This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/EJwMuFYK1wsM5hee91ic9tZZCHs.roa File: EJwMuFYK1wsM5hee91ic9tZZCHs.roa (raw, json) Hash identifier: AQoucDoJ40lM0+JsqQe1B2wvG+y+JOvu/h9zeWafMiQ= Subject key identifier: 10:9C:0C:B8:56:0A:D7:0B:0C:E6:17:9E:F7:58:9C:F6:D6:59:08:7B Certificate issuer: /CN=ef1535978be6b0ad7a9cb70eb0522f8c950982a9 Certificate serial: 019B775898BC45160EF8E1175B758D6590CD Authority key identifier: EF:15:35:97:8B:E6:B0:AD:7A:9C:B7:0E:B0:52:2F:8C:95:09:82:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xU1l4vmsK16nLcOsFIvjJUJgqk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/EJwMuFYK1wsM5hee91ic9tZZCHs.roa Signing time: Thu 01 Jan 2026 02:17:33 +0000 ROA not before: Thu 01 Jan 2026 02:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 81.172.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/7xU1l4vmsK16nLcOsFIvjJUJgqk.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/7xU1l4vmsK16nLcOsFIvjJUJgqk.mft rsync://rpki.ripe.net/repository/DEFAULT/7xU1l4vmsK16nLcOsFIvjJUJgqk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:98:bc:45:16:0e:f8:e1:17:5b:75:8d:65:90:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef1535978be6b0ad7a9cb70eb0522f8c950982a9 Validity Not Before: Jan 1 02:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=109c0cb8560ad70b0ce6179ef7589cf6d659087b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:98:4a:8d:b9:ed:9a:83:03:d6:ab:91:33:31: 5d:7f:67:0d:41:90:a3:9e:a8:55:45:1d:d8:8d:6b: 87:55:be:d7:31:a6:09:78:6a:31:7c:6c:14:4b:b8: a6:8c:ee:a0:50:2c:d7:06:5a:26:1f:36:21:f4:b6: 25:f1:b8:30:45:49:aa:84:62:4c:60:45:d4:88:1b: 9e:bc:22:58:42:ee:b0:28:16:5c:86:80:a3:19:07: fd:e0:5c:ab:9c:5d:d9:53:73:0e:9c:f4:f8:c2:05: 16:a5:cd:37:cf:44:fd:fc:02:4d:d8:b1:c7:db:57: 4e:80:fa:c0:95:6f:fc:52:ed:e2:e9:a2:b7:78:73: c7:07:48:f3:19:d4:11:3e:dc:5a:c0:13:07:a1:f5: cf:30:93:b8:f9:3b:92:73:76:51:a6:f8:d7:f7:82: d6:de:0b:8c:7d:53:26:10:1e:78:75:38:6d:2a:7c: ef:75:23:df:53:f4:f5:36:57:34:4c:bc:0b:d2:6e: d3:3d:ed:5f:3f:a3:d7:bb:23:9b:8e:cc:df:23:b6: 65:bc:4b:8c:10:6e:13:1a:d2:bf:94:d5:47:ad:95: 60:1d:e9:cd:19:7c:f0:ca:1f:33:ee:6a:7d:c6:b9: 37:5e:4b:e2:53:40:97:77:96:41:6d:d1:dd:b6:34: a6:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:9C:0C:B8:56:0A:D7:0B:0C:E6:17:9E:F7:58:9C:F6:D6:59:08:7B X509v3 Authority Key Identifier: keyid:EF:15:35:97:8B:E6:B0:AD:7A:9C:B7:0E:B0:52:2F:8C:95:09:82:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xU1l4vmsK16nLcOsFIvjJUJgqk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/EJwMuFYK1wsM5hee91ic9tZZCHs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3b6eab-f909-42c9-b588-15c65ff258e8/1/7xU1l4vmsK16nLcOsFIvjJUJgqk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.172.99.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:f2:ed:02:98:55:1e:cc:0c:91:d2:25:17:c4:b5:ea:f9:b7: a0:5d:56:4e:a8:e6:fb:e1:59:7f:48:2b:ed:7c:66:7d:2e:83: 87:04:75:69:15:39:65:33:7d:94:0c:f1:0f:1c:ba:68:01:da: cf:a7:8e:ad:21:bb:31:96:9e:05:d5:ca:60:29:08:e0:5e:b3: aa:22:5e:12:3b:58:e5:d6:2c:3e:dc:fd:71:ca:01:9f:39:f1: 36:98:ea:8a:64:1d:ff:20:7c:44:b0:c9:9c:f0:94:d4:4a:57: b6:4a:a4:f8:c2:b7:45:eb:cb:ed:87:1d:51:18:fc:33:65:88: ce:83:16:a6:11:a6:5c:11:e5:16:af:43:0f:ed:26:ea:ca:bb: a9:27:49:55:3c:5e:8f:ee:37:46:87:c3:3c:de:a8:3b:bc:d3: 1e:7a:aa:e8:90:5e:ae:b1:41:0f:d0:3d:43:ba:1f:3b:7e:b3: 53:ea:41:75:50:85:2c:b9:25:83:4f:fa:b8:8c:9a:e8:7e:f2: 85:a9:87:50:8b:09:fd:20:05:eb:d5:0f:b6:c5:fe:60:bc:d4: 6c:3c:4f:c3:1f:08:f7:a0:8d:e8:e8:83:57:f7:2d:e0:ed:da: 53:90:0e:12:d4:37:fc:32:f0:df:f4:78:fe:c7:0d:0d:e9:54: 47:be:14:ca -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WJi8RRYO+OEXW3WNZZDNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMTUzNTk3OGJlNmIwYWQ3YTljYjcwZWIwNTIyZjhjOTUw OTgyYTkwHhcNMjYwMTAxMDIxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDljMGNiODU2MGFkNzBiMGNlNjE3OWVmNzU4OWNmNmQ2NTkwODdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJhKjbntmoMD1quRMzFdf2cNQZCj nqhVRR3YjWuHVb7XMaYJeGoxfGwUS7imjO6gUCzXBlomHzYh9LYl8bgwRUmqhGJM YEXUiBuevCJYQu6wKBZchoCjGQf94FyrnF3ZU3MOnPT4wgUWpc03z0T9/AJN2LHH 21dOgPrAlW/8Uu3i6aK3eHPHB0jzGdQRPtxawBMHofXPMJO4+TuSc3ZRpvjX94LW 3guMfVMmEB54dThtKnzvdSPfU/T1Nlc0TLwL0m7TPe1fP6PXuyObjszfI7ZlvEuM EG4TGtK/lNVHrZVgHenNGXzwyh8z7mp9xrk3XkviU0CXd5ZBbdHdtjSm9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBCcDLhWCtcLDOYXnvdYnPbWWQh7MB8GA1UdIwQY MBaAFO8VNZeL5rCtepy3DrBSL4yVCYKpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3hVMWw0dm1zSzE2bkxjT3NGSXZqSlVKZ3FrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8zYjZlYWItZjkwOS00MmM5LWI1ODgt MTVjNjVmZjI1OGU4LzEvRUp3TXVGWUsxd3NNNWhlZTkxaWM5dFpaQ0hzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8zYjZlYWItZjkwOS00MmM5LWI1ODgtMTVjNjVmZjI1OGU4 LzEvN3hVMWw0dm1zSzE2bkxjT3NGSXZqSlVKZ3FrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUaxjMA0G CSqGSIb3DQEBCwUAA4IBAQB68u0CmFUezAyR0iUXxLXq+begXVZOqOb74Vl/SCvt fGZ9LoOHBHVpFTllM32UDPEPHLpoAdrPp46tIbsxlp4F1cpgKQjgXrOqIl4SO1jl 1iw+3P1xygGfOfE2mOqKZB3/IHxEsMmc8JTUSle2SqT4wrdF68vthx1RGPwzZYjO gxamEaZcEeUWr0MP7SbqyrupJ0lVPF6P7jdGh8M83qg7vNMeeqrokF6usUEP0D1D uh87frNT6kF1UIUsuSWDT/q4jJrofvKFqYdQiwn9IAXr1Q+2xf5gvNRsPE/DHwj3 oI3o6INX9y3g7dpTkA4S1Df8MvDf9Hj+xw0N6VRHvhTK -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:05 2026 by rpki-client