This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/EaH2QQHBEDcGaNdJtYZj2ZFNJ5k.roa File: EaH2QQHBEDcGaNdJtYZj2ZFNJ5k.roa (raw, json) Hash identifier: 4+/I2Hjrn0j9dA2Zz00LeWlJdI1vEoPYq2H+FkwWxIU= Subject key identifier: 11:A1:F6:41:01:C1:10:37:06:68:D7:49:B5:86:63:D9:91:4D:27:99 Certificate issuer: /CN=8b0c8d35dd66657bffc90b6ac41600ffa623d5b8 Certificate serial: 019A7CE988CF01B4EEC46636DB31EA2E0C4B Authority key identifier: 8B:0C:8D:35:DD:66:65:7B:FF:C9:0B:6A:C4:16:00:FF:A6:23:D5:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/EaH2QQHBEDcGaNdJtYZj2ZFNJ5k.roa Signing time: Thu 13 Nov 2025 11:11:10 +0000 ROA not before: Thu 13 Nov 2025 11:11:10 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 8455 IP address blocks: 185.121.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 17:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7c:e9:88:cf:01:b4:ee:c4:66:36:db:31:ea:2e:0c:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b0c8d35dd66657bffc90b6ac41600ffa623d5b8 Validity Not Before: Nov 13 11:11:10 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=11a1f64101c110370668d749b58663d9914d2799 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:3f:00:01:4e:83:63:63:02:0a:bf:c3:41:ec: 9a:77:a2:b5:9e:f6:7e:eb:40:4f:76:f5:10:b4:70: 09:2f:a5:6a:6f:ab:3e:1a:a8:f6:cf:61:67:00:bd: e0:f2:41:d4:7a:dd:7c:49:ac:3a:25:f4:23:bd:e9: d2:11:ba:3d:49:8e:8f:cc:05:d9:31:91:6d:25:c2: e3:f4:1a:7c:50:43:26:e8:8f:ae:2c:e5:ac:dd:5f: 30:19:13:36:07:e9:ca:4e:b3:5d:ee:ff:b3:cd:9d: dd:c6:2c:94:51:a5:a6:21:c2:4a:da:c2:0f:d5:92: 0c:f3:2c:e7:0c:03:a2:2e:42:2c:62:93:48:3c:7d: d7:87:4e:a8:aa:e1:0b:f7:66:20:24:61:cc:65:d3: 6e:4a:78:b5:d1:60:60:01:e7:9a:57:01:04:6d:ca: 64:08:ee:8b:cf:35:88:c4:ce:e6:87:24:24:31:ef: 4c:00:f4:20:bf:0d:04:fb:69:42:d6:d4:99:7e:ee: f5:d0:ed:ee:b9:47:65:0a:70:c2:92:01:29:10:98: b5:ed:5f:f5:a5:18:5e:8c:34:28:c9:46:d1:47:5c: 4b:33:f1:21:ea:05:6b:d9:eb:f6:08:09:74:1f:fe: 42:ea:f4:0a:dc:02:5d:7a:6e:d1:d1:ab:1f:e5:ae: d1:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:A1:F6:41:01:C1:10:37:06:68:D7:49:B5:86:63:D9:91:4D:27:99 X509v3 Authority Key Identifier: keyid:8B:0C:8D:35:DD:66:65:7B:FF:C9:0B:6A:C4:16:00:FF:A6:23:D5:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/EaH2QQHBEDcGaNdJtYZj2ZFNJ5k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.121.95.0/24 Signature Algorithm: sha256WithRSAEncryption 70:ac:8e:d2:bc:e0:68:30:c6:be:b3:52:07:c1:30:f1:bd:21: 2f:56:2a:78:bf:65:34:20:bb:cc:ec:e2:bf:45:14:c1:86:e7: c3:b6:71:37:87:1e:e3:f4:84:88:4a:be:ed:7a:00:63:60:21: 43:00:8d:9a:35:35:e4:d3:1f:92:0e:48:8b:a2:86:ec:b4:de: 62:65:5a:50:1d:3d:bf:60:7e:dc:1b:aa:13:12:fa:4d:cc:02: 4b:dd:2e:4e:84:ee:75:31:59:a8:2d:ea:34:c1:3d:a1:8b:c7: 33:83:90:54:23:0f:06:92:4e:e7:96:3b:6c:2a:20:15:2c:ec: 04:fb:4e:36:f4:70:52:28:23:d7:52:01:1d:6c:11:85:1c:89: 9c:87:ac:52:97:c2:40:1d:06:e7:18:de:34:87:5f:95:56:0f: 42:78:db:1d:ad:4a:49:63:4e:38:75:4a:28:0e:3e:1b:3a:14: 4b:f3:97:9f:c1:5a:a6:5a:f6:1e:ed:23:26:7f:82:b9:cf:10: 11:82:bc:4f:9f:17:c8:e0:43:f4:e3:67:89:98:05:43:d9:b7: 49:1d:a3:93:22:b0:0a:af:ed:ee:b7:85:72:bf:44:f0:f6:56: 79:4b:0b:3f:f3:b5:b1:e3:96:e6:42:7d:90:d5:8f:0e:c8:e0: 8f:7d:cd:d3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZp86YjPAbTuxGY22zHqLgxLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMGM4ZDM1ZGQ2NjY1N2JmZmM5MGI2YWM0MTYwMGZmYTYy M2Q1YjgwHhcNMjUxMTEzMTExMTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMWExZjY0MTAxYzExMDM3MDY2OGQ3NDliNTg2NjNkOTkxNGQyNzk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0D8AAU6DY2MCCr/DQeyad6K1nvZ+ 60BPdvUQtHAJL6Vqb6s+Gqj2z2FnAL3g8kHUet18Saw6JfQjvenSEbo9SY6PzAXZ MZFtJcLj9Bp8UEMm6I+uLOWs3V8wGRM2B+nKTrNd7v+zzZ3dxiyUUaWmIcJK2sIP 1ZIM8yznDAOiLkIsYpNIPH3Xh06oquEL92YgJGHMZdNuSni10WBgAeeaVwEEbcpk CO6LzzWIxM7mhyQkMe9MAPQgvw0E+2lC1tSZfu710O3uuUdlCnDCkgEpEJi17V/1 pRhejDQoyUbRR1xLM/Eh6gVr2ev2CAl0H/5C6vQK3AJdem7R0asf5a7RvQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBGh9kEBwRA3BmjXSbWGY9mRTSeZMB8GA1UdIwQY MBaAFIsMjTXdZmV7/8kLasQWAP+mI9W4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXd5Tk5kMW1aWHZfeVF0cXhCWUFfNllqMWJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9kMjhmZDQtYzM2OC00NmIzLWExN2Qt NDMxODdlMjliMGUzLzEvRWFIMlFRSEJFRGNHYU5kSnRZWmoyWkZOSjVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9kMjhmZDQtYzM2OC00NmIzLWExN2QtNDMxODdlMjliMGUz LzEvaXd5Tk5kMW1aWHZfeVF0cXhCWUFfNllqMWJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXlfMA0G CSqGSIb3DQEBCwUAA4IBAQBwrI7SvOBoMMa+s1IHwTDxvSEvVip4v2U0ILvM7OK/ RRTBhufDtnE3hx7j9ISISr7tegBjYCFDAI2aNTXk0x+SDkiLoobstN5iZVpQHT2/ YH7cG6oTEvpNzAJL3S5OhO51MVmoLeo0wT2hi8czg5BUIw8Gkk7nljtsKiAVLOwE +0429HBSKCPXUgEdbBGFHImch6xSl8JAHQbnGN40h1+VVg9CeNsdrUpJY044dUoo Dj4bOhRL85efwVqmWvYe7SMmf4K5zxARgrxPnxfI4EP042eJmAVD2bdJHaOTIrAK r+3ut4Vyv0Tw9lZ5Sws/87Wx45bmQn2Q1Y8OyOCPfc3T -----END CERTIFICATE-----Generated at Fri Dec 12 01:01:34 2025 by rpki-client