This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/EEeXG249QHXtZie6S6hEWpfPs0c.roa File: EEeXG249QHXtZie6S6hEWpfPs0c.roa (raw, json) Hash identifier: j08Df977nprNp/2GNZ8F6Ri2LTHGQNefm3+Va3aCg1U= Subject key identifier: 10:47:97:1B:6E:3D:40:75:ED:66:27:BA:4B:A8:44:5A:97:CF:B3:47 Certificate issuer: /CN=0232a4bfb7796405a556b759f1d193e4c4d37129 Certificate serial: 019B7E37B053CD3E13A10C7B61A30E63868B Authority key identifier: 02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/EEeXG249QHXtZie6S6hEWpfPs0c.roa Signing time: Fri 02 Jan 2026 10:18:57 +0000 ROA not before: Fri 02 Jan 2026 10:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205111 IP address blocks: 213.244.146.0/24 maxlen: 24 217.163.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:b0:53:cd:3e:13:a1:0c:7b:61:a3:0e:63:86:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0232a4bfb7796405a556b759f1d193e4c4d37129 Validity Not Before: Jan 2 10:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1047971b6e3d4075ed6627ba4ba8445a97cfb347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:df:13:fb:4c:13:1b:11:b0:06:99:9e:cf:d6: 50:1b:de:1b:67:74:36:e2:98:4f:b1:1b:ae:73:3c: d9:3c:2c:3c:bf:9e:df:0d:d0:53:ce:d1:78:6e:7c: da:71:61:bb:b1:44:d2:bb:45:5c:42:87:2f:12:58: 50:2e:b1:34:31:1e:14:75:29:b3:33:fc:c8:4a:ec: 95:88:4c:7f:d7:29:6c:8d:10:59:ba:ae:fa:89:70: 99:e3:41:94:e4:f3:cc:84:28:38:93:28:81:bd:20: b4:d5:cc:8c:4f:4e:6d:99:ce:90:6a:5a:29:bf:b0: 6b:c2:d9:f6:f6:8e:56:1e:53:d6:58:80:73:16:d5: 31:4d:ba:5a:c0:70:41:46:1e:7f:2f:82:04:16:9e: 70:7e:1f:64:09:33:03:09:4e:02:b9:0a:96:e1:95: e2:da:ac:a2:4d:59:60:9f:77:0c:b7:74:5f:c0:68: 5c:9d:d7:80:1d:4c:67:c7:ad:92:c1:04:35:24:82: f8:e7:36:2d:34:1a:36:43:dc:d8:a5:85:c5:db:c9: e0:a0:81:54:41:a5:ec:ff:2c:74:7c:48:a2:85:f2: e5:3b:a3:f9:95:b6:88:85:ba:ff:57:99:d1:4e:72: a2:0a:1c:d4:56:f3:88:d2:18:57:dc:e3:32:90:ff: 31:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:47:97:1B:6E:3D:40:75:ED:66:27:BA:4B:A8:44:5A:97:CF:B3:47 X509v3 Authority Key Identifier: keyid:02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/EEeXG249QHXtZie6S6hEWpfPs0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.244.146.0/24 217.163.72.0/24 Signature Algorithm: sha256WithRSAEncryption 66:94:3e:07:bb:59:dc:3d:93:19:25:f8:a0:41:07:0f:a9:4a: b4:fa:58:be:5b:2c:08:6d:db:9e:52:af:7d:55:9d:8e:e3:50: 20:97:e7:f6:29:ec:37:81:91:b1:97:7f:20:e9:64:9b:76:d8: 1b:3d:6e:fc:a4:cd:83:17:a7:b0:34:62:f2:82:b7:e4:f7:bb: a3:1e:83:c4:15:90:27:fd:d3:41:d2:e9:68:c9:da:d2:b8:8d: 52:60:a3:93:eb:e9:62:b5:3f:56:c2:c8:3e:18:00:03:36:66: d6:e4:dd:b3:82:08:35:15:ae:1d:b1:8a:61:c3:e4:dd:9e:a6: 30:91:0c:fc:13:f7:58:e7:e3:35:e9:fc:03:2b:c0:19:23:75: 9b:77:35:ad:c7:45:44:65:7a:a4:27:39:85:0b:10:08:7d:29: a3:b9:11:b9:98:dc:5b:66:6b:67:4b:bc:c1:72:cb:c4:9c:d3: a6:29:51:74:b5:b0:93:fb:af:bf:22:31:14:a3:6a:f7:8d:d4: e0:95:2c:04:95:9b:45:cb:b5:d3:0d:a7:59:0b:87:af:17:95: 3f:ee:89:93:01:95:fd:bc:a1:d3:9e:70:04:54:41:40:2f:07: 2c:3c:a7:b0:c9:f7:02:ac:45:4d:18:f8:68:1e:1a:9d:08:dc: 56:c4:1b:fb -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+N7BTzT4ToQx7YaMOY4aLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyMzJhNGJmYjc3OTY0MDVhNTU2Yjc1OWYxZDE5M2U0YzRk MzcxMjkwHhcNMjYwMTAyMTAxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDQ3OTcxYjZlM2Q0MDc1ZWQ2NjI3YmE0YmE4NDQ1YTk3Y2ZiMzQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAut8T+0wTGxGwBpmez9ZQG94bZ3Q2 4phPsRuuczzZPCw8v57fDdBTztF4bnzacWG7sUTSu0VcQocvElhQLrE0MR4UdSmz M/zISuyViEx/1ylsjRBZuq76iXCZ40GU5PPMhCg4kyiBvSC01cyMT05tmc6Qalop v7Brwtn29o5WHlPWWIBzFtUxTbpawHBBRh5/L4IEFp5wfh9kCTMDCU4CuQqW4ZXi 2qyiTVlgn3cMt3RfwGhcndeAHUxnx62SwQQ1JIL45zYtNBo2Q9zYpYXF28ngoIFU QaXs/yx0fEiihfLlO6P5lbaIhbr/V5nRTnKiChzUVvOI0hhX3OMykP8x5wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBBHlxtuPUB17WYnukuoRFqXz7NHMB8GA1UdIwQY MBaAFAIypL+3eWQFpVa3WfHRk+TE03EpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWpLa3Y3ZDVaQVdsVnJkWjhkR1Q1TVRUY1NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9hN2NlN2EtODQ0My00NmViLThjYmEt M2JiNGQ2MjAwNTE4LzEvRUVlWEcyNDlRSFh0WmllNlM2aEVXcGZQczBjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9hN2NlN2EtODQ0My00NmViLThjYmEtM2JiNGQ2MjAwNTE4 LzEvQWpLa3Y3ZDVaQVdsVnJkWjhkR1Q1TVRUY1NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1fSSAwQA 2aNIMA0GCSqGSIb3DQEBCwUAA4IBAQBmlD4Hu1ncPZMZJfigQQcPqUq0+li+WywI bdueUq99VZ2O41Agl+f2Kew3gZGxl38g6WSbdtgbPW78pM2DF6ewNGLygrfk97uj HoPEFZAn/dNB0uloydrSuI1SYKOT6+litT9Wwsg+GAADNmbW5N2zggg1Fa4dsYph w+TdnqYwkQz8E/dY5+M16fwDK8AZI3WbdzWtx0VEZXqkJzmFCxAIfSmjuRG5mNxb ZmtnS7zBcsvEnNOmKVF0tbCT+6+/IjEUo2r3jdTglSwElZtFy7XTDadZC4evF5U/ 7omTAZX9vKHTnnAEVEFALwcsPKewyfcCrEVNGPhoHhqdCNxWxBv7 -----END CERTIFICATE-----Generated at Sun Jan 25 07:15:47 2026 by rpki-client