This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/eng9RYXhOr-5HaI5uOyelA6wzbc.roa File: eng9RYXhOr-5HaI5uOyelA6wzbc.roa (raw, json) Hash identifier: LlIBH4V68aJMu/FCHYy8zCpNmTkO2PE9LFtoa1D1JsI= Subject key identifier: 7A:78:3D:45:85:E1:3A:BF:B9:1D:A2:39:B8:EC:9E:94:0E:B0:CD:B7 Certificate issuer: /CN=4b7b73cd9bd1743f7d3f5ec6bd50a1935ef4801e Certificate serial: 019B7B35D3190F6841A684BF3A82ECE17D13 Authority key identifier: 4B:7B:73:CD:9B:D1:74:3F:7D:3F:5E:C6:BD:50:A1:93:5E:F4:80:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3tzzZvRdD99P17GvVChk170gB4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/eng9RYXhOr-5HaI5uOyelA6wzbc.roa Signing time: Thu 01 Jan 2026 20:18:03 +0000 ROA not before: Thu 01 Jan 2026 20:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1103 IP address blocks: 194.104.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft rsync://rpki.ripe.net/repository/DEFAULT/S3tzzZvRdD99P17GvVChk170gB4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:d3:19:0f:68:41:a6:84:bf:3a:82:ec:e1:7d:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b7b73cd9bd1743f7d3f5ec6bd50a1935ef4801e Validity Not Before: Jan 1 20:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a783d4585e13abfb91da239b8ec9e940eb0cdb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:85:10:16:53:34:03:cd:72:3b:f2:60:3a:47: 22:b1:56:6a:9b:d0:ec:d6:d0:1a:f7:67:4d:22:2f: 52:d0:a4:92:3c:51:15:0f:55:84:b6:47:13:97:0a: 22:fc:86:0f:8b:2f:41:22:73:73:dc:b7:50:5a:bc: 1e:a5:52:b2:a3:fa:f4:f3:53:b8:a9:30:16:e5:2c: 0c:af:dd:ab:4b:5b:19:57:30:a6:d4:8c:66:4d:71: 1c:d6:49:cf:37:42:e7:3e:9b:37:76:b7:bc:ff:b3: ba:0b:48:0b:d2:f0:9f:10:7a:51:de:97:05:ce:58: ec:7d:59:70:a9:61:f8:42:bd:40:0e:93:6a:8c:35: ce:ce:62:a4:98:af:42:6c:0c:06:5e:6e:52:5b:18: f3:03:5b:08:34:ee:ab:3d:08:62:41:e6:d2:b7:84: 92:9d:6c:10:26:c5:8c:c6:b5:94:0e:93:36:c1:1b: 79:c4:58:12:f0:7f:19:d4:7f:c2:ae:13:75:73:d3: f4:7f:da:dd:8b:d3:57:f3:06:3c:8b:c0:19:51:c9: a0:9e:5b:c9:e7:6c:d5:32:22:d7:25:f3:27:c9:f6: 49:f0:07:74:66:a9:6d:c4:a9:72:ba:ec:ae:c6:df: 75:b2:f4:a6:75:2a:81:96:77:77:ff:29:89:49:24: ab:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:78:3D:45:85:E1:3A:BF:B9:1D:A2:39:B8:EC:9E:94:0E:B0:CD:B7 X509v3 Authority Key Identifier: keyid:4B:7B:73:CD:9B:D1:74:3F:7D:3F:5E:C6:BD:50:A1:93:5E:F4:80:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3tzzZvRdD99P17GvVChk170gB4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/eng9RYXhOr-5HaI5uOyelA6wzbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.104.240.0/20 Signature Algorithm: sha256WithRSAEncryption 89:e7:90:a6:65:33:57:c7:ef:4b:26:10:b5:b0:31:97:66:55: 8d:ed:c5:d0:b0:1c:ab:d5:21:aa:08:d4:0f:8a:4e:19:4c:4c: 4f:16:d9:f9:f8:73:29:39:83:6c:b5:8a:91:f6:f6:ff:f7:19: 55:49:89:72:29:87:3b:7e:a5:4a:5e:f2:c6:18:84:ae:9c:26: 90:6b:b0:89:8d:03:2e:d0:71:dc:12:8a:e0:11:73:b6:c6:5b: a1:49:75:dc:2d:97:f6:1d:ea:78:95:e6:1e:26:ee:d6:bc:fb: d9:db:eb:7e:85:3f:27:3a:ba:3c:f2:e1:f8:2e:8a:1d:27:e0: 91:b1:60:e3:3e:49:b2:23:80:9b:b4:1b:bf:c4:f7:54:b4:a3: ad:33:d4:c8:06:e0:7d:da:ba:59:68:df:9b:1b:4e:d1:0d:85: 6d:5b:70:3c:74:ad:d0:46:f5:f3:2e:59:bc:1f:5c:b2:91:54: 20:67:ec:9a:47:94:a1:be:9f:f7:08:94:a8:48:07:55:25:cc: b4:4c:8b:aa:69:64:ed:54:ae:ce:fd:99:09:bd:12:87:dd:10: 26:5a:b5:cd:d5:c2:9a:0a:9b:58:c6:02:a1:52:6c:19:3e:85: fe:98:68:4d:8c:e4:c8:4b:dc:20:bc:0d:45:de:8c:23:a2:bb: 3e:c0:22:f8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NdMZD2hBpoS/OoLs4X0TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiN2I3M2NkOWJkMTc0M2Y3ZDNmNWVjNmJkNTBhMTkzNWVm NDgwMWUwHhcNMjYwMTAxMjAxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTc4M2Q0NTg1ZTEzYWJmYjkxZGEyMzliOGVjOWU5NDBlYjBjZGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIUQFlM0A81yO/JgOkcisVZqm9Ds 1tAa92dNIi9S0KSSPFEVD1WEtkcTlwoi/IYPiy9BInNz3LdQWrwepVKyo/r081O4 qTAW5SwMr92rS1sZVzCm1IxmTXEc1knPN0LnPps3dre8/7O6C0gL0vCfEHpR3pcF zljsfVlwqWH4Qr1ADpNqjDXOzmKkmK9CbAwGXm5SWxjzA1sINO6rPQhiQebSt4SS nWwQJsWMxrWUDpM2wRt5xFgS8H8Z1H/CrhN1c9P0f9rdi9NX8wY8i8AZUcmgnlvJ 52zVMiLXJfMnyfZJ8Ad0ZqltxKlyuuyuxt91svSmdSqBlnd3/ymJSSSrvQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHp4PUWF4Tq/uR2iObjsnpQOsM23MB8GA1UdIwQY MBaAFEt7c82b0XQ/fT9exr1QoZNe9IAeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzN0enpadlJkRDk5UDE3R3ZWQ2hrMTcwZ0I0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85NWY0NzktYjUwNy00ZWRiLTkyZjMt ZTJiNThmNWU0YWJiLzEvZW5nOVJZWGhPci01SGFJNXVPeWVsQTZ3emJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85NWY0NzktYjUwNy00ZWRiLTkyZjMtZTJiNThmNWU0YWJi LzEvUzN0enpadlJkRDk5UDE3R3ZWQ2hrMTcwZ0I0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwmjwMA0G CSqGSIb3DQEBCwUAA4IBAQCJ55CmZTNXx+9LJhC1sDGXZlWN7cXQsByr1SGqCNQP ik4ZTExPFtn5+HMpOYNstYqR9vb/9xlVSYlyKYc7fqVKXvLGGISunCaQa7CJjQMu 0HHcEorgEXO2xluhSXXcLZf2Hep4leYeJu7WvPvZ2+t+hT8nOro88uH4LoodJ+CR sWDjPkmyI4CbtBu/xPdUtKOtM9TIBuB92rpZaN+bG07RDYVtW3A8dK3QRvXzLlm8 H1yykVQgZ+yaR5Shvp/3CJSoSAdVJcy0TIuqaWTtVK7O/ZkJvRKH3RAmWrXN1cKa CptYxgKhUmwZPoX+mGhNjOTIS9wgvA1F3owjors+wCL4 -----END CERTIFICATE-----Generated at Sun Jan 25 19:36:16 2026 by rpki-client