This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/EaUMOU4n5eMN9_93bWF9KbfM0Js.roa File: EaUMOU4n5eMN9_93bWF9KbfM0Js.roa (raw, json) Hash identifier: Qat9O3DT5PJNAgSB1rpNeEeKlT31JeYDByOxfigK1Mc= Subject key identifier: 11:A5:0C:39:4E:27:E5:E3:0D:F7:FF:77:6D:61:7D:29:B7:CC:D0:9B Certificate issuer: /CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046 Certificate serial: 019B7B364A00CFD45FCCAB82219C3F0EE921 Authority key identifier: 7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/EaUMOU4n5eMN9_93bWF9KbfM0Js.roa Signing time: Thu 01 Jan 2026 20:18:33 +0000 ROA not before: Thu 01 Jan 2026 20:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20853 IP address blocks: 185.198.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 19:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:4a:00:cf:d4:5f:cc:ab:82:21:9c:3f:0e:e9:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046 Validity Not Before: Jan 1 20:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=11a50c394e27e5e30df7ff776d617d29b7ccd09b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:dd:2e:19:8d:71:4b:15:af:f1:bd:32:0d:16: 14:8b:40:f0:4d:7a:55:22:91:12:5e:65:b5:7f:47: d2:81:93:b6:15:f2:f2:da:8f:c0:aa:19:cc:f4:cc: 54:43:02:6c:17:be:f1:b8:dd:11:fc:d0:81:13:92: a6:1f:2f:b9:1d:2e:ae:a3:25:d1:f0:34:5f:4a:82: b6:36:9a:b5:3c:f5:07:91:1c:95:36:6c:e1:7b:c9: 5c:95:c3:b4:81:e3:89:66:24:3e:fa:8b:d9:aa:90: bf:32:69:a4:f9:66:0e:d1:ee:f0:04:6c:03:35:5c: ce:7e:02:b0:f6:93:9b:14:8f:f1:9d:7b:04:c5:ce: f3:0b:8f:9d:da:ab:09:91:6a:e9:42:c6:55:f7:c0: d9:33:94:95:17:e8:ed:7a:b4:b6:43:85:15:23:94: f0:61:cf:16:ea:5d:cb:e6:6b:22:d4:b1:97:11:12: 5d:85:02:91:20:35:bd:3c:1e:c0:15:a6:13:97:61: 2c:ce:5d:30:d3:58:e8:1d:ad:f7:e5:6e:66:08:a3: 61:db:fc:10:80:59:71:32:8d:a6:f5:05:ae:63:54: 44:dc:6c:09:fa:28:22:5f:30:c6:5d:73:7e:93:d5: 43:90:e1:cc:39:df:2a:f0:90:dc:cb:19:62:68:98: 79:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:A5:0C:39:4E:27:E5:E3:0D:F7:FF:77:6D:61:7D:29:B7:CC:D0:9B X509v3 Authority Key Identifier: keyid:7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/EaUMOU4n5eMN9_93bWF9KbfM0Js.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.198.37.0/24 Signature Algorithm: sha256WithRSAEncryption 25:18:e9:57:7d:79:e2:ba:8d:be:9a:0b:bf:51:d0:bd:9a:b1: 73:0b:f0:f3:f7:32:74:c5:5e:8a:ab:99:d8:da:23:eb:0b:0a: f5:67:28:b4:23:08:1c:b5:cd:09:7d:ef:13:db:db:56:0e:61: 64:c9:12:c8:ca:79:60:1b:fe:76:97:ce:29:0f:9c:95:cf:eb: e7:e3:c1:ac:99:21:01:82:ba:c6:75:fc:0e:19:f0:fb:cd:8b: 44:db:17:fa:a0:3b:20:36:4e:1b:b6:7c:10:0e:af:20:bd:68: 58:67:de:41:76:e4:a8:4a:a6:9a:1c:46:b3:5c:50:16:19:1f: 37:02:c1:da:cb:7f:a8:1d:ef:dc:e4:7a:8c:2c:ba:b5:fe:cb: 28:99:12:d6:5a:c8:16:c6:07:2e:2c:36:c2:35:1c:6e:69:52: 61:53:39:0e:7e:89:af:98:69:74:99:32:ab:bf:dd:2a:20:71: 77:e7:84:46:8d:fd:0a:9b:7c:b7:93:bb:a8:09:c2:da:e0:a8: d8:cd:e4:22:65:55:6e:7e:47:b3:40:60:5b:85:75:bb:90:6f: 80:7f:1a:56:fa:ff:6c:a4:2c:39:79:87:0d:5b:c8:8b:d8:59: ac:98:15:00:41:6d:dd:0e:e1:24:d4:77:f9:6b:f6:87:77:cb: 50:a0:5c:52 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NkoAz9RfzKuCIZw/DukhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjYTY0M2JiMzk5YzZkODdhZGM0YzdjYmE1ZDJiNzJmYmQw MGQwNDYwHhcNMjYwMTAxMjAxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMWE1MGMzOTRlMjdlNWUzMGRmN2ZmNzc2ZDYxN2QyOWI3Y2NkMDliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1d0uGY1xSxWv8b0yDRYUi0DwTXpV IpESXmW1f0fSgZO2FfLy2o/AqhnM9MxUQwJsF77xuN0R/NCBE5KmHy+5HS6uoyXR 8DRfSoK2Npq1PPUHkRyVNmzhe8lclcO0geOJZiQ++ovZqpC/Mmmk+WYO0e7wBGwD NVzOfgKw9pObFI/xnXsExc7zC4+d2qsJkWrpQsZV98DZM5SVF+jterS2Q4UVI5Tw Yc8W6l3L5msi1LGXERJdhQKRIDW9PB7AFaYTl2Eszl0w01joHa335W5mCKNh2/wQ gFlxMo2m9QWuY1RE3GwJ+igiXzDGXXN+k9VDkOHMOd8q8JDcyxliaJh5BwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBGlDDlOJ+XjDff/d21hfSm3zNCbMB8GA1UdIwQY MBaAFHymQ7s5nG2HrcTHy6XSty+9ANBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9jMDMwMWQtNTgwMS00YWM2LWI1MDMt NDRlYTY0NzIxYzllLzEvRWFVTU9VNG41ZU1OOV85M2JXRjlLYmZNMEpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9jMDMwMWQtNTgwMS00YWM2LWI1MDMtNDRlYTY0NzIxYzll LzEvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucYlMA0G CSqGSIb3DQEBCwUAA4IBAQAlGOlXfXniuo2+mgu/UdC9mrFzC/Dz9zJ0xV6Kq5nY 2iPrCwr1Zyi0Iwgctc0Jfe8T29tWDmFkyRLIynlgG/52l84pD5yVz+vn48GsmSEB grrGdfwOGfD7zYtE2xf6oDsgNk4btnwQDq8gvWhYZ95BduSoSqaaHEazXFAWGR83 AsHay3+oHe/c5HqMLLq1/ssomRLWWsgWxgcuLDbCNRxuaVJhUzkOfomvmGl0mTKr v90qIHF354RGjf0Km3y3k7uoCcLa4KjYzeQiZVVufkezQGBbhXW7kG+AfxpW+v9s pCw5eYcNW8iL2FmsmBUAQW3dDuEk1Hf5a/aHd8tQoFxS -----END CERTIFICATE-----Generated at Sat Jan 24 00:27:41 2026 by rpki-client