This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/eBEpGGGIcSCE6vcaGL9itC283V0.roa File: eBEpGGGIcSCE6vcaGL9itC283V0.roa (raw, json) Hash identifier: IrS3BV9p6bwr7mNwCreWzDYuAZs2YdMeh31O/8FlAIY= Subject key identifier: 78:11:29:18:61:88:71:20:84:EA:F7:1A:18:BF:62:B4:2D:BC:DD:5D Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019A9B172D9D70DBAE1A53CDED898D3B873D Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/eBEpGGGIcSCE6vcaGL9itC283V0.roa Signing time: Wed 19 Nov 2025 07:49:38 +0000 ROA not before: Wed 19 Nov 2025 07:49:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 204154 IP address blocks: 46.17.107.0/24 maxlen: 24 185.172.129.0/24 maxlen: 24 185.200.191.0/24 maxlen: 24 2a04:5201:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9b:17:2d:9d:70:db:ae:1a:53:cd:ed:89:8d:3b:87:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Nov 19 07:49:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=781129186188712084eaf71a18bf62b42dbcdd5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d9:c5:16:6f:b7:fd:34:71:cc:22:46:4e:53: d5:66:df:d0:bb:44:ab:b1:61:dd:7e:d7:ff:97:8a: e0:a2:83:83:50:7a:73:47:ca:2d:18:ef:32:11:3a: 71:ac:ce:6d:03:cd:1e:cc:05:85:a8:3f:31:17:73: 6f:ff:5c:29:6b:f9:eb:4f:b4:8d:d8:32:e5:a3:a7: ae:c0:06:84:2d:80:45:de:5a:72:8e:4b:0f:4b:cf: 12:81:4f:95:09:d0:d0:b1:a5:10:82:04:07:7d:18: 76:ec:96:6a:c4:28:a6:56:b0:7c:b4:a8:62:67:38: 0b:21:00:5b:f3:ce:d5:a5:56:6f:ce:2f:da:66:c2: bf:68:7a:d9:1a:f0:ec:69:18:de:b5:1b:9d:d1:a3: d2:16:4f:f1:5b:88:a4:b6:69:39:19:da:14:eb:c4: 68:b0:a4:ae:e3:c2:9f:b1:cc:27:17:4e:9f:20:04: 21:a5:0e:82:49:ea:80:f0:9e:ca:50:43:a8:eb:dc: ed:ac:ad:1c:ef:08:51:23:aa:84:bc:6f:a0:cc:eb: e6:2b:e8:c7:ea:00:11:c7:f1:df:6e:02:90:9c:21: d4:61:08:6b:29:21:91:5b:7f:94:70:55:e9:c2:4a: 4c:55:08:4d:07:fd:98:cb:b2:40:72:1c:31:d2:43: 49:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:11:29:18:61:88:71:20:84:EA:F7:1A:18:BF:62:B4:2D:BC:DD:5D X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/eBEpGGGIcSCE6vcaGL9itC283V0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.17.107.0/24 185.172.129.0/24 185.200.191.0/24 IPv6: 2a04:5201:1::/48 Signature Algorithm: sha256WithRSAEncryption 80:61:13:31:59:ce:51:01:f8:db:25:54:6a:44:17:d9:9f:71: 26:0a:19:11:e2:5a:c4:df:aa:d6:f8:4a:8f:d4:dd:e1:d7:af: d7:20:08:19:f6:23:12:16:16:04:7e:1d:92:d5:50:da:22:48: bc:cb:03:c2:b1:68:8c:4c:8d:7c:29:65:86:b2:c0:0a:bb:53: 61:17:87:8b:cf:98:30:48:dc:ce:76:88:4c:24:76:cc:eb:1f: f2:ba:1a:f9:5b:7a:7f:46:9f:65:55:33:38:66:b1:1d:88:a2: c1:5b:8c:df:95:32:21:6c:e2:da:cf:84:15:52:97:08:b2:d3: dd:c8:7d:e7:1a:9b:e6:51:01:e5:be:a2:38:ec:cc:57:b9:f6: a6:1b:06:e6:21:fa:cc:4f:02:04:00:5f:3a:e0:92:cd:8b:04: 19:af:7f:da:86:f8:87:9f:96:4a:a5:4a:db:5e:fa:8d:59:94: 7d:d1:9e:f8:83:54:af:ce:5c:83:3f:52:74:8c:c5:4c:38:14: c1:ad:c8:ab:30:d8:d0:1b:f6:66:3d:54:e4:fd:8d:0f:ae:3c: e9:76:5b:18:0a:e7:4b:e3:6b:4f:03:2a:05:b5:14:1d:ab:e6: 63:93:6d:b5:5d:e5:8e:7b:52:5b:ca:1d:e1:6c:31:b9:a4:5e: c5:0a:2f:e7 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZqbFy2dcNuuGlPN7YmNO4c9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjUxMTE5MDc0OTM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODExMjkxODYxODg3MTIwODRlYWY3MWExOGJmNjJiNDJkYmNkZDVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNnFFm+3/TRxzCJGTlPVZt/Qu0Sr sWHdftf/l4rgooODUHpzR8otGO8yETpxrM5tA80ezAWFqD8xF3Nv/1wpa/nrT7SN 2DLlo6euwAaELYBF3lpyjksPS88SgU+VCdDQsaUQggQHfRh27JZqxCimVrB8tKhi ZzgLIQBb887VpVZvzi/aZsK/aHrZGvDsaRjetRud0aPSFk/xW4iktmk5GdoU68Ro sKSu48KfscwnF06fIAQhpQ6CSeqA8J7KUEOo69ztrK0c7whRI6qEvG+gzOvmK+jH 6gARx/HfbgKQnCHUYQhrKSGRW3+UcFXpwkpMVQhNB/2Yy7JAchwx0kNJhQIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFHgRKRhhiHEghOr3Ghi/YrQtvN1dMB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEvZUJFcEdHR0ljU0NFNnZjYUdMOWl0QzI4M1YwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQALhFrAwQA uayBAwQAuci/MA8EAgACMAkDBwAqBFIBAAEwDQYJKoZIhvcNAQELBQADggEBAIBh EzFZzlEB+NslVGpEF9mfcSYKGRHiWsTfqtb4So/U3eHXr9cgCBn2IxIWFgR+HZLV UNoiSLzLA8KxaIxMjXwpZYaywAq7U2EXh4vPmDBI3M52iEwkdszrH/K6Gvlben9G n2VVMzhmsR2IosFbjN+VMiFs4trPhBVSlwiy093Ifecam+ZRAeW+ojjszFe59qYb BuYh+sxPAgQAXzrgks2LBBmvf9qG+IeflkqlStte+o1ZlH3RnviDVK/OXIM/UnSM xUw4FMGtyKsw2NAb9mY9VOT9jQ+uPOl2WxgK50vja08DKgW1FB2r5mOTbbVd5Y57 UlvKHeFsMbmkXsUKL+c= -----END CERTIFICATE-----Generated at Fri Dec 5 21:27:02 2025 by rpki-client