This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/ejHPALN-gjmcIUS4qvI8FUQoGLs.roa File: ejHPALN-gjmcIUS4qvI8FUQoGLs.roa (raw, json) Hash identifier: t6ZQ6lviMlaQN/1zPBkaInJA/2XG79lcf/SyBOeFSW8= Subject key identifier: 7A:31:CF:00:B3:7E:82:39:9C:21:44:B8:AA:F2:3C:15:44:28:18:BB Certificate issuer: /CN=84b0cac838f282e042948f9d2b2cd5754d2e8c47 Certificate serial: 019A81BB27DA445949E6CD0FD1E6CA52DAA0 Authority key identifier: 84:B0:CA:C8:38:F2:82:E0:42:94:8F:9D:2B:2C:D5:75:4D:2E:8C:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLDKyDjyguBClI-dKyzVdU0ujEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/ejHPALN-gjmcIUS4qvI8FUQoGLs.roa Signing time: Fri 14 Nov 2025 09:38:37 +0000 ROA not before: Fri 14 Nov 2025 09:38:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 28905 IP address blocks: 46.30.64.0/21 maxlen: 21 185.174.44.0/22 maxlen: 22 213.226.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.crl rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.mft rsync://rpki.ripe.net/repository/DEFAULT/hLDKyDjyguBClI-dKyzVdU0ujEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 18:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:81:bb:27:da:44:59:49:e6:cd:0f:d1:e6:ca:52:da:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84b0cac838f282e042948f9d2b2cd5754d2e8c47 Validity Not Before: Nov 14 09:38:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7a31cf00b37e82399c2144b8aaf23c15442818bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a2:71:07:b4:09:a4:07:f3:9b:aa:5a:7e:cd: 2b:3d:ea:0d:eb:0f:7b:9c:97:7a:a4:dd:c6:68:1c: cf:cd:92:10:d0:7f:60:dd:1f:5e:d3:40:f8:0c:e8: d2:5c:a7:66:2d:24:2b:9f:65:f4:d8:63:a7:b2:c9: e3:22:ba:fd:da:51:9e:77:cb:47:0c:79:ef:34:a7: ca:84:61:0e:48:59:e8:c3:53:53:8c:01:ad:63:09: a8:b1:8a:32:e2:ce:30:8a:fd:72:a6:ca:96:4a:42: 86:26:8d:83:7c:e6:fe:a7:7f:e0:40:93:d5:81:5b: b2:3b:8c:91:39:0a:f2:01:6e:0e:b9:a6:ea:e4:97: 87:4f:b1:ef:4e:8b:c6:a2:af:99:6d:c1:4d:f5:37: 2a:dc:80:3c:d2:7a:67:df:5e:0f:09:4e:6c:10:89: 4c:20:13:ce:ec:1e:96:45:d2:97:59:70:67:4f:2f: fc:ba:b7:41:41:cd:ca:16:de:eb:86:99:47:ff:0e: 05:a0:c4:25:f1:d1:b4:b1:c2:83:82:1e:de:17:34: 16:62:22:fe:13:98:68:80:7b:12:dc:db:74:05:a0: 96:93:25:49:a8:f0:2a:31:61:91:81:91:d4:3f:98: 03:1b:17:d4:6e:98:6a:fb:d8:f6:c3:7f:9f:88:9c: e4:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:31:CF:00:B3:7E:82:39:9C:21:44:B8:AA:F2:3C:15:44:28:18:BB X509v3 Authority Key Identifier: keyid:84:B0:CA:C8:38:F2:82:E0:42:94:8F:9D:2B:2C:D5:75:4D:2E:8C:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLDKyDjyguBClI-dKyzVdU0ujEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/ejHPALN-gjmcIUS4qvI8FUQoGLs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.30.64.0/21 185.174.44.0/22 213.226.192.0/20 Signature Algorithm: sha256WithRSAEncryption 60:df:44:b2:5c:c1:62:1d:d9:46:71:c5:32:ef:88:62:4b:e9: e2:97:74:28:2f:e0:ee:98:b5:27:09:67:cc:d1:5c:ef:41:ee: 3b:9e:f3:e5:eb:13:3d:da:58:be:57:e5:ec:14:0c:89:7c:8c: b1:3b:70:bc:e7:8a:f3:b1:6c:c5:2a:ed:af:31:80:44:0c:0d: 02:0d:c8:b7:dd:19:89:96:0a:69:fa:58:a3:c4:23:e6:88:08: ee:3a:42:e4:67:ae:30:a6:44:db:cc:71:3b:01:48:c5:e6:11: 0c:fc:f2:eb:04:7d:21:aa:79:79:44:a7:69:48:85:41:7d:53: 14:da:e0:94:eb:0d:b5:64:83:0b:d2:57:ee:5a:60:4a:52:cc: da:8b:07:b8:40:5f:89:b9:6f:f8:3d:5e:45:89:16:f4:37:e1: 41:33:08:51:39:43:4e:eb:19:b7:f3:8d:0b:12:2f:c7:bf:17: df:92:2b:48:27:73:f3:a3:48:29:46:5e:a3:b0:83:c8:a3:d1: 3d:88:d5:47:40:73:69:eb:a6:49:53:97:c0:38:91:a2:68:3a: e5:c6:a9:88:dc:39:16:8a:b0:5e:90:a2:8f:8a:df:c4:2c:66: 68:6a:f5:00:d1:f9:ff:b1:3d:52:b4:82:8d:49:b3:7c:a0:82: 18:29:73:27 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZqBuyfaRFlJ5s0P0ebKUtqgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0YjBjYWM4MzhmMjgyZTA0Mjk0OGY5ZDJiMmNkNTc1NGQy ZThjNDcwHhcNMjUxMTE0MDkzODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTMxY2YwMGIzN2U4MjM5OWMyMTQ0YjhhYWYyM2MxNTQ0MjgxOGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKJxB7QJpAfzm6pafs0rPeoN6w97 nJd6pN3GaBzPzZIQ0H9g3R9e00D4DOjSXKdmLSQrn2X02GOnssnjIrr92lGed8tH DHnvNKfKhGEOSFnow1NTjAGtYwmosYoy4s4wiv1ypsqWSkKGJo2DfOb+p3/gQJPV gVuyO4yROQryAW4Ouabq5JeHT7HvTovGoq+ZbcFN9Tcq3IA80npn314PCU5sEIlM IBPO7B6WRdKXWXBnTy/8urdBQc3KFt7rhplH/w4FoMQl8dG0scKDgh7eFzQWYiL+ E5hogHsS3Nt0BaCWkyVJqPAqMWGRgZHUP5gDGxfUbphq+9j2w3+fiJzkIwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFHoxzwCzfoI5nCFEuKryPBVEKBi7MB8GA1UdIwQY MBaAFISwysg48oLgQpSPnSss1XVNLoxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaExES3lEanlndUJDbEktZEt5elZkVTB1akVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9lOTQ4N2YtZmRjNy00MGE3LThhNjct MWJlNjljYTM5M2JhLzEvZWpIUEFMTi1nam1jSVVTNHF2SThGVVFvR0xzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9lOTQ4N2YtZmRjNy00MGE3LThhNjctMWJlNjljYTM5M2Jh LzEvaExES3lEanlndUJDbEktZEt5elZkVTB1akVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDLh5AAwQC ua4sAwQE1eLAMA0GCSqGSIb3DQEBCwUAA4IBAQBg30SyXMFiHdlGccUy74hiS+ni l3QoL+DumLUnCWfM0VzvQe47nvPl6xM92li+V+XsFAyJfIyxO3C854rzsWzFKu2v MYBEDA0CDci33RmJlgpp+lijxCPmiAjuOkLkZ64wpkTbzHE7AUjF5hEM/PLrBH0h qnl5RKdpSIVBfVMU2uCU6w21ZIML0lfuWmBKUszaiwe4QF+JuW/4PV5FiRb0N+FB MwhROUNO6xm3840LEi/HvxffkitIJ3Pzo0gpRl6jsIPIo9E9iNVHQHNp66ZJU5fA OJGiaDrlxqmI3DkWirBekKKPit/ELGZoavUA0fn/sT1StIKNSbN8oIIYKXMn -----END CERTIFICATE-----Generated at Thu Dec 18 03:42:23 2025 by rpki-client