This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/cEVQvlHG_83qLSqJ-yOSfZU_Je4.roa File: cEVQvlHG_83qLSqJ-yOSfZU_Je4.roa (raw, json) Hash identifier: i6P6/wEYKpIqpv7ESWAI5h8FbRSdh59UavZIvVb/NbU= Subject key identifier: 70:45:50:BE:51:C6:FF:CD:EA:2D:2A:89:FB:23:92:7D:95:3F:25:EE Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430 Certificate serial: 019BF45BB8D55F425F7A02BBFA8FA101B3B9 Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/cEVQvlHG_83qLSqJ-yOSfZU_Je4.roa Signing time: Sun 25 Jan 2026 08:53:30 +0000 ROA not before: Sun 25 Jan 2026 08:53:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48715 IP address blocks: 212.16.71.0/24 maxlen: 24 212.80.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:5b:b8:d5:5f:42:5f:7a:02:bb:fa:8f:a1:01:b3:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430 Validity Not Before: Jan 25 08:53:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=704550be51c6ffcdea2d2a89fb23927d953f25ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:dc:c3:0d:24:98:74:81:23:3c:f8:de:14:f4: a8:18:1b:c9:4b:ff:44:44:a3:a0:b2:6c:73:b3:98: d6:48:77:2a:ae:f1:98:30:ce:5e:9e:01:5b:29:f6: 14:81:e0:d0:2f:a8:24:42:6d:7b:76:fc:05:ee:1a: c1:68:08:a8:5c:c0:03:72:29:29:29:a4:11:2f:9c: e5:90:48:28:21:fb:62:5c:26:82:3d:da:9f:20:62: 91:db:b4:71:00:9e:20:53:af:d9:bc:f0:60:65:1c: 93:56:9b:0e:46:f0:ce:71:e0:51:b1:a4:e7:d1:62: 83:fc:6e:94:4d:5f:cc:c0:72:8a:ab:51:0c:c8:ca: a9:fe:78:e2:b6:8a:75:36:f9:5f:3a:dd:89:e9:67: 6d:88:1a:10:ae:4d:34:6d:fb:f5:a5:5b:22:c7:96: c2:e9:15:30:53:5e:a2:f5:d4:8b:50:29:64:19:52: 4f:c7:95:b0:4c:40:01:e4:e5:cb:45:43:d3:0d:01: 3b:08:00:d1:c0:30:a6:98:f6:7f:3b:b6:9f:82:17: 3b:ed:dc:82:e8:85:13:d2:86:b8:28:86:77:44:d9: d8:18:b3:a8:24:2a:2a:c7:24:ba:24:77:97:b1:e1: ac:45:c8:53:b8:1b:2a:6b:ab:37:d7:29:e0:23:13: 2f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:45:50:BE:51:C6:FF:CD:EA:2D:2A:89:FB:23:92:7D:95:3F:25:EE X509v3 Authority Key Identifier: keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/cEVQvlHG_83qLSqJ-yOSfZU_Je4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.16.71.0/24 212.80.31.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:df:06:08:bc:38:3d:a0:38:7b:0f:da:5f:24:d1:2f:9d:de: 9a:57:f7:1d:de:80:7a:f6:38:cc:6a:ff:11:c0:9f:3d:5c:dc: e5:c4:6a:ac:a1:f6:ed:74:11:33:d3:47:8b:b1:77:4b:09:a7: dc:75:12:cd:db:25:18:4c:eb:a5:3b:45:be:db:37:b9:94:9d: 8d:05:66:00:63:cc:e5:4b:c5:bd:b9:50:1d:d7:23:d1:4e:64: 86:91:94:e9:a9:14:21:8e:48:51:ac:d7:02:2b:1b:f6:a9:97: 65:f9:41:4b:65:e8:62:60:ec:a9:b2:e3:ff:d6:94:1e:60:11: 0f:e0:6a:18:74:7f:e7:94:0d:b0:f2:fa:56:ea:51:5c:33:7c: 98:2a:9a:63:41:9b:9b:2b:e8:ef:e5:58:1e:ae:d0:41:f9:a9: cf:38:f0:70:36:7c:c9:1e:e4:b5:46:8e:b4:d7:3e:39:3c:8a: 62:ef:92:f2:db:ba:36:29:26:12:ac:5c:86:0d:d5:b6:fc:fb: 1b:37:3b:fe:2c:af:9c:d6:fd:52:88:c5:77:ac:9f:95:ac:8a: e3:d9:b0:0e:6e:f2:0b:ee:f7:94:4d:0c:5b:86:ed:4e:b0:3d: 0e:83:f0:ae:07:02:c6:2b:3c:dc:03:90:34:ce:0c:17:50:1d: 08:39:f8:5e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZv0W7jVX0JfegK7+o+hAbO5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj NWY0MzAwHhcNMjYwMTI1MDg1MzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDQ1NTBiZTUxYzZmZmNkZWEyZDJhODlmYjIzOTI3ZDk1M2YyNWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNzDDSSYdIEjPPjeFPSoGBvJS/9E RKOgsmxzs5jWSHcqrvGYMM5engFbKfYUgeDQL6gkQm17dvwF7hrBaAioXMADcikp KaQRL5zlkEgoIftiXCaCPdqfIGKR27RxAJ4gU6/ZvPBgZRyTVpsORvDOceBRsaTn 0WKD/G6UTV/MwHKKq1EMyMqp/njitop1NvlfOt2J6WdtiBoQrk00bfv1pVsix5bC 6RUwU16i9dSLUClkGVJPx5WwTEAB5OXLRUPTDQE7CADRwDCmmPZ/O7afghc77dyC 6IUT0oa4KIZ3RNnYGLOoJCoqxyS6JHeXseGsRchTuBsqa6s31yngIxMvYwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHBFUL5Rxv/N6i0qifsjkn2VPyXuMB8GA1UdIwQY MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt MmEwOWNjNTNhODA1LzEvY0VWUXZsSEdfODNxTFNxSi15T1NmWlVfSmU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1 LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1BBHAwQA 1FAfMA0GCSqGSIb3DQEBCwUAA4IBAQA93wYIvDg9oDh7D9pfJNEvnd6aV/cd3oB6 9jjMav8RwJ89XNzlxGqsofbtdBEz00eLsXdLCafcdRLN2yUYTOulO0W+2ze5lJ2N BWYAY8zlS8W9uVAd1yPRTmSGkZTpqRQhjkhRrNcCKxv2qZdl+UFLZehiYOypsuP/ 1pQeYBEP4GoYdH/nlA2w8vpW6lFcM3yYKppjQZubK+jv5VgertBB+anPOPBwNnzJ HuS1Ro601z45PIpi75Ly27o2KSYSrFyGDdW2/PsbNzv+LK+c1v1SiMV3rJ+VrIrj 2bAObvIL7veUTQxbhu1OsD0Og/CuBwLGKzzcA5A0zgwXUB0IOfhe -----END CERTIFICATE-----Generated at Sun Jan 25 16:17:42 2026 by rpki-client