This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/1EwZ1bZic_jqiX7W5UwQyn8Bgyo.roa File: 1EwZ1bZic_jqiX7W5UwQyn8Bgyo.roa (raw, json) Hash identifier: Vg6OC/7w8cP7V5moLCtSw7RIkRKWW/diliXF+ajxpxA= Subject key identifier: D4:4C:19:D5:B6:62:73:F8:EA:89:7E:D6:E5:4C:10:CA:7F:01:83:2A Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab Certificate serial: 019A83FEAF4AA7FDBE59CAB99D5CC8C9970E Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/1EwZ1bZic_jqiX7W5UwQyn8Bgyo.roa Signing time: Fri 14 Nov 2025 20:11:37 +0000 ROA not before: Fri 14 Nov 2025 20:11:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 206766 IP address blocks: 188.209.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 08:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:83:fe:af:4a:a7:fd:be:59:ca:b9:9d:5c:c8:c9:97:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab Validity Not Before: Nov 14 20:11:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d44c19d5b66273f8ea897ed6e54c10ca7f01832a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:88:11:8e:2b:b6:40:20:43:a9:b7:d5:cc:b2: 3b:d8:91:3e:59:f2:75:27:69:50:be:a7:9d:5d:75: df:81:76:40:13:67:09:e2:90:96:8a:be:14:a4:ca: d4:da:55:27:f3:ed:65:33:81:c4:30:e9:a6:20:88: 21:6d:ab:3c:14:25:c1:a9:ff:c6:bc:cf:78:90:18: 1e:e0:26:39:0f:10:0f:77:88:33:56:b7:bf:0a:8b: 7a:66:df:15:1b:34:87:8f:4e:59:f5:8f:56:4a:2f: e0:f6:78:6e:66:6c:51:f9:ed:6c:8f:36:74:7f:34: d2:aa:35:89:a0:75:a1:56:f8:bb:ec:28:b7:01:74: 2e:ca:8f:32:32:2e:57:2b:79:b1:57:a7:16:90:da: 20:34:5d:76:fc:a9:7e:b6:c9:3f:07:52:40:c7:c8: ad:38:65:6b:49:b0:f4:91:a8:b6:58:08:06:b2:23: 54:b2:9c:48:b1:4e:32:1f:53:ae:d0:89:11:ed:7e: a6:52:d0:90:20:b8:93:fd:4d:78:4b:9b:4a:9e:ae: fa:52:c5:9d:76:66:ee:4a:cc:21:40:81:da:f3:ff: ee:9a:95:30:4e:55:c4:5d:41:49:8b:de:16:d5:bb: 62:6d:af:e7:50:2d:39:a3:6d:1a:de:7d:39:2d:96: 30:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:4C:19:D5:B6:62:73:F8:EA:89:7E:D6:E5:4C:10:CA:7F:01:83:2A X509v3 Authority Key Identifier: keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/1EwZ1bZic_jqiX7W5UwQyn8Bgyo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.209.133.0/24 Signature Algorithm: sha256WithRSAEncryption 37:f8:0d:24:0e:e8:79:98:b6:13:aa:27:a6:b3:85:82:ab:5b: d4:5e:fe:f0:fd:81:a9:da:56:3b:4e:25:26:50:84:49:ce:ee: 22:71:41:4f:c0:a7:3e:40:11:53:ee:fb:e5:fd:df:ec:a2:d5: d2:f7:2d:13:15:fc:d1:e3:67:0f:9c:bc:1d:9f:db:27:a0:97: 65:ec:5f:14:21:2c:90:ac:b8:6c:c2:10:0c:db:8f:3e:dc:27: e3:a7:63:6f:27:5b:aa:bd:5b:ee:48:56:af:7e:f5:dc:5f:89: f8:99:36:0c:da:55:15:74:71:c4:fd:27:78:ba:65:f3:4b:10: 43:fe:f9:7b:a4:27:d7:dd:0f:d7:7e:a5:2c:35:f6:49:e5:76: b2:25:69:2c:8e:5a:65:cc:68:e2:b9:b3:47:bd:6d:fd:5e:bd: 23:ed:de:17:9e:1a:fa:d0:7e:66:a9:af:36:d0:7d:2e:5a:57: bb:bd:c3:3a:82:5b:da:4a:d1:9a:34:29:c4:9d:f6:65:66:06: de:1c:8d:e4:2f:8a:e0:d7:7c:f9:82:07:74:3e:7e:0b:f8:c4: 95:cf:4e:93:1c:7c:87:9e:24:a6:c9:59:37:7e:38:10:ef:e7: ef:0b:a3:01:13:f2:b4:52:c2:fa:93:82:65:68:53:5a:56:fe: 03:12:3f:f9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqD/q9Kp/2+Wcq5nVzIyZcOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MWYyOTQ2MmU3YTdkYTdlYjVmNDVkYTc4NzNmMTRlNDAz ZmUzYWIwHhcNMjUxMTE0MjAxMTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDRjMTlkNWI2NjI3M2Y4ZWE4OTdlZDZlNTRjMTBjYTdmMDE4MzJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzogRjiu2QCBDqbfVzLI72JE+WfJ1 J2lQvqedXXXfgXZAE2cJ4pCWir4UpMrU2lUn8+1lM4HEMOmmIIghbas8FCXBqf/G vM94kBge4CY5DxAPd4gzVre/Cot6Zt8VGzSHj05Z9Y9WSi/g9nhuZmxR+e1sjzZ0 fzTSqjWJoHWhVvi77Ci3AXQuyo8yMi5XK3mxV6cWkNogNF12/Kl+tsk/B1JAx8it OGVrSbD0kai2WAgGsiNUspxIsU4yH1Ou0IkR7X6mUtCQILiT/U14S5tKnq76UsWd dmbuSswhQIHa8//umpUwTlXEXUFJi94W1btiba/nUC05o20a3n05LZYwuwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNRMGdW2YnP46ol+1uVMEMp/AYMqMB8GA1UdIwQY MBaAFAUfKUYuen2n619F2nhz8U5AP+OrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEt M2Y4YjU1ZGExYWM0LzEvMUV3WjFiWmljX2pxaVg3VzVVd1F5bjhCZ3lvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEtM2Y4YjU1ZGExYWM0 LzEvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvNGFMA0G CSqGSIb3DQEBCwUAA4IBAQA3+A0kDuh5mLYTqiems4WCq1vUXv7w/YGp2lY7TiUm UIRJzu4icUFPwKc+QBFT7vvl/d/sotXS9y0TFfzR42cPnLwdn9snoJdl7F8UISyQ rLhswhAM248+3Cfjp2NvJ1uqvVvuSFavfvXcX4n4mTYM2lUVdHHE/Sd4umXzSxBD /vl7pCfX3Q/XfqUsNfZJ5XayJWksjlplzGjiubNHvW39Xr0j7d4Xnhr60H5mqa82 0H0uWle7vcM6glvaStGaNCnEnfZlZgbeHI3kL4rg13z5ggd0Pn4L+MSVz06THHyH niSmyVk3fjgQ7+fvC6MBE/K0UsL6k4JlaFNaVv4DEj/5 -----END CERTIFICATE-----Generated at Fri Dec 5 17:52:18 2025 by rpki-client