This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EjBZt-tr7NJgaGX3MEFMudGBbNc.roa File: EjBZt-tr7NJgaGX3MEFMudGBbNc.roa (raw, json) Hash identifier: 78o1QTYYD86h/BinMWDCJRSbhG6aR28UR6cWTXQtwGk= Subject key identifier: 12:30:59:B7:EB:6B:EC:D2:60:68:65:F7:30:41:4C:B9:D1:81:6C:D7 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A32EF49A160A31A56561DEC552FBCB Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EjBZt-tr7NJgaGX3MEFMudGBbNc.roa Signing time: Thu 01 Jan 2026 08:18:38 +0000 ROA not before: Thu 01 Jan 2026 08:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204469 IP address blocks: 31.13.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:2e:f4:9a:16:0a:31:a5:65:61:de:c5:52:fb:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=123059b7eb6becd2606865f730414cb9d1816cd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:08:93:19:03:5a:5d:2d:e8:20:bc:d2:5c:10: 11:78:03:87:8b:e3:74:30:47:c5:d6:e8:1b:a7:c1: cc:50:3b:d5:a1:10:26:f5:62:6b:2c:af:d4:41:f5: 3d:aa:d4:bf:71:18:eb:d8:46:88:a3:bd:ea:5d:7d: d9:c5:a2:08:4a:cd:1e:22:09:1e:a5:b5:ec:ac:8b: 9f:85:93:2d:9d:08:27:f4:90:a3:fd:bc:96:b8:88: 1d:8d:91:9d:d1:54:cc:46:60:00:e8:55:79:32:4c: bc:51:b1:57:c0:d6:c2:2b:91:41:c3:9d:e5:21:db: c6:4b:31:0c:36:63:e2:e3:d2:8c:f3:b9:7f:b9:74: 8a:88:f7:60:9e:c7:97:35:f6:ad:36:0e:c1:0c:03: 12:c9:c6:61:9e:1e:1a:3a:99:73:d3:8d:0c:68:01: de:a3:32:44:2c:89:b2:8c:fa:57:95:3f:fe:01:df: 91:5f:34:25:9c:e2:d3:aa:67:8f:0a:ff:08:4c:a4: 32:f9:4d:41:5d:d1:92:29:50:1b:7c:6e:9a:ce:e6: 1d:7b:85:a1:a0:e9:26:43:8c:0a:9e:ac:3c:28:fc: f8:f0:4d:d5:6c:64:8d:a9:22:d1:74:21:90:13:80: df:25:c7:30:29:24:a8:34:6e:5d:6a:b3:d1:04:3a: 6f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:30:59:B7:EB:6B:EC:D2:60:68:65:F7:30:41:4C:B9:D1:81:6C:D7 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EjBZt-tr7NJgaGX3MEFMudGBbNc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.13.240.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:4b:1c:49:97:3c:ca:cd:14:de:81:c2:14:41:6f:f0:12:bd: 5f:c9:17:8d:d2:ed:3d:fd:56:58:ce:42:2d:05:67:49:16:44: 20:cb:e0:6f:0f:38:de:94:db:17:bc:35:3d:61:6c:b5:a1:4f: cd:7f:2f:36:f1:c7:7c:ed:97:cb:77:d8:ff:c9:a7:07:fa:d4: ae:02:87:d8:0f:6c:8e:11:2b:a3:15:9d:21:7d:87:73:91:05: 72:26:ca:6b:59:a1:6a:30:43:b9:4b:3e:14:4b:77:13:02:e7: 9f:a4:6f:bd:21:90:63:f7:7b:58:89:e7:f1:2e:ae:97:53:25: f9:01:62:97:a2:2e:a7:a4:f8:13:93:08:ad:54:55:be:0a:7d: a9:4b:2b:79:8f:fb:ad:73:01:07:ec:3a:3d:f7:3f:c8:34:7a: a6:ae:cf:93:8b:7a:54:32:c3:be:46:4c:64:5a:6a:50:6c:f8: 1c:90:19:60:d2:47:32:97:d8:d1:d3:e0:99:9e:ad:cb:e4:9f: a4:4d:53:0e:7d:61:f6:6d:2f:cf:bb:1b:41:ce:a6:f0:e9:ce: 90:a1:dd:a8:d5:24:0a:4a:30:00:c0:57:01:08:38:0d:b8:a2: c6:f3:52:79:b5:4b:ee:f0:e9:b9:a5:e7:f9:2d:9e:47:04:14: 97:c0:be:52 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oy70mhYKMaVlYd7FUvvLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjMwNTliN2ViNmJlY2QyNjA2ODY1ZjczMDQxNGNiOWQxODE2Y2Q3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3wiTGQNaXS3oILzSXBAReAOHi+N0 MEfF1ugbp8HMUDvVoRAm9WJrLK/UQfU9qtS/cRjr2EaIo73qXX3ZxaIISs0eIgke pbXsrIufhZMtnQgn9JCj/byWuIgdjZGd0VTMRmAA6FV5Mky8UbFXwNbCK5FBw53l IdvGSzEMNmPi49KM87l/uXSKiPdgnseXNfatNg7BDAMSycZhnh4aOplz040MaAHe ozJELImyjPpXlT/+Ad+RXzQlnOLTqmePCv8ITKQy+U1BXdGSKVAbfG6azuYde4Wh oOkmQ4wKnqw8KPz48E3VbGSNqSLRdCGQE4DfJccwKSSoNG5darPRBDpvZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBIwWbfra+zSYGhl9zBBTLnRgWzXMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvRWpCWnQtdHI3TkpnYUdYM01FRk11ZEdCYk5jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHw3wMA0G CSqGSIb3DQEBCwUAA4IBAQCMSxxJlzzKzRTegcIUQW/wEr1fyReN0u09/VZYzkIt BWdJFkQgy+BvDzjelNsXvDU9YWy1oU/Nfy828cd87ZfLd9j/yacH+tSuAofYD2yO ESujFZ0hfYdzkQVyJsprWaFqMEO5Sz4US3cTAuefpG+9IZBj93tYiefxLq6XUyX5 AWKXoi6npPgTkwitVFW+Cn2pSyt5j/utcwEH7Do99z/INHqmrs+Ti3pUMsO+Rkxk WmpQbPgckBlg0kcyl9jR0+CZnq3L5J+kTVMOfWH2bS/PuxtBzqbw6c6Qod2o1SQK SjAAwFcBCDgNuKLG81J5tUvu8Om5pef5LZ5HBBSXwL5S -----END CERTIFICATE-----Generated at Fri Jan 2 12:07:50 2026 by rpki-client