This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/Ey3NVFNZGCHqRvki0g7r8C0_gMY.roa File: Ey3NVFNZGCHqRvki0g7r8C0_gMY.roa (raw, json) Hash identifier: l3PwDzdUu8sAqi7VNj0H3fSsXYCfHAzMO+z2/d+bwfM= Subject key identifier: 13:2D:CD:54:53:59:18:21:EA:46:F9:22:D2:0E:EB:F0:2D:3F:80:C6 Certificate issuer: /CN=75b18ef2c4b4f8249f9a6eda0b33f0e57da8a9dc Certificate serial: 019B77C7038872B835392C56D30E6F421839 Authority key identifier: 75:B1:8E:F2:C4:B4:F8:24:9F:9A:6E:DA:0B:33:F0:E5:7D:A8:A9:DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbGO8sS0-CSfmm7aCzPw5X2oqdw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/Ey3NVFNZGCHqRvki0g7r8C0_gMY.roa Signing time: Thu 01 Jan 2026 04:18:09 +0000 ROA not before: Thu 01 Jan 2026 04:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15675 IP address blocks: 193.5.240.0/21 maxlen: 24 193.5.248.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.mft rsync://rpki.ripe.net/repository/DEFAULT/dbGO8sS0-CSfmm7aCzPw5X2oqdw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:03:88:72:b8:35:39:2c:56:d3:0e:6f:42:18:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75b18ef2c4b4f8249f9a6eda0b33f0e57da8a9dc Validity Not Before: Jan 1 04:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=132dcd5453591821ea46f922d20eebf02d3f80c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3c:18:b5:ed:41:d8:39:3e:5c:b2:e9:0c:53: 8c:19:f5:12:ed:7a:52:dc:d7:2c:63:99:9d:c8:17: 32:cb:a2:1b:b3:42:4f:ff:b6:7d:78:e6:b7:45:d7: 3c:12:57:44:98:a5:07:8b:43:f7:f7:41:1b:a6:ef: 53:8c:e9:82:76:73:b0:63:65:f6:f8:5a:73:95:4b: 63:95:84:1a:a4:69:fe:ae:9a:76:aa:7c:17:3f:5f: 1c:d3:74:d7:6d:36:b0:14:5a:e0:80:c5:26:f2:e0: 15:9f:b1:f1:c3:4f:a4:55:96:50:92:23:56:83:80: 44:4f:c5:cf:d1:26:13:ab:7f:e6:14:4e:ef:a5:25: 19:02:b6:32:20:16:fd:60:ed:20:3b:12:45:ac:f3: e8:f0:c8:7a:8f:00:12:92:5b:37:0a:2a:c6:2b:45: 77:65:1f:63:d5:f4:37:54:48:23:0d:52:c1:79:e6: e5:59:45:b5:41:18:d5:08:82:45:b0:84:ab:fb:52: dd:c5:3f:2b:c9:70:9e:cc:8c:2b:c0:8d:97:c2:4c: 46:c6:ea:33:3b:26:61:18:fb:5c:66:62:2d:45:28: dd:9b:52:ce:15:2a:b3:7f:5d:31:1c:ea:0c:e4:0e: ef:ff:f1:eb:46:d1:3d:8c:e7:1e:b7:40:8b:cb:02: 9a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:2D:CD:54:53:59:18:21:EA:46:F9:22:D2:0E:EB:F0:2D:3F:80:C6 X509v3 Authority Key Identifier: keyid:75:B1:8E:F2:C4:B4:F8:24:9F:9A:6E:DA:0B:33:F0:E5:7D:A8:A9:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbGO8sS0-CSfmm7aCzPw5X2oqdw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/Ey3NVFNZGCHqRvki0g7r8C0_gMY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/85f894-1e55-4ad2-9615-b5e56e0eccde/1/dbGO8sS0-CSfmm7aCzPw5X2oqdw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.5.240.0-193.5.249.255 Signature Algorithm: sha256WithRSAEncryption 40:87:67:35:d4:8a:92:7e:6b:94:ed:2a:a8:81:d7:9b:fd:d1: 8e:22:b3:95:53:2c:82:8b:aa:5c:d9:85:74:4e:eb:d6:79:7a: 33:16:75:c9:1b:37:bf:a8:2f:ef:2c:94:62:3f:67:eb:66:1e: 14:f7:63:41:a2:32:fe:ce:bc:53:c3:5d:a9:2c:76:4e:73:b8: 51:1a:7a:da:af:15:20:d2:9b:e9:e3:5c:f7:63:90:83:58:f5: bf:4e:c6:c0:12:28:f3:bb:46:49:4c:8c:f5:72:f2:7f:e9:19: 01:63:f8:da:ba:0d:db:57:4f:69:eb:44:5b:b6:ae:65:77:18: 7d:b9:4d:e8:f0:74:5e:55:74:40:9d:ff:89:3e:ca:aa:7a:3d: 24:61:50:a3:3f:d4:3c:25:f7:01:35:12:eb:12:c5:6a:0b:83: 88:c9:17:ba:a8:9b:12:4f:38:1f:d6:55:dc:01:9e:ba:52:80: 35:ef:38:55:76:d2:b6:36:79:de:9a:49:7c:32:e0:47:49:0a: ad:cc:81:79:e1:ac:b0:b4:5f:9d:ec:e4:c3:81:db:60:c0:3b: 9f:b9:6a:0d:f1:11:ef:b8:d5:63:ff:ae:e7:53:4f:d4:e2:74: da:eb:aa:2d:00:27:9e:65:f9:3b:c7:97:7d:10:bf:fd:66:08: 2d:89:2f:ca -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xwOIcrg1OSxW0w5vQhg5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1YjE4ZWYyYzRiNGY4MjQ5ZjlhNmVkYTBiMzNmMGU1N2Rh OGE5ZGMwHhcNMjYwMTAxMDQxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzJkY2Q1NDUzNTkxODIxZWE0NmY5MjJkMjBlZWJmMDJkM2Y4MGM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjwYte1B2Dk+XLLpDFOMGfUS7XpS 3NcsY5mdyBcyy6Ibs0JP/7Z9eOa3Rdc8EldEmKUHi0P390Ebpu9TjOmCdnOwY2X2 +FpzlUtjlYQapGn+rpp2qnwXP18c03TXbTawFFrggMUm8uAVn7Hxw0+kVZZQkiNW g4BET8XP0SYTq3/mFE7vpSUZArYyIBb9YO0gOxJFrPPo8Mh6jwASkls3CirGK0V3 ZR9j1fQ3VEgjDVLBeeblWUW1QRjVCIJFsISr+1LdxT8ryXCezIwrwI2XwkxGxuoz OyZhGPtcZmItRSjdm1LOFSqzf10xHOoM5A7v//HrRtE9jOcet0CLywKaEQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFBMtzVRTWRgh6kb5ItIO6/AtP4DGMB8GA1UdIwQY MBaAFHWxjvLEtPgkn5pu2gsz8OV9qKncMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGJHTzhzUzAtQ1NmbW03YUN6UHc1WDJvcWR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84NWY4OTQtMWU1NS00YWQyLTk2MTUt YjVlNTZlMGVjY2RlLzEvRXkzTlZGTlpHQ0hxUnZraTBnN3I4QzBfZ01ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC84NWY4OTQtMWU1NS00YWQyLTk2MTUtYjVlNTZlMGVjY2Rl LzEvZGJHTzhzUzAtQ1NmbW03YUN6UHc1WDJvcWR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBATBBfAD BAHBBfgwDQYJKoZIhvcNAQELBQADggEBAECHZzXUipJ+a5TtKqiB15v90Y4is5VT LIKLqlzZhXRO69Z5ejMWdckbN7+oL+8slGI/Z+tmHhT3Y0GiMv7OvFPDXaksdk5z uFEaetqvFSDSm+njXPdjkINY9b9OxsASKPO7RklMjPVy8n/pGQFj+Nq6DdtXT2nr RFu2rmV3GH25TejwdF5VdECd/4k+yqp6PSRhUKM/1Dwl9wE1EusSxWoLg4jJF7qo mxJPOB/WVdwBnrpSgDXvOFV20rY2ed6aSXwy4EdJCq3MgXnhrLC0X53s5MOB22DA O5+5ag3xEe+41WP/rudTT9TidNrrqi0AJ55l+TvHl30Qv/1mCC2JL8o= -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:43 2026 by rpki-client