This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/EVg2L8pDOuL996swDjbZkgqWr48.roa File: EVg2L8pDOuL996swDjbZkgqWr48.roa (raw, json) Hash identifier: P/+OA5OMWR9e7RJm+Dd87MD9P6jsDAN+dTSTtEQHCBk= Subject key identifier: 11:58:36:2F:CA:43:3A:E2:FD:F7:AB:30:0E:36:D9:92:0A:96:AF:8F Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019B7910565845793A0F15C259FF716B0A32 Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/EVg2L8pDOuL996swDjbZkgqWr48.roa Signing time: Thu 01 Jan 2026 10:17:52 +0000 ROA not before: Thu 01 Jan 2026 10:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199797 IP address blocks: 188.132.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:56:58:45:79:3a:0f:15:c2:59:ff:71:6b:0a:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Jan 1 10:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1158362fca433ae2fdf7ab300e36d9920a96af8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:42:ea:f7:fe:9b:61:3b:1d:68:fe:33:e6:ab: b9:d9:1e:16:d8:64:5a:83:7a:a2:af:b1:82:94:fe: b1:ed:9b:5a:21:33:60:8d:c8:c3:ba:20:03:af:38: 9d:24:bf:15:1b:c7:1d:45:1c:7a:51:b5:c9:ae:7f: 66:89:02:b0:06:cd:b8:9f:ae:a3:13:33:c5:cf:f0: 1e:91:54:ce:c6:59:16:4d:b4:35:98:1e:d9:ea:86: 7b:35:1a:05:43:73:33:1a:8d:dd:9b:7c:ef:66:4a: 7b:e3:79:ff:31:c3:bd:66:b5:0a:65:11:a8:a6:83: 79:22:26:70:61:20:ac:dd:dc:43:a5:82:4f:c7:24: f3:95:79:f4:0d:84:03:65:8e:f3:09:8b:2f:2b:db: 29:67:bd:d5:5f:41:c9:61:8b:9c:76:b6:f8:7a:72: 49:f9:b9:c7:bd:e5:e3:90:e3:4d:83:d0:4a:7b:22: c6:64:52:30:86:6b:ea:6b:36:f7:df:2d:e0:b1:ce: 02:c0:ff:f1:dc:ec:66:f1:50:70:17:9d:ef:67:dc: 69:01:06:50:9c:ce:4c:0b:77:11:f3:8f:7c:05:d8: c4:7c:de:f0:bf:17:a0:1f:82:5e:62:f3:2c:e3:a8: 06:c6:dc:ed:f7:9a:f1:aa:41:13:d1:fb:83:ec:2a: dc:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:58:36:2F:CA:43:3A:E2:FD:F7:AB:30:0E:36:D9:92:0A:96:AF:8F X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/EVg2L8pDOuL996swDjbZkgqWr48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.132.151.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:50:87:e4:cc:7a:d6:07:24:33:81:db:0d:f2:8a:b7:aa:4b: 29:5c:86:13:2c:1b:20:13:9c:d6:c4:37:00:c5:47:85:ef:4b: f8:24:58:af:38:38:3e:54:4b:e3:65:84:d6:5a:d0:c6:d5:cd: 6b:d0:85:89:ab:64:4e:61:89:c7:8f:9a:63:2e:2c:9f:45:66: 1f:ad:26:f2:20:61:bd:a2:ac:be:e1:95:39:6f:af:90:7d:ae: 1b:b2:23:7f:7a:31:b6:9e:b0:61:ab:30:a9:59:69:aa:99:1d: 3a:cf:3d:3d:a3:38:0c:7d:49:63:87:69:61:3f:b8:02:e1:87: 28:e3:17:c1:f0:5f:70:2a:fa:b5:92:b1:9e:07:81:84:ea:8a: 5f:56:0d:c9:ea:42:2e:83:d2:c6:87:bd:ac:7c:59:71:2f:38: 36:db:79:19:ec:c5:20:22:85:7d:e4:c0:91:02:93:04:b9:86: e5:20:cc:62:c5:77:af:dc:d5:3d:98:c0:4c:d2:ec:e3:5f:7a: dd:30:ff:dd:a2:ea:3c:04:06:f9:b6:08:e6:bb:02:4f:a5:dd: 20:76:51:11:24:6a:c3:b1:0d:d0:bb:77:f7:7d:0e:40:a6:f4: 41:c7:c7:0e:b7:ef:c9:81:a8:dd:c6:64:3e:de:fd:e0:18:ca: 00:f0:80:d6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EFZYRXk6DxXCWf9xawoyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjYwMTAxMTAxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMTU4MzYyZmNhNDMzYWUyZmRmN2FiMzAwZTM2ZDk5MjBhOTZhZjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0Lq9/6bYTsdaP4z5qu52R4W2GRa g3qir7GClP6x7ZtaITNgjcjDuiADrzidJL8VG8cdRRx6UbXJrn9miQKwBs24n66j EzPFz/AekVTOxlkWTbQ1mB7Z6oZ7NRoFQ3MzGo3dm3zvZkp743n/McO9ZrUKZRGo poN5IiZwYSCs3dxDpYJPxyTzlXn0DYQDZY7zCYsvK9spZ73VX0HJYYucdrb4enJJ +bnHveXjkONNg9BKeyLGZFIwhmvqazb33y3gsc4CwP/x3Oxm8VBwF53vZ9xpAQZQ nM5MC3cR8498BdjEfN7wvxegH4JeYvMs46gGxtzt95rxqkET0fuD7CrcgwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBFYNi/KQzri/ferMA422ZIKlq+PMB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvRVZnMkw4cERPdUw5OTZzd0RqYlprZ3FXcjQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvISXMA0G CSqGSIb3DQEBCwUAA4IBAQA6UIfkzHrWByQzgdsN8oq3qkspXIYTLBsgE5zWxDcA xUeF70v4JFivODg+VEvjZYTWWtDG1c1r0IWJq2ROYYnHj5pjLiyfRWYfrSbyIGG9 oqy+4ZU5b6+Qfa4bsiN/ejG2nrBhqzCpWWmqmR06zz09ozgMfUljh2lhP7gC4Yco 4xfB8F9wKvq1krGeB4GE6opfVg3J6kIug9LGh72sfFlxLzg223kZ7MUgIoV95MCR ApMEuYblIMxixXev3NU9mMBM0uzjX3rdMP/douo8BAb5tgjmuwJPpd0gdlERJGrD sQ3Qu3f3fQ5ApvRBx8cOt+/JgajdxmQ+3v3gGMoA8IDW -----END CERTIFICATE-----Generated at Wed Jan 21 13:33:14 2026 by rpki-client