This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/fEr16b1lvokT-7p2GF-BJ0nwjqw.roa File: fEr16b1lvokT-7p2GF-BJ0nwjqw.roa (raw, json) Hash identifier: 4kMeEbpMFnB2cA2N94f/QrIzzEsMpOa1QK/37ueLqzY= Subject key identifier: 7C:4A:F5:E9:BD:65:BE:89:13:FB:BA:76:18:5F:81:27:49:F0:8E:AC Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370 Certificate serial: 019B7F15CBE5E8392C3DCDF7427D65DD0D32 Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/fEr16b1lvokT-7p2GF-BJ0nwjqw.roa Signing time: Fri 02 Jan 2026 14:21:33 +0000 ROA not before: Fri 02 Jan 2026 14:21:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52053 IP address blocks: 185.255.112.0/24 maxlen: 24 193.38.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:cb:e5:e8:39:2c:3d:cd:f7:42:7d:65:dd:0d:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370 Validity Not Before: Jan 2 14:21:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7c4af5e9bd65be8913fbba76185f812749f08eac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:97:e3:5f:ce:2e:25:2d:37:d7:03:6c:c0:a8: 9a:96:9c:77:16:8b:d0:5e:9a:c2:e2:e6:40:72:79: f0:54:b3:cd:07:c4:57:6b:19:a3:ab:31:11:34:7c: 07:41:b7:ac:ac:2f:e2:ee:93:b4:8c:39:6a:2e:84: e9:01:32:16:3a:a1:80:a4:08:5c:dd:5d:cf:ce:6a: b8:4b:c2:59:50:56:3b:03:4f:35:4c:1e:47:46:64: 1a:3c:f3:ca:06:c8:b5:22:de:5c:e6:8f:63:e1:f7: c4:c8:72:5c:b1:97:3f:5b:bb:cf:dd:0c:c2:1a:93: f9:f3:e2:4b:6d:a8:cb:e7:17:74:5a:85:e7:3f:09: 2d:b0:7d:40:98:ce:3d:14:f1:c6:a5:17:06:65:f7: 8f:76:28:72:79:f4:25:fe:f6:fb:d0:a0:15:d9:d4: b8:2b:03:fe:e6:1e:30:a7:c8:3d:be:87:2b:36:1c: e7:3b:b8:89:81:14:da:75:8d:ab:ad:69:f5:6a:2a: a6:74:2e:b5:c0:87:0f:16:90:16:f6:11:04:a1:43: af:fc:20:55:ea:b1:b7:58:23:37:65:69:86:15:4b: 08:84:26:65:7a:1d:20:66:17:7f:8a:a0:60:91:b4: 87:43:a4:9a:37:ef:41:01:09:0d:87:7b:09:ea:e3: 4a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:4A:F5:E9:BD:65:BE:89:13:FB:BA:76:18:5F:81:27:49:F0:8E:AC X509v3 Authority Key Identifier: keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/fEr16b1lvokT-7p2GF-BJ0nwjqw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.255.112.0/24 193.38.250.0/24 Signature Algorithm: sha256WithRSAEncryption 22:2b:16:26:dc:1f:93:1e:b1:15:6f:67:90:ea:91:74:6f:08: 61:7e:3d:1d:95:d6:d4:d3:d8:ea:e4:e6:b3:3d:12:08:2c:a1: a4:fa:8a:14:34:ae:ab:98:de:33:6b:54:3b:b8:b3:bb:e1:1d: 92:1c:ee:50:82:0c:40:79:ff:b5:4f:bf:4d:7b:27:61:19:d8: 29:eb:ae:91:57:7d:4d:8a:c7:39:c6:6a:4d:c7:ec:4c:49:73: 33:b5:d8:7e:6f:4a:e1:dd:ae:01:1f:e4:e3:e4:c7:19:a6:ca: 1d:a5:2c:e9:d8:a6:de:8a:d2:94:7d:7d:7c:dc:80:6a:ab:0e: e3:1f:97:bc:1f:04:62:21:83:02:b3:a7:30:5e:8d:6e:85:4a: 98:aa:fc:78:3c:28:2d:e5:bd:bd:c7:7b:12:f7:c1:55:07:62: d9:53:f1:b9:bf:69:57:01:23:de:a0:e9:56:e8:3e:27:1d:6b: 30:78:5b:c9:b1:3b:7b:0d:62:44:c1:32:f7:db:e3:08:bb:94: e0:96:3a:ba:08:2c:e5:5f:ff:d3:c0:31:18:c0:9a:c2:cd:fd: df:6d:7e:b3:15:41:9a:63:c1:9f:e7:b0:25:a2:86:be:3e:4e: 4d:98:4d:bc:09:cb:20:e6:68:e4:50:29:7c:8f:71:33:f6:30: a6:fa:e3:35 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/Fcvl6DksPc33Qn1l3Q0yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmOGFlYTJmMDI1ZjQ5NWJlYWNlZTdjZTVhODgyMDUxOWRk YTEzNzAwHhcNMjYwMTAyMTQyMTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YzRhZjVlOWJkNjViZTg5MTNmYmJhNzYxODVmODEyNzQ5ZjA4ZWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5fjX84uJS031wNswKialpx3FovQ XprC4uZAcnnwVLPNB8RXaxmjqzERNHwHQbesrC/i7pO0jDlqLoTpATIWOqGApAhc 3V3Pzmq4S8JZUFY7A081TB5HRmQaPPPKBsi1It5c5o9j4ffEyHJcsZc/W7vP3QzC GpP58+JLbajL5xd0WoXnPwktsH1AmM49FPHGpRcGZfePdihyefQl/vb70KAV2dS4 KwP+5h4wp8g9vocrNhznO7iJgRTadY2rrWn1aiqmdC61wIcPFpAW9hEEoUOv/CBV 6rG3WCM3ZWmGFUsIhCZleh0gZhd/iqBgkbSHQ6SaN+9BAQkNh3sJ6uNKSQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHxK9em9Zb6JE/u6dhhfgSdJ8I6sMB8GA1UdIwQY MBaAFE+K6i8CX0lb6s7nzlqIIFGd2hNwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9lYjcwYTMtMTdlMS00ZDg2LThiOWUt NjA4MDk1MmYwZTA0LzEvZkVyMTZiMWx2b2tULTdwMkdGLUJKMG53anF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9lYjcwYTMtMTdlMS00ZDg2LThiOWUtNjA4MDk1MmYwZTA0 LzEvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuf9wAwQA wSb6MA0GCSqGSIb3DQEBCwUAA4IBAQAiKxYm3B+THrEVb2eQ6pF0bwhhfj0dldbU 09jq5OazPRIILKGk+ooUNK6rmN4za1Q7uLO74R2SHO5QggxAef+1T79NeydhGdgp 666RV31Nisc5xmpNx+xMSXMztdh+b0rh3a4BH+Tj5McZpsodpSzp2KbeitKUfX18 3IBqqw7jH5e8HwRiIYMCs6cwXo1uhUqYqvx4PCgt5b29x3sS98FVB2LZU/G5v2lX ASPeoOlW6D4nHWsweFvJsTt7DWJEwTL32+MIu5Tgljq6CCzlX//TwDEYwJrCzf3f bX6zFUGaY8Gf57Alooa+Pk5NmE28Ccsg5mjkUCl8j3Ez9jCm+uM1 -----END CERTIFICATE-----Generated at Tue Jan 20 01:21:55 2026 by rpki-client