This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/DEI7QCWRV6X21080tz8p9YYE_qI.roa File: DEI7QCWRV6X21080tz8p9YYE_qI.roa (raw, json) Hash identifier: EN4qKM5rhCJ+s58Drux9dsURlwu/EvBmHKAt2KAeoi0= Subject key identifier: 0C:42:3B:40:25:91:57:A5:F6:D7:4F:34:B7:3F:29:F5:86:04:FE:A2 Certificate issuer: /CN=bef6650582c00dbb2591cedc298c0cd3c5968ab0 Certificate serial: 019B79114969785A0445D9D80CB8E3B55BA8 Authority key identifier: BE:F6:65:05:82:C0:0D:BB:25:91:CE:DC:29:8C:0C:D3:C5:96:8A:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vvZlBYLADbslkc7cKYwM08WWirA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/DEI7QCWRV6X21080tz8p9YYE_qI.roa Signing time: Thu 01 Jan 2026 10:18:54 +0000 ROA not before: Thu 01 Jan 2026 10:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42346 IP address blocks: 185.253.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.crl rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.mft rsync://rpki.ripe.net/repository/DEFAULT/vvZlBYLADbslkc7cKYwM08WWirA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:49:69:78:5a:04:45:d9:d8:0c:b8:e3:b5:5b:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bef6650582c00dbb2591cedc298c0cd3c5968ab0 Validity Not Before: Jan 1 10:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c423b40259157a5f6d74f34b73f29f58604fea2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:85:18:72:56:03:35:b1:f3:8f:27:bc:08:8e: 32:6b:43:89:26:93:6a:f9:7e:a3:83:10:2c:5a:ad: 41:e2:75:4a:0f:39:28:ca:fe:24:d6:0c:46:5c:b5: 35:7c:2c:3f:b7:ca:d6:9a:fd:64:7f:92:fa:92:7a: d6:15:80:0a:20:fc:c5:1b:35:f6:18:5d:34:36:05: 6a:c8:1a:f1:4f:8e:10:e7:10:65:fa:a3:9c:5a:4c: b8:f7:04:5b:ef:39:48:95:b1:d9:68:41:54:e3:66: 22:5f:b3:6a:0a:51:b2:62:68:05:6f:93:e7:15:fb: ce:e4:7a:3e:97:9b:8c:05:5e:c8:fb:66:6d:c7:55: 37:ed:ef:e0:5f:48:e6:16:1f:b1:a5:a2:76:ff:df: c5:28:b9:a4:89:0e:9b:79:91:e8:18:23:69:34:7c: 97:ba:b7:23:00:ab:e2:3e:3e:49:1e:f9:64:d5:20: 8e:f0:bc:74:a5:ff:32:ed:e6:c3:21:79:60:2d:a6: 68:12:95:50:e7:ad:d6:b1:5f:c8:f7:f1:5d:1e:43: 5a:36:ac:96:a3:a0:ab:2b:58:6a:3b:b8:42:fd:a8: b1:4f:ff:4f:19:75:0d:1a:5d:89:9a:6a:06:f9:b2: ff:b5:76:28:46:e7:ca:44:41:e8:c5:04:22:ca:6e: b1:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:42:3B:40:25:91:57:A5:F6:D7:4F:34:B7:3F:29:F5:86:04:FE:A2 X509v3 Authority Key Identifier: keyid:BE:F6:65:05:82:C0:0D:BB:25:91:CE:DC:29:8C:0C:D3:C5:96:8A:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vvZlBYLADbslkc7cKYwM08WWirA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/DEI7QCWRV6X21080tz8p9YYE_qI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.253.195.0/24 Signature Algorithm: sha256WithRSAEncryption 27:4f:01:ea:20:28:c5:03:4e:04:ad:67:8a:2d:cf:b4:c5:6f: a6:ab:c7:d2:3c:a6:50:e0:4b:98:f5:6c:95:e1:88:1f:d1:24: 9d:72:2d:3e:b9:14:4f:30:ab:3a:a3:be:ab:f2:d1:6a:ea:fa: dd:9b:72:a9:da:a9:79:40:53:d7:d4:f2:dc:9f:46:69:e4:f7: 6c:25:4e:60:41:a9:6e:da:80:2c:f0:3f:cb:4d:dc:52:db:1a: c5:76:31:9e:f5:8f:55:ef:1f:d3:72:33:42:f7:9c:31:98:1b: 6a:22:da:9a:04:08:6e:6a:28:40:10:b5:12:bb:8c:10:ec:74: 54:f2:a6:d0:28:07:bf:65:f2:44:ad:fb:21:55:bc:c3:fc:c2: 91:5f:cf:62:02:f1:cc:c8:95:c6:09:fb:51:b5:ef:4a:c1:35: 8a:f6:76:dc:ca:5e:de:9b:60:8c:bb:6d:c6:64:10:f9:1f:3c: 32:45:5a:58:71:7b:02:69:d0:55:bc:8d:af:c1:ab:54:46:0d: dc:9e:86:24:4d:c0:30:e1:33:9c:42:4c:9a:1e:ae:e7:49:f6: 69:b5:45:39:f9:82:bd:c3:8b:11:68:73:5e:c6:f9:03:f5:13: 3f:ff:cb:6b:ca:a8:85:da:9b:51:cc:ad:6f:fe:0f:a6:46:86: a1:9e:5f:e3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EUlpeFoERdnYDLjjtVuoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlZjY2NTA1ODJjMDBkYmIyNTkxY2VkYzI5OGMwY2QzYzU5 NjhhYjAwHhcNMjYwMTAxMTAxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzQyM2I0MDI1OTE1N2E1ZjZkNzRmMzRiNzNmMjlmNTg2MDRmZWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIUYclYDNbHzjye8CI4ya0OJJpNq +X6jgxAsWq1B4nVKDzkoyv4k1gxGXLU1fCw/t8rWmv1kf5L6knrWFYAKIPzFGzX2 GF00NgVqyBrxT44Q5xBl+qOcWky49wRb7zlIlbHZaEFU42YiX7NqClGyYmgFb5Pn FfvO5Ho+l5uMBV7I+2Ztx1U37e/gX0jmFh+xpaJ2/9/FKLmkiQ6beZHoGCNpNHyX urcjAKviPj5JHvlk1SCO8Lx0pf8y7ebDIXlgLaZoEpVQ563WsV/I9/FdHkNaNqyW o6CrK1hqO7hC/aixT/9PGXUNGl2JmmoG+bL/tXYoRufKREHoxQQiym6x/wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAxCO0AlkVel9tdPNLc/KfWGBP6iMB8GA1UdIwQY MBaAFL72ZQWCwA27JZHO3CmMDNPFloqwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnZabEJZTEFEYnNsa2M3Y0tZd00wOFdXaXJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9mZmMyMDQtZDRkMi00YTY3LTg1YWYt ZjlhMzNmZjAxMWNiLzEvREVJN1FDV1JWNlgyMTA4MHR6OHA5WVlFX3FJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My9mZmMyMDQtZDRkMi00YTY3LTg1YWYtZjlhMzNmZjAxMWNi LzEvdnZabEJZTEFEYnNsa2M3Y0tZd00wOFdXaXJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuf3DMA0G CSqGSIb3DQEBCwUAA4IBAQAnTwHqICjFA04ErWeKLc+0xW+mq8fSPKZQ4EuY9WyV 4Ygf0SSdci0+uRRPMKs6o76r8tFq6vrdm3Kp2ql5QFPX1PLcn0Zp5PdsJU5gQalu 2oAs8D/LTdxS2xrFdjGe9Y9V7x/TcjNC95wxmBtqItqaBAhuaihAELUSu4wQ7HRU 8qbQKAe/ZfJErfshVbzD/MKRX89iAvHMyJXGCftRte9KwTWK9nbcyl7em2CMu23G ZBD5HzwyRVpYcXsCadBVvI2vwatURg3cnoYkTcAw4TOcQkyaHq7nSfZptUU5+YK9 w4sRaHNexvkD9RM//8tryqiF2ptRzK1v/g+mRoahnl/j -----END CERTIFICATE-----Generated at Mon Jan 26 04:41:47 2026 by rpki-client