This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/ezVBIWCV2NbeTOyJYOy4-t6gwIY.roa File: ezVBIWCV2NbeTOyJYOy4-t6gwIY.roa (raw, json) Hash identifier: +ueIW+Hcjx/ythkrLfV2yuXJCVgHvZl6MauyDWOPYoE= Subject key identifier: 7B:35:41:21:60:95:D8:D6:DE:4C:EC:89:60:EC:B8:FA:DE:A0:C0:86 Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f Certificate serial: 019ABD858555EAE960994674036B80F1FFA7 Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/ezVBIWCV2NbeTOyJYOy4-t6gwIY.roa Signing time: Wed 26 Nov 2025 00:17:15 +0000 ROA not before: Wed 26 Nov 2025 00:17:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 203442 IP address blocks: 86.54.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 05:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bd:85:85:55:ea:e9:60:99:46:74:03:6b:80:f1:ff:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f Validity Not Before: Nov 26 00:17:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7b3541216095d8d6de4cec8960ecb8fadea0c086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4b:52:8d:33:60:34:e4:c5:6b:85:27:41:3e: bb:c9:05:2f:3b:1a:e2:8f:b1:58:79:f5:c5:9e:62: 56:d1:be:e6:da:41:12:ff:4f:7d:5d:4b:89:d5:35: fa:5e:3c:8d:ff:31:b9:fe:a3:96:40:9a:70:4f:af: 39:32:61:28:b9:2a:e3:83:1e:8c:5b:fe:93:0c:18: 62:f5:d2:5b:f1:f7:82:91:d1:c8:3b:ea:c8:44:d2: bf:c4:96:a2:36:d0:4f:88:9a:c9:d2:ea:e3:68:98: 7f:72:83:7b:09:7b:bc:ea:d7:48:10:3b:05:18:1f: cf:30:73:b8:91:d7:26:63:5e:12:81:5d:d6:8b:4a: a6:8d:29:4e:04:f5:68:ff:43:a1:b3:1b:e8:4e:6a: ec:24:94:0e:99:8a:a1:fd:b5:b8:a8:9a:45:4a:2e: 2b:52:0c:f5:25:42:95:66:da:f3:c3:09:b1:5f:38: 91:3a:09:26:aa:e0:62:b9:8f:7c:9c:41:22:7e:38: 6c:e3:05:1e:b5:fb:42:2f:ff:23:b8:c5:28:b6:60: f5:98:66:b7:21:f1:88:fe:3e:2a:e3:e4:c8:dc:77: 7c:78:08:8e:d8:14:e1:cd:22:0d:bc:7c:43:bd:a8: da:a8:83:ea:70:fd:56:f1:90:89:89:82:e2:92:af: a1:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:35:41:21:60:95:D8:D6:DE:4C:EC:89:60:EC:B8:FA:DE:A0:C0:86 X509v3 Authority Key Identifier: keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/ezVBIWCV2NbeTOyJYOy4-t6gwIY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.54.5.0/24 Signature Algorithm: sha256WithRSAEncryption a2:37:28:eb:98:44:90:65:2e:96:a1:3c:cd:19:e1:4f:10:0d: ec:0e:8a:23:7f:ba:b0:43:59:3d:dd:56:f8:43:e0:1a:43:83: 8c:91:7d:00:10:0e:38:07:f1:a0:60:d0:66:c1:5b:1b:b8:6b: e9:98:1a:7e:a7:88:f9:4a:d0:3a:d7:da:2e:40:19:11:aa:c5: 15:a6:36:d8:d9:43:9a:72:82:da:cb:3f:53:14:d7:74:d1:17: 06:66:a1:5f:1a:8c:bc:e2:b1:5a:d7:7a:2b:6f:62:51:31:35: 50:25:ed:f7:b7:12:07:aa:80:78:8d:96:e4:1d:e0:0e:ea:52: 86:88:91:e0:a1:a3:d4:3e:9c:05:22:aa:ee:8b:d5:e7:cd:3e: 3b:a8:35:a2:60:60:fe:15:34:de:5d:df:d4:16:38:d0:90:36: 05:95:cc:dd:2c:b7:78:cc:8f:6d:76:64:9c:1a:31:c1:31:4f: d1:2b:a7:22:93:29:4f:8d:6b:a2:87:aa:6c:87:6f:f0:2a:f2: 1d:d3:5c:eb:55:03:dd:32:98:4e:ab:f1:88:77:cb:d9:ab:92: 5f:27:c6:7d:5e:01:8e:59:9b:7c:d4:82:fd:15:ec:a8:2e:06: 27:eb:57:d9:88:7b:23:a4:88:96:67:20:9b:fe:5f:ed:00:62: 9e:80:fc:11 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZq9hYVV6ulgmUZ0A2uA8f+nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyYmUyOWM5NTY4OTRjNDljNmQ0YmUwZWQ5ODg4MmI5MGQx YmM3N2YwHhcNMjUxMTI2MDAxNzE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YjM1NDEyMTYwOTVkOGQ2ZGU0Y2VjODk2MGVjYjhmYWRlYTBjMDg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArktSjTNgNOTFa4UnQT67yQUvOxri j7FYefXFnmJW0b7m2kES/099XUuJ1TX6XjyN/zG5/qOWQJpwT685MmEouSrjgx6M W/6TDBhi9dJb8feCkdHIO+rIRNK/xJaiNtBPiJrJ0urjaJh/coN7CXu86tdIEDsF GB/PMHO4kdcmY14SgV3Wi0qmjSlOBPVo/0OhsxvoTmrsJJQOmYqh/bW4qJpFSi4r Ugz1JUKVZtrzwwmxXziROgkmquBiuY98nEEifjhs4wUetftCL/8juMUotmD1mGa3 IfGI/j4q4+TI3Hd8eAiO2BThzSINvHxDvajaqIPqcP1W8ZCJiYLikq+hSQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHs1QSFgldjW3kzsiWDsuPreoMCGMB8GA1UdIwQY MBaAFBK+KclWiUxJxtS+DtmIgrkNG8d/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjIt YWE2ZWQ0ZGFmYjNiLzEvZXpWQklXQ1YyTmJlVE95SllPeTQtdDZnd0lZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjItYWE2ZWQ0ZGFmYjNi LzEvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVjYFMA0G CSqGSIb3DQEBCwUAA4IBAQCiNyjrmESQZS6WoTzNGeFPEA3sDoojf7qwQ1k93Vb4 Q+AaQ4OMkX0AEA44B/GgYNBmwVsbuGvpmBp+p4j5StA619ouQBkRqsUVpjbY2UOa coLayz9TFNd00RcGZqFfGoy84rFa13orb2JRMTVQJe33txIHqoB4jZbkHeAO6lKG iJHgoaPUPpwFIqrui9XnzT47qDWiYGD+FTTeXd/UFjjQkDYFlczdLLd4zI9tdmSc GjHBMU/RK6cikylPjWuih6psh2/wKvId01zrVQPdMphOq/GId8vZq5JfJ8Z9XgGO WZt81IL9FeyoLgYn61fZiHsjpIiWZyCb/l/tAGKegPwR -----END CERTIFICATE-----Generated at Sun Dec 7 12:19:40 2025 by rpki-client