This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/Ep5Ojkz3GkSwJsrA11qdsEM5pQk.roa File: Ep5Ojkz3GkSwJsrA11qdsEM5pQk.roa (raw, json) Hash identifier: w1Q8xSxbmL/6LZW2i41+YiB+eNvVEBq+XNQ8qrTEQhU= Subject key identifier: 12:9E:4E:8E:4C:F7:1A:44:B0:26:CA:C0:D7:5A:9D:B0:43:39:A5:09 Certificate issuer: /CN=b343514630dc17f3fe9b51dd434184d0b62b03c0 Certificate serial: 019B797DFBC03F039B4E5BF2296DF61D8781 Authority key identifier: B3:43:51:46:30:DC:17:F3:FE:9B:51:DD:43:41:84:D0:B6:2B:03:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/Ep5Ojkz3GkSwJsrA11qdsEM5pQk.roa Signing time: Thu 01 Jan 2026 12:17:38 +0000 ROA not before: Thu 01 Jan 2026 12:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3227 IP address blocks: 185.37.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.crl rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:fb:c0:3f:03:9b:4e:5b:f2:29:6d:f6:1d:87:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b343514630dc17f3fe9b51dd434184d0b62b03c0 Validity Not Before: Jan 1 12:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=129e4e8e4cf71a44b026cac0d75a9db04339a509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:96:90:24:75:03:00:c5:a6:57:96:ee:7b:3e: ae:93:18:08:a9:79:f9:e0:e0:0e:7f:0f:ea:70:b8: f7:4c:10:04:ea:c1:38:04:9f:f1:82:23:3b:36:80: 68:36:ca:cc:09:3a:9f:82:fd:4b:ea:ae:ab:ea:e3: 7e:e5:80:e7:b8:c6:ac:da:04:f3:0f:3d:48:4b:16: 97:af:80:0c:5d:c1:c5:98:e0:07:92:a6:a6:d5:56: 9f:87:6a:c5:b2:7e:f5:55:6a:0c:ed:29:10:30:99: 0c:2a:73:02:31:9a:4d:3a:c9:98:f6:43:c7:ed:4b: 6a:44:80:74:4b:a1:31:a3:4c:08:c6:c5:51:4b:d9: c3:76:a9:a4:c0:fb:cb:94:f9:da:3e:75:c9:18:09: 6c:42:6b:ca:cc:14:23:72:76:5a:42:41:01:f2:77: 6f:0f:72:53:1f:9e:1c:7e:5f:a4:30:d2:b4:c6:f0: 40:42:65:89:43:12:ff:e5:da:54:95:e9:e0:11:41: de:9e:3f:c6:68:57:85:a7:23:fc:3e:00:ad:ff:82: 8d:c7:b1:e7:04:d9:08:8c:59:ec:cb:bb:29:cd:1a: ac:14:86:c1:5c:47:df:c5:6f:73:40:c3:0a:f4:cd: e9:25:c9:ba:0c:8c:6c:32:43:bb:0a:84:ea:85:89: 21:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:9E:4E:8E:4C:F7:1A:44:B0:26:CA:C0:D7:5A:9D:B0:43:39:A5:09 X509v3 Authority Key Identifier: keyid:B3:43:51:46:30:DC:17:F3:FE:9B:51:DD:43:41:84:D0:B6:2B:03:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/Ep5Ojkz3GkSwJsrA11qdsEM5pQk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.37.61.0/24 Signature Algorithm: sha256WithRSAEncryption 48:cb:a2:7b:f3:db:ce:dc:bc:d7:b2:b6:77:91:ba:b8:cd:30: 78:e3:eb:54:5e:92:7e:56:32:2a:f9:83:9a:17:70:d1:5c:11: a0:a5:2d:a7:0a:46:8f:2c:d5:c0:e8:17:d5:68:89:74:51:be: 09:98:c3:ce:12:20:c3:73:6f:1c:60:9b:88:46:a6:4d:9c:08: c8:a4:cb:c1:8f:ae:09:25:fd:d7:ac:cd:d6:a7:36:19:96:b2: 70:d9:7a:fb:41:0a:3a:36:5e:19:3e:9b:d0:3e:cc:7f:95:38: 14:33:ab:22:b4:9d:4c:d2:ed:41:2c:45:47:79:99:c7:9a:a9: d0:27:ac:21:c8:cf:44:86:fe:da:9f:dc:99:b8:91:a9:c6:51: 2b:7c:62:f4:b4:0e:0e:e6:cc:f7:eb:8a:c4:95:ba:ec:ed:5f: b7:f2:42:e8:0f:eb:db:ec:d6:f7:15:3c:13:63:03:c1:ae:3f: b9:2c:9d:77:11:46:f0:0d:de:26:90:cb:e1:25:6f:81:87:b9: d2:de:b7:e6:38:b1:5d:cb:1f:4f:c4:33:a0:d9:0b:7b:90:8e: 20:71:4a:ba:a8:bc:05:7c:72:60:9e:e9:a8:ea:75:3c:fb:8b: a0:16:0d:6d:80:02:f4:9a:56:c1:29:1c:db:65:fd:1b:27:71: 03:e3:29:e1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ffvAPwObTlvyKW32HYeBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzNDM1MTQ2MzBkYzE3ZjNmZTliNTFkZDQzNDE4NGQwYjYy YjAzYzAwHhcNMjYwMTAxMTIxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjllNGU4ZTRjZjcxYTQ0YjAyNmNhYzBkNzVhOWRiMDQzMzlhNTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZaQJHUDAMWmV5buez6ukxgIqXn5 4OAOfw/qcLj3TBAE6sE4BJ/xgiM7NoBoNsrMCTqfgv1L6q6r6uN+5YDnuMas2gTz Dz1ISxaXr4AMXcHFmOAHkqam1Vafh2rFsn71VWoM7SkQMJkMKnMCMZpNOsmY9kPH 7UtqRIB0S6Exo0wIxsVRS9nDdqmkwPvLlPnaPnXJGAlsQmvKzBQjcnZaQkEB8ndv D3JTH54cfl+kMNK0xvBAQmWJQxL/5dpUlengEUHenj/GaFeFpyP8PgCt/4KNx7Hn BNkIjFnsy7spzRqsFIbBXEffxW9zQMMK9M3pJcm6DIxsMkO7CoTqhYkh7QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBKeTo5M9xpEsCbKwNdanbBDOaUJMB8GA1UdIwQY MBaAFLNDUUYw3Bfz/ptR3UNBhNC2KwPAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczBOUlJqRGNGX1AtbTFIZFEwR0UwTFlyQThBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xMzgwNDYtN2JlMC00MDE3LWE5OGIt YTcyNDdlOWQ1ZjNhLzEvRXA1T2prejNHa1N3SnNyQTExcWRzRU01cFFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8xMzgwNDYtN2JlMC00MDE3LWE5OGItYTcyNDdlOWQ1ZjNh LzEvczBOUlJqRGNGX1AtbTFIZFEwR0UwTFlyQThBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSU9MA0G CSqGSIb3DQEBCwUAA4IBAQBIy6J789vO3LzXsrZ3kbq4zTB44+tUXpJ+VjIq+YOa F3DRXBGgpS2nCkaPLNXA6BfVaIl0Ub4JmMPOEiDDc28cYJuIRqZNnAjIpMvBj64J Jf3XrM3WpzYZlrJw2Xr7QQo6Nl4ZPpvQPsx/lTgUM6sitJ1M0u1BLEVHeZnHmqnQ J6whyM9Ehv7an9yZuJGpxlErfGL0tA4O5sz364rElbrs7V+38kLoD+vb7Nb3FTwT YwPBrj+5LJ13EUbwDd4mkMvhJW+Bh7nS3rfmOLFdyx9PxDOg2Qt7kI4gcUq6qLwF fHJgnumo6nU8+4ugFg1tgAL0mlbBKRzbZf0bJ3ED4ynh -----END CERTIFICATE-----Generated at Mon Feb 9 22:26:51 2026 by rpki-client