This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/EDDBsNJ-gqHsCNWLUbdCoazxiVU.roa File: EDDBsNJ-gqHsCNWLUbdCoazxiVU.roa (raw, json) Hash identifier: cM+HDYWEvZe3IVvOZtlv9+rGB7rU9FVrOnpd3miYp8k= Subject key identifier: 10:30:C1:B0:D2:7E:82:A1:EC:08:D5:8B:51:B7:42:A1:AC:F1:89:55 Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Certificate serial: 019B92F5773E8D34EE63BAD529333F123453 Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/EDDBsNJ-gqHsCNWLUbdCoazxiVU.roa Signing time: Tue 06 Jan 2026 10:58:38 +0000 ROA not before: Tue 06 Jan 2026 10:58:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5650 IP address blocks: 159.148.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 05:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:92:f5:77:3e:8d:34:ee:63:ba:d5:29:33:3f:12:34:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Validity Not Before: Jan 6 10:58:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1030c1b0d27e82a1ec08d58b51b742a1acf18955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:88:1e:37:5f:d6:b7:eb:37:35:e9:e6:30:02: 42:4e:64:23:f9:82:a8:21:73:4e:b6:f3:73:92:3c: 40:a9:aa:bf:df:bc:99:b1:71:89:cc:a0:3f:55:1d: ec:50:ae:80:4b:e7:3a:b7:90:ca:13:a8:3e:6d:24: 36:c9:04:91:c2:69:11:97:ee:df:f5:0c:27:3e:6b: 76:53:ee:a4:d6:b2:63:00:30:ca:11:7a:37:d3:7a: b2:95:0c:1b:69:d5:5a:39:f2:24:70:f8:35:97:fe: 2f:17:b1:82:35:b5:03:a6:62:f3:18:a6:fb:55:f9: 32:ab:82:47:60:57:24:1e:e4:6b:18:bf:61:2a:6e: 7d:98:b1:ea:f1:a4:bb:ca:cd:04:e3:82:c6:05:99: e6:09:f2:91:f1:37:ad:b0:e7:33:48:67:0c:ed:2a: a5:e0:7e:54:61:52:27:86:06:b4:f9:37:84:d5:59: 0f:e0:06:26:ef:13:ce:bb:9d:01:5c:c2:f9:c6:68: 5b:b4:7a:ed:21:02:d7:08:fc:cc:61:ee:1c:0d:98: 42:56:e3:f3:7b:df:db:25:f3:7a:d0:1f:c2:ba:a0: f5:20:73:32:1a:d7:34:96:43:34:e2:9e:fd:bc:a6: f5:78:5c:55:20:73:9a:e2:6c:f3:0d:5c:f0:30:1e: 63:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:30:C1:B0:D2:7E:82:A1:EC:08:D5:8B:51:B7:42:A1:AC:F1:89:55 X509v3 Authority Key Identifier: keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/EDDBsNJ-gqHsCNWLUbdCoazxiVU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.148.131.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:bf:31:ae:92:24:31:07:9f:95:e3:d1:6f:a0:43:1b:b0:e1: 6f:33:0d:bb:13:77:bf:31:fd:0d:e6:49:2a:68:18:22:7f:8d: ab:79:e9:14:a5:2c:b7:1f:f4:7b:7d:b0:03:1f:39:66:0c:b7: 35:a3:a0:ed:6f:b4:07:dd:35:db:9e:fc:0e:37:72:51:44:7d: 0b:c3:17:21:f2:2c:8e:86:0d:a3:59:2c:3c:f9:a6:6d:60:05: c4:1c:5c:08:a2:a8:23:1a:a7:a8:be:21:43:03:57:47:93:14: 3e:90:bd:50:ec:78:4b:f8:50:69:f8:b8:df:59:12:0a:62:0c: 79:16:be:d6:73:64:71:ff:02:92:58:72:c0:cc:63:f6:c6:4f: b4:90:1b:72:6a:da:03:57:25:36:d1:67:69:d4:ab:fe:3c:79: 51:5b:43:6b:3b:54:25:0f:ca:9e:71:c9:e0:81:da:a2:ab:33: 97:d0:c8:a9:05:c8:e7:cd:c8:5c:1d:51:a7:c6:15:8e:8b:2d: 54:df:d1:1d:56:1e:f8:ff:f7:39:a5:a0:5b:1e:7f:32:b5:57: ce:bb:05:cd:6c:9f:80:1a:46:14:ec:7d:b9:71:3f:0a:ab:2a: aa:2a:b7:d1:09:99:a1:0c:5a:9c:52:10:62:c0:d3:ba:3f:03: 30:62:d9:ef -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuS9Xc+jTTuY7rVKTM/EjRTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm YzQxZWMwHhcNMjYwMTA2MTA1ODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDMwYzFiMGQyN2U4MmExZWMwOGQ1OGI1MWI3NDJhMWFjZjE4OTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIgeN1/Wt+s3NenmMAJCTmQj+YKo IXNOtvNzkjxAqaq/37yZsXGJzKA/VR3sUK6AS+c6t5DKE6g+bSQ2yQSRwmkRl+7f 9QwnPmt2U+6k1rJjADDKEXo303qylQwbadVaOfIkcPg1l/4vF7GCNbUDpmLzGKb7 Vfkyq4JHYFckHuRrGL9hKm59mLHq8aS7ys0E44LGBZnmCfKR8TetsOczSGcM7Sql 4H5UYVInhga0+TeE1VkP4AYm7xPOu50BXML5xmhbtHrtIQLXCPzMYe4cDZhCVuPz e9/bJfN60B/CuqD1IHMyGtc0lkM04p79vKb1eFxVIHOa4mzzDVzwMB5jYwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBAwwbDSfoKh7AjVi1G3QqGs8YlVMB8GA1UdIwQY MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt NTU1NGQ2ZTE2ODZmLzEvRUREQnNOSi1ncUhzQ05XTFViZENvYXp4aVZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAn5SDMA0G CSqGSIb3DQEBCwUAA4IBAQAKvzGukiQxB5+V49FvoEMbsOFvMw27E3e/Mf0N5kkq aBgif42reekUpSy3H/R7fbADHzlmDLc1o6Dtb7QH3TXbnvwON3JRRH0Lwxch8iyO hg2jWSw8+aZtYAXEHFwIoqgjGqeoviFDA1dHkxQ+kL1Q7HhL+FBp+LjfWRIKYgx5 Fr7Wc2Rx/wKSWHLAzGP2xk+0kBtyatoDVyU20Wdp1Kv+PHlRW0NrO1QlD8qeccng gdqiqzOX0MipBcjnzchcHVGnxhWOiy1U39EdVh74//c5paBbHn8ytVfOuwXNbJ+A GkYU7H25cT8KqyqqKrfRCZmhDFqcUhBiwNO6PwMwYtnv -----END CERTIFICATE-----Generated at Sun Jan 18 11:03:55 2026 by rpki-client