This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/etH8r7e8XASDtw0AKt0yqnoZqpw.roa File: etH8r7e8XASDtw0AKt0yqnoZqpw.roa (raw, json) Hash identifier: Ew9vIIGcLcL1KV1t2cyyHQVGMjP/TKGuie7BO0Z4Iyo= Subject key identifier: 7A:D1:FC:AF:B7:BC:5C:04:83:B7:0D:00:2A:DD:32:AA:7A:19:AA:9C Certificate issuer: /CN=042d9f4d6aff383c59e9de7802dbee024ee887dc Certificate serial: 019B7BA4DF8E95D7B2F71A5147152E181EC6 Authority key identifier: 04:2D:9F:4D:6A:FF:38:3C:59:E9:DE:78:02:DB:EE:02:4E:E8:87:DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/etH8r7e8XASDtw0AKt0yqnoZqpw.roa Signing time: Thu 01 Jan 2026 22:19:21 +0000 ROA not before: Thu 01 Jan 2026 22:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59605 IP address blocks: 151.248.96.0/20 maxlen: 24 185.201.192.0/22 maxlen: 24 2a02:f040::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:df:8e:95:d7:b2:f7:1a:51:47:15:2e:18:1e:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=042d9f4d6aff383c59e9de7802dbee024ee887dc Validity Not Before: Jan 1 22:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7ad1fcafb7bc5c0483b70d002add32aa7a19aa9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f1:47:4d:ba:33:c8:22:fe:41:33:70:b0:96: 49:6a:df:8d:f6:e2:a7:ff:94:cf:78:8d:89:ba:59: 50:78:d6:64:83:88:92:5a:01:6b:d5:78:d6:25:54: 8b:51:79:61:d8:26:f4:7e:af:ae:89:c7:aa:df:40: 26:1f:a0:53:0b:a2:1c:43:12:1b:f8:d0:ed:c9:4e: 11:a5:99:2d:d6:bb:4e:1d:67:e5:18:9f:7d:c9:28: be:28:36:2c:c6:9e:a0:7e:0f:e0:19:73:e4:ae:bd: 33:7f:5a:63:e5:31:db:0f:6b:dc:79:2b:88:93:86: 85:fe:e3:a2:a0:03:63:68:2d:47:28:55:d7:f4:2f: d2:1f:8a:2f:b8:5a:b3:05:cf:e8:3c:66:c3:01:a9: dd:f6:ad:40:dc:d2:70:04:9e:83:cf:5c:f9:1a:af: 24:e4:8a:56:0f:a3:e3:89:2c:59:3c:80:bb:8f:2e: 43:92:b5:ff:38:67:65:eb:34:b9:84:bc:d1:47:1f: 91:64:0b:28:6f:72:e7:0b:b3:8d:04:8e:9e:69:73: c4:86:38:43:2e:f9:ed:2c:e4:8c:d1:dc:d9:8c:83: d6:96:e6:70:c5:dd:29:bc:69:16:c9:63:5e:b1:8a: 04:40:3f:5c:e1:81:d2:bf:91:bb:2e:e7:49:3e:58: d6:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:D1:FC:AF:B7:BC:5C:04:83:B7:0D:00:2A:DD:32:AA:7A:19:AA:9C X509v3 Authority Key Identifier: keyid:04:2D:9F:4D:6A:FF:38:3C:59:E9:DE:78:02:DB:EE:02:4E:E8:87:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/etH8r7e8XASDtw0AKt0yqnoZqpw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.248.96.0/20 185.201.192.0/22 IPv6: 2a02:f040::/29 Signature Algorithm: sha256WithRSAEncryption 39:b6:4f:93:1c:09:8d:ce:0e:41:17:2d:7b:6e:51:f1:85:d2: 7f:b4:26:c1:c7:fb:92:95:2d:f8:91:93:56:2d:c7:56:d5:82: 3d:f2:c7:b7:4c:1d:44:5e:ce:d7:0b:ef:74:3c:2e:2d:67:16: 50:a2:ba:57:52:47:5a:a6:ed:10:49:dc:a5:2e:81:74:48:ad: 64:d2:e3:3c:dd:f5:ae:da:4b:9d:0e:20:06:98:91:12:a5:c0: 0c:e3:e1:3b:30:9c:d5:92:f0:dc:88:53:89:72:51:12:4d:a7: 80:06:a2:d4:42:a8:3b:4f:f2:ef:86:16:bb:bd:34:c1:06:db: cb:88:61:46:e1:b9:a1:4e:df:b0:69:4c:30:b7:72:0c:0e:8b: c1:b2:52:3b:be:6a:a6:5a:23:0c:82:79:38:8c:32:79:89:84: 4b:1b:41:25:e2:00:8a:f6:cc:14:cf:16:cf:07:02:56:21:69: 0c:72:52:94:cd:bb:3f:53:1c:87:da:6c:08:76:83:c4:43:74: b0:e8:ab:12:20:6b:49:1b:ba:6a:3e:8f:44:73:7e:b3:f8:2f: 91:eb:b1:f6:20:f4:09:6b:69:5a:1d:ca:7f:a0:c4:f0:ca:bf: 76:bf:a9:d8:15:d6:25:b9:22:85:ee:b2:6c:1d:ea:00:b6:38: 1d:86:79:01 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt7pN+Oldey9xpRRxUuGB7GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0MmQ5ZjRkNmFmZjM4M2M1OWU5ZGU3ODAyZGJlZTAyNGVl ODg3ZGMwHhcNMjYwMTAxMjIxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YWQxZmNhZmI3YmM1YzA0ODNiNzBkMDAyYWRkMzJhYTdhMTlhYTljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPFHTbozyCL+QTNwsJZJat+N9uKn /5TPeI2JullQeNZkg4iSWgFr1XjWJVSLUXlh2Cb0fq+uiceq30AmH6BTC6IcQxIb +NDtyU4RpZkt1rtOHWflGJ99ySi+KDYsxp6gfg/gGXPkrr0zf1pj5THbD2vceSuI k4aF/uOioANjaC1HKFXX9C/SH4ovuFqzBc/oPGbDAand9q1A3NJwBJ6Dz1z5Gq8k 5IpWD6PjiSxZPIC7jy5DkrX/OGdl6zS5hLzRRx+RZAsob3LnC7ONBI6eaXPEhjhD LvntLOSM0dzZjIPWluZwxd0pvGkWyWNesYoEQD9c4YHSv5G7LudJPljWMQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFHrR/K+3vFwEg7cNACrdMqp6GaqcMB8GA1UdIwQY MBaAFAQtn01q/zg8WeneeALb7gJO6IfcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkMyZlRXcl9PRHhaNmQ1NEF0dnVBazdvaDl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9jMTM2NGEtMDUwMS00ZmFmLWJjZmEt YWFlMTQ0NzYwM2MwLzEvZXRIOHI3ZThYQVNEdHcwQUt0MHlxbm9acXB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9jMTM2NGEtMDUwMS00ZmFmLWJjZmEtYWFlMTQ0NzYwM2Mw LzEvQkMyZlRXcl9PRHhaNmQ1NEF0dnVBazdvaDl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEl/hgAwQC ucnAMA0EAgACMAcDBQMqAvBAMA0GCSqGSIb3DQEBCwUAA4IBAQA5tk+THAmNzg5B Fy17blHxhdJ/tCbBx/uSlS34kZNWLcdW1YI98se3TB1EXs7XC+90PC4tZxZQorpX Ukdapu0QSdylLoF0SK1k0uM83fWu2kudDiAGmJESpcAM4+E7MJzVkvDciFOJclES TaeABqLUQqg7T/Lvhha7vTTBBtvLiGFG4bmhTt+waUwwt3IMDovBslI7vmqmWiMM gnk4jDJ5iYRLG0El4gCK9swUzxbPBwJWIWkMclKUzbs/UxyH2mwIdoPEQ3Sw6KsS IGtJG7pqPo9Ec36z+C+R67H2IPQJa2laHcp/oMTwyr92v6nYFdYluSKF7rJsHeoA tjgdhnkB -----END CERTIFICATE-----Generated at Sun Jan 25 20:29:55 2026 by rpki-client