This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/egvTStfdqsgaJQHUlI4Gx-druNs.roa File: egvTStfdqsgaJQHUlI4Gx-druNs.roa (raw, json) Hash identifier: 4U3wHEEQUhulNGL0yqru9oCFOlljnEnQXHB+fB5oMsg= Subject key identifier: 7A:0B:D3:4A:D7:DD:AA:C8:1A:25:01:D4:94:8E:06:C7:E7:6B:B8:DB Certificate issuer: /CN=39247f77a3ae0af71eac03256449f5d292cffd74 Certificate serial: 019B7B353F84D46A6BFFCB701B88FC1B102E Authority key identifier: 39:24:7F:77:A3:AE:0A:F7:1E:AC:03:25:64:49:F5:D2:92:CF:FD:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/egvTStfdqsgaJQHUlI4Gx-druNs.roa Signing time: Thu 01 Jan 2026 20:17:25 +0000 ROA not before: Thu 01 Jan 2026 20:17:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 273015 IP address blocks: 185.56.110.0/23 maxlen: 23 185.56.110.0/24 maxlen: 24 185.56.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.mft rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:3f:84:d4:6a:6b:ff:cb:70:1b:88:fc:1b:10:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39247f77a3ae0af71eac03256449f5d292cffd74 Validity Not Before: Jan 1 20:17:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a0bd34ad7ddaac81a2501d4948e06c7e76bb8db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:86:18:a3:bf:31:51:0f:3b:47:f4:73:55:14: a2:74:ef:31:0d:94:3a:59:68:52:66:37:bd:44:97: a8:28:3e:e5:be:2a:80:5c:a6:09:c4:3b:1a:a4:be: ad:ad:ff:cd:ea:a3:5e:37:f3:30:b6:a1:c5:5a:4c: 93:a9:e5:b6:fd:53:37:8e:2f:14:3b:c8:34:bf:d0: d4:2c:fe:8b:c0:91:89:03:4d:36:b3:ae:18:5b:77: d0:52:ff:5f:17:ed:a4:85:4f:4d:e6:b5:fe:e3:68: b2:c1:6b:a4:9b:53:cc:a1:04:d3:c7:e1:5b:2d:96: 68:5c:63:f9:46:c8:10:8c:48:24:c1:42:7d:4b:16: d9:e6:cc:23:a3:63:19:37:90:a1:9c:98:39:7e:05: 0f:08:ea:5d:c7:26:4b:7f:24:6d:98:fc:9f:bd:a3: 25:bd:a4:ac:7e:4e:30:5d:4e:4d:83:be:4f:24:b7: 46:6d:7e:63:68:71:eb:11:43:a6:86:29:9b:ac:b4: 26:da:22:f9:4f:da:ee:a4:62:0e:37:17:31:32:fb: 74:6a:ce:4e:b3:d8:72:31:b5:e3:c3:38:30:4a:1c: 13:7f:ac:bc:2d:e1:16:72:45:af:70:72:7b:f4:92: ef:c3:f1:6c:23:ef:e5:66:76:a4:45:9b:b1:88:ee: 47:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:0B:D3:4A:D7:DD:AA:C8:1A:25:01:D4:94:8E:06:C7:E7:6B:B8:DB X509v3 Authority Key Identifier: keyid:39:24:7F:77:A3:AE:0A:F7:1E:AC:03:25:64:49:F5:D2:92:CF:FD:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OSR_d6OuCvcerAMlZEn10pLP_XQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/egvTStfdqsgaJQHUlI4Gx-druNs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82ed9c-7c13-48b9-a886-cd66ad534812/1/OSR_d6OuCvcerAMlZEn10pLP_XQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.56.110.0/23 Signature Algorithm: sha256WithRSAEncryption 21:e1:e3:00:47:11:6b:f8:a1:4d:be:af:05:c7:41:ae:54:d0: 90:88:14:31:c3:62:3a:b0:63:6e:ab:db:ee:df:35:ef:15:63: 5c:f9:65:19:25:bb:b0:ba:63:98:ca:bf:f1:25:58:d1:92:a6: 43:80:0d:b3:32:fc:1d:c7:3c:85:8c:06:e0:cc:d9:f8:cd:87: 8c:3f:a3:cb:32:80:2c:58:bf:f0:87:8a:25:99:ab:99:0a:ee: ed:6e:53:b4:cc:5f:c6:fd:dc:60:3c:32:09:c7:1d:0a:32:5b: b7:d9:08:d8:7e:9a:86:a3:13:d0:59:b1:38:80:6e:b3:a9:f6: 8d:b2:be:0a:6d:aa:07:68:4c:41:eb:23:58:2f:ba:e9:05:37: 81:59:e1:a3:a9:76:22:86:ec:b5:3f:73:f5:60:8e:21:e8:24: 76:ab:4a:7f:05:d5:f7:e1:9f:6d:b7:4d:0c:7b:63:c9:5d:f8: 5d:11:8d:de:0b:b0:9a:0f:d7:3f:15:87:06:6d:96:06:c9:61: 45:0c:89:55:57:06:6f:ea:9a:3e:73:69:12:ad:7a:cd:8c:27: 58:f8:d2:e6:ed:c8:a2:43:54:57:81:39:00:d0:c1:06:1d:aa: 71:02:ba:8c:ac:25:44:98:ac:0c:5a:6e:7f:0a:51:9e:77:06: eb:8e:e1:44 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NT+E1Gpr/8twG4j8GxAuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MjQ3Zjc3YTNhZTBhZjcxZWFjMDMyNTY0NDlmNWQyOTJj ZmZkNzQwHhcNMjYwMTAxMjAxNzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTBiZDM0YWQ3ZGRhYWM4MWEyNTAxZDQ5NDhlMDZjN2U3NmJiOGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIYYo78xUQ87R/RzVRSidO8xDZQ6 WWhSZje9RJeoKD7lviqAXKYJxDsapL6trf/N6qNeN/MwtqHFWkyTqeW2/VM3ji8U O8g0v9DULP6LwJGJA002s64YW3fQUv9fF+2khU9N5rX+42iywWukm1PMoQTTx+Fb LZZoXGP5RsgQjEgkwUJ9SxbZ5swjo2MZN5ChnJg5fgUPCOpdxyZLfyRtmPyfvaMl vaSsfk4wXU5Ng75PJLdGbX5jaHHrEUOmhimbrLQm2iL5T9rupGIONxcxMvt0as5O s9hyMbXjwzgwShwTf6y8LeEWckWvcHJ79JLvw/FsI+/lZnakRZuxiO5HXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHoL00rX3arIGiUB1JSOBsfna7jbMB8GA1UdIwQY MBaAFDkkf3ejrgr3HqwDJWRJ9dKSz/10MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1NSX2Q2T3VDdmNlckFNbFpFbjEwcExQX1hRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi84MmVkOWMtN2MxMy00OGI5LWE4ODYt Y2Q2NmFkNTM0ODEyLzEvZWd2VFN0ZmRxc2dhSlFIVWxJNEd4LWRydU5zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi84MmVkOWMtN2MxMy00OGI5LWE4ODYtY2Q2NmFkNTM0ODEy LzEvT1NSX2Q2T3VDdmNlckFNbFpFbjEwcExQX1hRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuThuMA0G CSqGSIb3DQEBCwUAA4IBAQAh4eMARxFr+KFNvq8Fx0GuVNCQiBQxw2I6sGNuq9vu 3zXvFWNc+WUZJbuwumOYyr/xJVjRkqZDgA2zMvwdxzyFjAbgzNn4zYeMP6PLMoAs WL/wh4olmauZCu7tblO0zF/G/dxgPDIJxx0KMlu32QjYfpqGoxPQWbE4gG6zqfaN sr4KbaoHaExB6yNYL7rpBTeBWeGjqXYihuy1P3P1YI4h6CR2q0p/BdX34Z9tt00M e2PJXfhdEY3eC7CaD9c/FYcGbZYGyWFFDIlVVwZv6po+c2kSrXrNjCdY+NLm7cii Q1RXgTkA0MEGHapxArqMrCVEmKwMWm5/ClGedwbrjuFE -----END CERTIFICATE-----Generated at Mon Jan 26 05:31:34 2026 by rpki-client