This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/EvI8mErWEMbmThEo1JjM2x_4Gnw.roa File: EvI8mErWEMbmThEo1JjM2x_4Gnw.roa (raw, json) Hash identifier: iNz3IkF1f9samVwnI+HYLRpCD607SHFYQXXHMEOKQ0I= Subject key identifier: 12:F2:3C:98:4A:D6:10:C6:E6:4E:11:28:D4:98:CC:DB:1F:F8:1A:7C Certificate issuer: /CN=4a46ad8b510cf559485e3611555b8b439ef533bb Certificate serial: 019B797E5B61E320F1A78A49D0901D213877 Authority key identifier: 4A:46:AD:8B:51:0C:F5:59:48:5E:36:11:55:5B:8B:43:9E:F5:33:BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skati1EM9VlIXjYRVVuLQ571M7s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/EvI8mErWEMbmThEo1JjM2x_4Gnw.roa Signing time: Thu 01 Jan 2026 12:18:02 +0000 ROA not before: Thu 01 Jan 2026 12:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216016 IP address blocks: 188.95.199.0/24 maxlen: 24 217.23.208.0/24 maxlen: 24 2a14:300::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.crl rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.mft rsync://rpki.ripe.net/repository/DEFAULT/Skati1EM9VlIXjYRVVuLQ571M7s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:5b:61:e3:20:f1:a7:8a:49:d0:90:1d:21:38:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a46ad8b510cf559485e3611555b8b439ef533bb Validity Not Before: Jan 1 12:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=12f23c984ad610c6e64e1128d498ccdb1ff81a7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:a0:6b:d4:9a:aa:f0:b5:11:5f:d2:9b:8c:4d: 1a:8b:68:e1:1e:6f:71:d2:5f:25:08:39:4d:0b:ce: 4e:bf:eb:8a:12:b5:34:dc:6a:70:df:7b:93:0d:7c: db:fd:bf:cb:4b:50:f6:31:43:a8:5e:04:fb:44:60: 27:70:ee:77:91:24:63:dd:83:3a:47:db:f1:66:8e: 4f:2b:d1:7b:5c:87:f5:6f:42:10:11:e0:3b:26:21: 4a:b6:47:b7:39:dd:27:8a:78:f1:30:49:98:68:ab: 86:ff:72:27:da:f4:18:b5:35:16:f7:aa:18:fa:d5: ef:f0:10:ae:f3:64:94:eb:a3:bf:a3:15:1f:e0:1b: d1:30:d2:0f:29:5c:c0:01:96:8a:31:0d:73:c2:93: ba:26:c6:7d:24:6e:fb:31:59:50:c1:1f:bb:22:60: c9:26:ae:fd:d7:7d:2d:07:a8:c2:3d:97:c1:d6:b8: ea:39:87:bb:55:ba:cc:1a:e9:a1:ae:10:f1:33:4e: b0:6d:8e:44:f6:02:8a:ca:58:da:de:99:0a:87:2b: 50:b1:5b:71:11:89:d9:c1:77:ec:59:a9:a9:0f:70: ac:60:d4:33:04:dc:dc:c5:39:44:06:f0:20:8a:8e: 6f:44:6d:0a:42:ad:b6:a9:14:d5:b5:f8:fc:59:e6: c1:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:F2:3C:98:4A:D6:10:C6:E6:4E:11:28:D4:98:CC:DB:1F:F8:1A:7C X509v3 Authority Key Identifier: keyid:4A:46:AD:8B:51:0C:F5:59:48:5E:36:11:55:5B:8B:43:9E:F5:33:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skati1EM9VlIXjYRVVuLQ571M7s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/EvI8mErWEMbmThEo1JjM2x_4Gnw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9ea08a-1a99-4ee3-a3c4-8426aa1a6d2f/1/Skati1EM9VlIXjYRVVuLQ571M7s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.95.199.0/24 217.23.208.0/24 IPv6: 2a14:300::/29 Signature Algorithm: sha256WithRSAEncryption 71:2e:a6:ee:81:50:84:7a:19:69:fd:9d:b6:fe:e4:3f:5d:34: bf:71:c6:ef:4f:4f:5b:3e:2b:8e:8a:40:e7:63:72:5e:aa:8b: 47:1c:df:50:6f:68:05:1c:b8:c6:99:0c:de:5a:d7:d6:1a:fc: ea:16:03:a6:b9:15:62:21:27:b2:bb:5f:52:96:47:e3:3a:be: 13:6c:0d:0a:94:0e:ce:da:94:26:76:b7:51:0d:25:00:a7:eb: 76:d0:2d:4d:0c:04:24:5e:41:9e:20:9d:2a:10:dc:95:4a:86: ce:23:02:cf:ee:ca:b7:24:5d:a3:02:0b:f9:68:de:ec:57:b3: 06:8b:25:24:da:dc:05:24:cc:6a:99:32:9f:f0:37:2b:99:e3: 0a:98:f6:1e:cc:59:73:08:80:98:20:dd:32:a2:6d:c7:52:73: 4c:75:6f:1a:3b:2f:44:cd:5d:7a:a7:ed:1c:70:46:48:d4:04: 09:46:95:a4:3a:2b:d0:4a:05:39:6c:04:37:8a:ff:c9:41:79: 7a:d5:b3:56:90:cd:cc:b5:76:bd:8d:fa:5d:e5:e4:7e:0d:e5: 01:13:24:3a:9a:8e:49:d3:e1:62:64:a0:d1:18:b8:8e:28:2f: 56:7e:c6:a5:92:1f:f5:6f:2e:31:a6:32:24:73:0b:01:b8:99: c9:c8:8f:0c -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt5flth4yDxp4pJ0JAdITh3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNDZhZDhiNTEwY2Y1NTk0ODVlMzYxMTU1NWI4YjQzOWVm NTMzYmIwHhcNMjYwMTAxMTIxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMmYyM2M5ODRhZDYxMGM2ZTY0ZTExMjhkNDk4Y2NkYjFmZjgxYTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4qBr1Jqq8LURX9KbjE0ai2jhHm9x 0l8lCDlNC85Ov+uKErU03Gpw33uTDXzb/b/LS1D2MUOoXgT7RGAncO53kSRj3YM6 R9vxZo5PK9F7XIf1b0IQEeA7JiFKtke3Od0ninjxMEmYaKuG/3In2vQYtTUW96oY +tXv8BCu82SU66O/oxUf4BvRMNIPKVzAAZaKMQ1zwpO6JsZ9JG77MVlQwR+7ImDJ Jq79130tB6jCPZfB1rjqOYe7VbrMGumhrhDxM06wbY5E9gKKylja3pkKhytQsVtx EYnZwXfsWampD3CsYNQzBNzcxTlEBvAgio5vRG0KQq22qRTVtfj8WebBiQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFBLyPJhK1hDG5k4RKNSYzNsf+Bp8MB8GA1UdIwQY MBaAFEpGrYtRDPVZSF42EVVbi0Oe9TO7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2thdGkxRU05VmxJWGpZUlZWdUxRNTcxTTdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS85ZWEwOGEtMWE5OS00ZWUzLWEzYzQt ODQyNmFhMWE2ZDJmLzEvRXZJOG1FcldFTWJtVGhFbzFKak0yeF80R253LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS85ZWEwOGEtMWE5OS00ZWUzLWEzYzQtODQyNmFhMWE2ZDJm LzEvU2thdGkxRU05VmxJWGpZUlZWdUxRNTcxTTdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAvF/HAwQA 2RfQMA0EAgACMAcDBQMqFAMAMA0GCSqGSIb3DQEBCwUAA4IBAQBxLqbugVCEehlp /Z22/uQ/XTS/ccbvT09bPiuOikDnY3JeqotHHN9Qb2gFHLjGmQzeWtfWGvzqFgOm uRViISeyu19SlkfjOr4TbA0KlA7O2pQmdrdRDSUAp+t20C1NDAQkXkGeIJ0qENyV SobOIwLP7sq3JF2jAgv5aN7sV7MGiyUk2twFJMxqmTKf8DcrmeMKmPYezFlzCICY IN0yom3HUnNMdW8aOy9EzV16p+0ccEZI1AQJRpWkOivQSgU5bAQ3iv/JQXl61bNW kM3MtXa9jfpd5eR+DeUBEyQ6mo5J0+FiZKDRGLiOKC9Wfsalkh/1by4xpjIkcwsB uJnJyI8M -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:13 2026 by rpki-client