This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/E2QGn3eEc4YgUK3AVvYhsuz-J_8.roa File: E2QGn3eEc4YgUK3AVvYhsuz-J_8.roa (raw, json) Hash identifier: wMdtrfklBtkfMKlhkTQEZGLh+FduG0xroz4RyYIx+Jg= Subject key identifier: 13:64:06:9F:77:84:73:86:20:50:AD:C0:56:F6:21:B2:EC:FE:27:FF Certificate issuer: /CN=19908b6369148f4f3c50f167103f7a0478c52942 Certificate serial: 019B7F83DF41740E5FFF1B285FDCE0E6E289 Authority key identifier: 19:90:8B:63:69:14:8F:4F:3C:50:F1:67:10:3F:7A:04:78:C5:29:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZCLY2kUj088UPFnED96BHjFKUI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/E2QGn3eEc4YgUK3AVvYhsuz-J_8.roa Signing time: Fri 02 Jan 2026 16:21:47 +0000 ROA not before: Fri 02 Jan 2026 16:21:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12403 IP address blocks: 176.114.32.0/20 maxlen: 20 176.114.32.0/22 maxlen: 22 176.114.36.0/22 maxlen: 22 176.114.40.0/22 maxlen: 22 176.114.44.0/22 maxlen: 22 193.200.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.mft rsync://rpki.ripe.net/repository/DEFAULT/GZCLY2kUj088UPFnED96BHjFKUI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:df:41:74:0e:5f:ff:1b:28:5f:dc:e0:e6:e2:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19908b6369148f4f3c50f167103f7a0478c52942 Validity Not Before: Jan 2 16:21:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1364069f778473862050adc056f621b2ecfe27ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:68:92:40:dd:be:f6:f2:4c:02:ea:71:43:22: c5:cf:f3:69:d2:bd:25:01:59:50:c7:78:bb:6d:eb: e5:cc:72:93:e8:31:28:32:46:ae:83:24:35:73:a1: 28:b1:53:3b:e9:40:86:66:45:99:af:8b:34:a4:45: 36:84:a1:e0:1d:e9:50:ed:db:f5:eb:8c:12:6c:8d: f6:9a:06:42:64:4a:e4:66:ba:23:27:dd:ff:7e:f9: 73:9f:a2:b1:00:ad:09:61:f4:88:f0:0f:09:17:62: ac:90:06:1e:b1:10:07:c5:47:26:5b:88:9a:3d:b5: a7:65:2e:02:f2:a8:70:7b:ef:61:f8:94:7b:e8:17: e6:96:dc:ea:41:64:02:96:32:c6:45:bc:b4:fb:ca: cf:d7:73:e5:f1:7b:39:c3:33:58:4f:a8:57:43:15: b7:fc:42:ec:e0:f9:13:1a:00:52:96:ee:d1:0c:c2: ec:f6:3d:b2:a9:d6:33:fa:77:3e:dc:3a:1a:31:71: 89:26:3c:d6:6a:d1:0d:d4:47:fa:37:8a:d1:63:9e: 88:e1:41:4a:54:c2:1f:6d:2c:94:e1:9d:b0:ce:9b: c0:c1:42:f1:65:f3:96:70:71:81:16:5e:a1:3e:8f: 14:37:b9:f5:ba:a3:b7:a2:9e:60:ee:50:71:e5:c7: d6:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:64:06:9F:77:84:73:86:20:50:AD:C0:56:F6:21:B2:EC:FE:27:FF X509v3 Authority Key Identifier: keyid:19:90:8B:63:69:14:8F:4F:3C:50:F1:67:10:3F:7A:04:78:C5:29:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZCLY2kUj088UPFnED96BHjFKUI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/E2QGn3eEc4YgUK3AVvYhsuz-J_8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.114.32.0/20 193.200.183.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:23:b3:13:fb:fa:d0:40:cb:96:f0:71:75:39:e1:44:5d:39: 74:d1:16:36:cd:07:b6:fb:68:79:40:ae:c7:d4:55:c2:7f:eb: 1d:23:cb:58:32:03:1d:19:8f:2e:48:37:af:ce:5c:e4:55:f0: 3d:10:c9:1e:2c:12:04:86:8c:15:0b:85:c4:96:eb:90:d4:1a: d6:20:bf:f6:74:8e:c1:f7:75:49:0a:b7:c2:1c:a7:92:fe:45: cd:67:ff:15:ea:3b:85:70:af:f4:ba:81:1e:27:61:2f:8c:a7: 65:99:91:62:36:c2:31:bf:34:87:a7:78:9d:b3:29:0e:57:24: 20:af:9b:c2:42:6a:79:d9:a0:59:5f:8d:e9:e4:80:04:87:8e: bf:fd:20:5a:b3:b6:c3:45:2c:4d:45:41:62:24:bf:f1:dc:6e: 45:8f:b3:9a:0e:24:64:c1:7e:91:80:88:7e:46:75:3b:f8:00: d2:8c:8f:f3:a8:43:6a:5e:93:56:c8:d8:f7:04:0a:45:33:31: 35:19:2f:b0:f4:f3:58:43:b6:55:99:67:ea:22:03:ce:1b:10: 03:42:e7:6c:4d:5e:a5:97:68:80:ac:68:1e:da:55:f7:9a:d2: 68:bc:44:8d:fa:20:f8:92:cb:fa:d2:94:6c:d5:b1:69:63:1a: 94:8b:e1:ad -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/g99BdA5f/xsoX9zg5uKJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5OTA4YjYzNjkxNDhmNGYzYzUwZjE2NzEwM2Y3YTA0Nzhj NTI5NDIwHhcNMjYwMTAyMTYyMTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzY0MDY5Zjc3ODQ3Mzg2MjA1MGFkYzA1NmY2MjFiMmVjZmUyN2ZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWiSQN2+9vJMAupxQyLFz/Np0r0l AVlQx3i7bevlzHKT6DEoMkaugyQ1c6EosVM76UCGZkWZr4s0pEU2hKHgHelQ7dv1 64wSbI32mgZCZErkZrojJ93/fvlzn6KxAK0JYfSI8A8JF2KskAYesRAHxUcmW4ia PbWnZS4C8qhwe+9h+JR76BfmltzqQWQCljLGRby0+8rP13Pl8Xs5wzNYT6hXQxW3 /ELs4PkTGgBSlu7RDMLs9j2yqdYz+nc+3DoaMXGJJjzWatEN1Ef6N4rRY56I4UFK VMIfbSyU4Z2wzpvAwULxZfOWcHGBFl6hPo8UN7n1uqO3op5g7lBx5cfWxQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBNkBp93hHOGIFCtwFb2IbLs/if/MB8GA1UdIwQY MBaAFBmQi2NpFI9PPFDxZxA/egR4xSlCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1pDTFkya1VqMDg4VVBGbkVEOTZCSGpGS1VJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9lNzAyOTUtNmMyZS00OGZiLThmYzkt MTI2MGE2ZjNhMzkzLzEvRTJRR24zZUVjNFlnVUszQVZ2WWhzdXotSl84LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9lNzAyOTUtNmMyZS00OGZiLThmYzktMTI2MGE2ZjNhMzkz LzEvR1pDTFkya1VqMDg4VVBGbkVEOTZCSGpGS1VJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEsHIgAwQA wci3MA0GCSqGSIb3DQEBCwUAA4IBAQCNI7MT+/rQQMuW8HF1OeFEXTl00RY2zQe2 +2h5QK7H1FXCf+sdI8tYMgMdGY8uSDevzlzkVfA9EMkeLBIEhowVC4XEluuQ1BrW IL/2dI7B93VJCrfCHKeS/kXNZ/8V6juFcK/0uoEeJ2EvjKdlmZFiNsIxvzSHp3id sykOVyQgr5vCQmp52aBZX43p5IAEh46//SBas7bDRSxNRUFiJL/x3G5Fj7OaDiRk wX6RgIh+RnU7+ADSjI/zqENqXpNWyNj3BApFMzE1GS+w9PNYQ7ZVmWfqIgPOGxAD QudsTV6ll2iArGge2lX3mtJovESN+iD4ksv60pRs1bFpYxqUi+Gt -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:56 2026 by rpki-client