This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/rlgDOpAXjc8Na_ifPOhQG4zbxtM.roa File: rlgDOpAXjc8Na_ifPOhQG4zbxtM.roa (raw, json) Hash identifier: reSEL9M69wAKbL5gRtqeNyqy/DyxKPTT8rPI7JNy6Ec= Subject key identifier: AE:58:03:3A:90:17:8D:CF:0D:6B:F8:9F:3C:E8:50:1B:8C:DB:C6:D3 Certificate issuer: /CN=ef2c5c4b61d78af998cce9b7c357bcfcf4181a4c Certificate serial: 019B79ED54E9278FAF4DAF0A48B922344FD7 Authority key identifier: EF:2C:5C:4B:61:D7:8A:F9:98:CC:E9:B7:C3:57:BC:FC:F4:18:1A:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/rlgDOpAXjc8Na_ifPOhQG4zbxtM.roa Signing time: Thu 01 Jan 2026 14:19:15 +0000 ROA not before: Thu 01 Jan 2026 14:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197954 IP address blocks: 31.44.112.0/20 maxlen: 20 37.10.80.0/20 maxlen: 20 185.49.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.mft rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:54:e9:27:8f:af:4d:af:0a:48:b9:22:34:4f:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef2c5c4b61d78af998cce9b7c357bcfcf4181a4c Validity Not Before: Jan 1 14:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae58033a90178dcf0d6bf89f3ce8501b8cdbc6d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:12:33:cf:5f:af:00:03:8f:fd:03:52:2c:ba: bf:70:2a:96:b9:dc:70:73:7d:8a:78:e6:b1:45:57: 16:36:27:1f:f3:05:69:db:fa:35:76:84:dd:09:70: b8:77:c7:12:a3:ac:2c:d4:1d:13:ba:97:d5:0c:aa: 61:36:ec:8a:ce:55:65:0d:a4:d1:8d:53:d0:72:33: 5a:d2:d7:a7:9a:e9:82:eb:fd:36:d9:5c:a7:eb:84: 24:9e:0e:08:4d:37:10:da:33:8c:a4:dc:31:de:cf: 3f:82:4d:8e:40:b0:ca:a5:f2:91:87:58:b5:ed:ca: 9f:38:45:3f:8c:e7:bb:a1:40:6f:fe:d5:64:b5:f1: 83:52:e8:fe:a1:22:92:1a:a1:d6:2b:68:af:c6:59: ba:87:7c:8b:a2:a2:87:21:e0:12:40:46:7e:7f:40: 05:a1:ea:25:2c:c9:f1:a7:21:01:16:4b:6c:1c:be: 6f:10:29:e0:28:45:64:82:d1:6f:37:18:8a:e3:88: 1a:34:84:65:4a:26:69:7b:cc:96:0f:6a:b7:e3:7b: c5:d4:73:3b:cb:79:f1:15:05:e2:28:f1:0f:f6:91: f4:4a:91:e8:a2:98:bb:63:de:ba:19:29:49:b2:a9: 59:b9:89:2b:06:6e:f2:bd:00:64:0e:9c:81:d9:a9: f0:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:58:03:3A:90:17:8D:CF:0D:6B:F8:9F:3C:E8:50:1B:8C:DB:C6:D3 X509v3 Authority Key Identifier: keyid:EF:2C:5C:4B:61:D7:8A:F9:98:CC:E9:B7:C3:57:BC:FC:F4:18:1A:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yxcS2HXivmYzOm3w1e8_PQYGkw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/rlgDOpAXjc8Na_ifPOhQG4zbxtM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/67df1c-c9e1-4c5b-b640-8ccc1952eb4f/1/7yxcS2HXivmYzOm3w1e8_PQYGkw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.44.112.0/20 37.10.80.0/20 185.49.212.0/22 Signature Algorithm: sha256WithRSAEncryption 6c:38:d8:04:6b:01:47:a5:60:49:bd:e4:03:89:6f:20:33:0c: ea:60:07:df:6a:da:71:90:c1:c3:85:51:ca:27:5f:3e:42:17: b9:4e:ee:ea:0c:fe:41:9f:d2:df:32:19:53:cb:ec:8d:d2:c2: d4:de:83:da:fd:f0:fd:a0:69:04:9a:43:24:5a:4f:fe:73:90: c1:d3:de:f6:ca:13:32:d4:bd:8b:46:3a:e1:65:4d:4b:89:c5: 63:d3:8d:f2:76:b0:04:dd:81:4a:47:a3:c5:10:ad:d0:a9:75: 69:77:f8:a3:e1:c9:fb:b8:67:4a:49:c7:04:76:c0:75:86:a1: a3:d0:21:ec:34:7b:04:b3:d2:6e:0d:5a:ad:48:00:50:26:65: 11:e6:b4:76:dd:e1:69:44:35:96:85:6f:4a:1a:3c:4f:ee:7e: d8:ca:fe:ac:8e:32:7a:76:80:f5:74:99:5d:7e:a8:77:d4:39: ed:ff:98:71:a1:95:8b:10:bc:f8:4c:95:73:fb:a6:12:a3:92: 92:02:94:8e:8b:77:cd:61:2b:3b:ca:ae:7f:d0:98:6e:92:9c: a9:15:0b:1e:71:b3:3b:8c:d2:de:fc:85:bd:9a:b8:aa:2a:b4: ae:8e:4c:56:3e:35:5b:bd:db:36:93:28:94:a1:3d:40:2c:8b: f0:a3:c2:ca -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt57VTpJ4+vTa8KSLkiNE/XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMmM1YzRiNjFkNzhhZjk5OGNjZTliN2MzNTdiY2ZjZjQx ODFhNGMwHhcNMjYwMTAxMTQxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTU4MDMzYTkwMTc4ZGNmMGQ2YmY4OWYzY2U4NTAxYjhjZGJjNmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxIzz1+vAAOP/QNSLLq/cCqWudxw c32KeOaxRVcWNicf8wVp2/o1doTdCXC4d8cSo6ws1B0TupfVDKphNuyKzlVlDaTR jVPQcjNa0tenmumC6/022Vyn64Qkng4ITTcQ2jOMpNwx3s8/gk2OQLDKpfKRh1i1 7cqfOEU/jOe7oUBv/tVktfGDUuj+oSKSGqHWK2ivxlm6h3yLoqKHIeASQEZ+f0AF oeolLMnxpyEBFktsHL5vECngKEVkgtFvNxiK44gaNIRlSiZpe8yWD2q343vF1HM7 y3nxFQXiKPEP9pH0SpHoopi7Y966GSlJsqlZuYkrBm7yvQBkDpyB2anwlwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFK5YAzqQF43PDWv4nzzoUBuM28bTMB8GA1UdIwQY MBaAFO8sXEth14r5mMzpt8NXvPz0GBpMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3l4Y1MySFhpdm1Zek9tM3cxZThfUFFZR2t3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS82N2RmMWMtYzllMS00YzViLWI2NDAt OGNjYzE5NTJlYjRmLzEvcmxnRE9wQVhqYzhOYV9pZlBPaFFHNHpieHRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS82N2RmMWMtYzllMS00YzViLWI2NDAtOGNjYzE5NTJlYjRm LzEvN3l4Y1MySFhpdm1Zek9tM3cxZThfUFFZR2t3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEHyxwAwQE JQpQAwQCuTHUMA0GCSqGSIb3DQEBCwUAA4IBAQBsONgEawFHpWBJveQDiW8gMwzq YAffatpxkMHDhVHKJ18+Qhe5Tu7qDP5Bn9LfMhlTy+yN0sLU3oPa/fD9oGkEmkMk Wk/+c5DB0972yhMy1L2LRjrhZU1LicVj043ydrAE3YFKR6PFEK3QqXVpd/ij4cn7 uGdKSccEdsB1hqGj0CHsNHsEs9JuDVqtSABQJmUR5rR23eFpRDWWhW9KGjxP7n7Y yv6sjjJ6doD1dJldfqh31Dnt/5hxoZWLELz4TJVz+6YSo5KSApSOi3fNYSs7yq5/ 0JhukpypFQsecbM7jNLe/IW9mriqKrSujkxWPjVbvds2kyiUoT1ALIvwo8LK -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:35 2026 by rpki-client