This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/X-EkV-WP2idrAD8cBtl8naElPoA.roa File: X-EkV-WP2idrAD8cBtl8naElPoA.roa (raw, json) Hash identifier: dkqiN3zxKk6ENg5SKstGMFmP/TT2YPL3QLMR66r2DQ8= Subject key identifier: 5F:E1:24:57:E5:8F:DA:27:6B:00:3F:1C:06:D9:7C:9D:A1:25:3E:80 Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e Certificate serial: 019B7AC8E5C1AAD683DC2AEDC37659910E5D Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/X-EkV-WP2idrAD8cBtl8naElPoA.roa Signing time: Thu 01 Jan 2026 18:19:04 +0000 ROA not before: Thu 01 Jan 2026 18:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47798 IP address blocks: 89.3.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:e5:c1:aa:d6:83:dc:2a:ed:c3:76:59:91:0e:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e Validity Not Before: Jan 1 18:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5fe12457e58fda276b003f1c06d97c9da1253e80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:1c:cb:4f:f2:ad:6c:7e:04:c5:20:63:23:ee: 13:07:67:dd:53:4b:38:b1:89:38:33:76:54:9a:66: 60:78:6e:17:c0:f9:6c:89:3d:0b:91:84:cc:05:3a: 40:c4:61:3b:98:70:79:a0:e6:8f:50:29:6a:61:49: 73:4d:6e:0b:f1:60:ab:9f:b6:2a:19:fd:0a:5d:7e: f0:d3:da:06:79:f1:a9:f6:b2:bb:2c:5d:91:00:d9: 43:31:8b:99:38:c7:36:f5:50:40:20:39:09:0e:ae: 88:5e:ee:56:d0:99:6b:9e:f9:55:6a:af:8e:5c:4b: 9a:21:3d:9e:5c:03:ec:a2:e6:77:42:3e:24:29:35: d1:b4:4a:a2:f1:bf:39:c0:7b:c7:f2:d6:73:15:61: ac:5c:c7:00:9e:87:37:f3:4e:94:65:b1:41:57:13: ef:50:48:e8:63:71:de:15:28:22:8d:02:ea:7c:5d: 64:03:10:49:7e:d2:0f:73:9a:22:b2:48:cf:45:fe: e3:41:33:58:dc:02:61:84:2f:54:78:d8:6e:c8:31: af:22:89:cd:d4:45:64:6d:9f:2b:4b:85:aa:dc:e8: 3a:cc:85:d6:07:6f:2f:6b:7d:8f:b9:c9:96:75:85: 0a:19:1f:3a:58:81:16:37:7b:ae:77:9a:1b:e5:bf: c7:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:E1:24:57:E5:8F:DA:27:6B:00:3F:1C:06:D9:7C:9D:A1:25:3E:80 X509v3 Authority Key Identifier: keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/X-EkV-WP2idrAD8cBtl8naElPoA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.3.240.0/20 Signature Algorithm: sha256WithRSAEncryption 9a:fb:b5:4a:97:92:e2:d1:a1:b7:63:92:0f:97:99:09:ed:e0: 10:e7:06:f0:f2:ef:fb:30:10:2d:a8:dc:d9:08:9b:d8:69:11: 4e:ed:f1:5c:d8:0f:91:ee:05:e5:31:b1:2c:0f:1f:6e:26:6f: e7:62:1a:40:20:c1:15:00:ed:7f:4e:a0:2a:ab:87:8c:88:dc: 0c:b9:71:30:84:c0:18:61:0c:72:d5:56:5d:bc:06:5c:0d:e4: 55:16:22:9e:8a:12:7c:56:94:9e:31:92:ef:a7:21:81:7e:72: d1:2a:4b:21:35:b1:c0:90:60:69:1d:6e:48:57:f5:bc:de:91: eb:b7:7e:27:b8:25:fb:cd:b2:fd:c9:89:70:23:14:e1:d7:a5: 2a:a1:ce:5a:0e:e5:fa:e9:c2:c2:b1:c1:b9:61:f7:32:cb:36: c0:47:b6:27:80:8a:71:0d:9f:a3:62:41:db:32:aa:a3:f5:28: 6d:a2:34:09:6c:5f:d3:d1:6e:11:7f:5e:e4:ee:e9:38:5b:05: bc:e4:0b:99:07:d8:5e:24:f0:40:6b:f4:b9:2d:c3:7d:e9:c8: fa:bb:06:ff:79:52:1b:68:d9:43:6b:59:5d:df:a7:f3:7f:06: 6f:67:19:c4:30:8d:01:f3:10:c4:ae:ae:8b:9d:3f:ca:b1:78: b0:10:30:16 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yOXBqtaD3Crtw3ZZkQ5dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwZWY1ZmJiZmNhN2E5M2NmZWU5NjVlZWI2YmRlZTZmYjQz YzQwM2UwHhcNMjYwMTAxMTgxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZmUxMjQ1N2U1OGZkYTI3NmIwMDNmMWMwNmQ5N2M5ZGExMjUzZTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxzLT/KtbH4ExSBjI+4TB2fdU0s4 sYk4M3ZUmmZgeG4XwPlsiT0LkYTMBTpAxGE7mHB5oOaPUClqYUlzTW4L8WCrn7Yq Gf0KXX7w09oGefGp9rK7LF2RANlDMYuZOMc29VBAIDkJDq6IXu5W0JlrnvlVaq+O XEuaIT2eXAPsouZ3Qj4kKTXRtEqi8b85wHvH8tZzFWGsXMcAnoc3806UZbFBVxPv UEjoY3HeFSgijQLqfF1kAxBJftIPc5oiskjPRf7jQTNY3AJhhC9UeNhuyDGvIonN 1EVkbZ8rS4Wq3Og6zIXWB28va32PucmWdYUKGR86WIEWN3uud5ob5b/HdQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF/hJFflj9onawA/HAbZfJ2hJT6AMB8GA1UdIwQY MBaAFKDvX7v8p6k8/ull7ra97m+0PEA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2Mt MDI5MmIwMjAxNTBhLzEvWC1Fa1YtV1AyaWRyQUQ4Y0J0bDhuYUVsUG9BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2MtMDI5MmIwMjAxNTBh LzEvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEWQPwMA0G CSqGSIb3DQEBCwUAA4IBAQCa+7VKl5Li0aG3Y5IPl5kJ7eAQ5wbw8u/7MBAtqNzZ CJvYaRFO7fFc2A+R7gXlMbEsDx9uJm/nYhpAIMEVAO1/TqAqq4eMiNwMuXEwhMAY YQxy1VZdvAZcDeRVFiKeihJ8VpSeMZLvpyGBfnLRKkshNbHAkGBpHW5IV/W83pHr t34nuCX7zbL9yYlwIxTh16Uqoc5aDuX66cLCscG5YfcyyzbAR7YngIpxDZ+jYkHb Mqqj9ShtojQJbF/T0W4Rf17k7uk4WwW85AuZB9heJPBAa/S5LcN96cj6uwb/eVIb aNlDa1ld36fzfwZvZxnEMI0B8xDErq6LnT/KsXiwEDAW -----END CERTIFICATE-----Generated at Mon Jan 26 00:38:59 2026 by rpki-client