This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/etDwmKHRsmxardQ7oN51mJmZIhw.roa File: etDwmKHRsmxardQ7oN51mJmZIhw.roa (raw, json) Hash identifier: opNFqZKtASaNlG7rrJ6biyzhYNQY/KrhB2hbLqtKqI0= Subject key identifier: 7A:D0:F0:98:A1:D1:B2:6C:5A:AD:D4:3B:A0:DE:75:98:99:99:22:1C Certificate issuer: /CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab Certificate serial: 019B7EA6BD8FBFCAD514F6C70BDFC60485CA Authority key identifier: 97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/etDwmKHRsmxardQ7oN51mJmZIhw.roa Signing time: Fri 02 Jan 2026 12:20:15 +0000 ROA not before: Fri 02 Jan 2026 12:20:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210312 IP address blocks: 147.189.216.0/24 maxlen: 24 147.189.217.0/24 maxlen: 24 147.189.218.0/24 maxlen: 24 147.189.219.0/24 maxlen: 24 147.189.220.0/24 maxlen: 24 147.189.221.0/24 maxlen: 24 147.189.222.0/24 maxlen: 24 147.189.223.0/24 maxlen: 24 2a0d:3dc1::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.mft rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:bd:8f:bf:ca:d5:14:f6:c7:0b:df:c6:04:85:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab Validity Not Before: Jan 2 12:20:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7ad0f098a1d1b26c5aadd43ba0de75989999221c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:68:6b:48:e1:4d:34:bd:f4:cb:a7:d1:99:41: 15:3b:ac:8c:de:d2:98:9f:e0:10:1c:e8:18:b1:17: a7:5b:37:1c:4c:ab:87:70:fd:f2:5f:f7:a1:d3:ca: 80:49:cc:c2:b3:54:67:e5:1f:ae:8c:6d:04:6a:64: 31:fb:13:b8:37:f9:b0:66:d6:44:d9:7a:9a:5d:bb: 70:26:43:43:11:3d:2d:a7:dd:e7:b5:80:91:9a:f6: 47:f0:11:b8:2e:6a:1d:ea:ed:1a:b9:63:0c:c0:61: c6:97:92:90:f5:4c:f2:d5:41:00:22:11:3a:d8:5d: 66:e0:45:37:2f:02:d0:15:28:73:fe:a8:8b:73:39: 3d:a0:bb:bd:06:0a:e8:c0:e3:37:c9:b1:f5:3c:e9: c3:1b:db:32:40:67:40:6c:4e:c3:d4:78:76:4d:b4: 83:10:bb:c6:61:92:a3:fc:8c:db:eb:e1:81:47:e5: 3d:ce:e9:d8:3a:f4:d8:23:05:44:e8:d5:2c:9e:f1: a8:c8:29:4a:ba:b4:d4:86:41:a2:33:f2:24:08:48: 3e:e7:96:46:d6:51:4e:7c:23:7f:b7:17:3a:c8:20: 95:e1:3a:7c:7a:dc:76:48:db:5f:9e:0d:0f:2a:c9: a8:a8:45:3d:3f:6d:28:86:f8:9a:12:79:5f:d4:19: b2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:D0:F0:98:A1:D1:B2:6C:5A:AD:D4:3B:A0:DE:75:98:99:99:22:1C X509v3 Authority Key Identifier: keyid:97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/etDwmKHRsmxardQ7oN51mJmZIhw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.189.216.0/21 IPv6: 2a0d:3dc1::/32 Signature Algorithm: sha256WithRSAEncryption 52:ca:e5:80:48:72:ad:c0:20:4e:01:0e:3f:1a:7b:8e:78:ec: 0b:4e:1a:f7:77:47:2c:e7:5a:a1:12:f4:fa:9a:fd:1c:98:4b: 15:bc:5b:ae:f0:ce:58:20:bc:33:0c:98:18:90:59:36:18:9a: b9:d2:90:99:81:7a:43:01:2d:b3:da:3b:92:df:72:50:97:1b: 07:20:f7:a1:24:04:7d:f5:ec:21:f0:b0:08:0a:71:f6:a6:95: 6b:f0:8e:58:ac:9f:49:c8:52:a7:68:70:49:98:dc:67:32:da: 4a:0d:63:63:25:d5:04:ee:0b:f8:4e:05:c9:19:01:18:87:a4: a6:39:db:d9:5d:f4:76:bc:3a:26:2c:a1:0d:17:2d:6a:4e:ed: a2:87:34:fb:2e:2b:ad:e7:1f:51:2a:6c:fd:9c:06:4a:6e:79: 92:e7:ad:0d:e1:dd:96:1d:5c:08:c4:19:d2:7c:a4:70:39:dc: 5a:7c:19:2a:3d:03:b5:92:ec:43:b2:4e:da:0f:ba:c1:79:98: 05:ee:1b:23:8d:0b:35:02:2c:18:17:2e:b3:f7:df:4c:ad:21: c2:91:b3:c3:b9:01:90:a7:d9:e1:4b:cc:fb:7e:ff:35:49:77: 77:85:68:e3:cb:54:18:6b:0e:65:11:5b:6e:06:2b:46:05:4f: 3c:83:47:b9 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+pr2Pv8rVFPbHC9/GBIXKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3ODNhNTQ4N2IzNWMxZDFlMWYxNTdjMTkxMzEyYjNkZjRi YzE3YWIwHhcNMjYwMTAyMTIyMDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YWQwZjA5OGExZDFiMjZjNWFhZGQ0M2JhMGRlNzU5ODk5OTkyMjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32hrSOFNNL30y6fRmUEVO6yM3tKY n+AQHOgYsRenWzccTKuHcP3yX/eh08qASczCs1Rn5R+ujG0EamQx+xO4N/mwZtZE 2XqaXbtwJkNDET0tp93ntYCRmvZH8BG4Lmod6u0auWMMwGHGl5KQ9Uzy1UEAIhE6 2F1m4EU3LwLQFShz/qiLczk9oLu9BgrowOM3ybH1POnDG9syQGdAbE7D1Hh2TbSD ELvGYZKj/Izb6+GBR+U9zunYOvTYIwVE6NUsnvGoyClKurTUhkGiM/IkCEg+55ZG 1lFOfCN/txc6yCCV4Tp8etx2SNtfng0PKsmoqEU9P20ohviaEnlf1BmySQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFHrQ8Jih0bJsWq3UO6DedZiZmSIcMB8GA1UdIwQY MBaAFJeDpUh7NcHR4fFXwZExKz30vBerMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDRPbFNIczF3ZEhoOFZmQmtURXJQZlM4RjZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mMjIxMzEtYTBmZi00ZjI3LThkZmEt NjkxNTJlOWEwOGMzLzEvZXREd21LSFJzbXhhcmRRN29ONTFtSm1aSWh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mMjIxMzEtYTBmZi00ZjI3LThkZmEtNjkxNTJlOWEwOGMz LzEvbDRPbFNIczF3ZEhoOFZmQmtURXJQZlM4RjZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDk73YMA0E AgACMAcDBQAqDT3BMA0GCSqGSIb3DQEBCwUAA4IBAQBSyuWASHKtwCBOAQ4/GnuO eOwLThr3d0cs51qhEvT6mv0cmEsVvFuu8M5YILwzDJgYkFk2GJq50pCZgXpDAS2z 2juS33JQlxsHIPehJAR99ewh8LAICnH2ppVr8I5YrJ9JyFKnaHBJmNxnMtpKDWNj JdUE7gv4TgXJGQEYh6SmOdvZXfR2vDomLKENFy1qTu2ihzT7Liut5x9RKmz9nAZK bnmS560N4d2WHVwIxBnSfKRwOdxafBkqPQO1kuxDsk7aD7rBeZgF7hsjjQs1AiwY Fy6z999MrSHCkbPDuQGQp9nhS8z7fv81SXd3hWjjy1QYaw5lEVtuBitGBU88g0e5 -----END CERTIFICATE-----Generated at Sat Jan 10 22:33:22 2026 by rpki-client