This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/EJblh9ckO5ZhFdqlQrwkpSLo5w8.roa File: EJblh9ckO5ZhFdqlQrwkpSLo5w8.roa (raw, json) Hash identifier: KygpTZidDj6IJAoJpYsnybjIOxvZc9DyQui8eumvF1w= Subject key identifier: 10:96:E5:87:D7:24:3B:96:61:15:DA:A5:42:BC:24:A5:22:E8:E7:0F Certificate issuer: /CN=2cee2998e86fa7488e6b64f8edbc032ce15d1bcc Certificate serial: 019B7E391F4816C6E11FE9AF096790C329A2 Authority key identifier: 2C:EE:29:98:E8:6F:A7:48:8E:6B:64:F8:ED:BC:03:2C:E1:5D:1B:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LO4pmOhvp0iOa2T47bwDLOFdG8w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/EJblh9ckO5ZhFdqlQrwkpSLo5w8.roa Signing time: Fri 02 Jan 2026 10:20:31 +0000 ROA not before: Fri 02 Jan 2026 10:20:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205564 IP address blocks: 185.213.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.mft rsync://rpki.ripe.net/repository/DEFAULT/LO4pmOhvp0iOa2T47bwDLOFdG8w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:1f:48:16:c6:e1:1f:e9:af:09:67:90:c3:29:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cee2998e86fa7488e6b64f8edbc032ce15d1bcc Validity Not Before: Jan 2 10:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1096e587d7243b966115daa542bc24a522e8e70f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a7:00:d8:50:1c:28:b8:f3:b9:0e:a5:05:39: b2:8d:4c:3a:55:36:34:36:29:be:99:7a:ea:dd:f3: 63:20:5d:60:c8:13:b1:ae:03:25:47:9c:14:ce:81: be:67:27:2b:5b:55:ae:ac:7f:ab:92:f6:3f:c5:a7: 7e:40:18:0e:9a:a5:fb:5c:90:64:68:44:d5:c4:a8: 32:a6:17:1d:cf:f4:f3:06:7d:de:a5:02:f7:d5:06: 54:a6:71:be:26:0f:33:0c:ec:ef:32:df:bc:14:b5: e7:5e:82:05:cf:89:25:5f:e3:87:c4:ec:e3:17:b6: f7:e8:54:1c:a1:23:0b:84:a0:2c:b2:06:a5:13:4a: 4b:79:b4:61:e0:f1:8c:3f:1e:50:7e:86:d6:88:39: 2f:50:97:69:3b:5c:a7:89:8d:9d:f9:79:1a:f9:c2: 3a:43:57:8f:b3:8f:b5:db:15:e3:b4:da:ce:59:29: cb:a4:32:da:12:23:bb:8c:f5:d0:0a:cb:c5:3f:c8: 99:25:69:79:f3:69:69:ce:ce:ee:c0:34:06:04:f7: b4:e6:53:3f:05:6a:10:9c:ee:12:4b:0a:6a:86:0b: a9:02:51:4a:9f:de:cf:27:95:78:88:8e:a2:f1:0f: f2:b3:d2:c5:31:13:c1:02:42:32:5a:a9:31:96:69: fc:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:96:E5:87:D7:24:3B:96:61:15:DA:A5:42:BC:24:A5:22:E8:E7:0F X509v3 Authority Key Identifier: keyid:2C:EE:29:98:E8:6F:A7:48:8E:6B:64:F8:ED:BC:03:2C:E1:5D:1B:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LO4pmOhvp0iOa2T47bwDLOFdG8w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/EJblh9ckO5ZhFdqlQrwkpSLo5w8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5e1871-2af1-47d3-b262-08f433daea15/1/LO4pmOhvp0iOa2T47bwDLOFdG8w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.213.252.0/22 Signature Algorithm: sha256WithRSAEncryption 5b:43:c2:68:2b:25:ff:83:d7:8d:31:ba:d8:46:a1:ca:e3:fc: a7:f7:1b:d4:e4:bd:0b:1b:22:5c:55:4f:de:20:29:25:e0:7c: 1d:ac:04:09:29:fd:80:9d:5e:ce:a0:67:c7:e2:fd:9a:24:d8: 2e:de:54:03:47:64:f2:59:45:ac:b3:72:39:ab:a6:76:7a:38: 81:17:1f:18:1b:b9:a0:d4:8c:bd:4c:50:ed:f2:ff:3f:93:6d: 81:b6:7b:92:fc:d5:09:5c:b1:e8:98:09:92:0c:2e:a6:43:11: f7:7f:42:bc:e2:77:f1:ab:d9:7e:b8:e1:c9:92:79:8a:18:ff: 72:0f:26:af:56:2a:eb:2b:67:1b:78:c9:1f:9e:2c:8f:88:14: 7b:69:24:39:58:9f:b3:83:1c:cb:bc:fd:6a:7a:44:87:3e:8f: 4d:1d:78:6e:ec:13:f9:7e:6e:ea:1f:ab:32:c3:5a:5b:57:cb: 3d:29:45:b1:dc:da:ec:ba:c5:7f:0d:fc:37:93:f0:f7:0b:ad: 99:7b:19:6c:a8:d4:2b:27:87:72:de:39:a5:e6:21:0c:ca:6a: 1f:18:a0:56:ae:0c:30:01:cc:d0:e3:bc:12:59:9b:3a:0f:4b: bc:a1:b4:2f:3e:d4:37:2d:88:bb:7f:31:11:16:be:bb:dc:3c: 27:28:bf:3a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OR9IFsbhH+mvCWeQwymiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjZWUyOTk4ZTg2ZmE3NDg4ZTZiNjRmOGVkYmMwMzJjZTE1 ZDFiY2MwHhcNMjYwMTAyMTAyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDk2ZTU4N2Q3MjQzYjk2NjExNWRhYTU0MmJjMjRhNTIyZThlNzBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKcA2FAcKLjzuQ6lBTmyjUw6VTY0 Nim+mXrq3fNjIF1gyBOxrgMlR5wUzoG+ZycrW1WurH+rkvY/xad+QBgOmqX7XJBk aETVxKgyphcdz/TzBn3epQL31QZUpnG+Jg8zDOzvMt+8FLXnXoIFz4klX+OHxOzj F7b36FQcoSMLhKAssgalE0pLebRh4PGMPx5QfobWiDkvUJdpO1yniY2d+Xka+cI6 Q1ePs4+12xXjtNrOWSnLpDLaEiO7jPXQCsvFP8iZJWl582lpzs7uwDQGBPe05lM/ BWoQnO4SSwpqhgupAlFKn97PJ5V4iI6i8Q/ys9LFMRPBAkIyWqkxlmn8YwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBCW5YfXJDuWYRXapUK8JKUi6OcPMB8GA1UdIwQY MBaAFCzuKZjob6dIjmtk+O28AyzhXRvMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTE80cG1PaHZwMGlPYTJUNDdid0RMT0ZkRzh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC81ZTE4NzEtMmFmMS00N2QzLWIyNjIt MDhmNDMzZGFlYTE1LzEvRUpibGg5Y2tPNVpoRmRxbFFyd2twU0xvNXc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC81ZTE4NzEtMmFmMS00N2QzLWIyNjItMDhmNDMzZGFlYTE1 LzEvTE80cG1PaHZwMGlPYTJUNDdid0RMT0ZkRzh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCudX8MA0G CSqGSIb3DQEBCwUAA4IBAQBbQ8JoKyX/g9eNMbrYRqHK4/yn9xvU5L0LGyJcVU/e ICkl4HwdrAQJKf2AnV7OoGfH4v2aJNgu3lQDR2TyWUWss3I5q6Z2ejiBFx8YG7mg 1Iy9TFDt8v8/k22BtnuS/NUJXLHomAmSDC6mQxH3f0K84nfxq9l+uOHJknmKGP9y DyavVirrK2cbeMkfniyPiBR7aSQ5WJ+zgxzLvP1qekSHPo9NHXhu7BP5fm7qH6sy w1pbV8s9KUWx3NrsusV/Dfw3k/D3C62ZexlsqNQrJ4dy3jml5iEMymofGKBWrgww AczQ47wSWZs6D0u8obQvPtQ3LYi7fzERFr673DwnKL86 -----END CERTIFICATE-----Generated at Tue Feb 10 03:02:16 2026 by rpki-client