This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/enXU2NRbrmUSLj3aNd49w6CB9kw.roa File: enXU2NRbrmUSLj3aNd49w6CB9kw.roa (raw, json) Hash identifier: bqlmejBH4um+OhcSoaSwzujrI/A1SFNyu4se8eX8Jy8= Subject key identifier: 7A:75:D4:D8:D4:5B:AE:65:12:2E:3D:DA:35:DE:3D:C3:A0:81:F6:4C Certificate issuer: /CN=b6f3db35659133315d2fcf93058dce350a4cb17a Certificate serial: 019B7E388EE601F0A01446EA115E1062345E Authority key identifier: B6:F3:DB:35:65:91:33:31:5D:2F:CF:93:05:8D:CE:35:0A:4C:B1:7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/enXU2NRbrmUSLj3aNd49w6CB9kw.roa Signing time: Fri 02 Jan 2026 10:19:54 +0000 ROA not before: Fri 02 Jan 2026 10:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15461 IP address blocks: 194.44.38.0/23 maxlen: 23 194.44.179.0/24 maxlen: 24 213.174.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:8e:e6:01:f0:a0:14:46:ea:11:5e:10:62:34:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6f3db35659133315d2fcf93058dce350a4cb17a Validity Not Before: Jan 2 10:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a75d4d8d45bae65122e3dda35de3dc3a081f64c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5c:84:47:76:01:85:8a:e0:d8:d7:92:94:b3: 04:3f:fe:39:28:3e:cb:fa:ea:f7:4f:e5:25:03:53: bf:56:45:90:f1:06:78:38:b0:2c:63:94:0a:32:15: a7:79:5c:79:c5:d4:93:8b:59:88:c7:04:a2:54:60: 01:79:85:45:b8:12:e4:43:07:a6:0b:a5:ff:55:b0: 31:cf:45:e4:d7:f3:e4:d4:4c:62:f0:cc:27:ee:e4: 72:c2:45:24:d9:e0:33:de:26:52:ff:87:4d:9a:cb: e4:08:b1:c7:88:13:53:6a:0b:ca:fe:fd:c0:d7:1e: 06:4a:51:1c:58:14:4d:b8:cc:49:ac:68:7f:22:29: 09:7f:83:2f:a1:9a:e2:0f:e1:3d:f5:25:f6:c7:14: cc:f5:b7:b3:47:f4:80:a8:16:51:d1:8e:f3:21:e2: 28:72:b1:a2:6d:4d:2d:a2:9b:d4:db:2c:67:cf:ce: a4:dc:5e:63:fe:9d:39:e1:e3:35:66:a3:fc:5d:38: 44:01:52:8b:b0:e6:a6:b4:ee:b2:1f:06:41:3f:a6: cf:cf:25:57:02:71:71:9a:fc:d0:f8:ba:3d:8d:81: 82:69:87:fc:0e:4a:68:29:9e:2f:aa:f9:2e:b2:a4: f0:e7:c3:21:c7:cc:95:a3:c5:00:34:68:0c:2e:24: 54:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:75:D4:D8:D4:5B:AE:65:12:2E:3D:DA:35:DE:3D:C3:A0:81:F6:4C X509v3 Authority Key Identifier: keyid:B6:F3:DB:35:65:91:33:31:5D:2F:CF:93:05:8D:CE:35:0A:4C:B1:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/enXU2NRbrmUSLj3aNd49w6CB9kw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.44.38.0/23 194.44.179.0/24 213.174.29.0/24 Signature Algorithm: sha256WithRSAEncryption 37:3b:36:0a:5c:9d:94:cd:cb:c8:07:79:be:52:32:c9:49:0f: e2:d7:0c:bb:11:42:60:84:ba:e3:ee:74:9b:26:d9:21:c6:b4: 5e:84:8a:32:c9:e4:e5:22:9a:39:48:f5:e0:e7:02:bd:88:93: e4:5f:fe:fa:d3:a2:d9:50:91:fa:10:ad:0d:6a:6a:83:17:86: 3f:16:f0:29:82:31:df:ff:74:33:46:3f:c0:dd:10:39:9b:35: 99:82:b4:40:e8:34:6f:60:ab:e1:a1:e2:aa:1e:96:d5:67:cc: 87:a4:2f:41:f6:de:b8:80:ef:fe:2b:94:ae:c2:97:7c:2d:a9: bf:aa:56:e3:b8:da:3b:c8:80:dc:c2:57:02:7c:bb:8c:66:90: 68:71:96:46:d9:4a:89:87:78:0f:fa:f8:99:50:0c:5c:5b:5e: a2:6a:83:90:9d:94:3e:98:78:49:98:fd:f0:f5:92:10:f1:66: bd:12:aa:9b:db:69:d4:16:7e:41:90:66:55:8f:a2:cc:aa:c8: 06:d9:c8:5b:ab:d0:b5:bd:e7:eb:1b:a7:00:95:82:44:e1:08: a8:44:be:66:3e:44:0e:e3:44:3b:7d:ef:43:4c:ef:46:81:b0: a5:4f:68:31:74:79:5b:91:13:dd:08:cd:18:ff:3d:86:15:84: e7:12:01:2e -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+OI7mAfCgFEbqEV4QYjReMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2ZjNkYjM1NjU5MTMzMzE1ZDJmY2Y5MzA1OGRjZTM1MGE0 Y2IxN2EwHhcNMjYwMTAyMTAxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTc1ZDRkOGQ0NWJhZTY1MTIyZTNkZGEzNWRlM2RjM2EwODFmNjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVyER3YBhYrg2NeSlLMEP/45KD7L +ur3T+UlA1O/VkWQ8QZ4OLAsY5QKMhWneVx5xdSTi1mIxwSiVGABeYVFuBLkQwem C6X/VbAxz0Xk1/Pk1Exi8Mwn7uRywkUk2eAz3iZS/4dNmsvkCLHHiBNTagvK/v3A 1x4GSlEcWBRNuMxJrGh/IikJf4MvoZriD+E99SX2xxTM9bezR/SAqBZR0Y7zIeIo crGibU0topvU2yxnz86k3F5j/p054eM1ZqP8XThEAVKLsOamtO6yHwZBP6bPzyVX AnFxmvzQ+Lo9jYGCaYf8DkpoKZ4vqvkusqTw58Mhx8yVo8UANGgMLiRU1wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFHp11NjUW65lEi492jXePcOggfZMMB8GA1UdIwQY MBaAFLbz2zVlkTMxXS/PkwWNzjUKTLF6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHZQYk5XV1JNekZkTDgtVEJZM09OUXBNc1hvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83MGJmZmUtYjRmMy00NDllLTgxZWQt NTQ5ZWU2ZDMwZmI2LzEvZW5YVTJOUmJybVVTTGozYU5kNDl3NkNCOWt3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC83MGJmZmUtYjRmMy00NDllLTgxZWQtNTQ5ZWU2ZDMwZmI2 LzEvdHZQYk5XV1JNekZkTDgtVEJZM09OUXBNc1hvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBwiwmAwQA wiyzAwQA1a4dMA0GCSqGSIb3DQEBCwUAA4IBAQA3OzYKXJ2UzcvIB3m+UjLJSQ/i 1wy7EUJghLrj7nSbJtkhxrRehIoyyeTlIpo5SPXg5wK9iJPkX/7606LZUJH6EK0N amqDF4Y/FvApgjHf/3QzRj/A3RA5mzWZgrRA6DRvYKvhoeKqHpbVZ8yHpC9B9t64 gO/+K5Suwpd8Lam/qlbjuNo7yIDcwlcCfLuMZpBocZZG2UqJh3gP+viZUAxcW16i aoOQnZQ+mHhJmP3w9ZIQ8Wa9Eqqb22nUFn5BkGZVj6LMqsgG2chbq9C1vefrG6cA lYJE4QioRL5mPkQO40Q7fe9DTO9GgbClT2gxdHlbkRPdCM0Y/z2GFYTnEgEu -----END CERTIFICATE-----Generated at Sun Jan 25 22:29:30 2026 by rpki-client