This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/fE9VXK7a7JlWMNKt9ZXNcyLQUEU.roa File: fE9VXK7a7JlWMNKt9ZXNcyLQUEU.roa (raw, json) Hash identifier: 5ynsvOlyWe4q/k4fXwXs9yOCSr0hniz/Ebg2E2PX/h8= Subject key identifier: 7C:4F:55:5C:AE:DA:EC:99:56:30:D2:AD:F5:95:CD:73:22:D0:50:45 Certificate issuer: /CN=e1ef9694aa48d81279e8ede430795f2768d2dd52 Certificate serial: 019B116CEC5B297E1F46DDE5D52212537F85 Authority key identifier: E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/fE9VXK7a7JlWMNKt9ZXNcyLQUEU.roa Signing time: Fri 12 Dec 2025 07:18:29 +0000 ROA not before: Fri 12 Dec 2025 07:18:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16276 IP address blocks: 185.39.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 19:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:6c:ec:5b:29:7e:1f:46:dd:e5:d5:22:12:53:7f:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1ef9694aa48d81279e8ede430795f2768d2dd52 Validity Not Before: Dec 12 07:18:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7c4f555caedaec995630d2adf595cd7322d05045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:cf:10:9f:c5:4f:20:90:36:72:6f:d4:da:78: 9d:ec:3e:73:34:d1:d7:bd:2e:f5:c6:f8:9a:97:5e: cb:0e:65:8e:7e:60:67:86:d2:44:b1:9e:92:b7:4b: 30:50:0f:03:30:2c:21:df:cc:d7:f4:db:37:70:20: f6:07:be:aa:49:da:1d:ee:89:7e:ed:0d:ec:97:71: 38:50:de:15:f2:c4:6b:c6:a3:90:93:1f:6b:a4:ae: 25:fb:d3:d8:c6:fd:ad:c5:eb:70:83:3d:e5:f1:e9: 48:31:dd:e5:d0:8e:c3:45:33:71:55:92:9d:e2:a4: c4:eb:87:d8:ac:35:89:16:bf:ea:42:02:70:e7:43: aa:00:c7:21:27:1d:b7:d6:db:f7:e0:08:25:b0:13: 37:5c:3b:ff:9e:7b:bc:ec:98:27:29:94:2e:33:02: 7b:9c:70:3d:7e:2f:ed:7e:f4:54:fa:e8:d0:a2:80: ed:35:2c:db:74:ef:d1:64:08:12:6b:d1:05:9d:72: 85:f2:68:9e:d1:5d:34:20:cd:49:75:e6:5d:41:2d: 1e:04:f1:a5:16:d7:f3:c5:c0:3e:8a:76:07:6c:20: 77:c2:71:ee:23:29:a5:d1:b0:38:b4:e6:fe:29:70: b2:98:0a:d0:b2:48:cd:02:9f:d0:fb:b8:83:81:71: 80:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:4F:55:5C:AE:DA:EC:99:56:30:D2:AD:F5:95:CD:73:22:D0:50:45 X509v3 Authority Key Identifier: keyid:E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/fE9VXK7a7JlWMNKt9ZXNcyLQUEU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.39.50.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:56:16:d0:8e:3a:c5:88:54:34:76:01:a5:cf:87:b5:01:d9: 1c:ae:94:09:dd:69:57:43:1d:0b:a4:6d:03:cf:12:a5:db:4c: d1:37:60:15:3d:fb:63:23:95:6a:6f:f8:d4:4c:84:e9:14:61: 00:8f:1b:3b:d1:a6:0e:a0:ec:78:e7:c1:45:8a:c4:9e:d1:0b: 05:37:fe:5e:18:8e:3f:98:39:fc:bf:aa:31:a8:31:8e:5a:90: f7:13:26:db:b9:48:98:a3:71:95:d7:86:25:ae:5c:4e:ac:98: bb:93:48:da:5b:bd:61:3c:7a:c3:4b:21:69:6f:25:b1:8d:e3: a0:4a:ad:79:f6:83:da:33:7c:b2:61:f4:29:9a:a6:cd:85:07: a1:67:5a:eb:e1:1c:cd:71:1f:b5:e6:aa:3f:30:99:61:bd:76: 0d:61:53:5c:6f:d3:59:4a:be:a8:61:40:dd:c1:8a:d1:9c:03: 99:55:29:47:d2:60:a5:f1:77:ac:5b:98:85:88:6d:aa:97:2e: f5:23:ce:ce:b9:ba:5f:4d:40:3d:02:8a:e8:0b:19:27:43:b0: 6a:fd:61:47:b4:0b:27:90:e5:ca:2d:62:97:6b:c9:39:af:81: 43:e5:35:0a:06:0f:47:db:38:ff:dd:61:d4:7a:bb:2f:40:8c: 32:a9:72:54 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsRbOxbKX4fRt3l1SISU3+FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZWY5Njk0YWE0OGQ4MTI3OWU4ZWRlNDMwNzk1ZjI3Njhk MmRkNTIwHhcNMjUxMjEyMDcxODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YzRmNTU1Y2FlZGFlYzk5NTYzMGQyYWRmNTk1Y2Q3MzIyZDA1MDQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjM8Qn8VPIJA2cm/U2nid7D5zNNHX vS71xvial17LDmWOfmBnhtJEsZ6St0swUA8DMCwh38zX9Ns3cCD2B76qSdod7ol+ 7Q3sl3E4UN4V8sRrxqOQkx9rpK4l+9PYxv2txetwgz3l8elIMd3l0I7DRTNxVZKd 4qTE64fYrDWJFr/qQgJw50OqAMchJx231tv34AglsBM3XDv/nnu87JgnKZQuMwJ7 nHA9fi/tfvRU+ujQooDtNSzbdO/RZAgSa9EFnXKF8mie0V00IM1JdeZdQS0eBPGl FtfzxcA+inYHbCB3wnHuIyml0bA4tOb+KXCymArQskjNAp/Q+7iDgXGAtwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHxPVVyu2uyZVjDSrfWVzXMi0FBFMB8GA1UdIwQY MBaAFOHvlpSqSNgSeejt5DB5Xydo0t1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGUtV2xLcEkyQko1Nk8za01IbGZKMmpTM1ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iMDU2NjctZTg1MC00YzQ1LWFlZTMt YWRlZDFjNDY5ZWFmLzEvZkU5VlhLN2E3SmxXTU5LdDlaWE5jeUxRVUVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9iMDU2NjctZTg1MC00YzQ1LWFlZTMtYWRlZDFjNDY5ZWFm LzEvNGUtV2xLcEkyQko1Nk8za01IbGZKMmpTM1ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuScyMA0G CSqGSIb3DQEBCwUAA4IBAQBbVhbQjjrFiFQ0dgGlz4e1AdkcrpQJ3WlXQx0LpG0D zxKl20zRN2AVPftjI5Vqb/jUTITpFGEAjxs70aYOoOx458FFisSe0QsFN/5eGI4/ mDn8v6oxqDGOWpD3EybbuUiYo3GV14YlrlxOrJi7k0jaW71hPHrDSyFpbyWxjeOg Sq159oPaM3yyYfQpmqbNhQehZ1rr4RzNcR+15qo/MJlhvXYNYVNcb9NZSr6oYUDd wYrRnAOZVSlH0mCl8XesW5iFiG2qly71I87OubpfTUA9AoroCxknQ7Bq/WFHtAsn kOXKLWKXa8k5r4FD5TUKBg9H2zj/3WHUersvQIwyqXJU -----END CERTIFICATE-----Generated at Sun Dec 14 03:40:02 2025 by rpki-client