This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/Evg5E-8VSXY1dFWe0dsHFW-O_Jo.roa File: Evg5E-8VSXY1dFWe0dsHFW-O_Jo.roa (raw, json) Hash identifier: Icoysq39tLxqHCpP3ABhw3yUgnv4HKO+EMDypdb4KPE= Subject key identifier: 12:F8:39:13:EF:15:49:76:35:74:55:9E:D1:DB:07:15:6F:8E:FC:9A Certificate issuer: /CN=b1768f0a8d1ed1173ecedc689c177b249ee3a68c Certificate serial: 019B77593B25BE3B5A519FC3BD420CCDDC31 Authority key identifier: B1:76:8F:0A:8D:1E:D1:17:3E:CE:DC:68:9C:17:7B:24:9E:E3:A6:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXaPCo0e0Rc-ztxonBd7JJ7jpow.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/Evg5E-8VSXY1dFWe0dsHFW-O_Jo.roa Signing time: Thu 01 Jan 2026 02:18:15 +0000 ROA not before: Thu 01 Jan 2026 02:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208864 IP address blocks: 91.212.139.0/24 maxlen: 24 91.220.53.0/24 maxlen: 24 185.35.96.0/22 maxlen: 22 185.145.24.0/22 maxlen: 22 185.178.232.0/22 maxlen: 22 185.252.76.0/22 maxlen: 22 185.252.244.0/22 maxlen: 22 2a00:dfa0::/32 maxlen: 32 2a0a:6f80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.crl rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.mft rsync://rpki.ripe.net/repository/DEFAULT/sXaPCo0e0Rc-ztxonBd7JJ7jpow.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:3b:25:be:3b:5a:51:9f:c3:bd:42:0c:cd:dc:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1768f0a8d1ed1173ecedc689c177b249ee3a68c Validity Not Before: Jan 1 02:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=12f83913ef1549763574559ed1db07156f8efc9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ad:b3:67:28:62:91:8f:31:8f:72:40:20:68: d2:1c:de:3e:d7:5d:75:c6:62:84:6a:8c:cd:de:0f: 2b:c3:82:8c:de:71:d6:d6:5b:4b:2e:22:1f:df:a6: ad:63:8e:4f:ac:4f:49:95:7c:7d:c9:43:93:82:db: 81:02:29:98:23:39:83:c1:36:1d:82:1f:6b:43:9c: c6:a2:16:5c:29:54:22:ff:af:86:58:44:91:b6:a3: 90:21:2d:c2:8a:8e:6a:37:73:a8:ed:c7:8d:e6:a6: 26:b0:7f:1d:2b:49:93:3a:a9:7c:78:5c:89:7f:58: 78:c2:87:03:e8:5b:53:b1:39:f4:e9:db:de:6f:14: 63:d1:af:36:1a:f9:63:5b:94:84:1c:3e:61:a9:27: 01:0e:95:dd:db:f7:38:18:de:f6:11:b4:76:36:e1: 0b:92:f6:10:4c:46:50:1f:ac:5a:b2:0a:72:49:db: a1:be:5a:14:75:43:fe:22:c8:ad:69:b6:ed:f6:10: d7:ea:de:aa:24:f9:42:fd:b3:ba:a1:ae:7b:9e:14: bf:ba:89:22:b1:28:59:d7:e9:ac:2d:0e:52:f2:38: 26:aa:6b:16:29:1b:20:e1:30:fe:cb:8d:23:35:4b: bd:c2:8e:f5:e4:7f:83:52:ea:b0:2d:9a:6f:cc:75: f1:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:F8:39:13:EF:15:49:76:35:74:55:9E:D1:DB:07:15:6F:8E:FC:9A X509v3 Authority Key Identifier: keyid:B1:76:8F:0A:8D:1E:D1:17:3E:CE:DC:68:9C:17:7B:24:9E:E3:A6:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXaPCo0e0Rc-ztxonBd7JJ7jpow.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/Evg5E-8VSXY1dFWe0dsHFW-O_Jo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/da014a-4446-43a0-8bd6-24201c25298f/1/sXaPCo0e0Rc-ztxonBd7JJ7jpow.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.212.139.0/24 91.220.53.0/24 185.35.96.0/22 185.145.24.0/22 185.178.232.0/22 185.252.76.0/22 185.252.244.0/22 IPv6: 2a00:dfa0::/32 2a0a:6f80::/32 Signature Algorithm: sha256WithRSAEncryption 57:d5:66:8a:35:b7:0a:cb:9d:6e:4a:0e:6c:5a:ee:cd:94:72: db:9f:22:7f:90:d5:39:0e:d7:7d:13:fd:cc:7c:39:4d:aa:e0: 3a:1f:1e:a1:59:d6:96:9a:2e:43:4f:44:88:9d:80:26:c3:77: 81:cc:01:8b:1e:48:56:40:3f:54:06:d8:3e:d4:7b:a0:74:f5: 83:2c:98:91:fc:d4:67:b1:7a:c6:7c:71:3f:e7:0e:ec:53:8e: 0a:55:31:a0:8a:5f:83:60:f3:c3:2c:67:61:4e:5d:33:5e:32: 4e:11:b8:0d:8f:4e:f9:c3:59:cd:77:88:60:6b:5e:3d:1a:6a: 7f:0a:40:a4:d3:6c:9d:22:15:ee:ea:9c:36:ff:af:c5:95:9a: 9d:d2:26:3f:45:64:f8:a6:ec:43:a7:e8:aa:31:97:e1:bf:22: 5a:14:c0:82:3c:32:46:0f:58:33:f3:2d:31:00:44:be:2c:52: 35:20:06:d6:e3:1b:89:e8:91:86:f5:6b:97:cc:19:2b:f8:62: ae:4b:2e:c2:3c:6f:85:70:14:4a:f0:1a:81:22:b8:28:c1:ea: b1:65:ef:70:e0:53:cb:36:ac:19:87:de:e2:a7:ea:8b:27:cf: 3a:f8:14:fe:56:5a:65:eb:9c:5f:e6:6f:80:40:a0:73:0e:9d: f5:25:12:64 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgISAZt3WTslvjtaUZ/DvUIMzdwxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNzY4ZjBhOGQxZWQxMTczZWNlZGM2ODljMTc3YjI0OWVl M2E2OGMwHhcNMjYwMTAxMDIxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMmY4MzkxM2VmMTU0OTc2MzU3NDU1OWVkMWRiMDcxNTZmOGVmYzlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs62zZyhikY8xj3JAIGjSHN4+1111 xmKEaozN3g8rw4KM3nHW1ltLLiIf36atY45PrE9JlXx9yUOTgtuBAimYIzmDwTYd gh9rQ5zGohZcKVQi/6+GWESRtqOQIS3Cio5qN3Oo7ceN5qYmsH8dK0mTOql8eFyJ f1h4wocD6FtTsTn06dvebxRj0a82GvljW5SEHD5hqScBDpXd2/c4GN72EbR2NuEL kvYQTEZQH6xasgpySduhvloUdUP+Isitabbt9hDX6t6qJPlC/bO6oa57nhS/uoki sShZ1+msLQ5S8jgmqmsWKRsg4TD+y40jNUu9wo715H+DUuqwLZpvzHXxjQIDAQAB o4ICQzCCAj8wHQYDVR0OBBYEFBL4ORPvFUl2NXRVntHbBxVvjvyaMB8GA1UdIwQY MBaAFLF2jwqNHtEXPs7caJwXeySe46aMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1hhUENvMGUwUmMtenR4b25CZDdKSjdqcG93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9kYTAxNGEtNDQ0Ni00M2EwLThiZDYt MjQyMDFjMjUyOThmLzEvRXZnNUUtOFZTWFkxZEZXZTBkc0hGVy1PX0pvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9kYTAxNGEtNDQ0Ni00M2EwLThiZDYtMjQyMDFjMjUyOThm LzEvc1hhUENvMGUwUmMtenR4b25CZDdKSjdqcG93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDAwBAIAATAqAwQAW9SLAwQA W9w1AwQCuSNgAwQCuZEYAwQCubLoAwQCufxMAwQCufz0MBQEAgACMA4DBQAqAN+g AwUAKgpvgDANBgkqhkiG9w0BAQsFAAOCAQEAV9VmijW3CsudbkoObFruzZRy258i f5DVOQ7XfRP9zHw5TargOh8eoVnWlpouQ09EiJ2AJsN3gcwBix5IVkA/VAbYPtR7 oHT1gyyYkfzUZ7F6xnxxP+cO7FOOClUxoIpfg2DzwyxnYU5dM14yThG4DY9O+cNZ zXeIYGtePRpqfwpApNNsnSIV7uqcNv+vxZWandImP0Vk+KbsQ6foqjGX4b8iWhTA gjwyRg9YM/MtMQBEvixSNSAG1uMbieiRhvVrl8wZK/hirksuwjxvhXAUSvAagSK4 KMHqsWXvcOBTyzasGYfe4qfqiyfPOvgU/lZaZeucX+ZvgECgcw6d9SUSZA== -----END CERTIFICATE-----Generated at Sun Jan 25 14:04:27 2026 by rpki-client