This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/e5LvhMnHL2M5G3BrE94Wfd_Hw30.roa File: e5LvhMnHL2M5G3BrE94Wfd_Hw30.roa (raw, json) Hash identifier: fkj3hwgOelPzkmjhksY0UuW0XF+MqihAQUzut5E2VZk= Subject key identifier: 7B:92:EF:84:C9:C7:2F:63:39:1B:70:6B:13:DE:16:7D:DF:C7:C3:7D Certificate issuer: /CN=dd64166a91179308f253a9175616ccc6828c4463 Certificate serial: 019C2D8C8AB608586D5FD0E870DFB4634E30 Authority key identifier: DD:64:16:6A:91:17:93:08:F2:53:A9:17:56:16:CC:C6:82:8C:44:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/e5LvhMnHL2M5G3BrE94Wfd_Hw30.roa Signing time: Thu 05 Feb 2026 11:25:11 +0000 ROA not before: Thu 05 Feb 2026 11:25:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29385 IP address blocks: 213.206.41.0/24 maxlen: 24 213.206.46.0/24 maxlen: 24 213.206.49.0/24 maxlen: 24 213.206.56.0/24 maxlen: 24 213.206.57.0/24 maxlen: 24 213.206.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.mft rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:2d:8c:8a:b6:08:58:6d:5f:d0:e8:70:df:b4:63:4e:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd64166a91179308f253a9175616ccc6828c4463 Validity Not Before: Feb 5 11:25:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7b92ef84c9c72f63391b706b13de167ddfc7c37d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:7c:60:98:3e:78:87:af:eb:d9:bf:cc:85:5b: af:69:24:67:75:22:07:6d:0e:89:2a:b8:99:17:83: 87:f9:e2:70:71:86:1d:51:6b:43:65:14:16:6a:ef: 85:b8:53:a4:66:52:b5:83:4f:b1:99:53:5b:7f:f6: 85:89:a1:eb:fe:4d:38:7c:ae:74:81:14:46:aa:91: 75:7b:34:fd:85:b7:34:1f:15:4b:94:d3:d0:66:d6: ef:74:01:44:87:7e:f6:35:fc:42:37:3e:c0:b2:e2: 25:81:43:4a:81:92:39:46:63:21:5f:c4:81:68:3e: d7:4c:19:15:0d:46:73:5b:04:00:84:55:b1:67:cc: f8:4c:26:6b:2a:ea:0e:2d:e7:9a:af:ab:88:f0:90: 59:ac:11:26:a7:35:bc:3f:ce:65:7a:fb:00:f8:4a: 24:b9:c1:b2:b3:5b:a6:9c:65:e2:a0:8d:55:01:70: bb:9b:13:92:c6:17:8a:2c:b8:d1:ca:fd:16:d0:2e: 9c:b9:c3:06:67:6c:af:c2:51:8a:6d:52:79:56:e6: 8c:e7:0f:6a:a3:19:90:58:92:7f:e4:be:c6:53:0e: 60:37:68:7d:0f:56:02:a7:f6:d2:73:99:ed:3b:5e: 14:bc:c6:8d:76:8b:8a:65:2e:21:57:3e:77:94:b7: 54:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:92:EF:84:C9:C7:2F:63:39:1B:70:6B:13:DE:16:7D:DF:C7:C3:7D X509v3 Authority Key Identifier: keyid:DD:64:16:6A:91:17:93:08:F2:53:A9:17:56:16:CC:C6:82:8C:44:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3WQWapEXkwjyU6kXVhbMxoKMRGM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/e5LvhMnHL2M5G3BrE94Wfd_Hw30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/0a489b-9d9e-4f6a-87c7-74de258a76f8/1/3WQWapEXkwjyU6kXVhbMxoKMRGM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.206.41.0/24 213.206.46.0/24 213.206.49.0/24 213.206.56.0/23 213.206.59.0/24 Signature Algorithm: sha256WithRSAEncryption bd:56:29:c4:31:f0:d4:29:f6:4c:73:39:dd:fe:85:1b:56:a9: 0b:cb:c7:d7:46:0c:d5:4a:4a:79:d9:c4:46:a5:a6:24:09:52: db:0f:9d:96:a8:86:5a:da:a7:36:d5:ac:55:c4:b1:a2:7b:12: 7f:80:88:14:a1:47:5d:fb:19:8a:aa:23:82:fa:7c:82:97:6a: c7:2b:d5:50:bc:57:49:94:3a:c5:e3:bf:12:f5:9e:8d:cf:26: 4c:38:d0:48:91:5f:40:ca:bc:96:51:a9:e7:b1:6e:69:48:98: fe:6e:e7:38:91:f3:9c:2c:97:5b:95:51:51:24:3c:7f:56:ee: 98:ed:b3:14:d3:61:75:14:de:f3:bc:74:68:74:de:ef:ec:d4: e5:6a:ae:df:23:40:11:2d:3b:c7:2e:b3:17:4b:d1:09:fd:61: 9a:ff:e0:fd:e5:fb:55:11:5d:46:34:8d:e0:81:40:ca:c8:0f: 55:c2:38:3e:72:44:9a:bf:ec:22:1a:50:35:af:79:8c:cc:8b: fc:41:ae:cc:4c:dd:5c:8a:6b:6f:ef:08:70:2b:69:7a:a9:e0: 51:79:ff:4d:39:e3:42:b5:3d:a4:26:43:de:14:fb:e2:c8:f5: 2b:2e:64:b6:a3:8e:0d:6c:fd:f0:2c:88:15:f8:6d:e6:45:1c: ce:f8:7e:a0 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZwtjIq2CFhtX9DocN+0Y04wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkNjQxNjZhOTExNzkzMDhmMjUzYTkxNzU2MTZjY2M2ODI4 YzQ0NjMwHhcNMjYwMjA1MTEyNTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YjkyZWY4NGM5YzcyZjYzMzkxYjcwNmIxM2RlMTY3ZGRmYzdjMzdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5nxgmD54h6/r2b/MhVuvaSRndSIH bQ6JKriZF4OH+eJwcYYdUWtDZRQWau+FuFOkZlK1g0+xmVNbf/aFiaHr/k04fK50 gRRGqpF1ezT9hbc0HxVLlNPQZtbvdAFEh372NfxCNz7AsuIlgUNKgZI5RmMhX8SB aD7XTBkVDUZzWwQAhFWxZ8z4TCZrKuoOLeear6uI8JBZrBEmpzW8P85levsA+Eok ucGys1umnGXioI1VAXC7mxOSxheKLLjRyv0W0C6cucMGZ2yvwlGKbVJ5VuaM5w9q oxmQWJJ/5L7GUw5gN2h9D1YCp/bSc5ntO14UvMaNdouKZS4hVz53lLdUWQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFHuS74TJxy9jORtwaxPeFn3fx8N9MB8GA1UdIwQY MBaAFN1kFmqRF5MI8lOpF1YWzMaCjERjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1dRV2FwRVhrd2p5VTZrWFZoYk14b0tNUkdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8wYTQ4OWItOWQ5ZS00ZjZhLTg3Yzct NzRkZTI1OGE3NmY4LzEvZTVMdmhNbkhMMk01RzNCckU5NFdmZF9IdzMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8wYTQ4OWItOWQ5ZS00ZjZhLTg3YzctNzRkZTI1OGE3NmY4 LzEvM1dRV2FwRVhrd2p5VTZrWFZoYk14b0tNUkdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQA1c4pAwQA 1c4uAwQA1c4xAwQB1c44AwQA1c47MA0GCSqGSIb3DQEBCwUAA4IBAQC9VinEMfDU KfZMcznd/oUbVqkLy8fXRgzVSkp52cRGpaYkCVLbD52WqIZa2qc21axVxLGiexJ/ gIgUoUdd+xmKqiOC+nyCl2rHK9VQvFdJlDrF478S9Z6NzyZMONBIkV9AyryWUann sW5pSJj+buc4kfOcLJdblVFRJDx/Vu6Y7bMU02F1FN7zvHRodN7v7NTlaq7fI0AR LTvHLrMXS9EJ/WGa/+D95ftVEV1GNI3ggUDKyA9Vwjg+ckSav+wiGlA1r3mMzIv8 Qa7MTN1cimtv7whwK2l6qeBRef9NOeNCtT2kJkPeFPviyPUrLmS2o44NbP3wLIgV +G3mRRzO+H6g -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:18 2026 by rpki-client