This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/EGcAzbKTUnqrJBWDw9Zl1NjvipA.roa File: EGcAzbKTUnqrJBWDw9Zl1NjvipA.roa (raw, json) Hash identifier: WN1W+AcOMLOyw+Z7FxISMQd+TynXYraLEQDBrawgt44= Subject key identifier: 10:67:00:CD:B2:93:52:7A:AB:24:15:83:C3:D6:65:D4:D8:EF:8A:90 Certificate issuer: /CN=608e6a6a54017dd3b9b2cce35fd5a9a7f2a45498 Certificate serial: 019B76EAF213A1EBCD4205E71C7DE3CBA9D3 Authority key identifier: 60:8E:6A:6A:54:01:7D:D3:B9:B2:CC:E3:5F:D5:A9:A7:F2:A4:54:98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/EGcAzbKTUnqrJBWDw9Zl1NjvipA.roa Signing time: Thu 01 Jan 2026 00:17:47 +0000 ROA not before: Thu 01 Jan 2026 00:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42833 IP address blocks: 5.104.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.crl rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.mft rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:f2:13:a1:eb:cd:42:05:e7:1c:7d:e3:cb:a9:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=608e6a6a54017dd3b9b2cce35fd5a9a7f2a45498 Validity Not Before: Jan 1 00:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=106700cdb293527aab241583c3d665d4d8ef8a90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:81:d7:99:af:8b:45:57:45:51:35:4b:39:4c: a7:25:df:2b:03:86:f3:76:1f:1a:1b:ee:e2:88:d1: 26:42:2a:a6:51:60:d4:92:d2:9e:de:16:a6:c8:33: 41:3a:47:f0:8a:42:0c:23:26:e5:09:13:6f:bc:ff: bc:a9:fe:64:2e:d9:15:f0:5f:c1:bf:e1:1f:24:fe: 6e:31:b1:a3:53:12:d2:96:1c:fc:c6:59:12:bb:e5: dd:d0:25:b4:5d:98:97:cb:13:78:3e:5d:69:98:9e: f0:a7:25:da:ce:95:fd:26:db:51:ce:b2:6e:11:c9: 55:92:31:11:4f:b6:6d:15:57:1a:62:83:67:da:54: 8f:71:77:8b:8b:db:8a:83:23:5a:a2:c2:b2:d7:0d: f8:d4:af:fa:50:f3:2d:2f:39:a9:d6:b2:d3:f6:e5: 8a:20:51:2a:85:22:ea:a6:9a:25:9d:ba:b8:61:89: af:1a:58:0f:c7:fe:9a:1c:62:9f:4c:ac:58:ab:f4: b2:47:b6:17:e0:20:6c:b8:c3:eb:ae:93:08:a9:60: cf:f4:cb:7d:97:87:06:41:21:f0:4e:7c:4e:12:b9: 2b:b0:43:e7:84:0b:8a:e0:f9:46:0a:f2:a7:38:66: fb:fc:70:9b:4d:c7:94:d9:d1:98:b9:af:cd:ef:b4: 02:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:67:00:CD:B2:93:52:7A:AB:24:15:83:C3:D6:65:D4:D8:EF:8A:90 X509v3 Authority Key Identifier: keyid:60:8E:6A:6A:54:01:7D:D3:B9:B2:CC:E3:5F:D5:A9:A7:F2:A4:54:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YI5qalQBfdO5sszjX9Wpp_KkVJg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/EGcAzbKTUnqrJBWDw9Zl1NjvipA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c3328e-1ce9-4e38-9eca-2324977c9393/1/YI5qalQBfdO5sszjX9Wpp_KkVJg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.104.31.0/24 Signature Algorithm: sha256WithRSAEncryption c0:de:5b:11:bc:38:95:4c:cf:65:32:d2:a8:6c:f3:19:cb:ea: 65:45:f8:2d:83:1e:64:95:e4:97:b2:61:30:f4:d6:c9:50:67: 32:7a:60:b3:da:8a:1a:8b:92:8a:b4:20:48:00:4a:c4:95:6e: b4:90:58:bf:23:7d:a4:7c:a6:21:23:19:b3:fa:f2:ec:4f:d5: a8:63:ca:08:79:ee:06:29:05:b8:75:56:31:2a:5d:74:9b:d7: 27:9c:e5:13:d5:37:31:ec:2e:ed:45:ce:f6:ea:c2:de:c6:73: 5b:43:bd:1b:74:a7:15:47:69:d9:2b:61:b3:57:4a:4f:53:22: b6:7b:c9:fb:67:7e:27:2c:17:50:f9:39:0a:1e:a8:65:2c:58: fa:7c:ef:e0:85:36:5d:7d:36:fc:e1:a6:37:d6:f8:a6:c1:23: c1:7e:f3:24:0b:d6:c2:e0:b5:13:50:c4:85:d4:c0:61:fd:1e: ad:10:22:a9:ae:55:a3:b7:7e:09:81:1d:b4:03:85:26:85:c1: fe:09:a8:c3:26:8f:86:7d:c7:9b:5c:4a:cd:74:8e:c5:1e:d3: 72:b2:10:22:10:16:20:54:b7:78:d0:82:93:15:9a:9f:73:f5: d1:63:48:15:5c:47:c1:59:ca:dc:aa:2a:5c:43:7a:d6:53:87: 7f:4e:33:9c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26vIToevNQgXnHH3jy6nTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwOGU2YTZhNTQwMTdkZDNiOWIyY2NlMzVmZDVhOWE3ZjJh NDU0OTgwHhcNMjYwMTAxMDAxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDY3MDBjZGIyOTM1MjdhYWIyNDE1ODNjM2Q2NjVkNGQ4ZWY4YTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYHXma+LRVdFUTVLOUynJd8rA4bz dh8aG+7iiNEmQiqmUWDUktKe3hamyDNBOkfwikIMIyblCRNvvP+8qf5kLtkV8F/B v+EfJP5uMbGjUxLSlhz8xlkSu+Xd0CW0XZiXyxN4Pl1pmJ7wpyXazpX9JttRzrJu EclVkjERT7ZtFVcaYoNn2lSPcXeLi9uKgyNaosKy1w341K/6UPMtLzmp1rLT9uWK IFEqhSLqppolnbq4YYmvGlgPx/6aHGKfTKxYq/SyR7YX4CBsuMPrrpMIqWDP9Mt9 l4cGQSHwTnxOErkrsEPnhAuK4PlGCvKnOGb7/HCbTceU2dGYua/N77QCJQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBBnAM2yk1J6qyQVg8PWZdTY74qQMB8GA1UdIwQY MBaAFGCOampUAX3TubLM41/VqafypFSYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUk1cWFsUUJmZE81c3N6alg5V3BwX0trVkpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9jMzMyOGUtMWNlOS00ZTM4LTllY2Et MjMyNDk3N2M5MzkzLzEvRUdjQXpiS1RVbnFySkJXRHc5WmwxTmp2aXBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9jMzMyOGUtMWNlOS00ZTM4LTllY2EtMjMyNDk3N2M5Mzkz LzEvWUk1cWFsUUJmZE81c3N6alg5V3BwX0trVkpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABWgfMA0G CSqGSIb3DQEBCwUAA4IBAQDA3lsRvDiVTM9lMtKobPMZy+plRfgtgx5kleSXsmEw 9NbJUGcyemCz2ooai5KKtCBIAErElW60kFi/I32kfKYhIxmz+vLsT9WoY8oIee4G KQW4dVYxKl10m9cnnOUT1Tcx7C7tRc726sLexnNbQ70bdKcVR2nZK2GzV0pPUyK2 e8n7Z34nLBdQ+TkKHqhlLFj6fO/ghTZdfTb84aY31vimwSPBfvMkC9bC4LUTUMSF 1MBh/R6tECKprlWjt34JgR20A4UmhcH+CajDJo+GfcebXErNdI7FHtNyshAiEBYg VLd40IKTFZqfc/XRY0gVXEfBWcrcqipcQ3rWU4d/TjOc -----END CERTIFICATE-----Generated at Mon Feb 2 12:41:41 2026 by rpki-client