This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Ez20p-DfZEiMmfY2vvzmOJ0Tio0.roa File: Ez20p-DfZEiMmfY2vvzmOJ0Tio0.roa (raw, json) Hash identifier: QrUId5MJLVUM/zJdVKerb/DCzP6BbhRQ78QxOCS7vqE= Subject key identifier: 13:3D:B4:A7:E0:DF:64:48:8C:99:F6:36:BE:FC:E6:38:9D:13:8A:8D Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Certificate serial: 019AFEB423BD6DB42B89A728B3518E6A2712 Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Ez20p-DfZEiMmfY2vvzmOJ0Tio0.roa Signing time: Mon 08 Dec 2025 16:03:29 +0000 ROA not before: Mon 08 Dec 2025 16:03:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 20724 IP address blocks: 212.46.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 03:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fe:b4:23:bd:6d:b4:2b:89:a7:28:b3:51:8e:6a:27:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Validity Not Before: Dec 8 16:03:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=133db4a7e0df64488c99f636befce6389d138a8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f7:80:09:66:8c:94:c9:c4:d2:1b:0c:0a:2b: 32:61:d7:7c:0f:df:87:35:b8:5c:0d:a7:dc:b7:4a: 26:fc:01:cc:a8:17:fd:f4:c2:53:36:12:4d:fe:01: 89:02:50:5c:28:81:9f:e5:ff:83:51:36:b6:d1:29: 7e:9a:8a:f9:ac:78:19:a8:82:cb:c3:63:2d:95:8c: 4c:39:33:30:01:0a:a2:00:b8:57:07:2e:b3:8d:95: 5d:b3:38:88:23:0e:d3:8c:f5:82:5d:68:9d:02:ce: 2b:fe:95:0b:c6:c8:1b:7f:6d:8c:fc:e5:19:a0:83: dc:a7:85:1b:fe:69:f1:48:d9:11:28:0a:02:f5:81: 5b:63:aa:3a:e6:28:e2:9b:52:19:f1:c3:9d:e6:de: 80:0b:89:17:83:01:ed:93:93:1a:87:cc:3d:c4:90: 9e:fa:b7:0d:23:b6:d3:e4:b4:0f:69:46:3c:96:51: 38:60:bc:9a:4a:83:43:9e:c0:c1:a0:27:84:28:3e: 7a:f8:e7:3e:e1:72:bd:d6:16:57:05:8a:78:db:64: cd:94:29:92:92:20:ba:09:53:8c:2b:47:e0:f2:01: ff:3e:3a:9e:ee:d2:83:7f:ff:bb:fb:c9:6a:70:33: ab:e0:be:d1:38:d1:e9:f7:ad:83:df:0a:a9:6e:78: 75:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:3D:B4:A7:E0:DF:64:48:8C:99:F6:36:BE:FC:E6:38:9D:13:8A:8D X509v3 Authority Key Identifier: keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/Ez20p-DfZEiMmfY2vvzmOJ0Tio0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.46.37.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:81:fb:ea:91:fc:66:1b:6a:4a:15:75:2e:e4:30:4c:cb:26: 18:b6:87:d3:3b:be:77:f6:a1:42:7e:b2:ea:be:39:1f:26:3e: 73:09:ba:27:af:ec:f2:1a:40:6f:20:5b:f5:41:45:bf:81:25: 0e:b5:21:ac:55:ad:e1:91:e9:a6:c9:ec:8e:07:87:3f:b9:d8: 01:55:c3:50:77:cc:4d:16:54:64:69:4c:98:90:1f:71:5c:d0: 55:57:3f:73:82:13:89:dd:03:8c:24:eb:3e:72:81:10:e4:60: a7:0b:62:d3:0b:e9:3a:2d:6b:fa:40:c8:0f:21:f1:3f:b6:b8: 91:ed:c1:bb:00:ae:04:62:cf:f0:e5:ed:a9:5c:6d:2c:a0:be: 45:fb:b8:ac:38:58:fa:bd:19:81:a7:ce:98:03:91:73:c9:be: a5:f7:66:b0:ea:57:f3:c0:f9:49:e0:99:55:cf:48:d4:f2:17: ff:1e:3b:23:50:f7:f2:94:af:37:e2:ab:28:f2:d6:3d:8a:ec: 3b:c0:05:d5:8d:3c:8c:5e:55:5c:af:15:1b:1e:a2:62:85:73: b2:23:fd:2d:4c:00:ef:a5:ce:37:e3:02:76:ea:36:ad:4f:2c: 53:be:56:63:98:f4:74:f6:e7:5d:b5:d6:87:10:f2:6e:1c:e7: f0:22:a8:ed -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZr+tCO9bbQriacos1GOaicSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0 ZGIwYTUwHhcNMjUxMjA4MTYwMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzNkYjRhN2UwZGY2NDQ4OGM5OWY2MzZiZWZjZTYzODlkMTM4YThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfeACWaMlMnE0hsMCisyYdd8D9+H NbhcDafct0om/AHMqBf99MJTNhJN/gGJAlBcKIGf5f+DUTa20Sl+mor5rHgZqILL w2MtlYxMOTMwAQqiALhXBy6zjZVdsziIIw7TjPWCXWidAs4r/pULxsgbf22M/OUZ oIPcp4Ub/mnxSNkRKAoC9YFbY6o65ijim1IZ8cOd5t6AC4kXgwHtk5Mah8w9xJCe +rcNI7bT5LQPaUY8llE4YLyaSoNDnsDBoCeEKD56+Oc+4XK91hZXBYp422TNlCmS kiC6CVOMK0fg8gH/Pjqe7tKDf/+7+8lqcDOr4L7RONHp962D3wqpbnh19wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBM9tKfg32RIjJn2Nr785jidE4qNMB8GA1UdIwQY MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt YmFmYmRmYzgxMzJhLzEvRXoyMHAtRGZaRWlNbWZZMnZ2em1PSjBUaW8wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1C4lMA0G CSqGSIb3DQEBCwUAA4IBAQAbgfvqkfxmG2pKFXUu5DBMyyYYtofTO7539qFCfrLq vjkfJj5zCbonr+zyGkBvIFv1QUW/gSUOtSGsVa3hkemmyeyOB4c/udgBVcNQd8xN FlRkaUyYkB9xXNBVVz9zghOJ3QOMJOs+coEQ5GCnC2LTC+k6LWv6QMgPIfE/triR 7cG7AK4EYs/w5e2pXG0soL5F+7isOFj6vRmBp86YA5Fzyb6l92aw6lfzwPlJ4JlV z0jU8hf/HjsjUPfylK834qso8tY9iuw7wAXVjTyMXlVcrxUbHqJihXOyI/0tTADv pc434wJ26jatTyxTvlZjmPR09uddtdaHEPJuHOfwIqjt -----END CERTIFICATE-----Generated at Fri Dec 12 09:23:32 2025 by rpki-client