This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/E-oIiGlZfX5hqiKQXtKucjllYUk.roa File: E-oIiGlZfX5hqiKQXtKucjllYUk.roa (raw, json) Hash identifier: lyqop0HaLt07HWCMdbsYQ/bfLgKyF02QQKQwg4136FM= Subject key identifier: 13:EA:08:88:69:59:7D:7E:61:AA:22:90:5E:D2:AE:72:39:65:61:49 Certificate issuer: /CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc Certificate serial: 019B7E39074FB4CFC8B7BFFF81AE02C28982 Authority key identifier: CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/E-oIiGlZfX5hqiKQXtKucjllYUk.roa Signing time: Fri 02 Jan 2026 10:20:25 +0000 ROA not before: Fri 02 Jan 2026 10:20:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209165 IP address blocks: 138.226.235.0/24 maxlen: 24 216.163.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:07:4f:b4:cf:c8:b7:bf:ff:81:ae:02:c2:89:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc Validity Not Before: Jan 2 10:20:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=13ea088869597d7e61aa22905ed2ae7239656149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f5:8c:8f:4e:cb:ef:77:c7:3b:d2:97:5a:e8: 49:92:b8:02:38:70:0c:ce:81:0c:0b:c9:da:9d:42: cc:e6:41:13:17:19:cb:8d:8f:96:12:53:3b:a2:8b: 15:40:f6:8b:be:03:7c:1b:33:7f:51:12:c7:4c:40: 91:e4:91:bd:6b:e8:4a:09:50:d0:ff:df:74:57:69: fa:5d:34:a3:79:93:82:34:e2:99:16:f8:a5:46:55: a7:c7:e5:f6:67:09:b4:81:42:fe:1e:56:83:0b:df: 2a:42:a4:59:2a:30:16:f6:bd:4b:ef:02:03:09:50: e5:63:d4:49:50:a2:4d:99:e2:69:fb:c9:dd:e6:10: a4:e9:59:a0:59:96:06:a7:bc:07:77:2b:fa:1f:91: 79:0a:67:6f:e8:37:74:a4:4a:02:68:6a:21:6e:7d: 28:81:75:c9:24:f7:fb:85:f6:01:f5:93:8b:fc:eb: 07:50:93:52:cf:70:0a:f4:bf:3b:a4:c0:5c:92:5f: a9:b5:75:05:e8:f6:a6:a6:f4:41:d5:38:56:06:89: be:56:e5:0f:2a:ab:d9:5b:06:6b:b4:8e:04:41:5a: bc:bd:69:ec:f8:6d:26:ce:dc:b8:67:69:e2:55:1b: 99:97:d1:b1:ea:26:f0:3f:3c:6f:ac:62:a3:cb:42: 1a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:EA:08:88:69:59:7D:7E:61:AA:22:90:5E:D2:AE:72:39:65:61:49 X509v3 Authority Key Identifier: keyid:CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/E-oIiGlZfX5hqiKQXtKucjllYUk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.226.235.0/24 216.163.176.0/24 Signature Algorithm: sha256WithRSAEncryption a8:ef:67:3f:f4:bb:fa:f9:66:2d:6b:79:d2:ef:8e:e5:75:e7: db:3a:98:6c:d3:e9:3e:8f:81:48:d4:1a:df:83:4d:5f:45:01: 98:a6:cc:ad:8a:20:9f:96:ad:ea:f2:03:3f:db:00:cf:88:3c: 04:87:84:fb:f8:fb:f3:97:77:5c:2f:8a:39:06:5e:0b:8a:c2: 95:41:4a:a5:2b:e3:48:03:ca:c3:05:91:5f:bd:6c:65:18:5d: 2d:8e:d4:37:69:0c:c6:81:37:60:19:fa:53:c6:d2:97:f5:5f: 2f:3b:1f:80:8a:7f:7a:f0:44:f6:76:41:ff:d6:73:77:4a:98: f5:ea:9d:0f:a1:d7:dc:92:1f:a8:4a:e6:3c:40:aa:75:bf:32: 65:2a:d2:16:01:bb:c9:c5:d1:a2:ef:f8:9b:e4:c4:70:d8:cd: dc:3a:36:d0:6c:19:c2:69:d2:7c:db:8d:d7:90:a8:8f:17:ba: db:ce:11:e5:1c:0d:22:21:82:ef:c2:f3:51:7f:f8:75:ea:8b: 48:10:5c:f2:77:fc:5b:02:ad:3c:5f:56:a6:df:97:fb:96:7b: 5f:00:20:00:51:72:f3:b6:3b:62:45:26:c2:f8:ad:ca:85:f3: 22:61:f5:dc:2b:95:32:a4:e9:24:3b:3e:1b:c0:f1:5b:9d:ea: ae:ee:5c:12 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+OQdPtM/It7//ga4CwomCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhNjQ0MWQ5ZDgwN2UwZDc4Y2U3NTIxM2ExMDM0MDBlZTE0 YTdjZGMwHhcNMjYwMTAyMTAyMDI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxM2VhMDg4ODY5NTk3ZDdlNjFhYTIyOTA1ZWQyYWU3MjM5NjU2MTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfWMj07L73fHO9KXWuhJkrgCOHAM zoEMC8nanULM5kETFxnLjY+WElM7oosVQPaLvgN8GzN/URLHTECR5JG9a+hKCVDQ /990V2n6XTSjeZOCNOKZFvilRlWnx+X2Zwm0gUL+HlaDC98qQqRZKjAW9r1L7wID CVDlY9RJUKJNmeJp+8nd5hCk6VmgWZYGp7wHdyv6H5F5Cmdv6Dd0pEoCaGohbn0o gXXJJPf7hfYB9ZOL/OsHUJNSz3AK9L87pMBckl+ptXUF6PampvRB1ThWBom+VuUP KqvZWwZrtI4EQVq8vWns+G0mzty4Z2niVRuZl9Gx6ibwPzxvrGKjy0IaxwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBPqCIhpWX1+YaoikF7SrnI5ZWFJMB8GA1UdIwQY MBaAFMpkQdnYB+DXjOdSE6EDQA7hSnzcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveW1SQjJkZ0g0TmVNNTFJVG9RTkFEdUZLZk53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC85OTQ3YjYtMzRiYy00NzdlLTg4MTYt MmUyOGI5NjQ5OGE5LzEvRS1vSWlHbFpmWDVocWlLUVh0S3VjamxsWVVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC85OTQ3YjYtMzRiYy00NzdlLTg4MTYtMmUyOGI5NjQ5OGE5 LzEveW1SQjJkZ0g0TmVNNTFJVG9RTkFEdUZLZk53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAiuLrAwQA 2KOwMA0GCSqGSIb3DQEBCwUAA4IBAQCo72c/9Lv6+WYta3nS747ldefbOphs0+k+ j4FI1Brfg01fRQGYpsytiiCflq3q8gM/2wDPiDwEh4T7+Pvzl3dcL4o5Bl4LisKV QUqlK+NIA8rDBZFfvWxlGF0tjtQ3aQzGgTdgGfpTxtKX9V8vOx+Ain968ET2dkH/ 1nN3Spj16p0Podfckh+oSuY8QKp1vzJlKtIWAbvJxdGi7/ib5MRw2M3cOjbQbBnC adJ8243XkKiPF7rbzhHlHA0iIYLvwvNRf/h16otIEFzyd/xbAq08X1am35f7lntf ACAAUXLztjtiRSbC+K3KhfMiYfXcK5UypOkkOz4bwPFbnequ7lwS -----END CERTIFICATE-----Generated at Sun Jan 25 17:15:48 2026 by rpki-client