This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/EvJXEnC7zFUYWLsUXhzwJeb526c.roa File: EvJXEnC7zFUYWLsUXhzwJeb526c.roa (raw, json) Hash identifier: 2yJuq+SaVzl7mv1pagqpW7rfh/6PNh11sR0zDQ+hDZo= Subject key identifier: 12:F2:57:12:70:BB:CC:55:18:58:BB:14:5E:1C:F0:25:E6:F9:DB:A7 Certificate issuer: /CN=dc94bb69453f139a60029e22db0fb3424a906cee Certificate serial: 019B79ECB162C12966FE7BB4AA3889D96FAA Authority key identifier: DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/EvJXEnC7zFUYWLsUXhzwJeb526c.roa Signing time: Thu 01 Jan 2026 14:18:33 +0000 ROA not before: Thu 01 Jan 2026 14:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28917 IP address blocks: 178.255.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.mft rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:b1:62:c1:29:66:fe:7b:b4:aa:38:89:d9:6f:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc94bb69453f139a60029e22db0fb3424a906cee Validity Not Before: Jan 1 14:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=12f2571270bbcc551858bb145e1cf025e6f9dba7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:70:33:81:2f:5b:00:1a:ec:d6:76:69:7b:b9: 08:dd:43:cc:83:5c:59:00:ed:80:96:dc:81:d9:6b: 01:4b:64:2c:9c:aa:97:9b:61:81:dc:39:3e:10:3a: 3b:13:9c:fe:92:21:c6:2f:00:a3:c5:c1:cb:67:66: 32:2c:b8:c1:8f:49:1b:72:85:f4:f3:d9:f1:62:08: b3:45:79:48:0f:26:7a:8b:09:9f:24:a0:b0:e6:ab: bd:8a:94:72:9a:71:d5:e9:d0:27:80:0f:3e:2b:de: 74:85:8c:46:95:f9:75:73:ff:4b:4e:5b:f7:54:53: e0:34:db:98:3e:d7:61:a4:7a:d7:53:5d:13:f5:d2: 98:ea:bb:43:c9:6a:26:4a:9b:4f:4a:c1:03:3e:7c: 70:95:a3:48:57:ed:af:d4:bf:43:0c:a7:e8:1b:6f: 70:f5:7a:95:58:98:5f:3f:e2:40:9a:a5:26:cd:c7: 44:35:da:f4:78:91:61:2b:28:a0:70:7a:5e:eb:8b: fe:de:4d:ca:10:a1:dc:75:e8:36:fd:75:ef:3f:49: 3c:56:2c:7a:7b:49:fb:d6:d7:4c:93:be:63:b6:ec: 71:41:80:d8:a7:a0:34:43:63:49:31:73:fc:e7:5d: 64:d9:12:12:89:56:99:ff:fd:91:55:3e:b1:7c:73: 3e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:F2:57:12:70:BB:CC:55:18:58:BB:14:5E:1C:F0:25:E6:F9:DB:A7 X509v3 Authority Key Identifier: keyid:DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/EvJXEnC7zFUYWLsUXhzwJeb526c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.255.182.0/24 Signature Algorithm: sha256WithRSAEncryption 97:62:83:35:5d:1b:5b:f8:23:93:23:22:e8:1d:de:7c:15:84: 0c:d5:4a:c7:e5:5e:ca:e5:9a:87:e8:da:1d:dd:10:13:9b:4f: 8c:0a:1a:3c:e5:4a:2c:e5:5a:ca:98:b3:23:2e:b3:cf:02:b8: eb:73:5d:61:d1:8a:55:5e:49:ae:d5:5d:51:a2:62:4b:bc:4f: 0e:07:b2:82:02:eb:a0:b4:24:bf:bc:70:68:21:ba:a5:3e:2e: b9:df:1b:7c:ba:01:de:c3:ce:5c:7d:f8:36:64:6c:0a:f7:39: 8c:12:a2:2d:64:7e:d1:4f:cb:2e:9f:5d:a3:70:4d:d7:73:5c: 5b:28:61:ac:ef:73:db:1f:ab:a8:31:af:9f:47:8f:b7:50:f2: a6:62:b6:80:64:6c:b4:1e:84:7c:94:db:0c:20:e6:23:a1:96: be:07:bc:1e:c1:80:02:a0:1e:4f:ad:5d:b7:08:ed:61:7b:98: 99:30:66:a2:6f:9f:b1:91:40:4c:d1:39:b1:72:ff:d6:a0:ca: 28:ff:b7:9e:b0:cb:73:08:9c:1a:cc:87:ba:5e:cc:30:aa:a7: bb:e2:0e:fe:01:73:4c:6b:51:c4:3a:a3:11:15:84:ae:50:8f: 44:99:8c:dc:2f:03:e3:99:57:1d:28:13:e4:34:05:28:d3:df: 9d:b8:c2:eb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57LFiwSlm/nu0qjiJ2W+qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjOTRiYjY5NDUzZjEzOWE2MDAyOWUyMmRiMGZiMzQyNGE5 MDZjZWUwHhcNMjYwMTAxMTQxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMmYyNTcxMjcwYmJjYzU1MTg1OGJiMTQ1ZTFjZjAyNWU2ZjlkYmE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHAzgS9bABrs1nZpe7kI3UPMg1xZ AO2AltyB2WsBS2QsnKqXm2GB3Dk+EDo7E5z+kiHGLwCjxcHLZ2YyLLjBj0kbcoX0 89nxYgizRXlIDyZ6iwmfJKCw5qu9ipRymnHV6dAngA8+K950hYxGlfl1c/9LTlv3 VFPgNNuYPtdhpHrXU10T9dKY6rtDyWomSptPSsEDPnxwlaNIV+2v1L9DDKfoG29w 9XqVWJhfP+JAmqUmzcdENdr0eJFhKyigcHpe64v+3k3KEKHcdeg2/XXvP0k8Vix6 e0n71tdMk75jtuxxQYDYp6A0Q2NJMXP8511k2RISiVaZ//2RVT6xfHM+/wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBLyVxJwu8xVGFi7FF4c8CXm+dunMB8GA1UdIwQY MBaAFNyUu2lFPxOaYAKeItsPs0JKkGzuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0pTN2FVVV9FNXBnQXA0aTJ3LXpRa3FRYk80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9kMDQ1Y2EtYzFmNy00ZWQ5LWFmZGIt MDkwYzQ2ZTlmMmVkLzEvRXZKWEVuQzd6RlVZV0xzVVhoendKZWI1MjZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9kMDQ1Y2EtYzFmNy00ZWQ5LWFmZGItMDkwYzQ2ZTlmMmVk LzEvM0pTN2FVVV9FNXBnQXA0aTJ3LXpRa3FRYk80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsv+2MA0G CSqGSIb3DQEBCwUAA4IBAQCXYoM1XRtb+COTIyLoHd58FYQM1UrH5V7K5ZqH6Nod 3RATm0+MCho85Uos5VrKmLMjLrPPArjrc11h0YpVXkmu1V1RomJLvE8OB7KCAuug tCS/vHBoIbqlPi653xt8ugHew85cffg2ZGwK9zmMEqItZH7RT8sun12jcE3Xc1xb KGGs73PbH6uoMa+fR4+3UPKmYraAZGy0HoR8lNsMIOYjoZa+B7wewYACoB5PrV23 CO1he5iZMGaib5+xkUBM0Tmxcv/WoMoo/7eesMtzCJwazIe6Xswwqqe74g7+AXNM a1HEOqMRFYSuUI9EmYzcLwPjmVcdKBPkNAUo09+duMLr -----END CERTIFICATE-----Generated at Mon Jan 26 01:00:25 2026 by rpki-client