This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/uevpehLgWf1goDveIaAf_RWmFqo.roa File: uevpehLgWf1goDveIaAf_RWmFqo.roa (raw, json) Hash identifier: 6gDUveXYOEUjPreD5zKGNwaO5HHi1e9vD8LKnyRtvSc= Subject key identifier: B9:EB:E9:7A:12:E0:59:FD:60:A0:3B:DE:21:A0:1F:FD:15:A6:16:AA Certificate issuer: /CN=187a704f485e11dedabc56264e5d80c1487e0842 Certificate serial: 019B7B3635CEE92552E371DB8FC5B2CCCFA1 Authority key identifier: 18:7A:70:4F:48:5E:11:DE:DA:BC:56:26:4E:5D:80:C1:48:7E:08:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GHpwT0heEd7avFYmTl2AwUh-CEI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/uevpehLgWf1goDveIaAf_RWmFqo.roa Signing time: Thu 01 Jan 2026 20:18:28 +0000 ROA not before: Thu 01 Jan 2026 20:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5398 IP address blocks: 77.220.64.0/19 maxlen: 19 193.221.216.0/23 maxlen: 23 2a0f:e880::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.mft rsync://rpki.ripe.net/repository/DEFAULT/GHpwT0heEd7avFYmTl2AwUh-CEI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:35:ce:e9:25:52:e3:71:db:8f:c5:b2:cc:cf:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=187a704f485e11dedabc56264e5d80c1487e0842 Validity Not Before: Jan 1 20:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b9ebe97a12e059fd60a03bde21a01ffd15a616aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1d:a8:1c:89:ee:cd:19:30:8b:bf:b1:f0:5a: 70:44:23:dc:1b:5f:82:a3:e2:fb:7f:81:b4:d5:11: dc:d8:46:e1:7f:15:4b:d9:a5:f4:42:90:95:9c:f1: da:7d:01:5b:58:1d:16:59:5a:cb:ab:11:7f:7a:25: 81:ee:32:a3:39:8a:f1:ad:1b:83:69:55:be:d7:ac: 2c:29:e8:ef:b3:26:bc:30:4f:86:ed:d7:de:56:1d: 2f:92:73:9b:83:9e:4c:e2:43:38:43:9f:f4:ac:f2: 52:53:51:2d:a9:5c:65:15:ef:06:2d:e8:86:ae:5e: 08:b8:ce:61:12:1d:71:e6:f0:8e:ef:90:cd:44:c2: d8:f5:d5:25:d0:25:2b:76:a1:e9:75:35:55:70:65: d5:65:71:a2:0a:47:70:43:41:10:80:be:20:48:1d: 5a:12:ed:c7:8e:a1:a3:e1:88:b4:15:39:df:57:e7: 35:2a:43:d9:eb:c4:35:7c:9d:74:1f:86:00:60:9e: 57:29:cd:3a:8b:e3:51:ea:0b:a7:98:45:f7:a6:de: 40:56:80:ce:75:c5:46:33:e2:45:be:9a:1d:33:52: 1a:a3:2e:94:de:98:0c:ec:95:7f:fc:df:49:ae:31: 06:51:d6:91:f1:1e:75:f9:b6:78:80:95:75:50:6f: 0f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:EB:E9:7A:12:E0:59:FD:60:A0:3B:DE:21:A0:1F:FD:15:A6:16:AA X509v3 Authority Key Identifier: keyid:18:7A:70:4F:48:5E:11:DE:DA:BC:56:26:4E:5D:80:C1:48:7E:08:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GHpwT0heEd7avFYmTl2AwUh-CEI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/uevpehLgWf1goDveIaAf_RWmFqo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/698bec-a0f0-42f7-99fa-28516bb7505c/1/GHpwT0heEd7avFYmTl2AwUh-CEI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.220.64.0/19 193.221.216.0/23 IPv6: 2a0f:e880::/29 Signature Algorithm: sha256WithRSAEncryption 6b:09:46:97:89:21:91:c0:d2:17:7d:55:3f:7f:b0:50:e2:6e: df:39:5d:5b:1e:56:b2:44:19:67:1d:a9:cb:f8:4a:0f:70:96: e9:21:68:2b:12:28:27:75:5f:e7:58:9a:f9:80:91:9c:fc:b6: 5f:c3:a9:95:54:11:4a:5d:37:d0:2d:be:63:a4:0e:15:12:b1: c9:f7:29:65:24:10:e5:e6:28:af:73:f7:ca:18:77:6f:d8:78: d0:b0:fe:c3:d8:cd:a0:54:e7:7f:34:c2:cb:b9:b4:3d:31:df: 13:58:81:d0:d1:d7:38:e3:0a:f6:39:42:03:5b:2e:52:97:58: 03:1b:3b:eb:0f:5b:d1:a8:2d:be:c7:66:da:f9:eb:16:d0:88: f5:13:d1:bd:03:c2:d5:09:c0:4f:10:37:d4:65:53:d9:96:37: 40:71:25:5e:8d:cf:c8:33:28:ae:6c:d0:77:d7:69:47:e2:cb: de:e6:8a:64:16:58:15:c1:66:a7:eb:fb:14:52:66:f0:f7:92: d7:80:79:04:22:26:ea:aa:1d:cf:21:cf:d3:ed:de:23:90:0d: fc:de:f4:25:d6:7b:a8:81:4f:27:3a:00:e7:e4:6c:86:59:85: 8f:45:0f:17:f7:58:89:32:24:9e:d4:5f:35:da:31:00:ee:d8: 7e:7a:09:01 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt7NjXO6SVS43Hbj8WyzM+hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4N2E3MDRmNDg1ZTExZGVkYWJjNTYyNjRlNWQ4MGMxNDg3 ZTA4NDIwHhcNMjYwMTAxMjAxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOWViZTk3YTEyZTA1OWZkNjBhMDNiZGUyMWEwMWZmZDE1YTYxNmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuB2oHInuzRkwi7+x8FpwRCPcG1+C o+L7f4G01RHc2EbhfxVL2aX0QpCVnPHafQFbWB0WWVrLqxF/eiWB7jKjOYrxrRuD aVW+16wsKejvsya8ME+G7dfeVh0vknObg55M4kM4Q5/0rPJSU1EtqVxlFe8GLeiG rl4IuM5hEh1x5vCO75DNRMLY9dUl0CUrdqHpdTVVcGXVZXGiCkdwQ0EQgL4gSB1a Eu3HjqGj4Yi0FTnfV+c1KkPZ68Q1fJ10H4YAYJ5XKc06i+NR6gunmEX3pt5AVoDO dcVGM+JFvpodM1Iaoy6U3pgM7JV//N9JrjEGUdaR8R51+bZ4gJV1UG8PgwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFLnr6XoS4Fn9YKA73iGgH/0VphaqMB8GA1UdIwQY MBaAFBh6cE9IXhHe2rxWJk5dgMFIfghCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0hwd1QwaGVFZDdhdkZZbVRsMkF3VWgtQ0VJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC82OThiZWMtYTBmMC00MmY3LTk5ZmEt Mjg1MTZiYjc1MDVjLzEvdWV2cGVoTGdXZjFnb0R2ZUlhQWZfUldtRnFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC82OThiZWMtYTBmMC00MmY3LTk5ZmEtMjg1MTZiYjc1MDVj LzEvR0hwd1QwaGVFZDdhdkZZbVRsMkF3VWgtQ0VJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQFTdxAAwQB wd3YMA0EAgACMAcDBQMqD+iAMA0GCSqGSIb3DQEBCwUAA4IBAQBrCUaXiSGRwNIX fVU/f7BQ4m7fOV1bHlayRBlnHanL+EoPcJbpIWgrEigndV/nWJr5gJGc/LZfw6mV VBFKXTfQLb5jpA4VErHJ9yllJBDl5iivc/fKGHdv2HjQsP7D2M2gVOd/NMLLubQ9 Md8TWIHQ0dc44wr2OUIDWy5Sl1gDGzvrD1vRqC2+x2ba+esW0Ij1E9G9A8LVCcBP EDfUZVPZljdAcSVejc/IMyiubNB312lH4sve5opkFlgVwWan6/sUUmbw95LXgHkE Iibqqh3PIc/T7d4jkA383vQl1nuogU8nOgDn5GyGWYWPRQ8X91iJMiSe1F812jEA 7th+egkB -----END CERTIFICATE-----Generated at Mon Feb 9 21:25:20 2026 by rpki-client