This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/erpCn_uRxpyPleQqNPblahy5aks.roa File: erpCn_uRxpyPleQqNPblahy5aks.roa (raw, json) Hash identifier: bVA/RIPaKEi+6ixqgNWorEPCWk1GFIDyyzrXAr+yl+c= Subject key identifier: 7A:BA:42:9F:FB:91:C6:9C:8F:95:E4:2A:34:F6:E5:6A:1C:B9:6A:4B Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b Certificate serial: 019A9CCCC83E5C9F4987A94D12EF79DD8CBC Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/erpCn_uRxpyPleQqNPblahy5aks.roa Signing time: Wed 19 Nov 2025 15:47:37 +0000 ROA not before: Wed 19 Nov 2025 15:47:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 48678 IP address blocks: 5.144.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 23:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9c:cc:c8:3e:5c:9f:49:87:a9:4d:12:ef:79:dd:8c:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b Validity Not Before: Nov 19 15:47:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7aba429ffb91c69c8f95e42a34f6e56a1cb96a4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:60:80:7a:cf:1e:a1:ec:4e:98:39:83:e6:59: 7e:47:42:69:00:5c:eb:48:ea:3f:36:5b:8a:99:c1: 44:88:19:09:16:5d:ba:a2:a7:be:14:08:06:0a:6b: 35:7d:bd:6f:ff:e0:38:0d:a5:6a:fa:29:11:b4:50: 5e:55:0e:1f:c6:75:83:d5:be:b0:dd:97:66:db:e7: d1:9b:83:89:1e:63:f7:a2:2d:86:1b:58:89:6b:55: eb:6e:fe:76:df:4d:a2:77:13:5b:74:13:80:0e:4c: 89:a3:35:43:b0:b7:f5:f4:df:3b:b9:20:1c:30:67: 66:aa:20:e2:cb:1b:0d:18:7b:6d:fe:03:6f:90:7a: fb:5d:5c:56:4b:22:1f:ca:18:06:23:ab:db:69:21: 0a:28:b7:d7:5e:3d:2c:df:0b:f1:19:71:75:12:8a: dd:f9:47:2f:80:94:0c:ff:63:52:53:1c:c1:4a:6d: d4:ee:11:7f:52:76:c8:f3:08:83:77:5c:6e:30:a4: 87:0d:8e:b9:ca:f2:14:8f:f1:d7:ed:51:89:b9:e0: 79:5f:6c:f3:c3:b1:15:da:24:8e:11:4e:e7:29:73: 6c:fc:9f:fb:6d:60:2a:03:fa:d6:c1:73:b9:2a:83: 13:31:e2:19:5b:3e:fa:c2:14:30:28:d7:f0:f1:51: cb:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:BA:42:9F:FB:91:C6:9C:8F:95:E4:2A:34:F6:E5:6A:1C:B9:6A:4B X509v3 Authority Key Identifier: keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/erpCn_uRxpyPleQqNPblahy5aks.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.144.183.0/24 Signature Algorithm: sha256WithRSAEncryption 38:ce:96:34:1b:57:91:5a:cc:39:f2:1c:74:a3:95:4a:75:45: 89:cd:8d:f3:61:c9:9e:36:91:9d:9e:e3:a4:98:7d:fd:bc:47: d4:db:fa:80:e8:97:f7:db:a0:26:fa:b3:80:3c:18:71:03:23: f0:b2:d3:ee:4d:f6:59:46:88:c1:c4:04:fa:92:10:87:b6:d0: 2a:4d:4e:85:79:1b:9e:4f:f7:9d:68:27:24:1e:be:72:08:7b: 2a:72:c3:a5:6f:9c:9e:08:05:53:b5:28:6d:32:8c:6c:d9:5e: d5:83:57:ae:52:d6:07:0e:bd:c3:3c:e0:df:78:75:06:55:a2: c9:68:a0:30:20:01:d8:4c:64:c5:7a:60:e3:77:b2:b8:c0:2e: 28:e8:d2:7d:07:f4:f3:82:00:a8:ee:a0:24:5e:50:1e:4d:82: f2:e6:32:8d:e4:19:22:67:56:cb:59:a3:98:d1:3c:96:96:9c: 89:42:46:83:4b:15:13:a2:fb:16:43:d8:5b:62:92:db:5c:60: 94:d7:6e:24:3f:6f:59:ea:9c:21:a8:3f:00:d3:45:72:59:58: 0e:cb:f2:d6:e2:a0:e1:a1:7e:2e:ed:f7:f7:6f:d5:64:e3:34: ee:d0:a9:6f:25:96:3e:90:ab:04:b2:4c:d5:e3:4e:68:a8:6d: fb:9f:94:42 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqczMg+XJ9Jh6lNEu953Yy8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzMTg4MTczMmEzZTI0NWE5NTliYzY3OWUwNDU4YzM5Zjg5 M2U0NmIwHhcNMjUxMTE5MTU0NzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YWJhNDI5ZmZiOTFjNjljOGY5NWU0MmEzNGY2ZTU2YTFjYjk2YTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2CAes8eoexOmDmD5ll+R0JpAFzr SOo/NluKmcFEiBkJFl26oqe+FAgGCms1fb1v/+A4DaVq+ikRtFBeVQ4fxnWD1b6w 3Zdm2+fRm4OJHmP3oi2GG1iJa1Xrbv52302idxNbdBOADkyJozVDsLf19N87uSAc MGdmqiDiyxsNGHtt/gNvkHr7XVxWSyIfyhgGI6vbaSEKKLfXXj0s3wvxGXF1Eord +UcvgJQM/2NSUxzBSm3U7hF/UnbI8wiDd1xuMKSHDY65yvIUj/HX7VGJueB5X2zz w7EV2iSOEU7nKXNs/J/7bWAqA/rWwXO5KoMTMeIZWz76whQwKNfw8VHLkwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHq6Qp/7kcacj5XkKjT25WocuWpLMB8GA1UdIwQY MBaAFBMYgXMqPiRalZvGeeBFjDn4k+RrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUt Y2Q2MTUyMjYxYzZmLzEvZXJwQ25fdVJ4cHlQbGVRcU5QYmxhaHk1YWtzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUtY2Q2MTUyMjYxYzZm LzEvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABZC3MA0G CSqGSIb3DQEBCwUAA4IBAQA4zpY0G1eRWsw58hx0o5VKdUWJzY3zYcmeNpGdnuOk mH39vEfU2/qA6Jf326Am+rOAPBhxAyPwstPuTfZZRojBxAT6khCHttAqTU6FeRue T/edaCckHr5yCHsqcsOlb5yeCAVTtShtMoxs2V7Vg1euUtYHDr3DPODfeHUGVaLJ aKAwIAHYTGTFemDjd7K4wC4o6NJ9B/TzggCo7qAkXlAeTYLy5jKN5BkiZ1bLWaOY 0TyWlpyJQkaDSxUTovsWQ9hbYpLbXGCU124kP29Z6pwhqD8A00VyWVgOy/LW4qDh oX4u7ff3b9Vk4zTu0KlvJZY+kKsEskzV405oqG37n5RC -----END CERTIFICATE-----Generated at Fri Dec 5 09:26:48 2025 by rpki-client