This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ENI7Z5yBr-3vmabr7x8Oqv2rU3k.roa File: ENI7Z5yBr-3vmabr7x8Oqv2rU3k.roa (raw, json) Hash identifier: SYbuwV9RF98H2wnwET3rqVG/OV1l8TgwPl32TdMZOp4= Subject key identifier: 10:D2:3B:67:9C:81:AF:ED:EF:99:A6:EB:EF:1F:0E:AA:FD:AB:53:79 Certificate issuer: /CN=ca47921e4430521a7727888c13bc7b8e104cbdbe Certificate serial: 019B7CEE039241702020DEF707520E094344 Authority key identifier: CA:47:92:1E:44:30:52:1A:77:27:88:8C:13:BC:7B:8E:10:4C:BD:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ENI7Z5yBr-3vmabr7x8Oqv2rU3k.roa Signing time: Fri 02 Jan 2026 04:18:51 +0000 ROA not before: Fri 02 Jan 2026 04:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203082 IP address blocks: 185.251.244.0/22 maxlen: 24 185.251.244.0/24 maxlen: 24 185.251.245.0/24 maxlen: 24 185.251.246.0/24 maxlen: 24 185.251.247.0/24 maxlen: 24 2a0c:6cc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.mft rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:03:92:41:70:20:20:de:f7:07:52:0e:09:43:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca47921e4430521a7727888c13bc7b8e104cbdbe Validity Not Before: Jan 2 04:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=10d23b679c81afedef99a6ebef1f0eaafdab5379 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5d:19:69:46:00:8d:ad:cb:52:88:ea:97:18: 9b:3c:60:44:de:cd:2c:24:5f:0b:1a:d0:d3:48:a8: 02:10:12:48:24:50:c9:cf:f7:e9:c4:9c:ef:41:e8: ca:29:d4:c4:fc:01:f3:ae:0d:b4:61:4b:46:be:40: ef:84:99:62:15:c7:3e:95:a3:cb:e0:9b:ad:5a:d8: 3d:8c:2b:47:e7:e3:df:3b:c0:60:2c:03:5c:9f:29: e2:4b:ea:b4:97:42:6b:bc:14:d8:11:b4:6f:a1:1b: e3:57:6c:40:a7:0f:82:13:e9:35:d5:ed:6c:6b:1a: 1c:55:46:5f:df:7b:0e:ea:6c:58:4d:2d:53:f4:68: cc:61:35:93:62:bc:ea:9f:3d:2a:0e:41:35:39:d9: 84:5e:6d:c6:38:8c:71:28:bc:15:21:62:d4:c4:d2: 2d:31:eb:1e:4c:8c:0c:34:59:52:9a:64:7b:74:6a: 37:95:59:6a:e0:2e:03:df:49:d6:81:25:9d:52:fa: 00:da:d9:d1:3a:30:bc:b9:f1:da:3a:7c:20:e0:9b: 81:b4:de:35:38:97:d1:e4:d1:a2:ec:b3:33:60:ea: 1b:d0:ef:ae:1f:18:3d:68:f4:05:81:97:ef:73:f4: 59:ff:1c:a0:fd:49:30:1b:7b:4c:9d:f6:6f:2f:73: 30:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:D2:3B:67:9C:81:AF:ED:EF:99:A6:EB:EF:1F:0E:AA:FD:AB:53:79 X509v3 Authority Key Identifier: keyid:CA:47:92:1E:44:30:52:1A:77:27:88:8C:13:BC:7B:8E:10:4C:BD:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ykeSHkQwUhp3J4iME7x7jhBMvb4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ENI7Z5yBr-3vmabr7x8Oqv2rU3k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/63f1e8-3715-4414-9f3b-83e55c5f6f7d/1/ykeSHkQwUhp3J4iME7x7jhBMvb4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.251.244.0/22 IPv6: 2a0c:6cc0::/29 Signature Algorithm: sha256WithRSAEncryption 89:60:a7:d4:71:1f:ce:32:d5:dd:09:21:88:28:13:6f:6b:57: ea:1a:19:55:38:28:ea:88:73:64:ff:94:cd:60:f5:06:33:df: 14:c7:14:9b:a3:ac:93:d8:f2:27:0d:44:b1:0a:37:83:1d:39: e5:62:0a:f3:a6:a7:cc:fc:40:70:38:d5:36:7f:00:95:2d:7d: d0:0d:f9:73:ee:22:70:6c:5f:98:00:64:1a:99:72:f9:bf:f5: 3c:c4:9d:83:cc:f0:6d:be:e5:7f:0b:16:c8:23:ff:a5:3a:db: 22:ef:5a:8f:ec:08:a2:15:eb:50:9b:60:99:69:0c:e9:c4:83: b8:12:c9:14:b9:53:cd:72:86:c0:b1:df:81:de:28:a8:47:4c: 31:ce:14:7f:31:b9:b5:0d:50:d3:94:bf:44:cb:34:62:f9:e2: 70:34:81:63:fb:f0:ae:cd:25:40:41:79:41:77:d8:82:0d:d3: 2f:3b:4b:c3:a3:52:44:98:7c:1c:0b:07:92:89:91:a8:9a:e3: 09:87:85:57:6c:91:69:7b:9f:5c:3b:e3:4c:d8:32:bb:b4:a6: 28:b7:67:56:6e:f1:90:e4:fa:2a:be:f6:c5:e0:f8:30:81:d7: 3e:ce:b4:56:1f:cf:77:36:44:e4:fd:09:dd:76:a2:9b:3b:dd: 4e:ff:58:90 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt87gOSQXAgIN73B1IOCUNEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhNDc5MjFlNDQzMDUyMWE3NzI3ODg4YzEzYmM3YjhlMTA0 Y2JkYmUwHhcNMjYwMTAyMDQxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMGQyM2I2NzljODFhZmVkZWY5OWE2ZWJlZjFmMGVhYWZkYWI1Mzc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu10ZaUYAja3LUojqlxibPGBE3s0s JF8LGtDTSKgCEBJIJFDJz/fpxJzvQejKKdTE/AHzrg20YUtGvkDvhJliFcc+laPL 4JutWtg9jCtH5+PfO8BgLANcnyniS+q0l0JrvBTYEbRvoRvjV2xApw+CE+k11e1s axocVUZf33sO6mxYTS1T9GjMYTWTYrzqnz0qDkE1OdmEXm3GOIxxKLwVIWLUxNIt MeseTIwMNFlSmmR7dGo3lVlq4C4D30nWgSWdUvoA2tnROjC8ufHaOnwg4JuBtN41 OJfR5NGi7LMzYOob0O+uHxg9aPQFgZfvc/RZ/xyg/UkwG3tMnfZvL3MwBwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBDSO2ecga/t75mm6+8fDqr9q1N5MB8GA1UdIwQY MBaAFMpHkh5EMFIadyeIjBO8e44QTL2+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWtlU0hrUXdVaHAzSjRpTUU3eDdqaEJNdmI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi82M2YxZTgtMzcxNS00NDE0LTlmM2It ODNlNTVjNWY2ZjdkLzEvRU5JN1o1eUJyLTN2bWFicjd4OE9xdjJyVTNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi82M2YxZTgtMzcxNS00NDE0LTlmM2ItODNlNTVjNWY2Zjdk LzEveWtlU0hrUXdVaHAzSjRpTUU3eDdqaEJNdmI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCufv0MA0E AgACMAcDBQMqDGzAMA0GCSqGSIb3DQEBCwUAA4IBAQCJYKfUcR/OMtXdCSGIKBNv a1fqGhlVOCjqiHNk/5TNYPUGM98UxxSbo6yT2PInDUSxCjeDHTnlYgrzpqfM/EBw ONU2fwCVLX3QDflz7iJwbF+YAGQamXL5v/U8xJ2DzPBtvuV/CxbII/+lOtsi71qP 7AiiFetQm2CZaQzpxIO4EskUuVPNcobAsd+B3iioR0wxzhR/Mbm1DVDTlL9EyzRi +eJwNIFj+/CuzSVAQXlBd9iCDdMvO0vDo1JEmHwcCweSiZGomuMJh4VXbJFpe59c O+NM2DK7tKYot2dWbvGQ5PoqvvbF4Pgwgdc+zrRWH893NkTk/QnddqKbO91O/1iQ -----END CERTIFICATE-----Generated at Tue Feb 10 00:14:20 2026 by rpki-client