This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/es_0iYTgC8KGf6QVaGhwXVTE_MQ.roa File: es_0iYTgC8KGf6QVaGhwXVTE_MQ.roa (raw, json) Hash identifier: w6H/ZpVUIMoSl/7OP/vOqQcfBns9Oiq1ViSqyP3gYPM= Subject key identifier: 7A:CF:F4:89:84:E0:0B:C2:86:7F:A4:15:68:68:70:5D:54:C4:FC:C4 Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f Certificate serial: 019B7E37E4B612379CC9F10FF4142DEEC86F Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/es_0iYTgC8KGf6QVaGhwXVTE_MQ.roa Signing time: Fri 02 Jan 2026 10:19:10 +0000 ROA not before: Fri 02 Jan 2026 10:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216063 IP address blocks: 194.117.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 03:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:e4:b6:12:37:9c:c9:f1:0f:f4:14:2d:ee:c8:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f Validity Not Before: Jan 2 10:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7acff48984e00bc2867fa4156868705d54c4fcc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:31:14:86:8f:99:87:8b:cb:23:08:82:0d:d4: 47:3b:b0:a3:21:de:6b:92:b5:10:56:cc:93:e3:a3: 78:25:d4:d1:d4:41:d1:76:cd:ed:c6:37:3e:ca:fa: d6:1c:c7:c4:bd:82:2e:a0:26:e0:27:79:cc:c1:df: 40:69:c9:17:81:b2:58:f6:02:27:ba:a7:9b:80:21: 62:0f:06:48:f7:1a:45:a3:78:36:b1:4c:a8:04:43: d4:ae:8d:5c:5d:23:d9:cc:cd:32:cb:c5:31:eb:da: fd:48:52:8e:10:aa:24:48:8c:1d:90:ee:af:85:4b: 97:92:9b:20:74:e1:14:f9:44:78:e3:49:ca:81:25: 27:0b:9c:5e:aa:04:5d:a3:70:d3:a0:c4:e0:b0:31: 4a:64:8d:b0:7d:d6:44:3a:19:eb:3f:cd:c0:e6:ab: b7:08:50:71:17:c9:f5:23:3b:0d:f3:48:9c:a2:39: 44:5d:f6:20:c1:3b:9c:2e:48:de:f2:6b:bd:28:dd: 71:a0:9f:64:84:fd:c9:a2:b3:73:13:aa:a9:39:dc: bd:94:28:55:aa:a3:7b:bd:c2:98:75:b8:be:01:1f: af:2c:01:aa:9b:73:df:61:af:3b:32:fd:b1:c7:c5: 81:8e:a9:e0:11:42:33:a7:cf:22:38:50:24:9e:92: 49:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:CF:F4:89:84:E0:0B:C2:86:7F:A4:15:68:68:70:5D:54:C4:FC:C4 X509v3 Authority Key Identifier: keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/es_0iYTgC8KGf6QVaGhwXVTE_MQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.117.224.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:96:69:f2:89:3a:da:f0:90:8b:36:89:f3:c3:c9:0a:a5:34: f8:28:0b:9a:1e:5e:7f:53:1b:78:a1:ba:44:df:83:90:13:8e: 3b:0b:48:22:93:e7:81:6d:56:00:02:a6:16:95:e7:2f:c5:4e: 94:83:d9:f3:31:d5:25:07:10:ac:a0:c5:96:4b:98:d3:41:5f: b6:97:ae:c1:13:c5:7c:97:dd:b5:90:5a:73:9e:e4:c8:4e:ad: 8c:6d:a4:11:c1:c8:a5:eb:fa:d5:5d:70:5f:b1:48:51:e9:f8: dd:d9:1a:fc:f0:94:b4:65:c2:bc:bc:44:05:9d:f0:5c:79:15: bb:5f:0a:94:03:ae:16:1e:59:d3:b3:b5:28:78:c9:94:5d:4d: 1f:11:dc:ff:c6:23:bf:4d:30:c4:b3:90:5c:c3:09:e9:8b:c7: bf:69:18:6d:01:73:c6:2d:18:45:ee:5c:8e:91:a3:07:42:a3: 82:b5:f2:7c:9c:55:c4:79:03:a1:df:80:72:ef:61:9a:d6:4f: fb:e1:72:6d:01:39:f6:65:1c:ea:92:53:c3:8d:17:1f:65:f3: 71:dc:7e:0a:d0:fa:4d:56:e6:92:15:f2:0e:3a:c3:87:0c:1b: 51:e6:4c:22:ef:16:e9:b6:37:98:53:5b:a5:e9:e4:d2:f5:ea: b7:a5:2a:cf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N+S2EjecyfEP9BQt7shvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyYmUyOWM5NTY4OTRjNDljNmQ0YmUwZWQ5ODg4MmI5MGQx YmM3N2YwHhcNMjYwMTAyMTAxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YWNmZjQ4OTg0ZTAwYmMyODY3ZmE0MTU2ODY4NzA1ZDU0YzRmY2M0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDEUho+Zh4vLIwiCDdRHO7CjId5r krUQVsyT46N4JdTR1EHRds3txjc+yvrWHMfEvYIuoCbgJ3nMwd9AackXgbJY9gIn uqebgCFiDwZI9xpFo3g2sUyoBEPUro1cXSPZzM0yy8Ux69r9SFKOEKokSIwdkO6v hUuXkpsgdOEU+UR440nKgSUnC5xeqgRdo3DToMTgsDFKZI2wfdZEOhnrP83A5qu3 CFBxF8n1IzsN80icojlEXfYgwTucLkje8mu9KN1xoJ9khP3JorNzE6qpOdy9lChV qqN7vcKYdbi+AR+vLAGqm3PfYa87Mv2xx8WBjqngEUIzp88iOFAknpJJ/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHrP9ImE4AvChn+kFWhocF1UxPzEMB8GA1UdIwQY MBaAFBK+KclWiUxJxtS+DtmIgrkNG8d/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjIt YWE2ZWQ0ZGFmYjNiLzEvZXNfMGlZVGdDOEtHZjZRVmFHaHdYVlRFX01RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjItYWE2ZWQ0ZGFmYjNi LzEvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwnXgMA0G CSqGSIb3DQEBCwUAA4IBAQBslmnyiTra8JCLNonzw8kKpTT4KAuaHl5/Uxt4obpE 34OQE447C0gik+eBbVYAAqYWlecvxU6Ug9nzMdUlBxCsoMWWS5jTQV+2l67BE8V8 l921kFpznuTITq2MbaQRwcil6/rVXXBfsUhR6fjd2Rr88JS0ZcK8vEQFnfBceRW7 XwqUA64WHlnTs7UoeMmUXU0fEdz/xiO/TTDEs5Bcwwnpi8e/aRhtAXPGLRhF7lyO kaMHQqOCtfJ8nFXEeQOh34By72Ga1k/74XJtATn2ZRzqklPDjRcfZfNx3H4K0PpN VuaSFfIOOsOHDBtR5kwi7xbptjeYU1ul6eTS9eq3pSrP -----END CERTIFICATE-----Generated at Wed Jan 21 11:10:03 2026 by rpki-client