This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/EVMsfS_gj7nu6QBPzwHM9-nv1dk.roa File: EVMsfS_gj7nu6QBPzwHM9-nv1dk.roa (raw, json) Hash identifier: JkA/lHi+qKLwWerCwFGo9R5oWx1tdygUbUd8zkkpqNk= Subject key identifier: 11:53:2C:7D:2F:E0:8F:B9:EE:E9:00:4F:CF:01:CC:F7:E9:EF:D5:D9 Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd Certificate serial: 019ADE4496FB15CD48CF1367D774FE64C0D1 Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/EVMsfS_gj7nu6QBPzwHM9-nv1dk.roa Signing time: Tue 02 Dec 2025 08:53:48 +0000 ROA not before: Tue 02 Dec 2025 08:53:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 80.93.192.0/24 maxlen: 24 80.93.206.0/24 maxlen: 24 80.93.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 14:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:de:44:96:fb:15:cd:48:cf:13:67:d7:74:fe:64:c0:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd Validity Not Before: Dec 2 08:53:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=11532c7d2fe08fb9eee9004fcf01ccf7e9efd5d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6b:13:1a:b6:59:68:60:87:cb:f4:7f:5a:92: 99:7f:0e:6b:39:43:19:71:64:15:53:7e:80:8a:a7: 62:7b:09:48:2b:54:12:8e:91:7e:fb:5a:93:99:df: f3:10:4a:1c:40:2f:2c:06:ba:75:0c:ea:4a:1e:03: 5c:58:87:85:6e:c5:e3:db:89:be:2e:69:53:0b:87: a4:c8:83:23:19:4f:d2:c4:e2:d8:32:19:63:3e:30: 8f:00:e2:f5:80:77:ca:2f:84:41:30:5e:74:3b:8d: 34:cb:9e:f3:e1:cd:7d:a5:60:d7:c0:57:cb:ef:08: f5:43:ec:ae:f2:54:02:6f:99:1f:ab:57:04:3c:8d: ed:1c:16:be:91:5e:5e:2d:cd:a8:19:cf:7e:d7:a0: 88:e7:e1:03:99:17:2e:1d:0e:f6:33:b8:cb:e5:a1: 8c:33:e7:60:d4:3d:33:a7:90:24:af:3c:7d:f2:16: 11:f4:b3:24:03:4b:8d:78:01:7e:ce:71:be:da:ad: af:77:d0:ac:ca:b2:90:55:c4:69:a6:15:42:a5:44: 8a:db:89:88:b8:ff:d0:fc:14:d5:d3:8d:39:e9:e7: 93:03:17:23:ea:1b:54:7a:a0:e5:19:72:a4:c2:6c: 14:68:81:62:c2:48:a8:14:01:6b:7d:53:fd:82:c2: 00:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:53:2C:7D:2F:E0:8F:B9:EE:E9:00:4F:CF:01:CC:F7:E9:EF:D5:D9 X509v3 Authority Key Identifier: keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/EVMsfS_gj7nu6QBPzwHM9-nv1dk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.93.192.0/24 80.93.206.0/23 Signature Algorithm: sha256WithRSAEncryption 7b:c0:05:d0:17:5f:db:11:df:4c:5d:25:20:f7:40:ec:a1:a4: 93:91:06:9b:f1:6f:7d:e8:cc:b5:5a:7d:a2:20:5d:e8:7f:7d: 41:eb:46:07:8d:ed:75:e9:c5:0a:09:81:7e:ff:d0:e7:72:27: 8e:fc:f5:5b:3b:20:24:40:87:a0:e2:aa:59:72:4e:8a:4e:a7: c1:f0:c9:ac:54:94:8c:b5:47:dc:cf:29:b1:a5:4d:b6:4f:74: e6:19:72:d1:6c:6e:c3:00:d2:55:b6:4e:c5:bb:94:3e:5d:88: cf:62:29:7b:c7:36:87:7f:b8:cc:2f:a3:3f:90:56:11:22:6b: fd:5a:70:7a:8c:17:4e:5f:a7:c3:4f:d6:f9:b5:2d:7d:bc:8e: ea:e0:4b:ab:24:b9:9d:3e:2e:8c:1d:aa:4f:e2:23:50:05:e7: 64:f1:04:5f:73:1d:ac:b3:41:7b:60:7d:31:fc:d5:71:2c:02: 4c:23:ff:52:d1:9d:a3:1c:c3:6c:1f:a2:d8:50:40:90:43:11: 9e:ea:e6:e4:65:95:e6:a4:92:32:f5:fa:c6:41:4e:87:c1:c4: ab:20:d4:ef:5d:b1:31:f8:7e:77:ff:cd:3b:a7:88:9b:c3:f1: 41:96:ad:2a:e8:aa:4a:75:3c:9e:a1:93:14:c3:10:c3:99:a1: 7e:fb:d8:2d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZreRJb7Fc1IzxNn13T+ZMDRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5OGY3YmEzNGJjNjU2N2JkMzYxNmQ1NzRmNzI4NWRkNzU1 NmRiZmQwHhcNMjUxMjAyMDg1MzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMTUzMmM3ZDJmZTA4ZmI5ZWVlOTAwNGZjZjAxY2NmN2U5ZWZkNWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGsTGrZZaGCHy/R/WpKZfw5rOUMZ cWQVU36AiqdiewlIK1QSjpF++1qTmd/zEEocQC8sBrp1DOpKHgNcWIeFbsXj24m+ LmlTC4ekyIMjGU/SxOLYMhljPjCPAOL1gHfKL4RBMF50O400y57z4c19pWDXwFfL 7wj1Q+yu8lQCb5kfq1cEPI3tHBa+kV5eLc2oGc9+16CI5+EDmRcuHQ72M7jL5aGM M+dg1D0zp5Akrzx98hYR9LMkA0uNeAF+znG+2q2vd9CsyrKQVcRpphVCpUSK24mI uP/Q/BTV04056eeTAxcj6htUeqDlGXKkwmwUaIFiwkioFAFrfVP9gsIALwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBFTLH0v4I+57ukAT88BzPfp79XZMB8GA1UdIwQY MBaAFAmPe6NLxlZ702FtV09yhd11Vtv9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMt ZTIxNjZhZDc0ZTNmLzEvRVZNc2ZTX2dqN251NlFCUHp3SE05LW52MWRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMtZTIxNjZhZDc0ZTNm LzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUF3AAwQB UF3OMA0GCSqGSIb3DQEBCwUAA4IBAQB7wAXQF1/bEd9MXSUg90DsoaSTkQab8W99 6My1Wn2iIF3of31B60YHje116cUKCYF+/9DncieO/PVbOyAkQIeg4qpZck6KTqfB 8MmsVJSMtUfczymxpU22T3TmGXLRbG7DANJVtk7Fu5Q+XYjPYil7xzaHf7jML6M/ kFYRImv9WnB6jBdOX6fDT9b5tS19vI7q4EurJLmdPi6MHapP4iNQBedk8QRfcx2s s0F7YH0x/NVxLAJMI/9S0Z2jHMNsH6LYUECQQxGe6ubkZZXmpJIy9frGQU6HwcSr INTvXbEx+H53/807p4ibw/FBlq0q6KpKdTyeoZMUwxDDmaF++9gt -----END CERTIFICATE-----Generated at Thu Dec 4 19:53:30 2025 by rpki-client