This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/EpYfEYO_PBauG2EManfF8FgFl1Q.roa File: EpYfEYO_PBauG2EManfF8FgFl1Q.roa (raw, json) Hash identifier: cXvNIHvNyPlxk30rEJGQL1sdKxLXm0Gvh2LNp2Lvi3Y= Subject key identifier: 12:96:1F:11:83:BF:3C:16:AE:1B:61:0C:6A:77:C5:F0:58:05:97:54 Certificate issuer: /CN=de0b59fb68151e21dc99d62faf03589be41fbea2 Certificate serial: 019B7DCAF9830B9884498FE2EFA4E3CE86F8 Authority key identifier: DE:0B:59:FB:68:15:1E:21:DC:99:D6:2F:AF:03:58:9B:E4:1F:BE:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/EpYfEYO_PBauG2EManfF8FgFl1Q.roa Signing time: Fri 02 Jan 2026 08:20:12 +0000 ROA not before: Fri 02 Jan 2026 08:20:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15404 IP address blocks: 91.212.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.crl rsync://rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.mft rsync://rpki.ripe.net/repository/DEFAULT/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:f9:83:0b:98:84:49:8f:e2:ef:a4:e3:ce:86:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de0b59fb68151e21dc99d62faf03589be41fbea2 Validity Not Before: Jan 2 08:20:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=12961f1183bf3c16ae1b610c6a77c5f058059754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d8:21:67:77:0a:19:39:7c:42:eb:fe:de:30: ab:fa:81:65:6b:45:5a:3e:f7:a9:07:92:fa:a1:50: 7c:8a:0b:04:1c:a3:44:4c:9e:c5:d3:d9:83:58:67: f7:72:dc:22:06:a3:5a:da:b6:17:54:3b:0b:f5:72: 58:74:8b:14:61:fe:ad:05:16:aa:27:4a:84:4c:8e: 4f:58:bb:67:5e:16:a6:4f:cf:94:33:fa:ef:e4:ce: 18:60:ad:5f:24:07:5e:f5:e7:a9:f2:4f:d3:4f:72: 01:a3:a9:d6:87:20:fe:fd:a9:3f:15:8d:66:af:80: fe:a3:3c:a0:14:47:a4:a3:c8:75:1d:7c:36:c1:96: 85:9e:69:a0:fe:94:01:4d:78:66:8d:ef:dc:95:15: 31:4e:89:5e:4e:2d:5f:b3:b2:ce:7c:3b:e7:ef:76: 86:f3:e7:c2:4b:e0:03:5c:e6:08:3f:7e:5e:5d:d5: 05:22:b7:d5:3f:02:9f:f4:8f:18:76:c5:7b:9a:d1: 10:b5:09:4b:6a:ee:bc:e9:32:a9:a6:4a:80:89:23: b9:ad:23:0e:ad:3c:89:07:43:b3:5c:ad:62:52:84: 64:8f:71:dc:08:c5:81:f3:cb:9e:cb:48:e4:d8:bd: c0:73:b4:11:16:76:52:44:ba:4c:e8:8b:1e:64:2c: db:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:96:1F:11:83:BF:3C:16:AE:1B:61:0C:6A:77:C5:F0:58:05:97:54 X509v3 Authority Key Identifier: keyid:DE:0B:59:FB:68:15:1E:21:DC:99:D6:2F:AF:03:58:9B:E4:1F:BE:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/EpYfEYO_PBauG2EManfF8FgFl1Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9ad508-bfc1-4b8a-bafc-cd024788ed3c/1/3gtZ-2gVHiHcmdYvrwNYm-QfvqI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.212.245.0/24 Signature Algorithm: sha256WithRSAEncryption 25:dc:ae:70:8d:dc:ab:de:0f:b4:9c:17:2f:86:52:78:f4:bd: 62:8d:8b:83:8c:b6:34:2e:f0:bc:c3:0f:c5:b0:ef:d7:e7:00: b5:3a:8c:96:bc:20:0b:20:c6:c6:65:3d:b9:3f:68:17:89:cf: 5b:0a:ed:5c:d0:56:48:56:e2:8e:8f:8d:7c:47:e0:3b:2a:5e: fa:2c:4f:24:a2:be:f7:a1:79:c6:2c:fa:d7:21:6f:a0:7f:e5: 83:3e:95:60:88:df:03:4d:27:cf:19:7b:7c:6f:42:92:23:db: 69:16:ef:ba:9f:0d:38:03:f6:5c:92:98:16:6b:26:f9:eb:ad: d7:15:33:e2:cf:54:4c:7a:11:ba:18:dd:39:4d:7f:64:ae:e5: 07:be:d9:d4:95:13:13:8a:9d:b4:c0:6a:f3:a9:a9:25:b7:6d: 33:9d:a6:1e:16:7b:da:cf:0d:ac:93:3f:10:95:b1:dd:19:eb: cf:f2:0f:d6:29:95:19:9c:0c:88:b1:b4:f3:66:3c:8e:e8:3b: cf:80:f3:e5:17:d5:28:56:d1:ce:f2:34:3e:1d:77:36:74:87: f9:fa:cb:9d:45:51:de:45:a4:d6:f9:5b:9b:de:a0:5b:d9:32: 9e:ab:c8:93:b3:e5:23:4a:e5:93:0f:da:ae:ca:2f:e3:f2:f1: 53:8e:19:de -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yvmDC5iESY/i76Tjzob4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMGI1OWZiNjgxNTFlMjFkYzk5ZDYyZmFmMDM1ODliZTQx ZmJlYTIwHhcNMjYwMTAyMDgyMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjk2MWYxMTgzYmYzYzE2YWUxYjYxMGM2YTc3YzVmMDU4MDU5NzU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9ghZ3cKGTl8Quv+3jCr+oFla0Va PvepB5L6oVB8igsEHKNETJ7F09mDWGf3ctwiBqNa2rYXVDsL9XJYdIsUYf6tBRaq J0qETI5PWLtnXhamT8+UM/rv5M4YYK1fJAde9eep8k/TT3IBo6nWhyD+/ak/FY1m r4D+ozygFEeko8h1HXw2wZaFnmmg/pQBTXhmje/clRUxToleTi1fs7LOfDvn73aG 8+fCS+ADXOYIP35eXdUFIrfVPwKf9I8YdsV7mtEQtQlLau686TKppkqAiSO5rSMO rTyJB0OzXK1iUoRkj3HcCMWB88uey0jk2L3Ac7QRFnZSRLpM6IseZCzbIwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBKWHxGDvzwWrhthDGp3xfBYBZdUMB8GA1UdIwQY MBaAFN4LWftoFR4h3JnWL68DWJvkH76iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2d0Wi0yZ1ZIaUhjbWRZdnJ3TlltLVFmdnFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi85YWQ1MDgtYmZjMS00YjhhLWJhZmMt Y2QwMjQ3ODhlZDNjLzEvRXBZZkVZT19QQmF1RzJFTWFuZkY4RmdGbDFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi85YWQ1MDgtYmZjMS00YjhhLWJhZmMtY2QwMjQ3ODhlZDNj LzEvM2d0Wi0yZ1ZIaUhjbWRZdnJ3TlltLVFmdnFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9T1MA0G CSqGSIb3DQEBCwUAA4IBAQAl3K5wjdyr3g+0nBcvhlJ49L1ijYuDjLY0LvC8ww/F sO/X5wC1OoyWvCALIMbGZT25P2gXic9bCu1c0FZIVuKOj418R+A7Kl76LE8kor73 oXnGLPrXIW+gf+WDPpVgiN8DTSfPGXt8b0KSI9tpFu+6nw04A/ZckpgWayb5663X FTPiz1RMehG6GN05TX9kruUHvtnUlRMTip20wGrzqaklt20znaYeFnvazw2skz8Q lbHdGevP8g/WKZUZnAyIsbTzZjyO6DvPgPPlF9UoVtHO8jQ+HXc2dIf5+sudRVHe RaTW+Vub3qBb2TKeq8iTs+UjSuWTD9quyi/j8vFTjhne -----END CERTIFICATE-----Generated at Wed Jan 21 14:31:02 2026 by rpki-client