This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/E7tICBfmKJ0mhXLa84n5hWn6Vjk.roa File: E7tICBfmKJ0mhXLa84n5hWn6Vjk.roa (raw, json) Hash identifier: cd2wRzcDQQaJyLWgXnpyUWCDmGV4HCSDtD1HgffFOgc= Subject key identifier: 13:BB:48:08:17:E6:28:9D:26:85:72:DA:F3:89:F9:85:69:FA:56:39 Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8 Certificate serial: 019B775908FC0E612C612E67CE1F3FFBD376 Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/E7tICBfmKJ0mhXLa84n5hWn6Vjk.roa Signing time: Thu 01 Jan 2026 02:18:02 +0000 ROA not before: Thu 01 Jan 2026 02:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204397 IP address blocks: 85.31.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:08:fc:0e:61:2c:61:2e:67:ce:1f:3f:fb:d3:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8 Validity Not Before: Jan 1 02:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=13bb480817e6289d268572daf389f98569fa5639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3b:a8:c8:80:30:2c:8a:62:35:3a:33:ff:00: 1e:99:34:0f:e3:79:eb:06:eb:46:fb:9e:00:57:c7: a8:dc:d9:5b:0e:62:82:1e:cf:b5:88:a6:3c:05:a6: 09:9b:81:e0:9b:8c:7d:b3:c5:8d:20:91:fa:45:fa: cf:b0:c1:86:5c:c6:2b:f4:9c:36:75:18:e6:27:7e: 03:87:7d:94:2d:f6:45:38:08:3e:89:99:82:28:d8: 56:29:77:c9:6b:db:09:9f:e1:77:52:41:e0:23:da: 62:9b:86:cf:7d:34:c5:fd:18:1b:d3:3d:c7:4d:00: 53:77:06:d5:41:d4:22:4f:0d:f2:eb:a0:26:b7:e9: 19:1c:84:6c:21:de:92:24:12:1c:ec:39:b3:4f:03: fc:d5:16:ad:1e:90:00:36:dd:f2:ca:92:d2:ed:50: 30:17:da:fa:41:0d:f5:76:fa:ed:28:8b:44:2d:99: d1:e9:1b:c5:54:0a:bf:a6:f2:63:f2:1e:72:3d:77: cc:1d:85:93:1c:63:01:0c:66:39:3f:c1:27:1e:ba: bc:77:06:a4:43:35:c5:b8:a7:15:87:09:12:dc:36: 10:8c:3b:82:f7:c7:2c:1d:8e:7e:a2:ca:50:cf:b6: 93:d3:07:54:3f:61:2b:54:9b:6f:75:00:bc:27:36: 40:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:BB:48:08:17:E6:28:9D:26:85:72:DA:F3:89:F9:85:69:FA:56:39 X509v3 Authority Key Identifier: keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/E7tICBfmKJ0mhXLa84n5hWn6Vjk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.31.244.0/24 Signature Algorithm: sha256WithRSAEncryption 43:59:57:3d:48:c2:f8:17:27:8b:60:17:63:83:85:0f:21:f2: 42:77:a4:b2:f1:f5:ea:c3:d3:d6:9a:86:b2:ef:74:07:8d:a5: 21:fe:02:7f:2c:d2:af:34:23:f8:af:38:99:f9:73:7e:2d:77: 5b:cd:58:17:17:c2:4c:85:e0:da:68:ed:f4:21:5a:d0:ba:5a: 69:75:11:6d:2f:a8:50:42:4a:55:d0:69:5d:de:23:7c:be:ad: a9:12:19:17:59:c5:0a:45:37:cc:c5:94:a6:b1:b2:32:6e:66: 99:fd:a4:df:29:1b:de:07:61:c5:c2:ed:41:87:4c:f0:0a:d5: 51:7a:f0:69:fe:78:6d:c2:ca:8e:f1:a4:4f:33:d1:b3:9b:3e: f0:4c:a6:ef:f2:a2:17:3a:e1:b0:cb:ab:8c:7f:b8:a2:bd:e6: 54:b7:3e:b2:b5:07:58:0e:50:89:f2:c8:01:9a:d2:a5:6c:d7: a8:87:49:62:3c:e9:0f:6f:66:51:cb:b1:e5:30:2c:b0:47:c7: 0b:99:1f:b8:08:03:df:18:a7:e5:8d:aa:d6:ec:bf:5d:1d:b3: 14:3e:9d:b9:4b:32:06:95:bf:5f:dc:c0:b2:fd:1d:9d:01:7e: 6f:c6:41:22:b0:72:5c:58:db:29:be:06:22:0b:48:da:6f:68: ca:e6:85:68 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WQj8DmEsYS5nzh8/+9N2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5OTU0NDk5OTc3Mjc4YTc1NTcwYjM0MDNmNGQzYWEwMGIx YjM2ZTgwHhcNMjYwMTAxMDIxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxM2JiNDgwODE3ZTYyODlkMjY4NTcyZGFmMzg5Zjk4NTY5ZmE1NjM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjuoyIAwLIpiNToz/wAemTQP43nr ButG+54AV8eo3NlbDmKCHs+1iKY8BaYJm4Hgm4x9s8WNIJH6RfrPsMGGXMYr9Jw2 dRjmJ34Dh32ULfZFOAg+iZmCKNhWKXfJa9sJn+F3UkHgI9pim4bPfTTF/Rgb0z3H TQBTdwbVQdQiTw3y66Amt+kZHIRsId6SJBIc7DmzTwP81RatHpAANt3yypLS7VAw F9r6QQ31dvrtKItELZnR6RvFVAq/pvJj8h5yPXfMHYWTHGMBDGY5P8EnHrq8dwak QzXFuKcVhwkS3DYQjDuC98csHY5+ospQz7aT0wdUP2ErVJtvdQC8JzZASQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBO7SAgX5iidJoVy2vOJ+YVp+lY5MB8GA1UdIwQY MBaAFLmVRJmXcninVXCzQD9NOqALGzboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAt MDI0YjE2NTVjMjQ3LzEvRTd0SUNCZm1LSjBtaFhMYTg0bjVoV242VmprLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAtMDI0YjE2NTVjMjQ3 LzEvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVR/0MA0G CSqGSIb3DQEBCwUAA4IBAQBDWVc9SML4FyeLYBdjg4UPIfJCd6Sy8fXqw9PWmoay 73QHjaUh/gJ/LNKvNCP4rziZ+XN+LXdbzVgXF8JMheDaaO30IVrQulppdRFtL6hQ QkpV0Gld3iN8vq2pEhkXWcUKRTfMxZSmsbIybmaZ/aTfKRveB2HFwu1Bh0zwCtVR evBp/nhtwsqO8aRPM9Gzmz7wTKbv8qIXOuGwy6uMf7iiveZUtz6ytQdYDlCJ8sgB mtKlbNeoh0liPOkPb2ZRy7HlMCywR8cLmR+4CAPfGKfljarW7L9dHbMUPp25SzIG lb9f3MCy/R2dAX5vxkEisHJcWNspvgYiC0jab2jK5oVo -----END CERTIFICATE-----Generated at Sun Jan 25 20:30:50 2026 by rpki-client