This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/EvXfIy8EpPQdaMKFJl6e0cyJ_rE.roa File: EvXfIy8EpPQdaMKFJl6e0cyJ_rE.roa (raw, json) Hash identifier: jUhRht5BMAytGX6b74o8TZEZnw6UUGNbksquStGyuoA= Subject key identifier: 12:F5:DF:23:2F:04:A4:F4:1D:68:C2:85:26:5E:9E:D1:CC:89:FE:B1 Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e Certificate serial: 019B79111C9E5761A0EF47AD8F02774A7768 Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/EvXfIy8EpPQdaMKFJl6e0cyJ_rE.roa Signing time: Thu 01 Jan 2026 10:18:43 +0000 ROA not before: Thu 01 Jan 2026 10:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213807 IP address blocks: 37.202.224.0/22 maxlen: 24 37.202.228.0/22 maxlen: 24 37.202.232.0/22 maxlen: 24 37.202.236.0/22 maxlen: 24 37.202.240.0/23 maxlen: 24 37.202.242.0/24 maxlen: 24 37.202.244.0/22 maxlen: 24 37.202.248.0/24 maxlen: 24 37.202.251.0/24 maxlen: 24 94.182.81.0/24 maxlen: 24 94.182.101.0/24 maxlen: 24 94.182.103.0/24 maxlen: 24 94.182.104.0/22 maxlen: 24 94.182.108.0/24 maxlen: 24 94.182.109.0/24 maxlen: 24 94.182.116.0/24 maxlen: 24 94.182.128.0/23 maxlen: 24 94.182.131.0/24 maxlen: 24 94.182.132.0/24 maxlen: 24 94.182.134.0/24 maxlen: 24 94.182.135.0/24 maxlen: 24 94.182.136.0/23 maxlen: 24 94.182.144.0/24 maxlen: 24 94.182.145.0/24 maxlen: 24 94.182.147.0/24 maxlen: 24 94.182.149.0/24 maxlen: 24 94.182.150.0/24 maxlen: 24 94.182.151.0/24 maxlen: 24 94.182.152.0/24 maxlen: 24 94.182.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:1c:9e:57:61:a0:ef:47:ad:8f:02:77:4a:77:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e Validity Not Before: Jan 1 10:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=12f5df232f04a4f41d68c285265e9ed1cc89feb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e8:72:aa:ef:59:75:64:1c:57:49:f3:f3:64: ad:6f:13:f7:fe:af:b1:e1:52:14:37:c8:fe:ab:b8: a5:12:3e:f7:ea:15:f5:48:f8:f3:49:4d:6c:5d:2a: 68:96:b5:cc:48:d6:0e:98:39:74:a5:02:14:c3:10: 48:2b:c7:11:5e:d5:71:a6:09:d2:c1:54:a6:cd:0c: af:3b:c1:24:2f:52:34:26:94:79:b2:73:d8:6a:76: eb:a5:f1:56:48:b7:da:82:a4:47:24:05:b8:be:e2: 1d:63:6d:c5:a8:61:28:25:f0:fb:f9:66:1c:1a:a7: 84:de:74:aa:be:b2:10:e1:c3:e8:61:f3:d5:8d:08: 94:18:02:fd:c4:cb:91:5f:92:b5:25:a9:43:aa:c8: aa:c1:00:65:74:92:6f:b3:2d:16:47:6c:56:06:85: 25:c3:08:f4:3b:55:90:2c:c7:a6:a1:71:43:2a:18: 29:49:28:e6:ce:65:d7:fa:ea:6e:0e:ac:cb:e8:ff: e9:bc:f5:bb:9d:fd:95:b6:c8:ff:44:af:d8:9e:f5: 29:a2:79:79:a6:b6:60:4c:97:06:53:84:62:45:79: 36:07:57:58:e7:34:97:ff:00:c8:f9:a8:d5:b9:0f: 9d:31:93:dd:5a:a9:b5:f9:47:9c:60:f3:96:7f:de: ef:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:F5:DF:23:2F:04:A4:F4:1D:68:C2:85:26:5E:9E:D1:CC:89:FE:B1 X509v3 Authority Key Identifier: keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/EvXfIy8EpPQdaMKFJl6e0cyJ_rE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.202.224.0-37.202.242.255 37.202.244.0-37.202.248.255 37.202.251.0/24 94.182.81.0/24 94.182.101.0/24 94.182.103.0-94.182.109.255 94.182.116.0/24 94.182.128.0/23 94.182.131.0-94.182.132.255 94.182.134.0-94.182.137.255 94.182.144.0/23 94.182.147.0/24 94.182.149.0-94.182.152.255 94.182.223.0/24 Signature Algorithm: sha256WithRSAEncryption 33:7f:44:3a:23:a4:4e:d9:76:e3:f9:74:07:c3:6e:5a:1c:c9: af:68:5e:bc:c2:08:03:b9:ae:34:a2:f7:65:15:4c:bb:1f:9a: ce:85:34:a5:56:e4:7b:5d:a8:ab:2e:30:1c:03:ba:33:b5:74: 65:60:fd:9a:2b:5b:63:7a:b0:45:83:4f:2e:d3:1e:3a:c1:c0: 83:f0:dd:cb:b6:97:91:f6:11:ee:d0:e7:80:a0:24:ac:42:20: 2e:a6:91:f2:62:b0:00:bc:35:41:3e:54:56:50:3f:b3:3f:dc: 12:54:6d:d1:53:ee:54:26:f6:4d:ac:d6:d7:6f:94:fa:e7:31: 95:56:84:0e:3a:c9:c7:83:89:93:fb:4f:7e:42:6b:69:e6:c9: 40:4e:d4:12:c6:61:f1:0a:c0:e6:8d:7c:41:ed:88:ad:af:ff: a7:05:42:97:40:0e:de:8b:ba:bf:55:24:06:ff:31:dd:aa:66: 46:09:f6:58:46:a9:5a:0c:64:b7:92:f0:6e:63:ed:90:ee:61: 87:49:c3:4d:4b:58:c2:03:68:c4:5d:73:78:4b:76:64:33:7c: 9e:d5:1a:1d:6c:3a:b9:28:2f:7d:10:b2:15:4a:5d:ef:8d:d8: c0:07:29:e8:20:ea:fc:07:9b:c1:e2:b2:d7:42:57:6b:6a:c8: 35:68:72:a1 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgISAZt5ERyeV2Gg70etjwJ3SndoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkZjQ5MTQ4OGE3Y2Q4NDQ4YTQyMDk0NTg3MWMwYjk5Njcy ZGM2NmUwHhcNMjYwMTAxMTAxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMmY1ZGYyMzJmMDRhNGY0MWQ2OGMyODUyNjVlOWVkMWNjODlmZWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOhyqu9ZdWQcV0nz82StbxP3/q+x 4VIUN8j+q7ilEj736hX1SPjzSU1sXSpolrXMSNYOmDl0pQIUwxBIK8cRXtVxpgnS wVSmzQyvO8EkL1I0JpR5snPYanbrpfFWSLfagqRHJAW4vuIdY23FqGEoJfD7+WYc GqeE3nSqvrIQ4cPoYfPVjQiUGAL9xMuRX5K1JalDqsiqwQBldJJvsy0WR2xWBoUl wwj0O1WQLMemoXFDKhgpSSjmzmXX+upuDqzL6P/pvPW7nf2Vtsj/RK/YnvUponl5 prZgTJcGU4RiRXk2B1dY5zSX/wDI+ajVuQ+dMZPdWqm1+UecYPOWf97vCwIDAQAB o4ICjDCCAogwHQYDVR0OBBYEFBL13yMvBKT0HWjChSZentHMif6xMB8GA1UdIwQY MBaAFK30kUiKfNhEikIJRYccC5lnLcZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQt MGJlZTA2MTI2YjFhLzEvRXZYZkl5OEVwUFFkYU1LRkpsNmUwY3lKX3JFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQtMGJlZTA2MTI2YjFh LzEvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGhBggrBgEFBQcBBwEB/wSBkTCBjjCBiwQCAAEwgYQwDAME BSXK4AMEACXK8jAMAwQCJcr0AwQAJcr4AwQAJcr7AwQAXrZRAwQAXrZlMAwDBABe tmcDBAFetmwDBABetnQDBAFetoAwDAMEAF62gwMEAF62hDAMAwQBXraGAwQBXraI AwQBXraQAwQAXraTMAwDBABetpUDBABetpgDBABett8wDQYJKoZIhvcNAQELBQAD ggEBADN/RDojpE7ZduP5dAfDblocya9oXrzCCAO5rjSi92UVTLsfms6FNKVW5Htd qKsuMBwDujO1dGVg/ZorW2N6sEWDTy7THjrBwIPw3cu2l5H2Ee7Q54CgJKxCIC6m kfJisAC8NUE+VFZQP7M/3BJUbdFT7lQm9k2s1tdvlPrnMZVWhA46yceDiZP7T35C a2nmyUBO1BLGYfEKwOaNfEHtiK2v/6cFQpdADt6Lur9VJAb/Md2qZkYJ9lhGqVoM ZLeS8G5j7ZDuYYdJw01LWMIDaMRdc3hLdmQzfJ7VGh1sOrkoL30QshVKXe+N2MAH Kegg6vwHm8HistdCV2tqyDVocqE= -----END CERTIFICATE-----Generated at Mon Jan 26 03:58:23 2026 by rpki-client