This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/eV_cnBLHExwM3HoFdmLAj8EL0dU.roa File: eV_cnBLHExwM3HoFdmLAj8EL0dU.roa (raw, json) Hash identifier: izY6q8vOLE3p/u7foQA9fiAmgnD5RtTMesu7+JH2h/0= Subject key identifier: 79:5F:DC:9C:12:C7:13:1C:0C:DC:7A:05:76:62:C0:8F:C1:0B:D1:D5 Certificate issuer: /CN=cb952f9c339cabd14234d00c84a252d7ec71a2a2 Certificate serial: 019B7F15670C504ED2D984A6815F37FDA999 Authority key identifier: CB:95:2F:9C:33:9C:AB:D1:42:34:D0:0C:84:A2:52:D7:EC:71:A2:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5UvnDOcq9FCNNAMhKJS1-xxoqI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/eV_cnBLHExwM3HoFdmLAj8EL0dU.roa Signing time: Fri 02 Jan 2026 14:21:07 +0000 ROA not before: Fri 02 Jan 2026 14:21:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47872 IP address blocks: 185.44.116.0/24 maxlen: 24 185.44.117.0/24 maxlen: 24 185.44.119.0/24 maxlen: 24 212.5.48.0/24 maxlen: 24 212.5.49.0/24 maxlen: 24 212.5.50.0/24 maxlen: 24 2a01:73e0::/32 maxlen: 64 2a01:73e0::/36 maxlen: 36 2a01:73e0:a000::/36 maxlen: 36 2a01:73e0:b000::/36 maxlen: 36 2a01:73e0:c000::/36 maxlen: 36 2a01:73e0:d000::/36 maxlen: 36 2a01:73e0:e000::/36 maxlen: 36 2a01:73e0:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.mft rsync://rpki.ripe.net/repository/DEFAULT/y5UvnDOcq9FCNNAMhKJS1-xxoqI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:67:0c:50:4e:d2:d9:84:a6:81:5f:37:fd:a9:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb952f9c339cabd14234d00c84a252d7ec71a2a2 Validity Not Before: Jan 2 14:21:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=795fdc9c12c7131c0cdc7a057662c08fc10bd1d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:02:3e:9d:93:74:8d:de:8e:e3:7a:a3:ec:8c: 8d:e0:48:54:b1:e0:fe:10:e4:da:c6:6b:ab:b5:cc: 95:24:22:cf:70:8d:9a:df:e9:a0:f7:1b:5d:b2:dd: 46:b2:2d:91:22:1d:15:57:d6:4c:ef:fc:7f:bf:0e: 24:4c:24:0a:28:ab:bf:c1:53:ef:e5:17:14:01:25: 01:0d:9a:85:df:1b:db:f7:fe:6a:0f:f4:34:ff:0f: 63:06:5a:41:c2:bf:96:e8:c4:c7:41:dd:40:85:ba: 42:57:15:77:03:0f:96:ac:a9:e4:c4:2c:12:fe:24: 77:d8:a8:73:61:e2:c6:e4:47:3a:40:b6:64:23:3c: 6c:dd:1c:a4:76:c2:b4:e3:ca:86:8a:6e:67:76:0a: e2:f3:dd:15:3d:a4:c6:79:da:33:c5:52:8c:92:4b: 07:9c:77:b0:50:16:69:50:a0:58:e5:9a:c0:fb:72: ce:a8:b8:12:2e:8d:c0:0f:68:68:f3:d8:97:c7:cb: 20:7e:e0:46:03:be:c1:2a:3d:5f:e8:94:e6:41:63: 34:58:c6:bb:75:97:b9:67:41:86:90:41:92:1d:e6: e6:58:60:8a:70:14:46:3c:be:d4:20:c4:70:32:9a: 18:e6:9e:ff:91:8e:21:b4:03:11:1c:cf:91:2b:a7: 63:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:5F:DC:9C:12:C7:13:1C:0C:DC:7A:05:76:62:C0:8F:C1:0B:D1:D5 X509v3 Authority Key Identifier: keyid:CB:95:2F:9C:33:9C:AB:D1:42:34:D0:0C:84:A2:52:D7:EC:71:A2:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5UvnDOcq9FCNNAMhKJS1-xxoqI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/eV_cnBLHExwM3HoFdmLAj8EL0dU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9098fd-7dc3-4e12-b893-fd22df3b57f6/1/y5UvnDOcq9FCNNAMhKJS1-xxoqI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.44.116.0/23 185.44.119.0/24 212.5.48.0-212.5.50.255 IPv6: 2a01:73e0::/32 Signature Algorithm: sha256WithRSAEncryption 50:5d:4d:ef:77:90:19:a6:67:5c:44:e4:b3:47:bb:b5:43:ee: b8:92:83:82:11:d1:44:9e:f8:2f:a0:25:e9:2e:82:18:04:17: c0:3e:42:91:16:a1:49:d7:c4:84:81:67:76:89:36:79:df:30: 14:e8:93:49:32:55:4e:22:4b:6d:8d:3f:0c:e1:19:9a:d8:d5: fe:e6:ea:cb:ee:e9:61:70:1c:1d:31:a5:8c:f1:18:dc:a3:3f: e9:70:ee:7d:9b:a4:aa:c8:56:04:f4:69:c0:61:58:96:de:93: f9:9b:df:bc:17:2a:8b:09:fb:87:5f:04:f9:5a:19:63:51:e4: 71:3e:36:c6:fb:3f:26:20:f4:cd:c9:b8:62:da:9e:1c:43:73: e5:36:28:f4:06:d0:bb:7c:b4:a1:98:06:70:25:69:ea:26:0e: 63:e2:23:3c:95:72:a4:49:28:bb:16:79:28:07:e0:a7:c9:9f: 35:28:89:aa:4b:6e:87:cd:56:25:0c:41:6d:21:86:3c:54:08: eb:73:e4:4b:53:e4:8d:aa:ba:21:08:4c:14:32:cd:74:e8:92: 0a:90:5b:20:da:a1:2a:42:b8:3a:65:4f:3b:95:2d:60:b6:28: 6c:1e:6f:85:4c:62:60:a4:3a:33:86:84:77:15:a9:88:9c:24: 7a:8d:b4:9b -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt/FWcMUE7S2YSmgV83/amZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiOTUyZjljMzM5Y2FiZDE0MjM0ZDAwYzg0YTI1MmQ3ZWM3 MWEyYTIwHhcNMjYwMTAyMTQyMTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OTVmZGM5YzEyYzcxMzFjMGNkYzdhMDU3NjYyYzA4ZmMxMGJkMWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAI+nZN0jd6O43qj7IyN4EhUseD+ EOTaxmurtcyVJCLPcI2a3+mg9xtdst1Gsi2RIh0VV9ZM7/x/vw4kTCQKKKu/wVPv 5RcUASUBDZqF3xvb9/5qD/Q0/w9jBlpBwr+W6MTHQd1AhbpCVxV3Aw+WrKnkxCwS /iR32KhzYeLG5Ec6QLZkIzxs3RykdsK048qGim5ndgri890VPaTGedozxVKMkksH nHewUBZpUKBY5ZrA+3LOqLgSLo3AD2ho89iXx8sgfuBGA77BKj1f6JTmQWM0WMa7 dZe5Z0GGkEGSHebmWGCKcBRGPL7UIMRwMpoY5p7/kY4htAMRHM+RK6djSwIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFHlf3JwSxxMcDNx6BXZiwI/BC9HVMB8GA1UdIwQY MBaAFMuVL5wznKvRQjTQDISiUtfscaKiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTVVdm5ET2NxOUZDTk5BTWhLSlMxLXh4b3FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS85MDk4ZmQtN2RjMy00ZTEyLWI4OTMt ZmQyMmRmM2I1N2Y2LzEvZVZfY25CTEhFeHdNM0hvRmRtTEFqOEVMMGRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS85MDk4ZmQtN2RjMy00ZTEyLWI4OTMtZmQyMmRmM2I1N2Y2 LzEveTVVdm5ET2NxOUZDTk5BTWhLSlMxLXh4b3FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAgBAIAATAaAwQBuSx0AwQA uSx3MAwDBATUBTADBADUBTIwDQQCAAIwBwMFACoBc+AwDQYJKoZIhvcNAQELBQAD ggEBAFBdTe93kBmmZ1xE5LNHu7VD7riSg4IR0USe+C+gJekughgEF8A+QpEWoUnX xISBZ3aJNnnfMBTok0kyVU4iS22NPwzhGZrY1f7m6svu6WFwHB0xpYzxGNyjP+lw 7n2bpKrIVgT0acBhWJbek/mb37wXKosJ+4dfBPlaGWNR5HE+Nsb7PyYg9M3JuGLa nhxDc+U2KPQG0Lt8tKGYBnAlaeomDmPiIzyVcqRJKLsWeSgH4KfJnzUoiapLbofN ViUMQW0hhjxUCOtz5EtT5I2quiEITBQyzXTokgqQWyDaoSpCuDplTzuVLWC2KGwe b4VMYmCkOjOGhHcVqYicJHqNtJs= -----END CERTIFICATE-----Generated at Mon Jan 26 05:03:05 2026 by rpki-client