This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/e73gsHaWTejzTyfXW5UdzDUTXQs.roa File: e73gsHaWTejzTyfXW5UdzDUTXQs.roa (raw, json) Hash identifier: 9j92RNoJBabv7foYLIaPsDGRKKARMwRj5sIk41buBpE= Subject key identifier: 7B:BD:E0:B0:76:96:4D:E8:F3:4F:27:D7:5B:95:1D:CC:35:13:5D:0B Certificate issuer: /CN=208de3ad18dd0ae14362d0e84dec043d379cc242 Certificate serial: 019B7F1533E34C0A30AC50A8D3B7A3E754A2 Authority key identifier: 20:8D:E3:AD:18:DD:0A:E1:43:62:D0:E8:4D:EC:04:3D:37:9C:C2:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/e73gsHaWTejzTyfXW5UdzDUTXQs.roa Signing time: Fri 02 Jan 2026 14:20:54 +0000 ROA not before: Fri 02 Jan 2026 14:20:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12729 IP address blocks: 212.127.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:33:e3:4c:0a:30:ac:50:a8:d3:b7:a3:e7:54:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=208de3ad18dd0ae14362d0e84dec043d379cc242 Validity Not Before: Jan 2 14:20:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7bbde0b076964de8f34f27d75b951dcc35135d0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f8:fc:c4:15:4b:52:cf:73:3b:6d:be:c5:6d: 51:42:6f:64:2f:05:be:13:d1:f1:28:19:10:26:71: c5:95:6b:f6:fb:1e:c8:41:c6:70:01:bc:5c:dd:52: 7d:25:76:ea:7e:43:31:0e:83:64:bb:2f:e2:82:3b: 19:f1:fe:be:58:c8:16:6e:6b:64:e4:5c:7c:30:7f: ad:b8:64:ed:87:ee:f8:d3:8d:8d:a8:d2:bb:64:bb: 85:fb:f8:83:7c:63:f2:64:5a:96:87:f6:b4:5c:10: 67:aa:9f:3a:7b:02:35:bc:b0:86:74:d6:71:3b:ac: 29:b5:d7:41:a4:e3:07:f4:8e:5f:05:29:93:51:d6: d3:07:16:4c:10:c7:47:4b:4f:7a:ae:03:f4:55:37: a6:7f:35:d6:01:5d:ad:60:0e:eb:fb:97:65:88:b3: 21:c4:04:67:39:8b:55:0b:d6:b8:64:35:a5:4e:29: 73:ad:2b:58:0f:99:01:36:2f:e5:4e:72:8a:17:1d: 37:51:d7:b7:55:ec:ef:a2:80:ff:d2:ce:19:8f:cd: 0d:ad:48:96:87:64:64:77:de:b4:e0:20:56:d4:41: 4f:07:fa:c2:45:03:60:bb:68:3a:6c:7f:b8:80:66: 1e:68:b4:7a:d5:a2:c6:0b:45:a3:9d:a3:e9:89:37: c7:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:BD:E0:B0:76:96:4D:E8:F3:4F:27:D7:5B:95:1D:CC:35:13:5D:0B X509v3 Authority Key Identifier: keyid:20:8D:E3:AD:18:DD:0A:E1:43:62:D0:E8:4D:EC:04:3D:37:9C:C2:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/e73gsHaWTejzTyfXW5UdzDUTXQs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.127.96.0/19 Signature Algorithm: sha256WithRSAEncryption 2c:9c:bd:a4:b1:69:26:c2:f2:c9:6f:d1:75:6c:aa:a1:de:7e: d3:bd:c7:e7:ff:b1:fe:22:7c:2a:3e:b1:69:f8:a6:bf:74:e8: d4:97:de:07:57:c3:9a:98:7b:eb:61:83:fd:5a:a4:cb:c7:db: 13:c6:58:4e:17:1b:b0:76:73:7a:ab:94:49:b3:24:ef:d1:ab: 79:a7:a1:77:7f:d2:91:9a:5a:f2:c1:8f:08:51:37:f6:bd:87: 12:65:49:b7:40:8c:6c:7e:b0:76:99:47:5a:24:4b:35:2f:40: f5:f6:92:a6:a7:e7:e3:27:82:d0:c9:b7:92:45:dc:ce:b6:cc: f1:a9:87:c6:13:14:05:30:31:3e:a8:39:af:c8:78:83:13:3a: 33:ec:b6:21:2a:80:41:ea:65:de:46:dd:18:ce:78:0e:53:23: fa:a9:81:a6:43:18:cc:f1:c8:db:dd:f4:5f:bb:a1:d0:44:f1: 55:52:ca:14:4c:8a:a2:58:82:c9:7e:20:d7:73:d9:73:de:ba: b0:85:3f:6c:2d:e9:cb:dd:9a:d4:06:24:03:90:28:b0:62:dd: 2b:82:e1:88:77:c9:27:a0:85:0a:52:b8:8d:17:1b:e0:dd:be: 15:d9:ee:91:36:a1:ce:96:98:c0:d7:4a:96:80:cd:d0:1c:10: cb:b6:c0:71 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FTPjTAowrFCo07ej51SiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwOGRlM2FkMThkZDBhZTE0MzYyZDBlODRkZWMwNDNkMzc5 Y2MyNDIwHhcNMjYwMTAyMTQyMDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YmJkZTBiMDc2OTY0ZGU4ZjM0ZjI3ZDc1Yjk1MWRjYzM1MTM1ZDBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvj8xBVLUs9zO22+xW1RQm9kLwW+ E9HxKBkQJnHFlWv2+x7IQcZwAbxc3VJ9JXbqfkMxDoNkuy/igjsZ8f6+WMgWbmtk 5Fx8MH+tuGTth+74042NqNK7ZLuF+/iDfGPyZFqWh/a0XBBnqp86ewI1vLCGdNZx O6wptddBpOMH9I5fBSmTUdbTBxZMEMdHS096rgP0VTemfzXWAV2tYA7r+5dliLMh xARnOYtVC9a4ZDWlTilzrStYD5kBNi/lTnKKFx03Ude3VezvooD/0s4Zj80NrUiW h2Rkd9604CBW1EFPB/rCRQNgu2g6bH+4gGYeaLR61aLGC0WjnaPpiTfHIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHu94LB2lk3o808n11uVHcw1E10LMB8GA1UdIwQY MBaAFCCN460Y3QrhQ2LQ6E3sBD03nMJCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUkzanJSamRDdUZEWXREb1Rld0VQVGVjd2tJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS82MTA5NGEtOTQ2OS00Mjk5LTg5ZjIt YmRmNmU0Mjk0YzJlLzEvZTczZ3NIYVdUZWp6VHlmWFc1VWR6RFVUWFFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS82MTA5NGEtOTQ2OS00Mjk5LTg5ZjItYmRmNmU0Mjk0YzJl LzEvSUkzanJSamRDdUZEWXREb1Rld0VQVGVjd2tJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF1H9gMA0G CSqGSIb3DQEBCwUAA4IBAQAsnL2ksWkmwvLJb9F1bKqh3n7Tvcfn/7H+InwqPrFp +Ka/dOjUl94HV8OamHvrYYP9WqTLx9sTxlhOFxuwdnN6q5RJsyTv0at5p6F3f9KR mlrywY8IUTf2vYcSZUm3QIxsfrB2mUdaJEs1L0D19pKmp+fjJ4LQybeSRdzOtszx qYfGExQFMDE+qDmvyHiDEzoz7LYhKoBB6mXeRt0YzngOUyP6qYGmQxjM8cjb3fRf u6HQRPFVUsoUTIqiWILJfiDXc9lz3rqwhT9sLenL3ZrUBiQDkCiwYt0rguGId8kn oIUKUriNFxvg3b4V2e6RNqHOlpjA10qWgM3QHBDLtsBx -----END CERTIFICATE-----Generated at Mon Jan 26 02:01:30 2026 by rpki-client