This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/e48dFNX7wc3SQhgi8G26wWhECzY.roa File: e48dFNX7wc3SQhgi8G26wWhECzY.roa (raw, json) Hash identifier: XEOD2QcK006EDHPh16ax+CiiGNzK5DlFCvCqDs8JPY8= Subject key identifier: 7B:8F:1D:14:D5:FB:C1:CD:D2:42:18:22:F0:6D:BA:C1:68:44:0B:36 Certificate issuer: /CN=0f21b78ce97b0f5fb3d88bf95cfbb08b2fbea8e5 Certificate serial: 019C037E3C07318A66CD676ECD3056C50C82 Authority key identifier: 0F:21:B7:8C:E9:7B:0F:5F:B3:D8:8B:F9:5C:FB:B0:8B:2F:BE:A8:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DyG3jOl7D1-z2Iv5XPuwiy--qOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/e48dFNX7wc3SQhgi8G26wWhECzY.roa Signing time: Wed 28 Jan 2026 07:25:30 +0000 ROA not before: Wed 28 Jan 2026 07:25:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 378 IP address blocks: 132.68.0.0/15 maxlen: 24 132.68.0.0/16 maxlen: 24 132.69.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft rsync://rpki.ripe.net/repository/DEFAULT/DyG3jOl7D1-z2Iv5XPuwiy--qOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Feb 2026 10:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:03:7e:3c:07:31:8a:66:cd:67:6e:cd:30:56:c5:0c:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f21b78ce97b0f5fb3d88bf95cfbb08b2fbea8e5 Validity Not Before: Jan 28 07:25:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7b8f1d14d5fbc1cdd2421822f06dbac168440b36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f1:ba:52:2c:aa:07:02:dc:7e:1a:82:2b:60: 3e:41:c6:c3:b8:f8:af:b0:1d:ed:7e:43:a0:29:23: aa:b9:77:3d:ea:84:d4:3c:b8:0b:e9:18:91:c4:fd: 85:89:ce:ac:16:10:8e:3a:61:d3:35:d3:a1:60:b6: 2b:ea:0d:ca:ff:14:7b:85:8e:a8:2b:0a:8f:61:47: 8d:00:33:05:2a:49:56:18:3d:7a:d2:11:c5:75:0a: 04:a0:77:82:8d:11:3f:c7:a6:37:e5:9d:8c:f9:8a: f2:8a:aa:a8:55:2f:b3:65:67:2c:6c:a9:91:72:f1: ce:7a:55:18:50:4e:f8:4d:ea:cc:58:f7:21:41:19: 46:08:30:22:9f:08:8b:49:55:e3:50:00:83:c2:81: 33:1f:24:a7:0c:cb:a9:60:b8:06:38:88:0c:1b:ba: 51:0c:77:02:f8:9a:00:90:49:65:6b:c6:95:f0:a4: 69:1b:e1:bc:38:64:2b:67:ce:fe:83:40:de:71:09: 4c:3c:e7:6f:c4:31:c9:fb:4f:b4:d8:60:2c:57:31: 3e:16:c3:4d:fd:b8:25:bd:cf:fe:46:3d:42:bb:2d: 0d:aa:a4:ae:72:0f:40:5a:a5:98:0e:1f:4c:1e:9e: 9e:cd:db:d7:79:6d:44:c9:2a:1a:74:ea:2a:96:a5: db:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:8F:1D:14:D5:FB:C1:CD:D2:42:18:22:F0:6D:BA:C1:68:44:0B:36 X509v3 Authority Key Identifier: keyid:0F:21:B7:8C:E9:7B:0F:5F:B3:D8:8B:F9:5C:FB:B0:8B:2F:BE:A8:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyG3jOl7D1-z2Iv5XPuwiy--qOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/e48dFNX7wc3SQhgi8G26wWhECzY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 132.68.0.0/15 Signature Algorithm: sha256WithRSAEncryption 32:ed:10:da:5f:4d:bf:ce:9b:7f:1b:46:70:cb:0e:ce:7e:dc: eb:55:cb:63:55:1f:a1:c9:22:55:05:5b:e8:3c:bd:ea:9f:c8: 75:b8:87:db:5f:04:45:da:8e:ea:01:e7:61:fd:8e:d8:d7:8c: f5:cb:b5:10:a3:7e:09:7e:7c:ae:c3:f5:1e:fa:7a:2c:0a:ce: 25:31:a0:4c:78:74:fa:7d:b0:ca:a7:c7:26:16:1b:ec:5b:06: 71:07:f2:cc:8f:a1:5b:62:42:80:76:07:c6:38:8e:ea:a1:a4: 16:1d:2b:c7:91:d0:68:09:58:ff:0e:14:2b:cd:71:c7:d6:ac: 4e:ea:46:04:9a:39:16:f5:97:fd:9f:91:33:c8:b4:9c:7d:84: bc:d7:4e:8c:73:e4:b8:22:6c:02:43:9d:63:73:07:4e:8e:e7: fb:7b:aa:87:ac:da:5d:3e:85:2f:89:37:58:07:d8:b9:46:56: bd:e3:19:27:d8:12:3e:ba:bb:89:fe:54:ed:f8:25:36:6a:8a: f9:d6:8a:90:9a:f2:1a:93:4f:81:e2:1c:04:7d:95:f5:62:95: 69:58:c3:00:34:1f:58:cb:7b:0b:6e:36:48:86:70:34:f0:30: 1a:d4:61:fe:55:c3:7e:f8:52:a0:5d:1d:ee:ca:5c:c3:98:f8: 35:82:dc:6b -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZwDfjwHMYpmzWduzTBWxQyCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMjFiNzhjZTk3YjBmNWZiM2Q4OGJmOTVjZmJiMDhiMmZi ZWE4ZTUwHhcNMjYwMTI4MDcyNTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YjhmMWQxNGQ1ZmJjMWNkZDI0MjE4MjJmMDZkYmFjMTY4NDQwYjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfG6UiyqBwLcfhqCK2A+QcbDuPiv sB3tfkOgKSOquXc96oTUPLgL6RiRxP2Fic6sFhCOOmHTNdOhYLYr6g3K/xR7hY6o KwqPYUeNADMFKklWGD160hHFdQoEoHeCjRE/x6Y35Z2M+YryiqqoVS+zZWcsbKmR cvHOelUYUE74TerMWPchQRlGCDAinwiLSVXjUACDwoEzHySnDMupYLgGOIgMG7pR DHcC+JoAkElla8aV8KRpG+G8OGQrZ87+g0DecQlMPOdvxDHJ+0+02GAsVzE+FsNN /bglvc/+Rj1Cuy0NqqSucg9AWqWYDh9MHp6ezdvXeW1EySoadOoqlqXb1QIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFHuPHRTV+8HN0kIYIvBtusFoRAs2MB8GA1UdIwQY MBaAFA8ht4zpew9fs9iL+Vz7sIsvvqjlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHlHM2pPbDdEMS16Mkl2NVhQdXdpeS0tcU9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8wZjc1OTQtZjA0OC00NzNkLWEzOWEt ZGRiOWU0ZGI5OGM2LzEvZTQ4ZEZOWDd3YzNTUWhnaThHMjZ3V2hFQ3pZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC8wZjc1OTQtZjA0OC00NzNkLWEzOWEtZGRiOWU0ZGI5OGM2 LzEvRHlHM2pPbDdEMS16Mkl2NVhQdXdpeS0tcU9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBhEQwDQYJ KoZIhvcNAQELBQADggEBADLtENpfTb/Om38bRnDLDs5+3OtVy2NVH6HJIlUFW+g8 veqfyHW4h9tfBEXajuoB52H9jtjXjPXLtRCjfgl+fK7D9R76eiwKziUxoEx4dPp9 sMqnxyYWG+xbBnEH8syPoVtiQoB2B8Y4juqhpBYdK8eR0GgJWP8OFCvNccfWrE7q RgSaORb1l/2fkTPItJx9hLzXToxz5LgibAJDnWNzB06O5/t7qoes2l0+hS+JN1gH 2LlGVr3jGSfYEj66u4n+VO34JTZqivnWipCa8hqTT4HiHAR9lfVilWlYwwA0H1jL ewtuNkiGcDTwMBrUYf5Vw374UqBdHe7KXMOY+DWC3Gs= -----END CERTIFICATE-----Generated at Sat Feb 7 20:23:18 2026 by rpki-client