This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/EvjH0eB3lK8EGxr2MMZY47KwFJo.roa File: EvjH0eB3lK8EGxr2MMZY47KwFJo.roa (raw, json) Hash identifier: 3qzbTURdZCLde3ZZJmDOq+A/YFi0KzBJQ1AgqJiCMy0= Subject key identifier: 12:F8:C7:D1:E0:77:94:AF:04:1B:1A:F6:30:C6:58:E3:B2:B0:14:9A Certificate issuer: /CN=8562f4a8936593cdec6dad7e2ecf1b79bf65c05a Certificate serial: 019B7910FD85F5F4D8074CA753C3A289729C Authority key identifier: 85:62:F4:A8:93:65:93:CD:EC:6D:AD:7E:2E:CF:1B:79:BF:65:C0:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWL0qJNlk83sba1-Ls8beb9lwFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/EvjH0eB3lK8EGxr2MMZY47KwFJo.roa Signing time: Thu 01 Jan 2026 10:18:35 +0000 ROA not before: Thu 01 Jan 2026 10:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60405 IP address blocks: 185.172.32.0/24 maxlen: 24 185.172.33.0/24 maxlen: 24 185.172.34.0/24 maxlen: 24 185.172.35.0/24 maxlen: 24 2a0b:b8c0::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.mft rsync://rpki.ripe.net/repository/DEFAULT/hWL0qJNlk83sba1-Ls8beb9lwFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 04:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:fd:85:f5:f4:d8:07:4c:a7:53:c3:a2:89:72:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8562f4a8936593cdec6dad7e2ecf1b79bf65c05a Validity Not Before: Jan 1 10:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=12f8c7d1e07794af041b1af630c658e3b2b0149a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:a0:80:fe:d0:00:86:df:69:f9:ca:26:44:79: da:61:6d:20:6d:2e:e1:a2:c4:1f:68:8f:f6:b5:57: a1:6f:c9:35:ec:0c:a2:a0:51:a8:27:ba:23:fa:fb: bd:cd:7e:a1:2b:0d:7b:d2:ad:a0:c5:16:26:9b:92: 0a:a9:00:01:c0:92:59:b1:a5:6f:21:63:2e:17:3a: e9:54:05:35:b3:ca:7f:c3:1f:f5:cb:4d:f4:6c:99: 9e:fe:ad:af:fd:c6:11:be:33:f5:37:96:18:a3:90: e5:b8:c2:72:1e:0e:be:7e:8c:18:8a:cc:b5:d0:ec: d6:e0:26:2b:16:cc:15:8b:e7:0d:2e:2d:57:a5:c9: 8c:e7:40:80:65:09:78:d5:dc:52:0d:ad:e7:7f:cf: a7:83:de:4d:13:bc:29:87:e1:a1:4f:b2:e6:56:b8: fa:c0:5c:6d:e2:58:ec:b1:16:37:a6:3c:e0:30:06: 7c:bc:de:2c:c0:fb:f4:0d:54:a2:cc:28:0e:f8:b2: a7:fd:de:1d:3c:ea:a0:f8:c3:89:09:17:f7:f1:f9: 89:95:fa:b8:35:58:b4:e5:5c:0b:55:98:07:0b:19: f5:de:c8:fe:6b:63:a4:6a:61:5e:27:de:ae:f3:5f: 32:ac:db:f8:2d:61:3d:5f:29:39:d7:1a:36:db:4a: f5:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:F8:C7:D1:E0:77:94:AF:04:1B:1A:F6:30:C6:58:E3:B2:B0:14:9A X509v3 Authority Key Identifier: keyid:85:62:F4:A8:93:65:93:CD:EC:6D:AD:7E:2E:CF:1B:79:BF:65:C0:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWL0qJNlk83sba1-Ls8beb9lwFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/EvjH0eB3lK8EGxr2MMZY47KwFJo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.172.32.0/22 IPv6: 2a0b:b8c0::/31 Signature Algorithm: sha256WithRSAEncryption 25:4e:4d:35:53:f1:67:4a:5a:a4:92:bf:ba:68:ed:a0:e8:ae: 34:2d:a8:87:24:f9:63:b9:95:7a:90:a5:d3:80:c7:4d:fc:40: 11:1a:36:53:ed:8a:1b:60:3c:12:b6:5b:b0:1b:cc:12:ac:65: 72:b6:ba:7c:0e:33:e4:fb:11:b5:6b:b3:f1:d4:2b:52:3d:51: 1c:41:9f:ad:2d:10:fd:1b:45:bf:28:03:64:2f:8c:32:d3:1c: df:33:d7:fe:f2:19:e7:47:c9:e1:46:7f:74:11:fd:4f:d2:c2: ff:76:b8:3e:37:74:3f:fe:43:53:af:d5:a5:c6:ae:42:41:6a: b3:0e:76:e6:fb:0d:e2:c1:34:d0:3a:d1:08:74:54:7a:40:d6: 49:96:87:aa:70:e7:1c:95:0a:66:fe:6e:06:03:5e:dc:cb:e7: 64:61:56:b8:aa:73:a5:9a:e6:e0:2c:c1:a6:62:75:b5:b3:1e: 80:82:70:19:b5:c3:83:1a:b1:c7:84:20:e9:40:74:06:06:de: b0:a3:83:6a:b7:57:2e:81:88:7d:d4:06:52:35:4f:15:74:ed: b9:b6:e6:ca:b2:e8:78:30:5c:3b:8f:ae:08:c1:c9:e9:3a:0a: bd:6b:e4:4f:3a:ab:02:c0:e6:fd:58:aa:07:d0:6e:36:9e:59: 5a:bd:e6:d5 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5EP2F9fTYB0ynU8OiiXKcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1NjJmNGE4OTM2NTkzY2RlYzZkYWQ3ZTJlY2YxYjc5YmY2 NWMwNWEwHhcNMjYwMTAxMTAxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMmY4YzdkMWUwNzc5NGFmMDQxYjFhZjYzMGM2NThlM2IyYjAxNDlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9aCA/tAAht9p+comRHnaYW0gbS7h osQfaI/2tVehb8k17AyioFGoJ7oj+vu9zX6hKw170q2gxRYmm5IKqQABwJJZsaVv IWMuFzrpVAU1s8p/wx/1y030bJme/q2v/cYRvjP1N5YYo5DluMJyHg6+fowYisy1 0OzW4CYrFswVi+cNLi1XpcmM50CAZQl41dxSDa3nf8+ng95NE7wph+GhT7LmVrj6 wFxt4ljssRY3pjzgMAZ8vN4swPv0DVSizCgO+LKn/d4dPOqg+MOJCRf38fmJlfq4 NVi05VwLVZgHCxn13sj+a2OkamFeJ96u818yrNv4LWE9Xyk51xo220r1XwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBL4x9Hgd5SvBBsa9jDGWOOysBSaMB8GA1UdIwQY MBaAFIVi9KiTZZPN7G2tfi7PG3m/ZcBaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFdMMHFKTmxrODNzYmExLUxzOGJlYjlsd0ZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8wMWU3MGItOTQ1Yy00ODE3LTgxODkt N2UxNzk0NjYyOThjLzEvRXZqSDBlQjNsSzhFR3hyMk1NWlk0N0t3RkpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8wMWU3MGItOTQ1Yy00ODE3LTgxODktN2UxNzk0NjYyOThj LzEvaFdMMHFKTmxrODNzYmExLUxzOGJlYjlsd0ZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuawgMA0E AgACMAcDBQEqC7jAMA0GCSqGSIb3DQEBCwUAA4IBAQAlTk01U/FnSlqkkr+6aO2g 6K40LaiHJPljuZV6kKXTgMdN/EARGjZT7YobYDwStluwG8wSrGVytrp8DjPk+xG1 a7Px1CtSPVEcQZ+tLRD9G0W/KANkL4wy0xzfM9f+8hnnR8nhRn90Ef1P0sL/drg+ N3Q//kNTr9Wlxq5CQWqzDnbm+w3iwTTQOtEIdFR6QNZJloeqcOcclQpm/m4GA17c y+dkYVa4qnOlmubgLMGmYnW1sx6AgnAZtcODGrHHhCDpQHQGBt6wo4Nqt1cugYh9 1AZSNU8VdO25tubKsuh4MFw7j64IwcnpOgq9a+RPOqsCwOb9WKoH0G42nllavebV -----END CERTIFICATE-----Generated at Mon Jan 26 14:55:14 2026 by rpki-client