This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/evzYVk_gffUCgR_Vhoq-7uqFOEQ.roa File: evzYVk_gffUCgR_Vhoq-7uqFOEQ.roa (raw, json) Hash identifier: UCplN2YxCtSrbTvg+CzRNRgDRIlIUb2l+BF29gWKeyY= Subject key identifier: 7A:FC:D8:56:4F:E0:7D:F5:02:81:1F:D5:86:8A:BE:EE:EA:85:38:44 Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4 Certificate serial: 019B7759002485F64772CEBEAF6052061324 Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/evzYVk_gffUCgR_Vhoq-7uqFOEQ.roa Signing time: Thu 01 Jan 2026 02:17:59 +0000 ROA not before: Thu 01 Jan 2026 02:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7029 IP address blocks: 84.55.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 00:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:00:24:85:f6:47:72:ce:be:af:60:52:06:13:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4 Validity Not Before: Jan 1 02:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7afcd8564fe07df502811fd5868abeeeea853844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:76:a7:7a:72:08:c4:b4:0e:d8:ce:3a:09:d3: e4:a9:5c:10:10:78:ae:53:3a:57:ce:d2:d5:77:15: 8b:1c:17:4e:26:e1:7a:98:0f:b8:ae:a6:7e:43:41: 2b:81:95:0a:d6:eb:5f:68:66:d3:91:c9:ad:bc:31: f1:2b:35:0b:f8:1a:be:5e:cf:45:3a:49:e0:28:a6: 10:0b:18:76:20:61:23:76:91:06:6a:d1:29:bc:7d: df:ab:25:15:db:c3:75:98:3a:9c:f6:8e:3c:d4:54: 92:94:97:59:bd:2a:a3:65:c7:f8:ea:c6:bf:fc:95: 1d:67:ce:99:b0:a2:47:3f:28:f7:f2:07:85:ee:0b: 38:04:b9:a4:d7:df:2c:b3:44:4e:39:30:96:c7:0b: d1:73:31:a2:e1:f0:de:69:0e:40:e7:bd:c0:72:0b: 8b:0c:0f:d0:ee:e6:6a:ac:ad:3b:57:75:6a:de:d7: 66:56:74:7c:a3:64:ef:77:40:ce:1c:42:aa:f8:32: ef:a7:44:17:65:e3:3b:d9:fc:67:93:f9:3a:ce:79: 3b:e1:ab:50:0c:fb:ab:3c:67:6d:41:10:6b:c4:5c: dd:a8:2e:27:f9:ff:88:8a:c1:d4:ad:d2:0a:14:c3: 99:dd:1e:3a:3a:0f:9f:8b:3c:43:3e:af:04:ca:d4: 6c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:FC:D8:56:4F:E0:7D:F5:02:81:1F:D5:86:8A:BE:EE:EA:85:38:44 X509v3 Authority Key Identifier: keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/evzYVk_gffUCgR_Vhoq-7uqFOEQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.55.11.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:3b:2e:c9:ad:dd:10:1c:dd:55:5b:1a:60:9b:f4:30:89:a6: c6:93:32:9c:1c:3a:18:59:a2:ea:6f:35:2e:43:94:52:b6:4c: a1:6d:9d:13:ba:76:23:2e:e2:14:26:fa:2e:a4:ff:ab:de:0f: 69:e2:23:14:4a:09:ec:a7:58:36:6d:43:4c:d7:9b:2c:d2:3e: 60:48:c5:b2:38:8f:e5:c3:36:bf:02:cd:c5:af:98:bf:a5:73: 3c:f9:71:4d:af:73:c2:c5:9c:ee:1a:f5:96:a1:26:a3:f6:c7: fa:f0:e3:47:51:a1:0a:42:ca:b3:d1:70:25:ef:44:d0:32:5f: 10:a3:0f:d6:7a:1f:46:a4:bf:e0:8e:b6:65:d0:cd:a3:ef:70: ee:5d:ed:e1:de:68:04:78:ff:9b:8d:8d:fb:a4:84:e7:99:c9: 2e:27:3f:78:cb:ce:c2:b5:7c:ea:63:56:bd:a1:c4:52:30:4e: 94:b2:b2:83:f3:bf:a2:b2:db:91:ab:7e:12:b6:00:1f:65:f6: 1d:3b:73:b4:ad:73:ce:d1:f2:85:dd:6d:3c:af:72:30:66:8a: 25:e3:c4:04:62:7f:bd:10:a4:ae:a0:85:c5:b1:82:05:eb:28: f2:14:4d:48:74:31:f5:71:8e:56:3c:3e:6c:21:ee:f9:b5:c8: 53:4b:0c:53 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WQAkhfZHcs6+r2BSBhMkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjYxNzU4Y2UzMzA2MjI0NzBhMzlhZThkNmVmNGEyMDQ0 ZjgzYzQwHhcNMjYwMTAxMDIxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YWZjZDg1NjRmZTA3ZGY1MDI4MTFmZDU4NjhhYmVlZWVhODUzODQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3anenIIxLQO2M46CdPkqVwQEHiu UzpXztLVdxWLHBdOJuF6mA+4rqZ+Q0ErgZUK1utfaGbTkcmtvDHxKzUL+Bq+Xs9F OkngKKYQCxh2IGEjdpEGatEpvH3fqyUV28N1mDqc9o481FSSlJdZvSqjZcf46sa/ /JUdZ86ZsKJHPyj38geF7gs4BLmk198ss0ROOTCWxwvRczGi4fDeaQ5A573AcguL DA/Q7uZqrK07V3Vq3tdmVnR8o2Tvd0DOHEKq+DLvp0QXZeM72fxnk/k6znk74atQ DPurPGdtQRBrxFzdqC4n+f+IisHUrdIKFMOZ3R46Og+fizxDPq8EytRsLwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHr82FZP4H31AoEf1YaKvu7qhThEMB8GA1UdIwQY MBaAFGBmF1jOMwYiRwo5ro1u9KIET4PEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2Ut MWY4NzQ2OTQ1NDgzLzEvZXZ6WVZrX2dmZlVDZ1JfVmhvcS03dXFGT0VRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2UtMWY4NzQ2OTQ1NDgz LzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVDcLMA0G CSqGSIb3DQEBCwUAA4IBAQBqOy7Jrd0QHN1VWxpgm/QwiabGkzKcHDoYWaLqbzUu Q5RStkyhbZ0TunYjLuIUJvoupP+r3g9p4iMUSgnsp1g2bUNM15ss0j5gSMWyOI/l wza/As3Fr5i/pXM8+XFNr3PCxZzuGvWWoSaj9sf68ONHUaEKQsqz0XAl70TQMl8Q ow/Weh9GpL/gjrZl0M2j73DuXe3h3mgEeP+bjY37pITnmckuJz94y87CtXzqY1a9 ocRSME6UsrKD87+istuRq34StgAfZfYdO3O0rXPO0fKF3W08r3IwZool48QEYn+9 EKSuoIXFsYIF6yjyFE1IdDH1cY5WPD5sIe75tchTSwxT -----END CERTIFICATE-----Generated at Sun Jan 18 08:54:52 2026 by rpki-client