This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/eZ9UOq9D7h6PkF-tsoPFMwz1Ago.roa File: eZ9UOq9D7h6PkF-tsoPFMwz1Ago.roa (raw, json) Hash identifier: stzfv2f+p3RFGsG9S6OYQeB7VYNNBEus7AwqJ8t7tGM= Subject key identifier: 79:9F:54:3A:AF:43:EE:1E:8F:90:5F:AD:B2:83:C5:33:0C:F5:02:0A Certificate issuer: /CN=af036816a317dd99d25383a32a681859c047b5ff Certificate serial: 019B7CECBBF17C47E0F4560B9BA3D2C08266 Authority key identifier: AF:03:68:16:A3:17:DD:99:D2:53:83:A3:2A:68:18:59:C0:47:B5:FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/eZ9UOq9D7h6PkF-tsoPFMwz1Ago.roa Signing time: Fri 02 Jan 2026 04:17:27 +0000 ROA not before: Fri 02 Jan 2026 04:17:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 194.187.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.mft rsync://rpki.ripe.net/repository/DEFAULT/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 21:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:bb:f1:7c:47:e0:f4:56:0b:9b:a3:d2:c0:82:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af036816a317dd99d25383a32a681859c047b5ff Validity Not Before: Jan 2 04:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=799f543aaf43ee1e8f905fadb283c5330cf5020a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:bb:d1:bf:d7:65:2e:31:84:c7:86:f9:5d:0a: 14:10:8d:67:32:9c:a6:9b:15:04:62:12:51:4d:3e: 20:54:b0:5b:02:a2:4a:56:68:fe:0c:2d:c4:10:e1: 4d:a1:4a:83:d7:6c:fb:1e:01:62:df:47:21:af:4b: 11:f6:7b:1a:19:22:e7:1e:99:b9:26:01:9f:df:b9: f8:33:7a:7c:ae:52:05:5f:8d:81:2c:a5:d8:f3:b9: 79:02:8b:02:5b:cc:9c:2c:26:83:02:c9:12:5c:7d: 1b:0c:77:3e:6e:ca:b0:11:e3:8b:0e:8c:bf:80:62: d2:58:f7:4d:46:19:39:4f:44:db:6e:35:64:b0:4e: ae:6c:5b:6f:e4:e8:58:bb:02:ba:77:0c:cf:7a:e8: 6d:cb:e9:bd:53:42:57:5a:f3:a3:53:08:84:4b:a6: 1a:ec:ee:f7:4d:ac:b1:45:e9:fa:70:14:24:a9:e4: 6f:e2:99:46:74:1c:56:d8:a5:df:c0:a5:9d:86:ec: c9:d0:6a:8b:1b:a0:26:6a:86:96:b1:d6:2e:fb:92: dd:e9:a7:b5:cf:73:3c:c2:0d:6b:24:ba:6a:21:e4: 02:ae:34:a2:56:c9:9e:a8:5f:2d:a6:63:18:23:98: ad:9f:8b:59:38:53:76:4b:3c:f6:6c:12:71:8f:18: 66:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:9F:54:3A:AF:43:EE:1E:8F:90:5F:AD:B2:83:C5:33:0C:F5:02:0A X509v3 Authority Key Identifier: keyid:AF:03:68:16:A3:17:DD:99:D2:53:83:A3:2A:68:18:59:C0:47:B5:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/eZ9UOq9D7h6PkF-tsoPFMwz1Ago.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/52b199-9e1f-4ec7-b0aa-4a4e0f424f17/1/rwNoFqMX3ZnSU4OjKmgYWcBHtf8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.187.56.0/22 Signature Algorithm: sha256WithRSAEncryption 51:db:e7:d0:f6:71:7e:1f:c0:7a:65:40:8f:04:79:52:e0:d4: ab:c9:b0:a7:b9:cb:8e:15:64:2f:fe:f1:63:6c:4f:b0:d7:d5: 62:8b:e6:e7:cf:30:b7:4c:a4:bf:0d:ea:48:25:4a:ee:18:36: c8:20:17:b5:aa:1d:8f:bb:de:e8:57:9e:c3:3f:4b:9c:87:1d: 8e:0a:3d:f7:f6:1d:3c:bc:09:09:54:60:c5:67:59:06:82:79: dc:ec:a3:59:f4:6d:ac:3f:57:cc:a8:8d:73:37:17:f7:85:8c: 51:1f:3c:dd:fd:6d:a4:72:b7:49:fd:1d:08:f4:bd:7a:27:26: ef:ee:b6:5a:d7:91:30:44:08:54:02:ee:1f:6b:18:c2:66:36: 1b:6f:55:ab:1b:7c:1e:f0:8a:d7:95:9c:06:6d:20:86:ee:8b: 19:57:42:62:46:19:8f:30:a9:e3:e2:cb:7a:ae:3f:d5:ca:9e: 8d:2e:9f:e6:2c:e4:6d:8d:24:06:97:09:50:38:05:b2:5c:2b: 7b:76:63:42:d0:e4:1a:16:3c:c5:0e:8d:0c:16:59:c5:13:14: 8b:87:c3:9f:10:d5:dc:af:21:05:7b:d1:b1:bc:4a:25:2e:93: 15:13:15:01:ab:b6:d2:b5:5a:63:aa:74:d7:58:1b:f1:79:21: cf:c6:4c:31 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87LvxfEfg9FYLm6PSwIJmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmMDM2ODE2YTMxN2RkOTlkMjUzODNhMzJhNjgxODU5YzA0 N2I1ZmYwHhcNMjYwMTAyMDQxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OTlmNTQzYWFmNDNlZTFlOGY5MDVmYWRiMjgzYzUzMzBjZjUwMjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bvRv9dlLjGEx4b5XQoUEI1nMpym mxUEYhJRTT4gVLBbAqJKVmj+DC3EEOFNoUqD12z7HgFi30chr0sR9nsaGSLnHpm5 JgGf37n4M3p8rlIFX42BLKXY87l5AosCW8ycLCaDAskSXH0bDHc+bsqwEeOLDoy/ gGLSWPdNRhk5T0TbbjVksE6ubFtv5OhYuwK6dwzPeuhty+m9U0JXWvOjUwiES6Ya 7O73TayxRen6cBQkqeRv4plGdBxW2KXfwKWdhuzJ0GqLG6AmaoaWsdYu+5Ld6ae1 z3M8wg1rJLpqIeQCrjSiVsmeqF8tpmMYI5itn4tZOFN2Szz2bBJxjxhmVwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHmfVDqvQ+4ej5BfrbKDxTMM9QIKMB8GA1UdIwQY MBaAFK8DaBajF92Z0lODoypoGFnAR7X/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcndOb0ZxTVgzWm5TVTRPakttZ1lXY0JIdGY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS81MmIxOTktOWUxZi00ZWM3LWIwYWEt NGE0ZTBmNDI0ZjE3LzEvZVo5VU9xOUQ3aDZQa0YtdHNvUEZNd3oxQWdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS81MmIxOTktOWUxZi00ZWM3LWIwYWEtNGE0ZTBmNDI0ZjE3 LzEvcndOb0ZxTVgzWm5TVTRPakttZ1lXY0JIdGY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwrs4MA0G CSqGSIb3DQEBCwUAA4IBAQBR2+fQ9nF+H8B6ZUCPBHlS4NSrybCnucuOFWQv/vFj bE+w19Vii+bnzzC3TKS/DepIJUruGDbIIBe1qh2Pu97oV57DP0uchx2OCj339h08 vAkJVGDFZ1kGgnnc7KNZ9G2sP1fMqI1zNxf3hYxRHzzd/W2kcrdJ/R0I9L16Jybv 7rZa15EwRAhUAu4faxjCZjYbb1WrG3we8IrXlZwGbSCG7osZV0JiRhmPMKnj4st6 rj/Vyp6NLp/mLORtjSQGlwlQOAWyXCt7dmNC0OQaFjzFDo0MFlnFExSLh8OfENXc ryEFe9GxvEolLpMVExUBq7bStVpjqnTXWBvxeSHPxkwx -----END CERTIFICATE-----Generated at Fri Jan 9 06:24:35 2026 by rpki-client