This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/e0Y6dDFVE8H4YPfofKNtoLm-fIM.roa File: e0Y6dDFVE8H4YPfofKNtoLm-fIM.roa (raw, json) Hash identifier: 5it+ib72GEjIgXkPnROZAJngG+KU/awz92fsEa6sTRM= Subject key identifier: 7B:46:3A:74:31:55:13:C1:F8:60:F7:E8:7C:A3:6D:A0:B9:BE:7C:83 Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88 Certificate serial: 019B7DCABE4EA1A6A3BACA28122D46F874A6 Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/e0Y6dDFVE8H4YPfofKNtoLm-fIM.roa Signing time: Fri 02 Jan 2026 08:19:57 +0000 ROA not before: Fri 02 Jan 2026 08:19:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48555 IP address blocks: 194.225.240.0/21 maxlen: 24 194.225.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:be:4e:a1:a6:a3:ba:ca:28:12:2d:46:f8:74:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88 Validity Not Before: Jan 2 08:19:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7b463a74315513c1f860f7e87ca36da0b9be7c83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:7e:3e:95:15:28:42:1a:4f:48:4a:01:34:aa: c5:ed:ba:e9:11:49:89:a4:ce:6c:54:80:7e:51:b5: 31:bd:58:82:c9:04:0f:3f:d5:21:51:74:21:eb:a9: 15:c9:1e:71:db:14:96:39:e0:85:91:83:77:8d:66: 9c:47:20:56:d0:32:c0:ad:12:d1:ff:d2:ed:a5:5a: 77:62:14:c8:28:26:f3:4a:ad:23:ae:a4:6e:21:43: 52:2d:5e:ac:5b:52:de:24:3a:72:da:90:a0:38:30: 62:4d:39:38:69:e0:14:7d:2c:b4:35:8c:64:cd:1b: 7f:91:e7:54:fc:2a:e9:21:a4:f1:3d:c7:f5:ef:e6: e3:55:91:8b:14:e8:e4:68:3a:a7:d5:fe:d4:f7:86: 42:a2:70:b2:48:aa:48:39:66:11:a7:a7:79:a3:c9: aa:e5:0c:16:d7:60:5b:24:12:84:40:eb:3d:8b:a4: 2e:8b:73:e9:95:ce:f9:d6:4f:4f:b7:d3:ac:38:8f: dd:1c:8b:7a:93:c6:1e:31:6b:89:4a:04:af:ee:45: 2b:c6:13:f8:41:38:ff:38:cb:48:0e:9c:eb:8a:45: b6:bc:d5:98:db:28:96:b5:93:be:7a:69:de:ab:f1: 1d:db:fb:eb:ad:3d:e6:5f:c2:1f:dd:79:c5:27:f5: 1e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:46:3A:74:31:55:13:C1:F8:60:F7:E8:7C:A3:6D:A0:B9:BE:7C:83 X509v3 Authority Key Identifier: keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/e0Y6dDFVE8H4YPfofKNtoLm-fIM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.225.240.0-194.225.251.255 Signature Algorithm: sha256WithRSAEncryption 3d:db:80:20:60:a0:fc:12:43:71:28:43:fb:7d:d0:f5:d4:97: af:a6:bb:3a:0f:0e:ae:30:34:a2:4c:57:8f:35:76:34:6b:15: d1:0e:20:ce:8d:bc:5d:81:c5:a2:32:d3:29:1b:22:b8:6a:0f: a8:77:55:67:4d:f6:a9:bf:e9:f7:00:4b:30:2b:b2:5b:e4:32: 8c:67:bb:8d:03:64:4f:0e:66:c7:e1:19:aa:b9:c1:03:36:f1: 8a:ec:22:34:5f:20:98:a7:36:b0:bb:01:d3:66:ea:2f:1d:94: 51:87:42:fc:1e:e4:09:0a:3e:14:bb:8d:f2:c6:28:6e:1f:59: d2:6d:42:34:8e:24:22:6d:b0:0b:87:82:8d:cc:49:ed:99:ce: 3c:90:47:6a:9f:89:33:20:48:4c:cb:5b:37:c7:a5:04:e4:97: a2:ca:2e:a7:48:9f:a6:55:0d:cc:44:ba:f7:45:34:77:fb:7a: b6:33:0a:62:f3:87:e5:c5:77:b9:bf:db:51:15:3c:35:db:5f: 3f:2e:0b:f6:04:58:2e:6a:b3:4b:60:ef:c7:38:5a:7d:08:3f: ab:66:cb:5c:b2:4f:e0:97:26:b2:8d:bb:73:40:24:0c:7d:32: 89:59:c9:ac:29:0c:55:09:16:a1:0d:76:7e:db:48:e7:0e:ac: 57:b6:c0:58 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt9yr5OoaajusooEi1G+HSmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4M2Q3NjA1MTAxN2QwYWZhOTE1ZmNmYjc5MGEwMGY0NjY3 YjBhODgwHhcNMjYwMTAyMDgxOTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YjQ2M2E3NDMxNTUxM2MxZjg2MGY3ZTg3Y2EzNmRhMGI5YmU3YzgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1n4+lRUoQhpPSEoBNKrF7brpEUmJ pM5sVIB+UbUxvViCyQQPP9UhUXQh66kVyR5x2xSWOeCFkYN3jWacRyBW0DLArRLR /9LtpVp3YhTIKCbzSq0jrqRuIUNSLV6sW1LeJDpy2pCgODBiTTk4aeAUfSy0NYxk zRt/kedU/CrpIaTxPcf17+bjVZGLFOjkaDqn1f7U94ZConCySKpIOWYRp6d5o8mq 5QwW12BbJBKEQOs9i6Qui3Pplc751k9Pt9OsOI/dHIt6k8YeMWuJSgSv7kUrxhP4 QTj/OMtIDpzrikW2vNWY2yiWtZO+emneq/Ed2/vrrT3mX8If3XnFJ/UeXQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFHtGOnQxVRPB+GD36HyjbaC5vnyDMB8GA1UdIwQY MBaAFFg9dgUQF9CvqRX8+3kKAPRmewqIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGIt ZGE2MTUzODg1ZjNiLzEvZTBZNmRERlZFOEg0WVBmb2ZLTnRvTG0tZklNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGItZGE2MTUzODg1ZjNi LzEvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBATC4fAD BALC4fgwDQYJKoZIhvcNAQELBQADggEBAD3bgCBgoPwSQ3EoQ/t90PXUl6+muzoP Dq4wNKJMV481djRrFdEOIM6NvF2BxaIy0ykbIrhqD6h3VWdN9qm/6fcASzArslvk Moxnu40DZE8OZsfhGaq5wQM28YrsIjRfIJinNrC7AdNm6i8dlFGHQvwe5AkKPhS7 jfLGKG4fWdJtQjSOJCJtsAuHgo3MSe2ZzjyQR2qfiTMgSEzLWzfHpQTkl6LKLqdI n6ZVDcxEuvdFNHf7erYzCmLzh+XFd7m/21EVPDXbXz8uC/YEWC5qs0tg78c4Wn0I P6tmy1yyT+CXJrKNu3NAJAx9MolZyawpDFUJFqENdn7bSOcOrFe2wFg= -----END CERTIFICATE-----Generated at Mon Jan 26 06:19:39 2026 by rpki-client