This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/eRkG__v-agv3NMIcUwrG_j0F1S4.roa File: eRkG__v-agv3NMIcUwrG_j0F1S4.roa (raw, json) Hash identifier: qxtO1OQQFM2+lJPuzN9yMsque6yNP09ybveH8spKwIw= Subject key identifier: 79:19:06:FF:FB:FE:6A:0B:F7:34:C2:1C:53:0A:C6:FE:3D:05:D5:2E Certificate issuer: /CN=37949ac84d0b86910f4fd3cf5962927d83450aeb Certificate serial: 019B7E3901B7AADCFFA90ABD45BF25CA31AA Authority key identifier: 37:94:9A:C8:4D:0B:86:91:0F:4F:D3:CF:59:62:92:7D:83:45:0A:EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5SayE0LhpEPT9PPWWKSfYNFCus.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/eRkG__v-agv3NMIcUwrG_j0F1S4.roa Signing time: Fri 02 Jan 2026 10:20:23 +0000 ROA not before: Fri 02 Jan 2026 10:20:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47820 IP address blocks: 91.205.116.0/22 maxlen: 24 109.234.0.0/21 maxlen: 24 185.148.224.0/22 maxlen: 24 185.232.192.0/22 maxlen: 24 193.242.174.0/23 maxlen: 24 2a07:6200::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.crl rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft rsync://rpki.ripe.net/repository/DEFAULT/N5SayE0LhpEPT9PPWWKSfYNFCus.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:01:b7:aa:dc:ff:a9:0a:bd:45:bf:25:ca:31:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37949ac84d0b86910f4fd3cf5962927d83450aeb Validity Not Before: Jan 2 10:20:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=791906fffbfe6a0bf734c21c530ac6fe3d05d52e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:48:01:76:2f:81:53:d3:15:0c:df:f1:f7:5a: ee:71:89:9d:42:16:d6:51:8a:88:4d:98:b9:ae:1a: e8:52:5d:b1:64:2e:fa:b1:17:03:98:ab:5c:77:a6: d8:0d:a7:e0:2e:51:36:8f:5c:c9:75:b9:95:80:83: 47:a1:ba:49:0d:6e:3e:75:97:7e:af:7b:8e:50:aa: de:f7:a6:b2:cf:9a:19:bd:63:08:1d:8e:dd:a3:ef: 9d:ab:64:14:14:8d:4c:e1:42:01:d7:b7:f5:c1:da: be:82:4f:f4:29:85:e8:47:99:33:d9:1e:09:b6:89: cb:46:2c:9e:51:c9:fa:2b:b6:e7:e3:af:80:ea:ff: f1:e4:85:37:4f:bf:dc:40:67:f6:2c:37:f8:ad:79: a3:91:13:be:be:aa:7e:c6:32:01:6a:0a:9c:49:52: e2:a3:c4:97:d3:fa:2c:8a:a6:d6:07:0e:ff:4f:12: 48:9d:a7:d1:50:38:6c:fb:0c:fb:f8:60:58:80:17: 01:52:05:92:73:7a:f3:c0:37:31:8b:48:58:dd:c5: 26:89:ca:14:de:1c:d7:be:f5:e8:19:00:4c:6f:bd: 2c:74:22:4e:76:27:6e:33:cf:77:fa:30:1e:f7:9b: 08:1a:ae:c1:95:6d:cc:4f:95:09:40:d9:36:c9:28: 60:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:19:06:FF:FB:FE:6A:0B:F7:34:C2:1C:53:0A:C6:FE:3D:05:D5:2E X509v3 Authority Key Identifier: keyid:37:94:9A:C8:4D:0B:86:91:0F:4F:D3:CF:59:62:92:7D:83:45:0A:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5SayE0LhpEPT9PPWWKSfYNFCus.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/eRkG__v-agv3NMIcUwrG_j0F1S4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.205.116.0/22 109.234.0.0/21 185.148.224.0/22 185.232.192.0/22 193.242.174.0/23 IPv6: 2a07:6200::/29 Signature Algorithm: sha256WithRSAEncryption ae:ce:e2:61:cf:eb:f8:aa:f4:29:61:31:20:12:16:e0:e8:1c: 8b:c8:5d:a9:f7:4e:00:27:4a:83:ad:2b:02:3f:d2:6a:b7:ca: 55:e8:62:88:1f:91:8a:f2:16:f3:ef:f1:3c:78:7b:91:0b:9a: 57:04:49:35:52:a6:53:2a:6e:13:4c:e0:ec:6b:27:c5:19:5b: b6:d5:e7:bb:09:ab:e6:9d:55:11:0d:3f:19:a3:3a:8a:e9:69: 71:e4:96:35:26:d4:78:54:f4:7b:5c:74:39:0b:bf:cf:76:e7: 57:f2:5c:86:37:16:76:2d:51:8a:7c:09:d8:de:c4:a9:d1:57: 82:89:27:cc:57:89:d6:01:0b:08:93:8e:77:33:de:b9:85:92: 4b:bf:34:e3:78:1e:1a:d2:7d:52:b7:9d:92:ba:5f:15:11:95: cc:5d:5d:21:a4:ad:67:de:1a:f1:ea:67:ff:ba:82:73:f9:76: 0e:19:85:8f:15:9d:a6:08:d2:40:3e:69:1c:9e:76:cb:71:2c: 82:88:6f:fc:20:b3:e0:b9:24:78:4b:44:6e:d2:42:63:bf:75: 0c:70:54:8e:38:f8:d6:0c:96:a6:49:00:fb:a3:67:8a:a4:5b: c8:f0:3c:f6:f5:69:b0:63:e6:7d:07:aa:b0:d2:8f:eb:c8:6c: 0a:7c:24:0c -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt+OQG3qtz/qQq9Rb8lyjGqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3OTQ5YWM4NGQwYjg2OTEwZjRmZDNjZjU5NjI5MjdkODM0 NTBhZWIwHhcNMjYwMTAyMTAyMDIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OTE5MDZmZmZiZmU2YTBiZjczNGMyMWM1MzBhYzZmZTNkMDVkNTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskgBdi+BU9MVDN/x91rucYmdQhbW UYqITZi5rhroUl2xZC76sRcDmKtcd6bYDafgLlE2j1zJdbmVgINHobpJDW4+dZd+ r3uOUKre96ayz5oZvWMIHY7do++dq2QUFI1M4UIB17f1wdq+gk/0KYXoR5kz2R4J tonLRiyeUcn6K7bn46+A6v/x5IU3T7/cQGf2LDf4rXmjkRO+vqp+xjIBagqcSVLi o8SX0/osiqbWBw7/TxJInafRUDhs+wz7+GBYgBcBUgWSc3rzwDcxi0hY3cUmicoU 3hzXvvXoGQBMb70sdCJOdiduM893+jAe95sIGq7BlW3MT5UJQNk2yShguQIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFHkZBv/7/moL9zTCHFMKxv49BdUuMB8GA1UdIwQY MBaAFDeUmshNC4aRD0/Tz1likn2DRQrrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjVTYXlFMExocEVQVDlQUFdXS1NmWU5GQ3VzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9jMjhlYTQtMDU5Yy00OWRkLTkyNzgt YTRkYjM5NmM4OTg3LzEvZVJrR19fdi1hZ3YzTk1JY1V3ckdfajBGMVM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9jMjhlYTQtMDU5Yy00OWRkLTkyNzgtYTRkYjM5NmM4OTg3 LzEvTjVTYXlFMExocEVQVDlQUFdXS1NmWU5GQ3VzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQCW810AwQD beoAAwQCuZTgAwQCuejAAwQBwfKuMA0EAgACMAcDBQMqB2IAMA0GCSqGSIb3DQEB CwUAA4IBAQCuzuJhz+v4qvQpYTEgEhbg6ByLyF2p904AJ0qDrSsCP9Jqt8pV6GKI H5GK8hbz7/E8eHuRC5pXBEk1UqZTKm4TTODsayfFGVu21ee7CavmnVURDT8ZozqK 6Wlx5JY1JtR4VPR7XHQ5C7/PdudX8lyGNxZ2LVGKfAnY3sSp0VeCiSfMV4nWAQsI k453M965hZJLvzTjeB4a0n1St52Sul8VEZXMXV0hpK1n3hrx6mf/uoJz+XYOGYWP FZ2mCNJAPmkcnnbLcSyCiG/8ILPguSR4S0Ru0kJjv3UMcFSOOPjWDJamSQD7o2eK pFvI8Dz29WmwY+Z9B6qw0o/ryGwKfCQM -----END CERTIFICATE-----Generated at Sun Jan 25 16:17:52 2026 by rpki-client