This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/Ewfu9z930MhyPX8313muaLXe2oM.roa File: Ewfu9z930MhyPX8313muaLXe2oM.roa (raw, json) Hash identifier: xaNiT68XuLXKua+vW1yOiyZ2EeD/WOwvk5iab3yyEqE= Subject key identifier: 13:07:EE:F7:3F:77:D0:C8:72:3D:7F:37:D7:79:AE:68:B5:DE:DA:83 Certificate issuer: /CN=60acd7d96b956de5db03673cd1d1e3a37b8dd9dd Certificate serial: 019B7CEDB4FD80BDF170840EBC98CA196F5B Authority key identifier: 60:AC:D7:D9:6B:95:6D:E5:DB:03:67:3C:D1:D1:E3:A3:7B:8D:D9:DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/Ewfu9z930MhyPX8313muaLXe2oM.roa Signing time: Fri 02 Jan 2026 04:18:31 +0000 ROA not before: Fri 02 Jan 2026 04:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215633 IP address blocks: 194.107.116.0/24 maxlen: 24 2a0c:6e00::/32 maxlen: 32 2a0c:6e00::/48 maxlen: 48 2a0c:6e00:1::/48 maxlen: 48 2a0c:6e00:2::/48 maxlen: 48 2a0c:6e00:3::/48 maxlen: 48 2a0c:6e00:4::/48 maxlen: 48 2a0c:6e00:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.mft rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:b4:fd:80:bd:f1:70:84:0e:bc:98:ca:19:6f:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60acd7d96b956de5db03673cd1d1e3a37b8dd9dd Validity Not Before: Jan 2 04:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1307eef73f77d0c8723d7f37d779ae68b5deda83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:89:d3:04:0b:53:af:5f:7d:6d:65:ad:4f:82: 40:25:ad:39:df:11:21:d0:0c:28:c4:de:1b:df:76: c1:8e:51:5f:84:02:b6:98:68:fb:16:09:44:f9:dd: b7:9e:e0:51:76:15:7a:a1:04:7b:34:bd:13:5a:50: 78:f1:b7:a2:af:60:82:ab:a8:f7:8b:66:db:24:e0: 00:5f:ed:31:45:b3:cc:5b:a5:40:99:8b:62:35:41: 1f:ff:ad:b0:e6:fc:63:1e:9b:e9:77:a6:95:b8:95: 4b:b3:68:f1:1e:e8:42:ff:97:5a:25:a1:a5:22:b2: e6:04:5a:2e:0e:67:c3:d5:68:c4:f5:ae:33:15:a8: 73:46:40:0f:74:d6:7c:88:1b:c6:4a:87:14:53:e2: 1d:70:c7:14:7d:43:8c:0f:2a:48:51:b5:72:d1:15: 5c:eb:90:0b:3a:08:00:e6:54:83:56:67:60:fc:ba: a8:53:46:7b:66:04:c5:e9:4d:a6:5f:fc:e2:b5:57: 1b:d4:03:0c:be:39:3c:b0:d2:be:d2:29:4c:8d:e2: 01:a3:49:23:5c:8e:5e:61:a2:1e:4c:80:e2:8c:7a: f2:a5:49:cd:e4:83:d4:a0:9c:54:d8:62:92:35:fc: 05:1b:1b:e0:4c:98:1e:2f:0e:a7:4b:0e:f9:43:63: b6:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:07:EE:F7:3F:77:D0:C8:72:3D:7F:37:D7:79:AE:68:B5:DE:DA:83 X509v3 Authority Key Identifier: keyid:60:AC:D7:D9:6B:95:6D:E5:DB:03:67:3C:D1:D1:E3:A3:7B:8D:D9:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKzX2WuVbeXbA2c80dHjo3uN2d0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/Ewfu9z930MhyPX8313muaLXe2oM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f377bd-8e42-4875-a124-3abfafe74aa9/1/YKzX2WuVbeXbA2c80dHjo3uN2d0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.107.116.0/24 IPv6: 2a0c:6e00::/32 Signature Algorithm: sha256WithRSAEncryption 45:93:56:36:71:07:14:c3:c0:56:6a:98:21:43:01:f6:aa:0f: 37:80:f2:bf:ba:e7:7e:9e:bf:df:0a:0a:c4:ae:7f:31:c2:28: 28:99:11:22:90:cd:fa:53:0a:8b:0b:62:e5:dc:88:e1:47:ae: a9:c5:87:27:36:7a:e4:2f:17:80:0e:a1:ba:da:63:69:cc:bf: b4:80:41:96:36:42:03:44:08:09:c6:f1:5a:f6:1f:43:34:31: e3:98:00:10:0b:37:a5:45:e2:b4:7a:57:49:17:b9:e8:ba:8d: 6b:c0:80:3f:b0:99:f3:c7:81:42:66:89:c1:b8:8c:50:e2:44: 55:48:7c:50:c5:1a:4f:cb:92:e4:70:c5:ac:b0:31:f1:38:02: a9:b6:b8:7b:02:24:07:c1:09:02:41:05:2d:76:a8:b4:80:b7: ae:48:2a:26:8d:f1:fa:3b:d7:e3:2c:07:06:4c:39:74:51:98: 64:3c:57:7a:5b:d6:4d:9f:9f:c6:98:ed:88:66:92:d7:23:e2: 01:4a:dd:8e:4d:1d:b3:2f:99:72:2b:5d:39:3d:83:e4:e7:49: 5b:ce:8f:04:30:1b:1f:54:7b:98:55:05:3d:60:47:a7:6c:bf: 37:e2:48:99:9c:94:66:57:ee:d6:3c:00:6f:ac:42:c4:88:29: 1d:c6:4b:aa -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt87bT9gL3xcIQOvJjKGW9bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwYWNkN2Q5NmI5NTZkZTVkYjAzNjczY2QxZDFlM2EzN2I4 ZGQ5ZGQwHhcNMjYwMTAyMDQxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzA3ZWVmNzNmNzdkMGM4NzIzZDdmMzdkNzc5YWU2OGI1ZGVkYTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuonTBAtTr199bWWtT4JAJa053xEh 0AwoxN4b33bBjlFfhAK2mGj7FglE+d23nuBRdhV6oQR7NL0TWlB48beir2CCq6j3 i2bbJOAAX+0xRbPMW6VAmYtiNUEf/62w5vxjHpvpd6aVuJVLs2jxHuhC/5daJaGl IrLmBFouDmfD1WjE9a4zFahzRkAPdNZ8iBvGSocUU+IdcMcUfUOMDypIUbVy0RVc 65ALOggA5lSDVmdg/LqoU0Z7ZgTF6U2mX/zitVcb1AMMvjk8sNK+0ilMjeIBo0kj XI5eYaIeTIDijHrypUnN5IPUoJxU2GKSNfwFGxvgTJgeLw6nSw75Q2O2HwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBMH7vc/d9DIcj1/N9d5rmi13tqDMB8GA1UdIwQY MBaAFGCs19lrlW3l2wNnPNHR46N7jdndMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUt6WDJXdVZiZVhiQTJjODBkSGpvM3VOMmQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9mMzc3YmQtOGU0Mi00ODc1LWExMjQt M2FiZmFmZTc0YWE5LzEvRXdmdTl6OTMwTWh5UFg4MzEzbXVhTFhlMm9NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9mMzc3YmQtOGU0Mi00ODc1LWExMjQtM2FiZmFmZTc0YWE5 LzEvWUt6WDJXdVZiZVhiQTJjODBkSGpvM3VOMmQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwmt0MA0E AgACMAcDBQAqDG4AMA0GCSqGSIb3DQEBCwUAA4IBAQBFk1Y2cQcUw8BWapghQwH2 qg83gPK/uud+nr/fCgrErn8xwigomREikM36UwqLC2Ll3IjhR66pxYcnNnrkLxeA DqG62mNpzL+0gEGWNkIDRAgJxvFa9h9DNDHjmAAQCzelReK0eldJF7nouo1rwIA/ sJnzx4FCZonBuIxQ4kRVSHxQxRpPy5LkcMWssDHxOAKptrh7AiQHwQkCQQUtdqi0 gLeuSComjfH6O9fjLAcGTDl0UZhkPFd6W9ZNn5/GmO2IZpLXI+IBSt2OTR2zL5ly K105PYPk50lbzo8EMBsfVHuYVQU9YEenbL834kiZnJRmV+7WPABvrELEiCkdxkuq -----END CERTIFICATE-----Generated at Sun Jan 25 16:38:42 2026 by rpki-client