This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/evA5C43jooCU-0KGVkbsaB2BBbU.roa File: evA5C43jooCU-0KGVkbsaB2BBbU.roa (raw, json) Hash identifier: eEukmHvEX3OYIrpleqcpAoYMp79go82LKu/wPivXwew= Subject key identifier: 7A:F0:39:0B:8D:E3:A2:80:94:FB:42:86:56:46:EC:68:1D:81:05:B5 Certificate issuer: /CN=f93ac6cd2240249bba60171f086e9101cc87ca24 Certificate serial: 019B78A328BFFE434656E6FEF6C8A6C8CDC2 Authority key identifier: F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/evA5C43jooCU-0KGVkbsaB2BBbU.roa Signing time: Thu 01 Jan 2026 08:18:37 +0000 ROA not before: Thu 01 Jan 2026 08:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1100 IP address blocks: 147.189.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:28:bf:fe:43:46:56:e6:fe:f6:c8:a6:c8:cd:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f93ac6cd2240249bba60171f086e9101cc87ca24 Validity Not Before: Jan 1 08:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7af0390b8de3a28094fb42865646ec681d8105b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9d:4b:5d:2c:13:f6:35:4d:e8:9c:33:5a:3e: 2c:5d:3c:1c:bd:b1:ff:77:e3:8b:58:7d:7c:8e:a4: dc:27:83:f6:2e:9c:21:d5:59:55:e3:d4:c3:cc:f5: a4:2b:c2:82:de:df:1c:dc:05:6b:7a:36:c0:f8:22: 37:8f:a9:2a:1c:76:bd:69:8a:01:d5:c8:38:74:0e: 67:7e:af:b2:66:c5:7d:b5:f7:83:62:06:bc:ff:95: 5c:a1:84:76:18:25:31:11:d8:b8:68:c9:8c:78:59: b7:fe:7d:ec:1a:9d:6c:34:85:bc:16:b6:ab:05:50: 8c:fc:15:18:db:ce:d7:15:ff:07:31:59:95:2c:7e: 2d:77:f7:0b:2b:52:1e:ad:54:05:eb:8a:99:91:b4: ae:bf:90:7d:75:0e:7e:81:4c:a6:8c:72:54:55:90: 43:38:e6:ff:4c:17:3c:31:76:d3:54:b5:30:4d:4f: bf:8a:72:32:bc:60:42:32:46:47:a0:98:f4:c5:79: c3:9a:76:b4:20:2a:c9:65:66:6f:95:72:14:54:40: 77:a8:67:eb:5d:bd:04:7b:79:ec:da:73:1b:5c:b1: b6:25:e8:5f:95:04:96:cd:f3:d0:7e:a3:7d:94:9f: c6:85:d5:23:e5:85:15:32:43:c0:6b:15:cd:d1:1d: 32:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:F0:39:0B:8D:E3:A2:80:94:FB:42:86:56:46:EC:68:1D:81:05:B5 X509v3 Authority Key Identifier: keyid:F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/evA5C43jooCU-0KGVkbsaB2BBbU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.189.138.0/24 Signature Algorithm: sha256WithRSAEncryption 83:9a:93:8d:33:bd:e9:f7:fa:24:59:58:93:d4:bb:a4:c2:73: 81:0a:80:13:a7:a3:15:b0:33:08:a3:78:eb:93:b8:70:fc:68: 67:3f:ae:a7:7b:3d:13:54:8a:eb:07:a5:2d:dd:45:3b:34:2e: 0c:16:89:43:97:78:f9:82:03:13:61:19:d1:fa:ad:e1:4a:0c: f4:46:71:30:f6:52:bc:3d:7c:94:d0:7d:6c:74:22:5c:2e:71: 7e:1b:fe:05:0c:45:69:5d:07:8a:87:21:3a:da:28:fc:10:52: 0a:b1:af:5c:1c:7e:01:7f:b3:6b:4e:91:76:8e:8a:d3:f1:d8: 3f:0c:bb:e6:a7:dc:da:4d:de:45:5d:54:84:b5:d4:8d:4c:1f: 8d:53:e7:b0:d8:87:e0:43:32:07:b6:60:64:5e:35:92:20:20: c7:f0:f6:1e:d3:d5:a1:e5:3b:f9:bb:69:47:33:9d:94:f2:50: bd:87:e1:7e:3d:56:9e:7a:ca:70:13:61:39:d5:79:67:cd:3b: 3d:34:05:b6:58:75:ae:c3:40:e2:48:ae:4d:97:77:b3:3a:04: 7e:97:9a:50:b8:3e:71:09:4d:af:eb:71:83:45:7e:3a:4f:b0: 27:e8:26:ab:a9:71:e2:d7:89:6a:d6:b6:a7:7c:c6:e7:f2:9d: e1:45:cb:1d -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt4oyi//kNGVub+9simyM3CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5M2FjNmNkMjI0MDI0OWJiYTYwMTcxZjA4NmU5MTAxY2M4 N2NhMjQwHhcNMjYwMTAxMDgxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YWYwMzkwYjhkZTNhMjgwOTRmYjQyODY1NjQ2ZWM2ODFkODEwNWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx51LXSwT9jVN6JwzWj4sXTwcvbH/ d+OLWH18jqTcJ4P2Lpwh1VlV49TDzPWkK8KC3t8c3AVrejbA+CI3j6kqHHa9aYoB 1cg4dA5nfq+yZsV9tfeDYga8/5VcoYR2GCUxEdi4aMmMeFm3/n3sGp1sNIW8Frar BVCM/BUY287XFf8HMVmVLH4td/cLK1IerVQF64qZkbSuv5B9dQ5+gUymjHJUVZBD OOb/TBc8MXbTVLUwTU+/inIyvGBCMkZHoJj0xXnDmna0ICrJZWZvlXIUVEB3qGfr Xb0Ee3ns2nMbXLG2JehflQSWzfPQfqN9lJ/GhdUj5YUVMkPAaxXN0R0yHwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFHrwOQuN46KAlPtChlZG7GgdgQW1MB8GA1UdIwQY MBaAFPk6xs0iQCSbumAXHwhukQHMh8okMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1Uckd6U0pBSkp1NllCY2ZDRzZSQWN5SHlpUS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvYjAzMjEzLTVlODAtNDkzMS04MWNl LWY3NTJkODE2MDVmYi8xL2V2QTVDNDNqb29DVS0wS0dWa2JzYUIyQkJiVS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOTgvYjAzMjEzLTVlODAtNDkzMS04MWNlLWY3NTJkODE2MDVm Yi8xLzEtVHJHelNKQUpKdTZZQmNmQ0c2UkFjeUh5aVEuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACTvYow DQYJKoZIhvcNAQELBQADggEBAIOak40zven3+iRZWJPUu6TCc4EKgBOnoxWwMwij eOuTuHD8aGc/rqd7PRNUiusHpS3dRTs0LgwWiUOXePmCAxNhGdH6reFKDPRGcTD2 Urw9fJTQfWx0IlwucX4b/gUMRWldB4qHITraKPwQUgqxr1wcfgF/s2tOkXaOitPx 2D8Mu+an3NpN3kVdVIS11I1MH41T57DYh+BDMge2YGReNZIgIMfw9h7T1aHlO/m7 aUcznZTyUL2H4X49Vp56ynATYTnVeWfNOz00BbZYda7DQOJIrk2Xd7M6BH6XmlC4 PnEJTa/rcYNFfjpPsCfoJqupceLXiWrWtqd8xufyneFFyx0= -----END CERTIFICATE-----Generated at Sun Jan 25 13:01:24 2026 by rpki-client