This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/855ad6-a84f-4f01-bfc8-d3fd91ac7c9f/1/e2kWH-n9xwHOTDKfeYfOg1xIQrU.roa File: e2kWH-n9xwHOTDKfeYfOg1xIQrU.roa (raw, json) Hash identifier: ng2DaquieFqAgbP5IQorRbSXOj+A0OxG5GhDyC+r0bs= Subject key identifier: 7B:69:16:1F:E9:FD:C7:01:CE:4C:32:9F:79:87:CE:83:5C:48:42:B5 Certificate issuer: /CN=31252ce307781d0319fcd7494fa64f26045016ac Certificate serial: 019B0D617742B25F9DBB456E158C9C5A44E4 Authority key identifier: 31:25:2C:E3:07:78:1D:03:19:FC:D7:49:4F:A6:4F:26:04:50:16:AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/855ad6-a84f-4f01-bfc8-d3fd91ac7c9f/1/e2kWH-n9xwHOTDKfeYfOg1xIQrU.roa Signing time: Thu 11 Dec 2025 12:27:29 +0000 ROA not before: Thu 11 Dec 2025 12:27:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 224 IP address blocks: 78.91.0.0/16 maxlen: 16 193.156.0.0/15 maxlen: 15 2001:700::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/855ad6-a84f-4f01-bfc8-d3fd91ac7c9f/1/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.crl rsync://rpki.ripe.net/repository/DEFAULT/53/855ad6-a84f-4f01-bfc8-d3fd91ac7c9f/1/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.mft rsync://rpki.ripe.net/repository/DEFAULT/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:61:77:42:b2:5f:9d:bb:45:6e:15:8c:9c:5a:44:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31252ce307781d0319fcd7494fa64f26045016ac Validity Not Before: Dec 11 12:27:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7b69161fe9fdc701ce4c329f7987ce835c4842b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:79:72:a5:1d:82:2d:36:97:73:f4:66:44:be: e5:5e:eb:29:ad:8b:fb:f9:4e:79:ec:ea:2f:f8:3d: 36:d9:91:d7:a6:de:e7:64:26:4d:03:42:bc:fa:c5: e6:d5:fd:bc:eb:42:f9:36:95:81:8a:44:6a:20:4e: b4:af:9b:f8:8d:5c:52:7c:c4:33:62:c7:92:4e:9d: 5f:fc:00:70:9f:15:95:96:0f:f8:e9:da:b8:a9:ea: 8c:03:ac:5b:7f:2c:c3:90:d9:ce:7e:62:96:a0:66: 19:93:d6:c8:38:cb:a2:b2:18:ed:f7:41:4d:5e:6c: 51:8c:5c:f5:df:1f:d7:7e:3c:39:bd:67:31:de:ef: 32:13:ea:6d:8c:fc:2e:b9:64:57:9a:23:8a:dc:b4: 5e:fd:12:c2:f1:fa:49:a2:18:79:15:31:79:c2:95: a7:a8:4b:62:cd:9a:db:e7:1f:75:00:39:ac:4b:d4: 18:c9:5d:71:0c:c0:60:e1:2f:7b:ff:86:12:f0:df: e4:b4:59:49:28:e5:a6:9d:f6:e6:e3:7b:0e:10:f9: 8e:28:04:ea:f3:cb:91:29:9d:8b:d4:43:93:7b:62: b3:9b:6a:c0:83:95:c2:0f:91:ca:b6:5c:9a:70:39: e2:8f:4e:94:96:fb:18:55:08:70:32:5c:ad:25:3c: e8:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:69:16:1F:E9:FD:C7:01:CE:4C:32:9F:79:87:CE:83:5C:48:42:B5 X509v3 Authority Key Identifier: keyid:31:25:2C:E3:07:78:1D:03:19:FC:D7:49:4F:A6:4F:26:04:50:16:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/855ad6-a84f-4f01-bfc8-d3fd91ac7c9f/1/e2kWH-n9xwHOTDKfeYfOg1xIQrU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/855ad6-a84f-4f01-bfc8-d3fd91ac7c9f/1/MSUs4wd4HQMZ_NdJT6ZPJgRQFqw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.91.0.0/16 193.156.0.0/15 IPv6: 2001:700::/32 Signature Algorithm: sha256WithRSAEncryption 95:d5:1a:98:8d:97:9e:15:af:5b:ae:ec:f1:1b:10:bf:15:0f: 81:8f:1d:43:6a:7b:ce:ac:b4:e3:a3:5c:e4:a3:56:56:48:c0: e0:de:db:a4:13:f3:27:15:40:9e:c8:de:98:51:78:ec:90:26: cc:27:43:f8:74:2f:fc:a2:e6:fe:15:d5:9a:32:f2:7c:ad:0e: 8a:3a:25:d0:23:31:c7:26:15:ad:b6:c5:d6:ea:4c:18:c4:6c: 22:55:29:cd:39:ec:51:78:b7:9d:79:6f:33:12:23:8e:93:13: 5b:d5:30:46:b9:e8:34:9b:ab:20:99:3a:f3:c2:43:d6:7d:ec: 92:fd:1e:67:b5:d4:e9:e8:4c:46:6b:ac:3e:5d:9e:ce:21:82: 4d:54:5d:04:d2:58:97:98:88:66:bd:05:f5:06:53:76:b4:e1: 4d:99:46:82:6b:27:6d:66:67:71:fc:6a:e2:e9:ce:0e:55:48: f8:ee:83:f7:11:c4:95:d2:56:f9:85:44:26:b5:cd:31:74:68: 24:74:19:82:71:eb:17:73:52:60:c1:29:3d:5f:3a:e7:b5:c5: 35:c6:b5:e3:8e:1d:c9:9a:88:96:77:ed:76:ff:67:a6:67:33: 0a:26:0a:84:c3:23:68:a2:c8:d9:2b:f1:91:d5:54:37:e2:94: 9c:18:90:b4 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgISAZsNYXdCsl+du0VuFYycWkTkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxMjUyY2UzMDc3ODFkMDMxOWZjZDc0OTRmYTY0ZjI2MDQ1 MDE2YWMwHhcNMjUxMjExMTIyNzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YjY5MTYxZmU5ZmRjNzAxY2U0YzMyOWY3OTg3Y2U4MzVjNDg0MmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXlypR2CLTaXc/RmRL7lXusprYv7 +U557Oov+D022ZHXpt7nZCZNA0K8+sXm1f2860L5NpWBikRqIE60r5v4jVxSfMQz YseSTp1f/ABwnxWVlg/46dq4qeqMA6xbfyzDkNnOfmKWoGYZk9bIOMuishjt90FN XmxRjFz13x/Xfjw5vWcx3u8yE+ptjPwuuWRXmiOK3LRe/RLC8fpJohh5FTF5wpWn qEtizZrb5x91ADmsS9QYyV1xDMBg4S97/4YS8N/ktFlJKOWmnfbm43sOEPmOKATq 88uRKZ2L1EOTe2Kzm2rAg5XCD5HKtlyacDnij06UlvsYVQhwMlytJTzo4QIDAQAB o4ICHDCCAhgwHQYDVR0OBBYEFHtpFh/p/ccBzkwyn3mHzoNcSEK1MB8GA1UdIwQY MBaAFDElLOMHeB0DGfzXSU+mTyYEUBasMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVNVczR3ZDRIUU1aX05kSlQ2WlBKZ1JRRnF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My84NTVhZDYtYTg0Zi00ZjAxLWJmYzgt ZDNmZDkxYWM3YzlmLzEvZTJrV0gtbjl4d0hPVERLZmVZZk9nMXhJUXJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My84NTVhZDYtYTg0Zi00ZjAxLWJmYzgtZDNmZDkxYWM3Yzlm LzEvTVNVczR3ZDRIUU1aX05kSlQ2WlBKZ1JRRnF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDIGCCsGAQUFBwEHAQH/BCMwITAQBAIAATAKAwMATlsDAwHB nDANBAIAAjAHAwUAIAEHADANBgkqhkiG9w0BAQsFAAOCAQEAldUamI2XnhWvW67s 8RsQvxUPgY8dQ2p7zqy046Nc5KNWVkjA4N7bpBPzJxVAnsjemFF47JAmzCdD+HQv /KLm/hXVmjLyfK0Oijol0CMxxyYVrbbF1upMGMRsIlUpzTnsUXi3nXlvMxIjjpMT W9UwRrnoNJurIJk688JD1n3skv0eZ7XU6ehMRmusPl2eziGCTVRdBNJYl5iIZr0F 9QZTdrThTZlGgmsnbWZncfxq4unODlVI+O6D9xHEldJW+YVEJrXNMXRoJHQZgnHr F3NSYMEpPV8657XFNca1444dyZqIlnftdv9npmczCiYKhMMjaKLI2SvxkdVUN+KU nBiQtA== -----END CERTIFICATE-----Generated at Thu Dec 18 19:30:37 2025 by rpki-client