This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/02ewy2NdwEqIPhzTQYrOjSAN2Pc.roa File: 02ewy2NdwEqIPhzTQYrOjSAN2Pc.roa (raw, json) Hash identifier: 1z0GuLX6P5o980y+Or1DXnPEqAb65d6y04qZo2Fq+bI= Subject key identifier: D3:67:B0:CB:63:5D:C0:4A:88:3E:1C:D3:41:8A:CE:8D:20:0D:D8:F7 Certificate issuer: /CN=e15136feff3574ef9b2262de59b06a21908fab3e Certificate serial: 019B7CED58D7625F14AE4C1E110747C639EC Authority key identifier: E1:51:36:FE:FF:35:74:EF:9B:22:62:DE:59:B0:6A:21:90:8F:AB:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VE2_v81dO-bImLeWbBqIZCPqz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/02ewy2NdwEqIPhzTQYrOjSAN2Pc.roa Signing time: Fri 02 Jan 2026 04:18:08 +0000 ROA not before: Fri 02 Jan 2026 04:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49801 IP address blocks: 78.111.5.0/24 maxlen: 24 78.111.6.0/24 maxlen: 24 87.247.168.0/21 maxlen: 21 87.247.172.0/23 maxlen: 23 87.247.173.0/24 maxlen: 24 185.166.105.0/24 maxlen: 24 185.166.107.0/24 maxlen: 24 2a10:a440::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/4VE2_v81dO-bImLeWbBqIZCPqz4.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/4VE2_v81dO-bImLeWbBqIZCPqz4.mft rsync://rpki.ripe.net/repository/DEFAULT/4VE2_v81dO-bImLeWbBqIZCPqz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:58:d7:62:5f:14:ae:4c:1e:11:07:47:c6:39:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e15136feff3574ef9b2262de59b06a21908fab3e Validity Not Before: Jan 2 04:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d367b0cb635dc04a883e1cd3418ace8d200dd8f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8c:d9:16:da:93:c1:b0:bf:88:84:21:ff:3a: ee:5f:3a:60:fc:23:b2:95:31:dd:39:06:f5:c7:b5: 3e:1d:1b:f9:66:a5:e1:7b:64:1e:43:09:cc:97:fe: 5f:f0:2d:57:0a:ab:56:80:cc:e8:bf:ae:95:83:19: ff:1b:a4:26:51:05:23:94:5a:28:8b:be:80:0a:23: 7b:0b:1f:ac:97:0e:8c:6f:c7:eb:fa:3d:90:fd:e6: ac:64:b9:07:6e:4b:2c:ce:97:98:d6:85:32:ae:d2: cd:de:94:81:87:45:06:fd:13:4d:e9:9d:e5:12:b1: eb:ce:72:fa:d9:18:9f:24:5f:c3:de:70:91:cc:76: 2a:a5:0c:d8:fa:83:d5:29:44:ef:a6:7f:f6:3b:d4: 83:b0:a5:76:78:0c:16:4a:e6:83:eb:39:d3:3b:3d: 7f:d5:2b:95:23:16:3e:4b:84:6c:9f:71:0b:b5:28: c9:ef:87:95:62:c0:1f:64:17:79:66:38:9e:c4:a4: c7:ee:e0:68:db:0d:af:9f:15:9d:98:4f:a8:0c:32: a3:cc:7d:62:c3:ad:29:b5:d5:ef:6b:ec:db:f7:d5: 53:0d:44:dc:28:dd:8d:32:bd:02:d4:de:71:a5:b2: 05:f1:7b:b0:85:2e:b0:5d:b9:f9:dc:ad:e6:0b:a1: e1:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:67:B0:CB:63:5D:C0:4A:88:3E:1C:D3:41:8A:CE:8D:20:0D:D8:F7 X509v3 Authority Key Identifier: keyid:E1:51:36:FE:FF:35:74:EF:9B:22:62:DE:59:B0:6A:21:90:8F:AB:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VE2_v81dO-bImLeWbBqIZCPqz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/02ewy2NdwEqIPhzTQYrOjSAN2Pc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1e09a6-695b-402e-9bfc-041312242ff3/1/4VE2_v81dO-bImLeWbBqIZCPqz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.111.5.0-78.111.6.255 87.247.168.0/21 185.166.105.0/24 185.166.107.0/24 IPv6: 2a10:a440::/29 Signature Algorithm: sha256WithRSAEncryption 2c:29:8a:2e:5d:61:66:b4:04:25:ca:ac:1f:a1:04:2a:99:2f: 5f:b1:13:77:f3:4e:75:7b:6d:10:22:3c:c5:7d:79:d0:d2:c6: ed:13:21:5a:fc:94:1a:7c:16:25:81:55:a4:e1:74:e7:0c:4f: 13:bc:46:fd:2f:96:7e:91:a1:fa:6e:01:e7:ee:69:78:f1:55: 2b:83:c3:73:51:4d:ff:d0:24:3d:14:b1:15:26:14:27:75:48: 63:0e:76:38:96:01:87:95:e9:bf:05:32:6b:69:fa:c9:5b:39: 14:e1:85:f7:b1:f6:4f:ad:d9:e0:66:4d:ba:99:8f:71:ab:c0: a0:93:1a:16:ee:a8:b2:27:d3:aa:9a:fa:b1:ae:c6:22:1d:a0: 92:f7:dc:d9:8e:5c:8b:e1:11:14:12:9f:cf:02:2e:65:50:48: 8b:ef:78:e1:6e:7f:a7:51:9b:b1:aa:85:a4:cf:08:e4:5a:65: df:f6:27:29:34:d4:75:73:79:82:62:c6:4c:52:14:52:c8:75: 39:ec:71:de:6a:a6:0f:0f:01:a6:cb:e1:a6:58:03:f8:10:0c: fa:9d:10:83:8c:06:92:82:b9:4f:b0:0f:96:8e:4d:66:cd:0c: 65:53:0c:70:66:40:38:0a:e5:26:ae:4f:01:df:c2:c0:89:ca: f7:c9:c0:90 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgISAZt87VjXYl8UrkweEQdHxjnsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNTEzNmZlZmYzNTc0ZWY5YjIyNjJkZTU5YjA2YTIxOTA4 ZmFiM2UwHhcNMjYwMTAyMDQxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzY3YjBjYjYzNWRjMDRhODgzZTFjZDM0MThhY2U4ZDIwMGRkOGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYzZFtqTwbC/iIQh/zruXzpg/COy lTHdOQb1x7U+HRv5ZqXhe2QeQwnMl/5f8C1XCqtWgMzov66Vgxn/G6QmUQUjlFoo i76ACiN7Cx+slw6Mb8fr+j2Q/easZLkHbksszpeY1oUyrtLN3pSBh0UG/RNN6Z3l ErHrznL62RifJF/D3nCRzHYqpQzY+oPVKUTvpn/2O9SDsKV2eAwWSuaD6znTOz1/ 1SuVIxY+S4Rsn3ELtSjJ74eVYsAfZBd5ZjiexKTH7uBo2w2vnxWdmE+oDDKjzH1i w60ptdXva+zb99VTDUTcKN2NMr0C1N5xpbIF8XuwhS6wXbn53K3mC6HhaQIDAQAB o4ICMjCCAi4wHQYDVR0OBBYEFNNnsMtjXcBKiD4c00GKzo0gDdj3MB8GA1UdIwQY MBaAFOFRNv7/NXTvmyJi3lmwaiGQj6s+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFZFMl92ODFkTy1iSW1MZVdiQnFJWkNQcXo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8xZTA5YTYtNjk1Yi00MDJlLTliZmMt MDQxMzEyMjQyZmYzLzEvMDJld3kyTmR3RXFJUGh6VFFZck9qU0FOMlBjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8xZTA5YTYtNjk1Yi00MDJlLTliZmMtMDQxMzEyMjQyZmYz LzEvNFZFMl92ODFkTy1iSW1MZVdiQnFJWkNQcXo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAmBAIAATAgMAwDBABObwUD BABObwYDBANX96gDBAC5pmkDBAC5pmswDQQCAAIwBwMFAyoQpEAwDQYJKoZIhvcN AQELBQADggEBACwpii5dYWa0BCXKrB+hBCqZL1+xE3fzTnV7bRAiPMV9edDSxu0T IVr8lBp8FiWBVaThdOcMTxO8Rv0vln6RofpuAefuaXjxVSuDw3NRTf/QJD0UsRUm FCd1SGMOdjiWAYeV6b8FMmtp+slbORThhfex9k+t2eBmTbqZj3GrwKCTGhbuqLIn 06qa+rGuxiIdoJL33NmOXIvhERQSn88CLmVQSIvveOFuf6dRm7GqhaTPCORaZd/2 Jyk01HVzeYJixkxSFFLIdTnscd5qpg8PAabL4aZYA/gQDPqdEIOMBpKCuU+wD5aO TWbNDGVTDHBmQDgK5SauTwHfwsCJyvfJwJA= -----END CERTIFICATE-----Generated at Mon Jan 26 10:24:45 2026 by rpki-client