This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/E_7lG7f5ZU0hPBZXeO9KiDguzXQ.roa File: E_7lG7f5ZU0hPBZXeO9KiDguzXQ.roa (raw, json) Hash identifier: uU7vlve0LCQA4yv+Ab2N5h2lLHcGh/mEnZNylo4rqpM= Subject key identifier: 13:FE:E5:1B:B7:F9:65:4D:21:3C:16:57:78:EF:4A:88:38:2E:CD:74 Certificate issuer: /CN=de0d9d6b697ca1c86570c256862e6858b4799c85 Certificate serial: 019B7DCA705FEA8A9DFF35FEC06F6E03F850 Authority key identifier: DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/E_7lG7f5ZU0hPBZXeO9KiDguzXQ.roa Signing time: Fri 02 Jan 2026 08:19:37 +0000 ROA not before: Fri 02 Jan 2026 08:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 95.142.114.0/24 maxlen: 24 95.142.117.0/24 maxlen: 24 95.142.120.0/24 maxlen: 24 95.142.126.0/24 maxlen: 24 185.54.229.0/24 maxlen: 24 185.54.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:70:5f:ea:8a:9d:ff:35:fe:c0:6f:6e:03:f8:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de0d9d6b697ca1c86570c256862e6858b4799c85 Validity Not Before: Jan 2 08:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=13fee51bb7f9654d213c165778ef4a88382ecd74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c2:98:86:db:68:d7:96:50:8d:fb:3e:9e:81: 54:ec:50:a9:68:7c:85:63:7c:87:69:7d:6c:c2:ec: eb:e1:ad:2d:78:9f:02:e9:76:aa:58:e0:3c:bf:64: f2:b1:a4:10:01:79:c9:19:f0:11:6c:a5:54:f2:6d: 8e:62:4c:1f:d0:8d:fc:51:5c:93:d0:b1:c1:6c:49: c4:e9:0c:60:04:f3:28:d2:a9:f0:96:51:6a:c3:7a: 87:89:c8:cd:dd:50:9a:bd:cc:09:8b:88:f2:2e:70: 39:e1:59:1c:15:2e:af:a0:1f:04:df:cf:da:6c:85: 9d:81:63:51:80:86:13:3b:02:3a:ea:ca:6f:6c:03: 63:28:2f:74:b1:4b:7a:48:b8:f6:33:d9:eb:99:a3: d4:e7:b0:03:88:be:8d:2c:68:32:6f:90:2c:bf:0b: 02:01:93:db:fa:c1:8e:25:21:23:ba:76:10:ab:08: 33:77:9f:98:e3:47:ce:a4:73:70:30:07:dd:3c:bf: 40:4d:9f:d4:65:d9:21:03:d2:bf:fa:aa:80:2a:30: 9b:cd:ca:c2:37:ff:af:85:42:74:ff:ab:a4:36:4c: 13:f2:f0:32:e4:ec:aa:66:66:f3:4e:61:f6:6c:99: 76:d7:26:49:c2:de:1e:ed:e8:a4:0d:b4:dd:c4:84: 9d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:FE:E5:1B:B7:F9:65:4D:21:3C:16:57:78:EF:4A:88:38:2E:CD:74 X509v3 Authority Key Identifier: keyid:DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/E_7lG7f5ZU0hPBZXeO9KiDguzXQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.142.114.0/24 95.142.117.0/24 95.142.120.0/24 95.142.126.0/24 185.54.229.0/24 185.54.231.0/24 Signature Algorithm: sha256WithRSAEncryption b0:0d:ea:03:ad:23:a5:e9:30:d3:a0:67:14:fe:9a:e1:1e:7c: d1:98:ec:16:a9:27:4a:17:aa:8e:b6:12:37:2b:cc:a2:c6:d2: 0f:87:b9:6b:88:56:49:1b:7f:ff:d0:5e:c7:e4:c8:26:3c:f4: 0d:ee:22:c9:31:a6:1d:85:c2:39:b0:5b:c8:b6:f0:cf:10:01: 9b:7a:a6:6d:ea:72:60:a1:19:c0:e9:f1:40:f3:e5:47:2e:0b: da:d4:b3:32:53:52:c7:a8:a1:94:e4:63:34:53:a0:21:6a:0d: bb:f5:91:08:29:af:a0:be:42:de:b0:e0:da:bf:29:81:91:f8: 5a:93:fc:67:9b:38:c2:57:00:26:ad:6b:c1:e7:3c:6e:a3:81: c2:90:18:c1:fa:2b:5f:6d:84:f8:98:8a:11:eb:2b:4b:ff:3e: 8b:56:4f:11:88:b1:88:60:a4:84:ff:5c:ff:2c:62:63:87:df: 19:63:76:d0:71:6a:42:5e:cf:56:43:b1:1a:5e:ae:f7:ae:53: af:dd:31:04:db:ae:d7:fc:64:7d:96:b4:57:7e:0d:aa:fd:78: e9:20:44:0d:e6:7f:d7:8b:41:15:77:1a:d4:14:05:9d:35:c2: 03:ca:89:8e:a2:4c:4b:c4:c5:7d:76:a0:5c:87:59:14:98:d9: 77:19:75:a1 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt9ynBf6oqd/zX+wG9uA/hQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMGQ5ZDZiNjk3Y2ExYzg2NTcwYzI1Njg2MmU2ODU4YjQ3 OTljODUwHhcNMjYwMTAyMDgxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxM2ZlZTUxYmI3Zjk2NTRkMjEzYzE2NTc3OGVmNGE4ODM4MmVjZDc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosKYhtto15ZQjfs+noFU7FCpaHyF Y3yHaX1swuzr4a0teJ8C6XaqWOA8v2TysaQQAXnJGfARbKVU8m2OYkwf0I38UVyT 0LHBbEnE6QxgBPMo0qnwllFqw3qHicjN3VCavcwJi4jyLnA54VkcFS6voB8E38/a bIWdgWNRgIYTOwI66spvbANjKC90sUt6SLj2M9nrmaPU57ADiL6NLGgyb5AsvwsC AZPb+sGOJSEjunYQqwgzd5+Y40fOpHNwMAfdPL9ATZ/UZdkhA9K/+qqAKjCbzcrC N/+vhUJ0/6ukNkwT8vAy5OyqZmbzTmH2bJl21yZJwt4e7eikDbTdxISdmwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFBP+5Ru3+WVNITwWV3jvSog4Ls10MB8GA1UdIwQY MBaAFN4NnWtpfKHIZXDCVoYuaFi0eZyFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2cyZGEybDhvY2hsY01KV2hpNW9XTFI1bklVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy82OGRjM2MtZGYyZS00NDYxLWI3YTYt MDFjYmZjMGU5NGU3LzEvRV83bEc3ZjVaVTBoUEJaWGVPOUtpRGd1elhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy82OGRjM2MtZGYyZS00NDYxLWI3YTYtMDFjYmZjMGU5NGU3 LzEvM2cyZGEybDhvY2hsY01KV2hpNW9XTFI1bklVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAX45yAwQA X451AwQAX454AwQAX45+AwQAuTblAwQAuTbnMA0GCSqGSIb3DQEBCwUAA4IBAQCw DeoDrSOl6TDToGcU/prhHnzRmOwWqSdKF6qOthI3K8yixtIPh7lriFZJG3//0F7H 5MgmPPQN7iLJMaYdhcI5sFvItvDPEAGbeqZt6nJgoRnA6fFA8+VHLgva1LMyU1LH qKGU5GM0U6Ahag279ZEIKa+gvkLesODavymBkfhak/xnmzjCVwAmrWvB5zxuo4HC kBjB+itfbYT4mIoR6ytL/z6LVk8RiLGIYKSE/1z/LGJjh98ZY3bQcWpCXs9WQ7Ea Xq73rlOv3TEE267X/GR9lrRXfg2q/XjpIEQN5n/Xi0EVdxrUFAWdNcIDyomOokxL xMV9dqBch1kUmNl3GXWh -----END CERTIFICATE-----Generated at Sun Jan 25 15:12:15 2026 by rpki-client