This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/ERsoKeMqu2J5CC8xnzCO5lHCCDU.roa File: ERsoKeMqu2J5CC8xnzCO5lHCCDU.roa (raw, json) Hash identifier: US0e4svHqQpUHWnxm2Mq44LWLVkvzl0ZFQs0e7QO7f8= Subject key identifier: 11:1B:28:29:E3:2A:BB:62:79:08:2F:31:9F:30:8E:E6:51:C2:08:35 Certificate issuer: /CN=69d78759e0ec6f14566d10b83c83f2bf199b7100 Certificate serial: 019B7C118239FD001B3B27378ABAE8A9D9D4 Authority key identifier: 69:D7:87:59:E0:EC:6F:14:56:6D:10:B8:3C:83:F2:BF:19:9B:71:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/adeHWeDsbxRWbRC4PIPyvxmbcQA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/ERsoKeMqu2J5CC8xnzCO5lHCCDU.roa Signing time: Fri 02 Jan 2026 00:18:00 +0000 ROA not before: Fri 02 Jan 2026 00:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1299 IP address blocks: 84.254.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/adeHWeDsbxRWbRC4PIPyvxmbcQA.crl rsync://rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/adeHWeDsbxRWbRC4PIPyvxmbcQA.mft rsync://rpki.ripe.net/repository/DEFAULT/adeHWeDsbxRWbRC4PIPyvxmbcQA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:82:39:fd:00:1b:3b:27:37:8a:ba:e8:a9:d9:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69d78759e0ec6f14566d10b83c83f2bf199b7100 Validity Not Before: Jan 2 00:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=111b2829e32abb6279082f319f308ee651c20835 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:86:7a:4e:25:5d:0c:31:8d:00:fc:f5:1a:2d: 0c:93:b4:11:82:e6:0e:ea:b3:0f:16:f2:31:ef:dc: 16:b0:f7:3f:bc:81:ca:ca:c3:6d:c1:27:4d:f0:02: 70:2c:a4:1f:97:d7:25:7c:16:f1:dc:e4:ee:41:60: f0:7b:60:65:04:d1:ac:5c:70:ae:29:5a:1b:6a:21: 65:eb:2f:59:2f:bf:d0:e7:b1:c8:ba:1d:9b:f2:27: df:cf:f5:99:c1:44:68:de:77:e5:60:ed:2c:b2:89: 15:f2:86:4b:99:45:0c:ae:35:49:c0:96:c6:1b:3f: bf:f3:b0:ca:c4:57:12:cb:82:da:e4:69:59:df:08: 96:5b:3b:85:7c:2d:3f:74:59:84:ac:70:7d:8a:f8: 1c:15:f3:9c:2c:e2:ed:db:a5:70:3c:d8:e3:b6:92: 5f:2d:e5:5a:58:fe:b9:cd:0b:21:30:33:34:94:7c: ae:bb:e0:04:be:9b:7c:53:7c:e1:bf:14:31:fc:55: 9e:7c:54:d8:11:81:e9:6f:6d:d5:d0:03:69:6f:fc: e5:9f:ca:59:f6:d8:4a:78:d3:de:d6:78:9a:d5:45: 65:a5:fb:8c:5d:df:7d:d5:3b:e6:7e:3a:3e:70:99: 79:fc:4a:4c:fa:9b:d7:97:fc:80:69:67:d8:de:05: ad:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:1B:28:29:E3:2A:BB:62:79:08:2F:31:9F:30:8E:E6:51:C2:08:35 X509v3 Authority Key Identifier: keyid:69:D7:87:59:E0:EC:6F:14:56:6D:10:B8:3C:83:F2:BF:19:9B:71:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adeHWeDsbxRWbRC4PIPyvxmbcQA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/ERsoKeMqu2J5CC8xnzCO5lHCCDU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b59df6-d5fb-4524-8d72-e18aac5054a9/1/adeHWeDsbxRWbRC4PIPyvxmbcQA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.254.68.0/22 Signature Algorithm: sha256WithRSAEncryption 14:f7:bf:fb:f4:2e:f9:b1:b7:77:a3:b3:7b:3a:a6:7e:88:7c: 14:d8:c1:32:9a:c3:50:30:e6:25:bb:24:96:83:65:ac:a2:2c: 12:7b:d5:e7:68:06:b3:97:3b:af:d3:b2:78:36:06:00:4a:f9: 10:8d:16:61:c8:cf:64:58:69:5d:e0:00:5a:45:cf:25:62:70: fd:49:03:49:36:51:7e:9c:50:be:18:e4:91:78:9c:ce:e7:da: 15:b5:0e:cd:0a:f2:a2:e7:a0:a9:cb:fb:b2:94:b0:4f:44:4d: c7:3b:ee:be:62:d1:85:87:fa:8a:4d:20:8d:ef:30:27:1c:70: 63:8e:fe:f4:57:c5:1d:d1:ed:01:81:e9:89:95:f0:d8:19:6f: 05:b5:e9:27:dd:72:5e:33:61:32:d2:bc:52:8b:a2:02:34:b9: 29:af:61:bc:26:0a:3b:a7:9b:c0:8b:a3:da:00:8c:c5:36:4b: 75:81:3e:82:de:f9:ea:71:31:40:dd:dd:b9:f9:f3:99:43:e9: da:86:d7:2f:85:86:39:79:96:d8:32:50:66:8a:8a:3e:e7:7b: 53:f0:44:52:31:cc:64:19:52:c6:1c:93:f0:79:08:5e:9d:14: a2:85:bc:bf:2c:d6:9f:4f:94:41:4b:77:23:3e:6c:df:d0:d3: 11:ff:1b:3b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EYI5/QAbOyc3irroqdnUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ZDc4NzU5ZTBlYzZmMTQ1NjZkMTBiODNjODNmMmJmMTk5 YjcxMDAwHhcNMjYwMTAyMDAxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMTFiMjgyOWUzMmFiYjYyNzkwODJmMzE5ZjMwOGVlNjUxYzIwODM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIZ6TiVdDDGNAPz1Gi0Mk7QRguYO 6rMPFvIx79wWsPc/vIHKysNtwSdN8AJwLKQfl9clfBbx3OTuQWDwe2BlBNGsXHCu KVobaiFl6y9ZL7/Q57HIuh2b8iffz/WZwURo3nflYO0ssokV8oZLmUUMrjVJwJbG Gz+/87DKxFcSy4La5GlZ3wiWWzuFfC0/dFmErHB9ivgcFfOcLOLt26VwPNjjtpJf LeVaWP65zQshMDM0lHyuu+AEvpt8U3zhvxQx/FWefFTYEYHpb23V0ANpb/zln8pZ 9thKeNPe1nia1UVlpfuMXd991Tvmfjo+cJl5/EpM+pvXl/yAaWfY3gWtVQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBEbKCnjKrtieQgvMZ8wjuZRwgg1MB8GA1UdIwQY MBaAFGnXh1ng7G8UVm0QuDyD8r8Zm3EAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWRlSFdlRHNieFJXYlJDNFBJUHl2eG1iY1FBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9iNTlkZjYtZDVmYi00NTI0LThkNzIt ZTE4YWFjNTA1NGE5LzEvRVJzb0tlTXF1Mko1Q0M4eG56Q081bEhDQ0RVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9iNTlkZjYtZDVmYi00NTI0LThkNzItZTE4YWFjNTA1NGE5 LzEvYWRlSFdlRHNieFJXYlJDNFBJUHl2eG1iY1FBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVP5EMA0G CSqGSIb3DQEBCwUAA4IBAQAU97/79C75sbd3o7N7OqZ+iHwU2MEymsNQMOYluySW g2WsoiwSe9XnaAazlzuv07J4NgYASvkQjRZhyM9kWGld4ABaRc8lYnD9SQNJNlF+ nFC+GOSReJzO59oVtQ7NCvKi56Cpy/uylLBPRE3HO+6+YtGFh/qKTSCN7zAnHHBj jv70V8Ud0e0BgemJlfDYGW8Ftekn3XJeM2Ey0rxSi6ICNLkpr2G8Jgo7p5vAi6Pa AIzFNkt1gT6C3vnqcTFA3d25+fOZQ+nahtcvhYY5eZbYMlBmioo+53tT8ERSMcxk GVLGHJPweQhenRSihby/LNafT5RBS3cjPmzf0NMR/xs7 -----END CERTIFICATE-----Generated at Wed Jan 21 07:24:30 2026 by rpki-client