This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/N0E_F_u9h5bIU-j9MGpdicwRJM4.roa File: N0E_F_u9h5bIU-j9MGpdicwRJM4.roa (raw, json) Hash identifier: 23BfC+EZdJUIXPiNf0+Gr0wVhGOB4qpNJ1OtcS1XZzc= Subject key identifier: 37:41:3F:17:FB:BD:87:96:C8:53:E8:FD:30:6A:5D:89:CC:11:24:CE Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370 Certificate serial: 019B7F15CCB638CBBCFE8C127E11B0CA6574 Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/N0E_F_u9h5bIU-j9MGpdicwRJM4.roa Signing time: Fri 02 Jan 2026 14:21:33 +0000 ROA not before: Fri 02 Jan 2026 14:21:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60790 IP address blocks: 194.110.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:cc:b6:38:cb:bc:fe:8c:12:7e:11:b0:ca:65:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370 Validity Not Before: Jan 2 14:21:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=37413f17fbbd8796c853e8fd306a5d89cc1124ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:cf:26:4d:5f:e3:fb:24:ae:6f:03:ee:41:68: f6:0d:75:0d:cf:eb:c3:30:5d:df:86:5a:c1:9d:f7: 6b:06:9a:16:d0:3b:b7:4f:60:19:53:1a:1b:97:a9: f7:90:b6:38:35:d0:cd:f6:7b:a6:16:68:ae:4b:b7: 9b:5d:34:dc:80:bb:f5:ea:2e:af:fe:93:41:6d:fb: 99:dd:12:06:1b:8d:6e:d9:db:5e:46:11:6a:3d:89: 53:60:7a:39:23:c5:27:16:a5:07:f0:f8:e1:03:c8: 92:5c:c9:43:2d:bb:ae:3b:b5:43:aa:89:61:2a:20: e1:21:b1:fd:94:27:08:7c:4a:57:24:85:ef:ea:d4: 3e:6b:a7:11:29:fe:0d:fd:c7:67:ab:4f:f0:52:4d: 54:1f:e1:94:e8:4d:e1:8a:29:af:15:b9:d2:8c:e8: 16:5c:bc:67:cb:8d:ec:8a:c4:03:ab:fa:de:0b:62: 63:20:33:a5:47:aa:10:7e:97:59:d6:31:2d:b7:68: 32:78:7f:1e:1c:a2:16:2e:55:0d:4c:c2:8c:78:80: 58:83:15:6d:ae:3f:ec:a5:fa:92:8d:75:8a:2d:30: cd:ac:a3:7e:dc:16:ba:99:93:be:81:7e:73:5e:aa: 6f:08:94:da:0f:25:bf:7c:a5:b6:64:7d:41:01:b3: 45:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:41:3F:17:FB:BD:87:96:C8:53:E8:FD:30:6A:5D:89:CC:11:24:CE X509v3 Authority Key Identifier: keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/N0E_F_u9h5bIU-j9MGpdicwRJM4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.110.172.0/24 Signature Algorithm: sha256WithRSAEncryption 52:f4:3b:f4:ff:df:dc:78:e8:d9:6f:8b:78:62:ff:7c:91:6b: f0:39:1d:d3:50:48:e9:1b:60:fc:b8:d1:bb:e8:6f:be:3e:ee: 25:6b:5e:48:01:ff:ed:73:e5:86:f7:f7:33:bb:2c:a3:ea:96: cb:fc:c2:b3:e8:de:ae:8b:29:c1:6b:8a:08:5d:52:89:ea:00: b7:84:9e:06:35:b3:04:78:ee:1f:b9:c1:77:41:10:44:0d:87: 26:af:0a:63:0f:eb:10:e5:e5:8f:e7:f3:79:47:5c:45:1a:ba: b5:04:da:42:e7:eb:6a:2d:e8:39:f3:7e:7f:99:97:7e:20:35: 1d:c0:0e:80:22:2e:a4:83:b4:c5:9d:49:3c:3b:b8:df:73:e3: 99:17:46:7a:c2:3c:99:fb:3d:b0:fc:ed:48:22:5e:f4:1e:03: 85:65:c4:fe:49:b9:e6:ab:b1:9c:9b:8d:26:df:92:ab:ea:28: 23:d9:e5:b3:f7:d9:6f:fd:d2:95:34:46:0f:42:70:c4:f7:14: 09:56:cf:18:70:b0:d5:39:bd:d9:2d:de:95:f4:78:34:79:12: 5e:7d:aa:a1:7e:17:ac:ce:57:60:00:b7:2b:74:9b:05:f5:e1: a8:34:d6:53:e7:8f:3d:56:1f:96:9c:6c:08:43:a6:55:fb:e4: 4e:51:03:ad -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/Fcy2OMu8/owSfhGwymV0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmOGFlYTJmMDI1ZjQ5NWJlYWNlZTdjZTVhODgyMDUxOWRk YTEzNzAwHhcNMjYwMTAyMTQyMTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzQxM2YxN2ZiYmQ4Nzk2Yzg1M2U4ZmQzMDZhNWQ4OWNjMTEyNGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwM8mTV/j+ySubwPuQWj2DXUNz+vD MF3fhlrBnfdrBpoW0Du3T2AZUxobl6n3kLY4NdDN9numFmiuS7ebXTTcgLv16i6v /pNBbfuZ3RIGG41u2dteRhFqPYlTYHo5I8UnFqUH8PjhA8iSXMlDLbuuO7VDqolh KiDhIbH9lCcIfEpXJIXv6tQ+a6cRKf4N/cdnq0/wUk1UH+GU6E3hiimvFbnSjOgW XLxny43sisQDq/reC2JjIDOlR6oQfpdZ1jEtt2gyeH8eHKIWLlUNTMKMeIBYgxVt rj/spfqSjXWKLTDNrKN+3Ba6mZO+gX5zXqpvCJTaDyW/fKW2ZH1BAbNFmQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDdBPxf7vYeWyFPo/TBqXYnMESTOMB8GA1UdIwQY MBaAFE+K6i8CX0lb6s7nzlqIIFGd2hNwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9lYjcwYTMtMTdlMS00ZDg2LThiOWUt NjA4MDk1MmYwZTA0LzEvTjBFX0ZfdTloNWJJVS1qOU1HcGRpY3dSSk00LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9lYjcwYTMtMTdlMS00ZDg2LThiOWUtNjA4MDk1MmYwZTA0 LzEvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwm6sMA0G CSqGSIb3DQEBCwUAA4IBAQBS9Dv0/9/ceOjZb4t4Yv98kWvwOR3TUEjpG2D8uNG7 6G++Pu4la15IAf/tc+WG9/czuyyj6pbL/MKz6N6uiynBa4oIXVKJ6gC3hJ4GNbME eO4fucF3QRBEDYcmrwpjD+sQ5eWP5/N5R1xFGrq1BNpC5+tqLeg5835/mZd+IDUd wA6AIi6kg7TFnUk8O7jfc+OZF0Z6wjyZ+z2w/O1IIl70HgOFZcT+Sbnmq7Gcm40m 35Kr6igj2eWz99lv/dKVNEYPQnDE9xQJVs8YcLDVOb3ZLd6V9Hg0eRJefaqhfhes zldgALcrdJsF9eGoNNZT5489Vh+WnGwIQ6ZV++ROUQOt -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:48 2026 by rpki-client