This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/e-pIqroMx8ktOvBXKbMUSY489PA.roa File: e-pIqroMx8ktOvBXKbMUSY489PA.roa (raw, json) Hash identifier: zD2XKbyMKOBSm6Gik/HGW9BbJtz+ToLcLdq/4K8Rj18= Subject key identifier: 7B:EA:48:AA:BA:0C:C7:C9:2D:3A:F0:57:29:B3:14:49:8E:3C:F4:F0 Certificate issuer: /CN=271d84369c155055ad9bd5b471558d3fa7b109d2 Certificate serial: 019B7DCAD6AAD030D990D2A21418AE725EFB Authority key identifier: 27:1D:84:36:9C:15:50:55:AD:9B:D5:B4:71:55:8D:3F:A7:B1:09:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/e-pIqroMx8ktOvBXKbMUSY489PA.roa Signing time: Fri 02 Jan 2026 08:20:03 +0000 ROA not before: Fri 02 Jan 2026 08:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207773 IP address blocks: 185.155.216.0/24 maxlen: 24 185.155.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:d6:aa:d0:30:d9:90:d2:a2:14:18:ae:72:5e:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=271d84369c155055ad9bd5b471558d3fa7b109d2 Validity Not Before: Jan 2 08:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7bea48aaba0cc7c92d3af05729b314498e3cf4f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ff:d2:73:be:8e:fa:b6:40:20:5f:59:61:af: 07:d7:54:fe:2e:4b:b4:b4:b8:4a:a7:9f:96:9b:68: 91:a0:25:10:82:49:40:aa:2c:a4:fd:a6:53:95:cb: 91:05:e8:6d:5a:ec:ff:ea:66:10:c9:4d:e5:aa:a3: 02:f8:81:35:13:9a:d7:c3:f5:45:0a:7a:2d:9f:eb: 80:7d:09:4a:75:fe:16:12:8c:ea:da:64:f2:a4:5e: 02:02:ab:fa:c3:f1:96:fa:8d:72:08:06:eb:31:bc: f6:75:fa:f8:08:cf:b8:52:af:56:13:72:06:e4:c2: 22:02:04:47:01:a1:f0:69:9d:ca:71:4c:83:d3:25: 37:33:f6:bc:fc:6d:00:38:cc:5a:4b:98:ce:f7:5c: 6b:80:31:6c:26:d8:b7:58:5f:88:5b:b3:62:7e:57: 39:3e:66:86:96:59:a0:5c:fb:1d:aa:49:9b:c7:c6: b0:82:ba:96:2e:31:82:92:4e:b1:22:8a:30:ee:8c: 8c:c0:66:23:09:93:1b:b5:4b:1f:b2:6f:e5:1c:57: dc:ce:ee:b0:d7:4c:d7:bb:1d:8f:65:69:74:1a:33: 5e:f6:d8:91:60:c3:b4:47:fe:41:71:40:87:77:28: 12:1c:d5:f2:9a:8c:b0:05:e1:1b:01:6b:d5:44:9b: d4:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:EA:48:AA:BA:0C:C7:C9:2D:3A:F0:57:29:B3:14:49:8E:3C:F4:F0 X509v3 Authority Key Identifier: keyid:27:1D:84:36:9C:15:50:55:AD:9B:D5:B4:71:55:8D:3F:A7:B1:09:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/e-pIqroMx8ktOvBXKbMUSY489PA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.155.216.0/23 Signature Algorithm: sha256WithRSAEncryption bb:0d:15:e0:a1:a1:c3:de:ef:fc:df:ce:68:00:44:23:2f:a2: 0b:48:b0:13:b3:88:98:44:53:5d:39:d3:3f:60:fe:1b:02:fc: e8:e5:d2:83:73:08:29:0a:d3:8e:b7:8d:ac:72:29:ef:7a:11: 65:46:06:3c:23:2a:1e:30:97:d4:43:99:db:95:70:60:a0:f8: 8e:d8:ce:64:8a:3c:a6:31:05:02:16:e5:f7:14:71:29:d2:02: 01:8b:4b:a5:a3:f1:1f:88:35:d3:dc:ce:d5:5a:01:79:b7:48: d9:10:18:7f:37:09:00:e1:02:4f:cf:ab:5c:7c:e3:9f:d1:56: 7f:c0:05:d8:91:d3:8e:f9:2a:47:38:84:20:b0:4c:51:e4:11: 1b:30:03:93:97:79:75:d5:7b:70:b9:c2:da:36:0c:4b:0f:fe: fe:0d:83:e9:4a:17:9c:fe:e5:ca:0d:19:e0:e5:47:5a:fb:5b: e0:76:ed:d4:4f:44:d3:54:75:d7:b0:13:40:66:18:7a:3a:cd: 9b:8d:da:d0:8e:f2:0c:03:02:0d:c5:4b:41:02:59:a4:3c:6b: 7c:57:23:49:df:7d:91:57:63:9c:f7:c7:73:26:9a:97:06:f3: 12:2f:aa:26:e3:2f:ca:50:2e:5a:91:0d:92:e9:3f:97:44:13: 92:66:62:dd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ytaq0DDZkNKiFBiucl77MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3MWQ4NDM2OWMxNTUwNTVhZDliZDViNDcxNTU4ZDNmYTdi MTA5ZDIwHhcNMjYwMTAyMDgyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YmVhNDhhYWJhMGNjN2M5MmQzYWYwNTcyOWIzMTQ0OThlM2NmNGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsP/Sc76O+rZAIF9ZYa8H11T+Lku0 tLhKp5+Wm2iRoCUQgklAqiyk/aZTlcuRBehtWuz/6mYQyU3lqqMC+IE1E5rXw/VF Cnotn+uAfQlKdf4WEozq2mTypF4CAqv6w/GW+o1yCAbrMbz2dfr4CM+4Uq9WE3IG 5MIiAgRHAaHwaZ3KcUyD0yU3M/a8/G0AOMxaS5jO91xrgDFsJti3WF+IW7Niflc5 PmaGllmgXPsdqkmbx8awgrqWLjGCkk6xIoow7oyMwGYjCZMbtUsfsm/lHFfczu6w 10zXux2PZWl0GjNe9tiRYMO0R/5BcUCHdygSHNXymoywBeEbAWvVRJvUywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHvqSKq6DMfJLTrwVymzFEmOPPTwMB8GA1UdIwQY MBaAFCcdhDacFVBVrZvVtHFVjT+nsQnSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSngyRU5wd1ZVRld0bTlXMGNWV05QNmV4Q2RJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9hMzJhYmEtZTljNy00MGVhLTgxNjIt OTE0OTRhYzNiNmQ1LzEvZS1wSXFyb014OGt0T3ZCWEtiTVVTWTQ4OVBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9hMzJhYmEtZTljNy00MGVhLTgxNjItOTE0OTRhYzNiNmQ1 LzEvSngyRU5wd1ZVRld0bTlXMGNWV05QNmV4Q2RJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuZvYMA0G CSqGSIb3DQEBCwUAA4IBAQC7DRXgoaHD3u/8385oAEQjL6ILSLATs4iYRFNdOdM/ YP4bAvzo5dKDcwgpCtOOt42scinvehFlRgY8IyoeMJfUQ5nblXBgoPiO2M5kijym MQUCFuX3FHEp0gIBi0ulo/EfiDXT3M7VWgF5t0jZEBh/NwkA4QJPz6tcfOOf0VZ/ wAXYkdOO+SpHOIQgsExR5BEbMAOTl3l11XtwucLaNgxLD/7+DYPpShec/uXKDRng 5Uda+1vgdu3UT0TTVHXXsBNAZhh6Os2bjdrQjvIMAwINxUtBAlmkPGt8VyNJ332R V2Oc98dzJpqXBvMSL6om4y/KUC5akQ2S6T+XRBOSZmLd -----END CERTIFICATE-----Generated at Mon Jan 26 06:32:22 2026 by rpki-client