRSAEncryption 44:90:a1:ff:2c:a7:a7:29:06:96:12:b2:ef:fe:de:4f:0a:f0: 8e:82:f9:7d:da:9e:d2:8a:c6:b0:48:7f:92:5b:83:16:8c:ce: 20:ac:61:b7:d0:2e:71:59:f5:29:bc:3c:bf:76:07:ee:aa:b9: b0:2f:63:b2:c4:78:f8:9f:22:91:18:80:6c:c9:82:2e:7f:21: 84:70:8b:90:fb:ff:15:a3:4e:03:5b:43:88:d9:0a:6d:f4:94: b9:5f:52:b5:7c:93:a6:51:f0:38:dd:12:96:8e:02:ec:0d:35: f2:16:6d:1c:ae:d0:c5:6e:52:61:59:ec:44:d7:65:ce:01:b6: d5:10:eb:a8:fd:e5:80:ef:40:08:0b:14:c4:fb:f2:c8:57:8b: ba:63:2b:0f:19:9d:c0:74:6a:85:eb:db:27:e3:06:69:07:94: 79:da:c0:92:25:1b:a3:1e:9a:0f:be:db:44:be:f7:93:db:8d: aa:12:f1:eb:70:43:86:00:30:43:d2:ca:b7:03:37:0c:04:20: 91:2e:0e:6f:37:78:60:37:8f:af:55:5b:17:a5:ea:70:46:c3: 96:f4:4b:1a:70:6c:3b:0a:91:04:9b:3b:0c:d3:4a:f6:aa:16: 92:89:7d:42:51:2a:db:15:89:4c:f4:91:94:65:e6:ad:5b:eb: 8e:a8:1c:45 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/8F4dp8ONyHphIbjyxMisMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0NWQwYWRjMjk0ZGQzNjZkZjZhZGE4ODAxMzRkYmQwZTY4 OGNjZjcwHhcNMjYwMTAyMTgyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OTUxZDdmM2E2NzkwNTRhY2NiMjE3ZmVjZjI3Y2E0MThjNGRkMWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8lu4Z5Qsj1ZXDbmuDrqvsKMnkMs6 M4+RqHSqkbIPG1VVrkMMH4hJKj33a++3lWGY6Gr9CxA0p82DWP5cF4ZTBYPLkjX5 M3NkR/QrLiycRd5BqcmO5uqIlnN1r/UDI0D/thDGJhqABN/bl5FAp5PQsVFz9MSd SWY2ari3i8LRzZ5OtWeuxHuKMAyC1sXtJ2lWaIY/b6nPzLA7Krpg8xe72OirlMMw kwESUuKB0Jn5/TyLCGbYNgKPCJmc/EOYBpmTLzH/An9Ccb7a/kKBmxyv3nf5mBns JCWBYc4uigOY+leMRyAH+jhXyuSc0Wan2QzP2vHETdzMZTl4Vwds/Z7IqQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFHlR1/OmeQVKzLIX/s8nykGMTdGqMB8GA1UdIwQY MBaAFORdCtwpTdNm32raiAE029DmiMz3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUYwSzNDbE4wMmJmYXRxSUFUVGIwT2FJelBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9kZGYxZTEtZjA3ZS00YmFkLTg0YTgt ZmUyNzM1OWZkN2VhLzEvZVZIWDg2WjVCVXJNc2hmLXp5ZktRWXhOMGFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9kZGYxZTEtZjA3ZS00YmFkLTg0YTgtZmUyNzM1OWZkN2Vh LzEvNUYwSzNDbE4wMmJmYXRxSUFUVGIwT2FJelBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCW+X8MA8E AgACMAkDBwAgAQZ4CEwwDQYJKoZIhvcNAQELBQADggEBAESQof8sp6cpBpYSsu/+ 3k8K8I6C+X3antKKxrBIf5JbgxaMziCsYbfQLnFZ9Sm8PL92B+6qubAvY7LEePif IpEYgGzJgi5/IYRwi5D7/xWjTgNbQ4jZCm30lLlfUrV8k6ZR8DjdEpaOAuwNNfIW bRyu0MVuUmFZ7ETXZc4BttUQ66j95YDvQAgLFMT78shXi7pjKw8ZncB0aoXr2yfj BmkHlHnawJIlG6Memg++20S+95PbjaoS8etwQ4YAMEPSyrcDNwwEIJEuDm83eGA3 j69VWxel6nBGw5b0SxpwbDsKkQSbOwzTSvaqFpKJfUJRKtsViUz0kZRl5q1b646o HEU= -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:31 2026 by rpki-client