This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/egLaVoMxZdFX5v4UfbEqT7bGdhY.roa File: egLaVoMxZdFX5v4UfbEqT7bGdhY.roa (raw, json) Hash identifier: qjp68O26qQszJgWkRCQw2i4Ca5i0MtzroG8izPNHpng= Subject key identifier: 7A:02:DA:56:83:31:65:D1:57:E6:FE:14:7D:B1:2A:4F:B6:C6:76:16 Certificate issuer: /CN=37518d180923a7f3c00653ec12bc702b95aab907 Certificate serial: 019B7C1233DFEF641ECDC4B8C79AC5CB9F8C Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/egLaVoMxZdFX5v4UfbEqT7bGdhY.roa Signing time: Fri 02 Jan 2026 00:18:46 +0000 ROA not before: Fri 02 Jan 2026 00:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24922 IP address blocks: 193.140.216.0/21 maxlen: 21 193.140.224.0/20 maxlen: 20 194.27.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.mft rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:33:df:ef:64:1e:cd:c4:b8:c7:9a:c5:cb:9f:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907 Validity Not Before: Jan 2 00:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a02da56833165d157e6fe147db12a4fb6c67616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:57:a3:71:70:b5:9d:a4:cf:19:13:ae:f3:c0: 42:b0:9c:e4:15:c2:26:4d:ba:d2:16:9c:08:61:5a: b6:45:8f:33:ea:14:dd:6f:c5:1e:e8:df:74:52:14: 17:0b:86:64:cb:cb:f1:a8:e1:e9:ff:2a:df:49:1d: af:12:e8:7f:1d:ef:72:f1:f9:08:9e:59:55:28:22: 12:a3:c6:26:65:da:49:b9:db:39:b5:e7:c2:b0:97: 9a:a7:b6:0e:a6:ed:6a:0d:cb:1f:ad:55:a2:77:b1: 8d:4a:bd:1e:4d:43:b8:cb:b6:37:62:62:ea:26:39: 7e:ef:f7:d2:76:d6:9b:59:15:4d:98:f7:71:93:04: 92:73:c4:9e:a6:1a:8e:22:8d:d4:44:61:dc:16:84: 8a:e6:cb:fd:15:08:43:b6:26:ef:c5:6d:ab:be:af: f2:53:df:c4:80:16:aa:35:e7:6a:2e:80:75:1e:18: 09:d0:c8:57:86:19:4d:94:0c:ac:8e:76:72:e8:84: 6d:4c:84:24:a7:0d:9b:e4:4c:64:4c:86:28:e9:51: 98:72:9a:45:de:eb:33:51:34:2a:97:c4:fc:ec:80: df:d1:a3:1e:42:96:ba:35:d8:60:54:33:b7:7c:14: a5:db:11:02:56:7b:90:07:38:0c:2a:0a:db:89:ec: 56:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:02:DA:56:83:31:65:D1:57:E6:FE:14:7D:B1:2A:4F:B6:C6:76:16 X509v3 Authority Key Identifier: keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/egLaVoMxZdFX5v4UfbEqT7bGdhY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.140.216.0-193.140.239.255 194.27.160.0/21 Signature Algorithm: sha256WithRSAEncryption 01:c3:c0:cc:bc:69:09:44:6d:c9:f9:ff:8c:c6:2f:03:fd:66: 90:b7:78:19:50:6e:cc:82:ce:27:ce:2d:c6:b8:6c:10:9c:11: 34:d7:41:b1:1b:a2:bb:4f:44:6d:ba:d3:7b:ec:dd:32:a1:ca: b7:f6:d6:8a:1d:26:27:1b:39:ea:0a:ad:d2:cf:34:77:98:90: b1:28:cf:9e:0e:f6:f0:6e:5d:05:8c:c4:0b:06:d4:e9:1a:3a: 6f:0e:1c:cd:86:a3:29:c3:35:63:53:2d:69:54:c5:88:ea:86: a4:cf:11:29:5e:9b:94:ae:f0:3a:d8:fa:ca:3e:57:87:b6:6b: 7c:ea:c9:80:f0:85:30:b7:f9:a7:96:25:0b:14:3f:8b:9b:b5: 52:95:09:6d:74:fc:33:62:da:3f:65:95:5f:f2:7d:d4:fd:8f: 54:60:9c:60:80:2f:c7:ba:e2:49:bc:f4:5a:2f:3a:82:18:e2: 5c:f1:f1:87:e3:8d:a5:e2:4d:68:e7:71:38:d0:2a:2b:04:25: 2a:a9:04:a7:7e:63:b1:ad:2f:7b:0d:a0:78:0f:c7:1f:27:d3: 78:ba:38:57:2a:f4:bb:37:61:ec:90:ad:58:fd:e2:5c:d1:14: ce:4b:52:6a:2d:75:86:8f:67:01:1c:98:bd:a9:2a:85:75:6f: 83:1e:11:c5 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt8EjPf72QezcS4x5rFy5+MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NTE4ZDE4MDkyM2E3ZjNjMDA2NTNlYzEyYmM3MDJiOTVh YWI5MDcwHhcNMjYwMTAyMDAxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTAyZGE1NjgzMzE2NWQxNTdlNmZlMTQ3ZGIxMmE0ZmI2YzY3NjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFejcXC1naTPGROu88BCsJzkFcIm TbrSFpwIYVq2RY8z6hTdb8Ue6N90UhQXC4Zky8vxqOHp/yrfSR2vEuh/He9y8fkI nllVKCISo8YmZdpJuds5tefCsJeap7YOpu1qDcsfrVWid7GNSr0eTUO4y7Y3YmLq Jjl+7/fSdtabWRVNmPdxkwSSc8SephqOIo3URGHcFoSK5sv9FQhDtibvxW2rvq/y U9/EgBaqNedqLoB1HhgJ0MhXhhlNlAysjnZy6IRtTIQkpw2b5ExkTIYo6VGYcppF 3uszUTQql8T87IDf0aMeQpa6NdhgVDO3fBSl2xECVnuQBzgMKgrbiexW8wIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFHoC2laDMWXRV+b+FH2xKk+2xnYWMB8GA1UdIwQY MBaAFDdRjRgJI6fzwAZT7BK8cCuVqrkHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjFHTkdBa2pwX1BBQmxQc0VyeHdLNVdxdVFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9mODBlZjMtOWYwYi00YmQxLTgwMTgt NTk2NzE5MjBmYjYwLzEvZWdMYVZvTXhaZEZYNXY0VWZiRXFUN2JHZGhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9mODBlZjMtOWYwYi00YmQxLTgwMTgtNTk2NzE5MjBmYjYw LzEvTjFHTkdBa2pwX1BBQmxQc0VyeHdLNVdxdVFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAPBjNgD BATBjOADBAPCG6AwDQYJKoZIhvcNAQELBQADggEBAAHDwMy8aQlEbcn5/4zGLwP9 ZpC3eBlQbsyCzifOLca4bBCcETTXQbEbortPRG2603vs3TKhyrf21oodJicbOeoK rdLPNHeYkLEoz54O9vBuXQWMxAsG1OkaOm8OHM2GoynDNWNTLWlUxYjqhqTPESle m5Su8DrY+so+V4e2a3zqyYDwhTC3+aeWJQsUP4ubtVKVCW10/DNi2j9llV/yfdT9 j1RgnGCAL8e64km89FovOoIY4lzx8YfjjaXiTWjncTjQKisEJSqpBKd+Y7GtL3sN oHgPxx8n03i6OFcq9Ls3YeyQrVj94lzRFM5LUmotdYaPZwEcmL2pKoV1b4MeEcU= -----END CERTIFICATE-----Generated at Mon Jan 26 11:05:59 2026 by rpki-client