This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/eE5FODGFHh0WkBPSxFPyCoB-eGg.roa File: eE5FODGFHh0WkBPSxFPyCoB-eGg.roa (raw, json) Hash identifier: Rz/9jxVdQOTCRbz0/ZJQu0S09Q9xqVMH9f1T/zla3aQ= Subject key identifier: 78:4E:45:38:31:85:1E:1D:16:90:13:D2:C4:53:F2:0A:80:7E:78:68 Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722 Certificate serial: 019B7B359407A3FBDB06C99DFD00F3296FD4 Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/eE5FODGFHh0WkBPSxFPyCoB-eGg.roa Signing time: Thu 01 Jan 2026 20:17:47 +0000 ROA not before: Thu 01 Jan 2026 20:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210840 IP address blocks: 85.120.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:94:07:a3:fb:db:06:c9:9d:fd:00:f3:29:6f:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722 Validity Not Before: Jan 1 20:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=784e453831851e1d169013d2c453f20a807e7868 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1a:d6:73:93:cf:2d:99:8c:f3:7d:3d:8b:0b: 6f:d5:5f:da:cc:28:53:a5:9c:fc:26:42:1f:22:63: 25:a9:08:d4:02:c2:2b:47:b2:8a:18:f7:8f:b3:67: e8:ed:6b:97:3e:cd:fd:f9:f6:49:e8:e2:04:ae:88: 77:62:26:42:16:3e:46:f4:7c:fd:e9:6d:55:1d:76: c9:60:f9:22:e4:08:07:c6:d8:dd:3c:85:f0:ee:22: cb:ca:14:42:0e:f8:a4:d7:dc:28:39:4d:40:cb:3d: 23:3a:b0:04:6d:9c:e9:2b:78:60:5d:ac:fb:39:8c: c0:8b:99:5c:67:79:94:ae:16:df:a1:48:89:85:ee: 31:8c:c3:fa:28:fb:ba:0e:5a:50:f6:74:90:33:bf: 4d:5f:fc:35:eb:a1:2c:23:e8:87:09:d0:6d:fd:60: 92:d9:71:f4:dd:2f:0a:de:fa:29:e0:79:93:cd:e4: 71:ca:8c:36:af:bb:8d:0e:ed:7b:0c:00:50:93:58: 3c:a6:fa:e6:0a:46:0b:c4:5a:ab:df:92:d7:80:bd: 55:c0:4a:62:4c:e9:27:4c:5b:f0:5b:77:6f:9f:1f: fa:93:de:93:44:48:d0:02:95:05:1a:1c:0b:1a:33: 6d:aa:e0:7e:3d:01:5a:8f:11:b0:e2:d9:a5:3d:52: d5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:4E:45:38:31:85:1E:1D:16:90:13:D2:C4:53:F2:0A:80:7E:78:68 X509v3 Authority Key Identifier: keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/eE5FODGFHh0WkBPSxFPyCoB-eGg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.120.22.0/24 Signature Algorithm: sha256WithRSAEncryption ad:45:17:57:7e:45:2e:7f:55:05:3d:41:d7:c9:80:ae:3f:67: 59:c0:9d:1f:2e:0d:61:74:a3:0a:63:6f:38:80:77:1b:1a:4e: b2:d2:4a:0c:22:a0:6d:c5:70:92:82:c5:d0:bb:48:01:18:b5: 9f:92:a7:f3:95:f3:72:dd:ee:47:e4:aa:35:09:dc:94:f6:a1: 24:3a:71:16:7c:eb:0c:50:b7:f1:b4:29:9e:37:dc:79:ee:32: 19:61:d5:da:65:13:80:5d:ee:ef:d1:54:75:33:23:79:70:78: 45:f8:48:b2:42:26:6c:e7:27:ad:ba:92:0c:c2:dd:0b:21:6c: e0:0e:c2:4c:87:c1:68:fa:a3:36:0d:b9:08:94:85:d3:10:3e: 4a:f5:9d:20:e7:cd:7f:16:99:15:c8:a7:6d:45:b6:5f:77:5a: 6c:53:74:ec:81:4d:5b:ff:1c:16:79:65:c6:8f:11:ab:9f:4a: 43:eb:29:f9:8c:33:22:c9:42:b6:3d:d6:a7:42:56:e0:38:3b: 2f:c2:13:97:e0:43:14:86:46:8c:7e:8a:90:0e:56:7d:27:4d: 62:65:d5:28:0f:a1:01:66:8a:8b:db:43:e8:e8:a8:e3:95:89: d1:7c:ca:e8:b1:67:3d:5a:7c:fb:41:4f:7d:83:17:70:c8:49: e2:fe:50:89 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NZQHo/vbBsmd/QDzKW/UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh MTU3MjIwHhcNMjYwMTAxMjAxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODRlNDUzODMxODUxZTFkMTY5MDEzZDJjNDUzZjIwYTgwN2U3ODY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRrWc5PPLZmM8309iwtv1V/azChT pZz8JkIfImMlqQjUAsIrR7KKGPePs2fo7WuXPs39+fZJ6OIEroh3YiZCFj5G9Hz9 6W1VHXbJYPki5AgHxtjdPIXw7iLLyhRCDvik19woOU1Ayz0jOrAEbZzpK3hgXaz7 OYzAi5lcZ3mUrhbfoUiJhe4xjMP6KPu6DlpQ9nSQM79NX/w166EsI+iHCdBt/WCS 2XH03S8K3vop4HmTzeRxyow2r7uNDu17DABQk1g8pvrmCkYLxFqr35LXgL1VwEpi TOknTFvwW3dvnx/6k96TREjQApUFGhwLGjNtquB+PQFajxGw4tmlPVLV4wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHhORTgxhR4dFpAT0sRT8gqAfnhoMB8GA1UdIwQY MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt ZjUyYzQ3YzIyNWRiLzEvZUU1Rk9ER0ZIaDBXa0JQU3hGUHlDb0ItZUdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVXgWMA0G CSqGSIb3DQEBCwUAA4IBAQCtRRdXfkUuf1UFPUHXyYCuP2dZwJ0fLg1hdKMKY284 gHcbGk6y0koMIqBtxXCSgsXQu0gBGLWfkqfzlfNy3e5H5Ko1CdyU9qEkOnEWfOsM ULfxtCmeN9x57jIZYdXaZROAXe7v0VR1MyN5cHhF+EiyQiZs5yetupIMwt0LIWzg DsJMh8Fo+qM2DbkIlIXTED5K9Z0g581/FpkVyKdtRbZfd1psU3TsgU1b/xwWeWXG jxGrn0pD6yn5jDMiyUK2PdanQlbgODsvwhOX4EMUhkaMfoqQDlZ9J01iZdUoD6EB ZoqL20Po6KjjlYnRfMrosWc9Wnz7QU99gxdwyEni/lCJ -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:33 2026 by rpki-client