This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/ENsz-0iVPKp8W2IcDjZ6BMwRa7I.roa File: ENsz-0iVPKp8W2IcDjZ6BMwRa7I.roa (raw, json) Hash identifier: wKwXUWVND8Peb/CdhSLfx3qPjXKmandyITMcJv3M6kk= Subject key identifier: 10:DB:33:FB:48:95:3C:AA:7C:5B:62:1C:0E:36:7A:04:CC:11:6B:B2 Certificate issuer: /CN=f222fbe85ae408d377b217d4eba7b38b24baf5dd Certificate serial: 019B7AC7891C48EE33A3268B7083A0D03FF2 Authority key identifier: F2:22:FB:E8:5A:E4:08:D3:77:B2:17:D4:EB:A7:B3:8B:24:BA:F5:DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iL76FrkCNN3shfU66eziyS69d0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/ENsz-0iVPKp8W2IcDjZ6BMwRa7I.roa Signing time: Thu 01 Jan 2026 18:17:35 +0000 ROA not before: Thu 01 Jan 2026 18:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43150 IP address blocks: 153.94.128.0/23 maxlen: 23 217.199.199.0/24 maxlen: 24 2a00:4d80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.mft rsync://rpki.ripe.net/repository/DEFAULT/8iL76FrkCNN3shfU66eziyS69d0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:89:1c:48:ee:33:a3:26:8b:70:83:a0:d0:3f:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f222fbe85ae408d377b217d4eba7b38b24baf5dd Validity Not Before: Jan 1 18:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=10db33fb48953caa7c5b621c0e367a04cc116bb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:3c:f4:99:4a:c0:81:96:c6:ac:5c:a3:ed:69: 33:22:a8:74:10:3a:f0:8c:94:2b:b5:64:12:44:52: 96:54:0a:29:12:bb:8b:22:9a:41:20:c6:75:fa:7c: ba:ee:5e:43:fc:a2:2b:a6:84:54:0a:74:d1:5e:ae: 0b:ef:8e:f0:cf:6d:bf:9e:6d:78:cc:f3:62:f2:c0: 54:6a:8f:dd:6a:75:20:d8:f7:e4:2e:94:b3:3e:86: 0a:3e:77:74:de:8c:1c:07:a1:56:c9:82:36:6d:c5: c2:23:48:0b:02:e6:e9:ac:f3:7a:47:b7:7a:e5:4d: 6c:83:22:e9:9f:71:4d:9f:8c:d2:17:0b:2f:0f:0a: f9:65:1c:f8:24:15:b4:62:89:60:34:89:f3:b2:83: 47:81:1e:0e:a5:88:f8:db:5d:22:e0:53:46:c5:0f: 70:28:c4:8f:4d:e8:b6:ea:18:a6:62:1e:9a:91:20: 14:ee:b1:2f:95:e4:05:3a:e5:6d:87:7b:56:ac:b3: c8:b4:8b:98:cd:cb:cf:5c:aa:09:4b:4f:58:10:d9: b6:b9:d6:c5:57:82:7d:37:48:b0:87:eb:0b:0f:02: 54:57:68:5c:5a:c8:3f:2d:1f:a9:53:b0:57:00:6c: e2:d8:e8:45:64:74:dd:d5:e8:71:e3:14:5f:2f:87: cf:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:DB:33:FB:48:95:3C:AA:7C:5B:62:1C:0E:36:7A:04:CC:11:6B:B2 X509v3 Authority Key Identifier: keyid:F2:22:FB:E8:5A:E4:08:D3:77:B2:17:D4:EB:A7:B3:8B:24:BA:F5:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iL76FrkCNN3shfU66eziyS69d0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/ENsz-0iVPKp8W2IcDjZ6BMwRa7I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 153.94.128.0/23 217.199.199.0/24 IPv6: 2a00:4d80::/48 Signature Algorithm: sha256WithRSAEncryption 7e:cc:3f:41:87:b7:a0:65:03:62:38:65:1a:50:ab:8c:06:20: 6f:cf:fb:3a:80:0e:e0:50:de:d9:13:ab:76:2d:89:b9:65:e6: 33:72:fd:69:c2:51:21:0d:e9:63:58:34:23:62:57:40:0f:f3: 46:a8:24:dd:f1:d9:8c:d0:37:2a:91:c5:5f:58:c9:fa:5e:c4: 55:a3:b1:69:85:5f:78:e9:7f:af:89:0f:9e:28:1d:c2:81:ed: d6:d4:fe:b5:67:44:ec:ba:89:89:f8:9f:60:56:5b:70:5b:6a: c5:7c:4c:36:75:bf:75:21:03:92:94:64:b4:f8:7f:96:6f:09: a9:60:ae:c3:2e:b8:df:07:26:07:06:a2:4c:d2:82:06:eb:59: 6e:a8:15:fb:06:f3:7e:5f:02:84:d4:d2:f2:f1:67:b8:77:b3: ab:4c:0a:a7:55:f3:30:a2:35:6e:2e:ba:85:3a:67:f1:5b:65: 7f:5e:64:a3:69:d2:58:da:bf:ee:72:86:0c:8c:4a:6f:d3:36: 70:bd:09:3f:41:7b:ef:da:0b:09:99:f0:68:42:d4:c8:f2:bc: 7d:7a:a4:8d:c1:84:32:a8:1d:c3:a6:25:6f:4b:7e:d4:20:2f: 68:e2:dd:d9:04:6e:cc:ab:b0:b4:02:9b:bd:5e:84:31:b5:36: f5:e8:fe:92 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt6x4kcSO4zoyaLcIOg0D/yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyMjJmYmU4NWFlNDA4ZDM3N2IyMTdkNGViYTdiMzhiMjRi YWY1ZGQwHhcNMjYwMTAxMTgxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMGRiMzNmYjQ4OTUzY2FhN2M1YjYyMWMwZTM2N2EwNGNjMTE2YmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Tz0mUrAgZbGrFyj7WkzIqh0EDrw jJQrtWQSRFKWVAopEruLIppBIMZ1+ny67l5D/KIrpoRUCnTRXq4L747wz22/nm14 zPNi8sBUao/danUg2PfkLpSzPoYKPnd03owcB6FWyYI2bcXCI0gLAubprPN6R7d6 5U1sgyLpn3FNn4zSFwsvDwr5ZRz4JBW0YolgNInzsoNHgR4OpYj4210i4FNGxQ9w KMSPTei26himYh6akSAU7rEvleQFOuVth3tWrLPItIuYzcvPXKoJS09YENm2udbF V4J9N0iwh+sLDwJUV2hcWsg/LR+pU7BXAGzi2OhFZHTd1ehx4xRfL4fPqwIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFBDbM/tIlTyqfFtiHA42egTMEWuyMB8GA1UdIwQY MBaAFPIi++ha5AjTd7IX1Ouns4skuvXdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGlMNzZGcmtDTk4zc2hmVTY2ZXppeVM2OWQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8xYWE4NzUtMDNiNS00YzE3LWJiMzkt YjBjMWUzMzA0ZTc0LzEvRU5zei0waVZQS3A4VzJJY0RqWjZCTXdSYTdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi8xYWE4NzUtMDNiNS00YzE3LWJiMzktYjBjMWUzMzA0ZTc0 LzEvOGlMNzZGcmtDTk4zc2hmVTY2ZXppeVM2OWQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQBmV6AAwQA 2cfHMA8EAgACMAkDBwAqAE2AAAAwDQYJKoZIhvcNAQELBQADggEBAH7MP0GHt6Bl A2I4ZRpQq4wGIG/P+zqADuBQ3tkTq3Ytibll5jNy/WnCUSEN6WNYNCNiV0AP80ao JN3x2YzQNyqRxV9YyfpexFWjsWmFX3jpf6+JD54oHcKB7dbU/rVnROy6iYn4n2BW W3BbasV8TDZ1v3UhA5KUZLT4f5ZvCalgrsMuuN8HJgcGokzSggbrWW6oFfsG835f AoTU0vLxZ7h3s6tMCqdV8zCiNW4uuoU6Z/FbZX9eZKNp0ljav+5yhgyMSm/TNnC9 CT9Be+/aCwmZ8GhC1MjyvH16pI3BhDKoHcOmJW9LftQgL2ji3dkEbsyrsLQCm71e hDG1NvXo/pI= -----END CERTIFICATE-----Generated at Tue Feb 10 07:12:50 2026 by rpki-client