This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/GeEgMmMrLfioA0ieuulpk9RO4JA.roa File: GeEgMmMrLfioA0ieuulpk9RO4JA.roa (raw, json) Hash identifier: UvVQVkN2Ro2OIHEluoGzaQHQ26p2g5jQH6pMhMZDjXQ= Subject key identifier: 19:E1:20:32:63:2B:2D:F8:A8:03:48:9E:BA:E9:69:93:D4:4E:E0:90 Certificate issuer: /CN=a2ddaeb164e398214a171a0410e6b0232d642f50 Certificate serial: 019B7E38D2AAAF7BFF89B41223F485E79560 Authority key identifier: A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/GeEgMmMrLfioA0ieuulpk9RO4JA.roa Signing time: Fri 02 Jan 2026 10:20:11 +0000 ROA not before: Fri 02 Jan 2026 10:20:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47915 IP address blocks: 85.204.118.0/24 maxlen: 24 86.104.211.0/24 maxlen: 24 89.39.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.mft rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Feb 2026 09:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:d2:aa:af:7b:ff:89:b4:12:23:f4:85:e7:95:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2ddaeb164e398214a171a0410e6b0232d642f50 Validity Not Before: Jan 2 10:20:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=19e12032632b2df8a803489ebae96993d44ee090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:13:02:d8:a2:16:6a:00:7a:34:15:cb:f8:6e: 64:ca:67:50:41:be:ab:5f:50:79:9f:25:7c:03:1c: 2c:3f:a0:22:b8:3d:e3:61:f5:3a:c5:e0:58:eb:b8: 13:9b:a1:ac:70:cc:d1:0a:8d:c0:12:a5:40:fe:cb: a6:98:43:1f:b7:65:d4:30:42:c6:7e:c4:f1:9e:a1: a9:89:bc:0a:c1:1b:3a:53:23:c4:c7:d4:b7:5d:4c: 2a:d0:7e:5b:c6:b1:3f:e9:23:8a:38:81:72:12:e5: e4:ff:b9:38:71:cb:27:36:55:28:47:fb:9d:15:58: 90:9f:98:1f:35:33:75:64:02:e5:83:72:49:59:2a: 27:e9:c9:a5:91:37:32:d5:6c:1f:1f:25:25:02:ac: 53:23:2f:b4:d4:d8:12:8d:96:b3:c6:d8:e2:2c:93: 5c:eb:ca:db:10:a2:61:82:3d:ef:ef:6b:8a:af:db: 45:da:3c:94:de:a2:28:94:03:38:f7:be:21:d9:9c: 85:ae:71:1a:07:65:b9:e7:1a:ed:f0:48:32:ec:e0: a0:9c:e6:93:3d:5f:1f:0f:2e:17:7f:84:f0:3f:91: 34:f8:90:2e:2a:ee:4b:71:1c:e1:4e:c4:53:f4:5f: 27:09:8a:77:10:a4:9f:51:03:f3:f2:41:95:ff:d7: 22:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:E1:20:32:63:2B:2D:F8:A8:03:48:9E:BA:E9:69:93:D4:4E:E0:90 X509v3 Authority Key Identifier: keyid:A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/GeEgMmMrLfioA0ieuulpk9RO4JA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.204.118.0/24 86.104.211.0/24 89.39.89.0/24 Signature Algorithm: sha256WithRSAEncryption 99:f7:9a:12:18:e0:ea:da:22:d2:f4:e9:13:c0:7e:4c:bc:08: 0f:96:65:0a:42:fd:ea:f3:66:cb:c6:48:ad:6f:30:13:99:ad: 29:61:92:14:09:ec:13:af:b1:17:fc:b8:14:1c:a9:d6:28:c1: 3b:28:0f:dd:d9:a5:1a:9b:be:46:e8:53:49:32:21:06:a1:eb: e6:9c:2d:08:20:59:f0:3d:74:26:e7:9a:6b:b4:ca:4f:29:21: 4f:a7:1a:26:7b:05:b6:93:e0:9b:fc:01:bc:10:d2:8d:16:21: 42:0f:31:92:d0:1f:ff:3e:ea:67:c4:72:df:1a:9e:cb:7b:1e: d1:51:01:b5:ad:96:47:18:ac:1c:19:31:e9:52:7a:36:f0:44: 98:fc:57:15:0e:79:a3:7c:a4:f5:3b:e4:64:04:32:d8:c6:5b: fd:1e:6e:bf:64:75:b9:bb:ab:8e:67:c9:ec:dd:9c:57:54:76: 13:42:26:f5:6c:8f:95:34:d8:91:5c:a7:a9:a6:a8:83:a8:15: f1:5d:db:01:37:8d:a0:d8:5a:bb:b6:cb:a8:8e:d0:89:a2:29: af:d4:ff:e0:51:36:7c:53:70:55:99:f0:fd:81:8d:b3:41:84: ba:9d:f2:b5:bb:cc:b4:18:21:0a:13:a5:28:8a:4a:7c:31:a8: d9:6b:08:76 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+ONKqr3v/ibQSI/SF55VgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyZGRhZWIxNjRlMzk4MjE0YTE3MWEwNDEwZTZiMDIzMmQ2 NDJmNTAwHhcNMjYwMTAyMTAyMDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxOWUxMjAzMjYzMmIyZGY4YTgwMzQ4OWViYWU5Njk5M2Q0NGVlMDkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphMC2KIWagB6NBXL+G5kymdQQb6r X1B5nyV8AxwsP6AiuD3jYfU6xeBY67gTm6GscMzRCo3AEqVA/summEMft2XUMELG fsTxnqGpibwKwRs6UyPEx9S3XUwq0H5bxrE/6SOKOIFyEuXk/7k4ccsnNlUoR/ud FViQn5gfNTN1ZALlg3JJWSon6cmlkTcy1WwfHyUlAqxTIy+01NgSjZazxtjiLJNc 68rbEKJhgj3v72uKr9tF2jyU3qIolAM4974h2ZyFrnEaB2W55xrt8Egy7OCgnOaT PV8fDy4Xf4TwP5E0+JAuKu5LcRzhTsRT9F8nCYp3EKSfUQPz8kGV/9ciFQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFBnhIDJjKy34qANInrrpaZPUTuCQMB8GA1UdIwQY MBaAFKLdrrFk45ghShcaBBDmsCMtZC9QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3QydXNXVGptQ0ZLRnhvRUVPYXdJeTFrTDFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS80YWZkYTctODI5Yy00ODgwLWEwYzkt MTEyZTExM2JiN2I3LzEvR2VFZ01tTXJMZmlvQTBpZXV1bHBrOVJPNEpBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS80YWZkYTctODI5Yy00ODgwLWEwYzktMTEyZTExM2JiN2I3 LzEvb3QydXNXVGptQ0ZLRnhvRUVPYXdJeTFrTDFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAVcx2AwQA VmjTAwQAWSdZMA0GCSqGSIb3DQEBCwUAA4IBAQCZ95oSGODq2iLS9OkTwH5MvAgP lmUKQv3q82bLxkitbzATma0pYZIUCewTr7EX/LgUHKnWKME7KA/d2aUam75G6FNJ MiEGoevmnC0IIFnwPXQm55prtMpPKSFPpxomewW2k+Cb/AG8ENKNFiFCDzGS0B// PupnxHLfGp7Lex7RUQG1rZZHGKwcGTHpUno28ESY/FcVDnmjfKT1O+RkBDLYxlv9 Hm6/ZHW5u6uOZ8ns3ZxXVHYTQib1bI+VNNiRXKeppqiDqBXxXdsBN42g2Fq7tsuo jtCJoimv1P/gUTZ8U3BVmfD9gY2zQYS6nfK1u8y0GCEKE6Uoikp8MajZawh2 -----END CERTIFICATE-----Generated at Sat Feb 7 19:19:04 2026 by rpki-client