This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/13QEtilMsPvjSBACtmSM2gevovs.roa File: 13QEtilMsPvjSBACtmSM2gevovs.roa (raw, json) Hash identifier: 7sZAAEzQHgY8dc7AwJ5Zb9+RwpGZZztjrIKtYajzllU= Subject key identifier: D7:74:04:B6:29:4C:B0:FB:E3:48:10:02:B6:64:8C:DA:07:AF:A2:FB Certificate issuer: /CN=2669dd2f4da888c27d130f99e88a2e0c590aad2f Certificate serial: 019B7F82D704FDB9DF17EF5FC11126858A0F Authority key identifier: 26:69:DD:2F:4D:A8:88:C2:7D:13:0F:99:E8:8A:2E:0C:59:0A:AD:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/13QEtilMsPvjSBACtmSM2gevovs.roa Signing time: Fri 02 Jan 2026 16:20:39 +0000 ROA not before: Fri 02 Jan 2026 16:20:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51849 IP address blocks: 194.42.122.0/23 maxlen: 23 195.72.122.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:d7:04:fd:b9:df:17:ef:5f:c1:11:26:85:8a:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2669dd2f4da888c27d130f99e88a2e0c590aad2f Validity Not Before: Jan 2 16:20:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d77404b6294cb0fbe3481002b6648cda07afa2fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:fa:cb:5f:1b:0f:2c:a9:9d:a9:02:15:fd:f1: 98:5e:60:d2:9d:85:ff:33:09:eb:7d:5c:c7:30:01: 43:c5:9d:38:ec:1f:d0:22:bc:82:df:44:e4:2e:e1: f2:d2:71:d7:ec:fe:a2:9e:ab:96:8f:e8:ce:8f:3f: 38:14:f6:0d:1c:91:c0:bd:aa:ec:61:9c:f4:6b:72: fe:5e:ff:ee:f3:c3:38:06:a2:15:b0:01:97:f4:09: 46:84:41:11:b5:a8:33:f3:fe:1b:90:0d:9e:33:cc: ef:3f:d9:d6:e0:ab:3e:89:23:00:d7:34:47:05:f7: 4e:aa:94:85:bc:0c:0e:25:7e:bd:cb:e5:ea:b7:3f: 47:f1:ac:fb:f9:77:dc:c6:ad:38:0f:28:7f:ef:99: 51:a7:50:15:4b:40:55:9f:8e:14:bd:b3:4b:4e:87: 98:bd:87:a7:46:c9:60:7b:20:fe:15:25:ad:e0:44: 09:7e:b3:03:4f:bf:69:4e:09:7e:a2:20:76:d1:9a: e8:de:e2:21:48:13:10:f5:c4:60:ac:67:54:e8:0e: b2:9e:47:32:8f:46:9f:b4:dc:e0:49:07:81:1a:9b: bd:a8:a2:6d:4c:0f:64:9b:7c:4c:ca:2a:7b:b0:b3: c3:cd:82:ab:c4:e0:ac:b9:79:16:26:b2:af:7c:16: 08:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:74:04:B6:29:4C:B0:FB:E3:48:10:02:B6:64:8C:DA:07:AF:A2:FB X509v3 Authority Key Identifier: keyid:26:69:DD:2F:4D:A8:88:C2:7D:13:0F:99:E8:8A:2E:0C:59:0A:AD:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/13QEtilMsPvjSBACtmSM2gevovs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.42.122.0/23 195.72.122.0/23 Signature Algorithm: sha256WithRSAEncryption 85:de:94:27:49:1a:ed:73:01:6e:33:d0:f5:c6:25:0a:63:a0: a9:87:7b:90:42:12:d3:c7:d2:09:59:51:d2:aa:d6:4b:07:22: 28:69:dc:8e:fb:a7:1c:33:98:40:d6:26:e6:1d:f0:cb:d9:c3: 94:8b:4b:de:e2:4f:a2:3e:46:4c:b3:f5:ab:4c:8a:93:50:2f: a9:4f:65:36:95:be:09:6b:16:78:33:c8:28:64:6f:7a:f2:46: a7:1b:2b:4a:e4:64:69:25:0a:9d:85:56:33:dd:c2:d9:bc:ec: 53:94:f5:20:58:44:25:15:bd:90:8c:d1:0a:41:8b:79:3a:19: 1c:6a:60:66:e7:72:69:86:a1:ce:ab:62:33:ce:69:71:6d:57: 23:08:be:a4:11:14:26:d3:c6:65:ab:d0:6e:0f:c1:c4:c0:19: 7c:b5:81:0a:96:3f:54:2f:c3:d4:95:dc:ac:08:aa:ca:ce:59: 70:a6:37:8b:b9:e9:0f:55:37:37:78:a8:47:1a:5d:f0:88:d4: a4:a0:e0:60:47:43:3f:08:f5:b4:3e:04:35:65:56:ba:63:4e: 1e:2b:d7:95:8d:3c:64:bb:0a:88:ad:cd:77:db:bb:7c:3f:46: b4:c8:08:e6:c1:7d:79:05:d2:55:a2:4b:15:7c:23:e6:7b:c4: 24:31:00:b1 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/gtcE/bnfF+9fwREmhYoPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NjlkZDJmNGRhODg4YzI3ZDEzMGY5OWU4OGEyZTBjNTkw YWFkMmYwHhcNMjYwMTAyMTYyMDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzc0MDRiNjI5NGNiMGZiZTM0ODEwMDJiNjY0OGNkYTA3YWZhMmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvrLXxsPLKmdqQIV/fGYXmDSnYX/ MwnrfVzHMAFDxZ047B/QIryC30TkLuHy0nHX7P6inquWj+jOjz84FPYNHJHAvars YZz0a3L+Xv/u88M4BqIVsAGX9AlGhEERtagz8/4bkA2eM8zvP9nW4Ks+iSMA1zRH BfdOqpSFvAwOJX69y+Xqtz9H8az7+Xfcxq04Dyh/75lRp1AVS0BVn44UvbNLToeY vYenRslgeyD+FSWt4EQJfrMDT79pTgl+oiB20Zro3uIhSBMQ9cRgrGdU6A6ynkcy j0aftNzgSQeBGpu9qKJtTA9km3xMyip7sLPDzYKrxOCsuXkWJrKvfBYIQwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNd0BLYpTLD740gQArZkjNoHr6L7MB8GA1UdIwQY MBaAFCZp3S9NqIjCfRMPmeiKLgxZCq0vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm1uZEwwMm9pTUo5RXctWjZJb3VERmtLclM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9jYWI1ODgtMzJmZC00YTZkLWEwZTIt ZjRkMzBhNzk0M2Y2LzEvMTNRRXRpbE1zUHZqU0JBQ3RtU00yZ2V2b3ZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9jYWI1ODgtMzJmZC00YTZkLWEwZTItZjRkMzBhNzk0M2Y2 LzEvSm1uZEwwMm9pTUo5RXctWjZJb3VERmtLclM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwip6AwQB w0h6MA0GCSqGSIb3DQEBCwUAA4IBAQCF3pQnSRrtcwFuM9D1xiUKY6Cph3uQQhLT x9IJWVHSqtZLByIoadyO+6ccM5hA1ibmHfDL2cOUi0ve4k+iPkZMs/WrTIqTUC+p T2U2lb4JaxZ4M8goZG968kanGytK5GRpJQqdhVYz3cLZvOxTlPUgWEQlFb2QjNEK QYt5OhkcamBm53JphqHOq2IzzmlxbVcjCL6kERQm08Zlq9BuD8HEwBl8tYEKlj9U L8PUldysCKrKzllwpjeLuekPVTc3eKhHGl3wiNSkoOBgR0M/CPW0PgQ1ZVa6Y04e K9eVjTxkuwqIrc1327t8P0a0yAjmwX15BdJVoksVfCPme8QkMQCx -----END CERTIFICATE-----Generated at Mon Jan 26 07:07:11 2026 by rpki-client