This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/ENw1C_RnXFX5u68Lf1yCGRU2j50.roa File: ENw1C_RnXFX5u68Lf1yCGRU2j50.roa (raw, json) Hash identifier: laVhxtiGuU9nq7LPNeyNYQb/Cwi24PMNAEi+kdkehFA= Subject key identifier: 10:DC:35:0B:F4:67:5C:55:F9:BB:AF:0B:7F:5C:82:19:15:36:8F:9D Certificate issuer: /CN=5e95fdfd28cdc03d89d214e4ad3a6c5fb3ebacbf Certificate serial: 019B7BA4D0B31C6185941FCD4D38829032A7 Authority key identifier: 5E:95:FD:FD:28:CD:C0:3D:89:D2:14:E4:AD:3A:6C:5F:B3:EB:AC:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/ENw1C_RnXFX5u68Lf1yCGRU2j50.roa Signing time: Thu 01 Jan 2026 22:19:17 +0000 ROA not before: Thu 01 Jan 2026 22:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21350 IP address blocks: 80.244.160.0/21 maxlen: 21 80.244.160.0/24 maxlen: 24 80.244.161.0/24 maxlen: 24 80.244.163.0/24 maxlen: 24 80.244.164.0/24 maxlen: 24 80.244.165.0/24 maxlen: 24 80.244.166.0/24 maxlen: 24 80.244.168.0/24 maxlen: 24 80.244.169.0/24 maxlen: 24 80.244.170.0/24 maxlen: 24 80.244.171.0/24 maxlen: 24 80.244.172.0/23 maxlen: 23 95.175.32.0/20 maxlen: 20 95.175.38.0/24 maxlen: 24 95.175.45.0/24 maxlen: 24 95.175.48.0/24 maxlen: 24 95.175.49.0/24 maxlen: 24 95.175.51.0/24 maxlen: 24 95.175.52.0/22 maxlen: 22 95.175.52.0/24 maxlen: 24 95.175.53.0/24 maxlen: 24 95.175.56.0/21 maxlen: 21 95.175.60.0/24 maxlen: 24 95.175.61.0/24 maxlen: 24 95.175.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.crl rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:d0:b3:1c:61:85:94:1f:cd:4d:38:82:90:32:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e95fdfd28cdc03d89d214e4ad3a6c5fb3ebacbf Validity Not Before: Jan 1 22:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=10dc350bf4675c55f9bbaf0b7f5c821915368f9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:03:45:ee:54:65:4b:6f:18:ac:84:e1:82:6f: 22:de:1e:ba:ce:88:61:a2:2b:5f:0e:1e:06:fe:41: ed:88:48:cf:9e:be:09:82:bc:a3:80:c7:7a:8a:56: f4:79:8e:44:c0:75:ce:0a:5d:df:c9:a6:21:51:fd: a0:50:fb:05:79:16:fc:12:0f:f1:5b:2d:46:8b:2a: 83:78:af:98:3a:6f:a3:c6:cb:1d:33:6f:a7:fe:bc: b0:61:c9:37:cd:e6:d4:da:f9:33:78:23:86:37:65: 12:ab:04:cd:13:bc:71:a0:8e:53:28:8c:12:ad:21: 34:3a:87:73:56:7a:3f:e0:6b:d7:99:db:f9:4f:8e: 16:b3:1d:5e:8b:b9:6f:4b:12:ae:ee:6c:59:4d:50: 9a:42:fc:a9:20:c1:8c:28:8e:74:4f:4b:7d:c1:c6: 06:de:d3:d8:c8:c2:3e:e3:0a:1b:46:df:97:13:d6: d3:09:8a:c7:57:54:88:b6:4a:56:30:f5:8e:d6:96: 3e:65:a1:0f:2e:12:b8:19:7a:db:db:7c:7d:77:c1: cc:ad:3a:1d:66:ff:8c:10:a5:18:40:4c:93:5a:0b: 3d:0e:e4:87:4d:27:86:bb:0c:9d:d4:91:96:c9:cd: 06:9c:e9:66:a9:48:3d:aa:d1:b9:d5:3c:b9:78:de: 7a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:DC:35:0B:F4:67:5C:55:F9:BB:AF:0B:7F:5C:82:19:15:36:8F:9D X509v3 Authority Key Identifier: keyid:5E:95:FD:FD:28:CD:C0:3D:89:D2:14:E4:AD:3A:6C:5F:B3:EB:AC:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/ENw1C_RnXFX5u68Lf1yCGRU2j50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.244.160.0-80.244.173.255 95.175.32.0-95.175.49.255 95.175.51.0-95.175.63.255 Signature Algorithm: sha256WithRSAEncryption 34:56:4c:9a:6b:50:80:5d:fb:16:0b:bd:ec:7b:2e:c3:ae:63: 1f:1d:9a:52:4d:39:84:f3:08:04:67:ee:9b:98:d1:d7:14:3f: 95:a4:6a:d9:f0:af:96:68:70:81:0e:d4:e0:f3:f7:19:2e:39: de:4e:8b:47:12:6f:8c:e4:14:f8:cb:65:39:54:4e:a4:7c:1e: 62:d8:bc:47:91:d8:e9:d4:bd:5c:74:95:f9:14:69:09:f0:d6: 35:a2:15:f0:4d:39:d8:31:c6:9f:8e:7c:51:b0:b1:4c:54:d0: 3e:ea:34:b2:19:87:66:4d:e5:ae:b8:98:3c:83:68:53:3d:09: dd:52:f8:6f:c6:e1:2a:cb:18:22:e1:24:a0:11:5b:ff:06:7a: 0e:e9:d5:12:bc:b9:ed:1c:a2:32:6c:84:7a:7e:54:a7:75:52: ef:6e:e0:2a:51:1c:98:55:e2:ee:aa:a0:37:7b:e3:10:d5:de: 00:89:0b:e8:44:cb:87:11:9d:c8:02:e3:f4:bf:eb:d8:34:06: c5:b9:9d:75:39:fe:dd:3c:1c:17:60:2c:fe:2b:90:0a:8f:70: 75:09:2c:af:d5:62:fc:be:c9:b6:75:88:ca:45:6f:d0:a1:4c: 58:95:33:ce:b4:f8:5c:6b:06:c1:86:1e:a7:05:5e:4b:fe:d2: a0:ff:76:fe -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt7pNCzHGGFlB/NTTiCkDKnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlOTVmZGZkMjhjZGMwM2Q4OWQyMTRlNGFkM2E2YzVmYjNl YmFjYmYwHhcNMjYwMTAxMjIxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMGRjMzUwYmY0Njc1YzU1ZjliYmFmMGI3ZjVjODIxOTE1MzY4ZjlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywNF7lRlS28YrIThgm8i3h66zohh oitfDh4G/kHtiEjPnr4JgryjgMd6ilb0eY5EwHXOCl3fyaYhUf2gUPsFeRb8Eg/x Wy1GiyqDeK+YOm+jxssdM2+n/rywYck3zebU2vkzeCOGN2USqwTNE7xxoI5TKIwS rSE0OodzVno/4GvXmdv5T44Wsx1ei7lvSxKu7mxZTVCaQvypIMGMKI50T0t9wcYG 3tPYyMI+4wobRt+XE9bTCYrHV1SItkpWMPWO1pY+ZaEPLhK4GXrb23x9d8HMrTod Zv+MEKUYQEyTWgs9DuSHTSeGuwyd1JGWyc0GnOlmqUg9qtG51Ty5eN56LQIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFBDcNQv0Z1xV+buvC39cghkVNo+dMB8GA1UdIwQY MBaAFF6V/f0ozcA9idIU5K06bF+z66y/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHBYOV9Tak53RDJKMGhUa3JUcHNYN1Byckw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni83YmZmM2UtMDNhYS00ZTBhLWIyZmMt NGE3ZGRmMmQ4NmJkLzEvRU53MUNfUm5YRlg1dTY4TGYxeUNHUlUyajUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni83YmZmM2UtMDNhYS00ZTBhLWIyZmMtNGE3ZGRmMmQ4NmJk LzEvWHBYOV9Tak53RDJKMGhUa3JUcHNYN1Byckw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqMAwDBAVQ9KAD BAFQ9KwwDAMEBV+vIAMEAV+vMDAMAwQAX68zAwQGX68AMA0GCSqGSIb3DQEBCwUA A4IBAQA0Vkyaa1CAXfsWC73sey7DrmMfHZpSTTmE8wgEZ+6bmNHXFD+VpGrZ8K+W aHCBDtTg8/cZLjneTotHEm+M5BT4y2U5VE6kfB5i2LxHkdjp1L1cdJX5FGkJ8NY1 ohXwTTnYMcafjnxRsLFMVNA+6jSyGYdmTeWuuJg8g2hTPQndUvhvxuEqyxgi4SSg EVv/BnoO6dUSvLntHKIybIR6flSndVLvbuAqURyYVeLuqqA3e+MQ1d4AiQvoRMuH EZ3IAuP0v+vYNAbFuZ11Of7dPBwXYCz+K5AKj3B1CSyv1WL8vsm2dYjKRW/QoUxY lTPOtPhcawbBhh6nBV5L/tKg/3b+ -----END CERTIFICATE-----Generated at Sun Jan 25 12:18:11 2026 by rpki-client