This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/EkhoWbwNky2eU5MP2WVVtr4iGS0.roa File: EkhoWbwNky2eU5MP2WVVtr4iGS0.roa (raw, json) Hash identifier: lbfirKkR6Se4GoFQmIm2EOx1a/w9XuqCX8pnINkm79U= Subject key identifier: 12:48:68:59:BC:0D:93:2D:9E:53:93:0F:D9:65:55:B6:BE:22:19:2D Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Certificate serial: 019BFACE6C645FE5A24B7671EDF8DEB180F5 Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/EkhoWbwNky2eU5MP2WVVtr4iGS0.roa Signing time: Mon 26 Jan 2026 14:56:30 +0000 ROA not before: Mon 26 Jan 2026 14:56:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205899 IP address blocks: 46.249.110.0/24 maxlen: 24 185.231.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:ce:6c:64:5f:e5:a2:4b:76:71:ed:f8:de:b1:80:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Validity Not Before: Jan 26 14:56:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=12486859bc0d932d9e53930fd96555b6be22192d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:84:d2:8e:99:10:86:fc:b2:31:ec:ba:9d:d3: 47:76:96:32:70:f4:4d:bb:41:51:8d:05:07:5f:0a: 4e:63:24:2e:4e:64:d2:a1:7e:24:78:2f:0a:9b:c8: 06:59:31:4f:0e:65:f4:ad:7e:54:ab:cc:61:77:d3: 9a:f8:e7:8d:41:fd:0e:73:0b:76:64:1a:91:cd:b7: a6:68:5b:ca:fc:cc:2a:5e:69:03:aa:c2:2c:c9:63: e1:b1:52:51:a6:7a:62:5e:32:02:80:27:d2:34:8f: 85:c9:0c:b3:3b:ae:4c:da:a6:b5:c6:52:46:c9:3f: 9c:2b:42:26:54:82:51:83:d8:53:4a:37:28:04:df: 7d:05:e5:20:86:08:bb:3e:3a:ac:28:00:b6:c5:34: b0:04:5f:f5:08:38:2e:4d:1a:05:97:e4:06:24:f1: 69:15:69:fc:a6:75:9b:dc:6b:d4:67:8d:a6:75:89: b9:cd:4c:8a:13:99:94:71:c7:05:3e:72:1d:4b:96: ab:2a:8b:5b:25:c5:87:80:4b:fe:71:08:f8:f9:ee: b7:c1:9e:3d:29:4e:9c:f3:c0:2f:ac:0d:58:b2:6e: d7:9d:3f:2d:5e:bb:9f:4e:0e:32:72:b9:f1:ad:20: 82:a8:a1:42:b4:4b:0f:71:5c:b4:1d:42:41:c1:bb: 80:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:48:68:59:BC:0D:93:2D:9E:53:93:0F:D9:65:55:B6:BE:22:19:2D X509v3 Authority Key Identifier: keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/EkhoWbwNky2eU5MP2WVVtr4iGS0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.249.110.0/24 185.231.173.0/24 Signature Algorithm: sha256WithRSAEncryption 48:31:24:11:be:0c:2c:a6:49:99:21:ba:b6:bd:fa:af:2e:a1: 27:ba:ed:99:32:9e:86:26:c4:3b:47:3a:aa:ba:fd:41:a0:3b: 47:1d:57:29:c9:6f:54:7e:27:b6:87:a2:7d:58:51:d1:78:0b: bc:09:8b:1e:52:e2:b8:98:5a:4d:a9:61:22:f5:96:8e:42:d6: b5:a8:3a:75:07:0e:2d:8d:8e:2a:9f:90:c9:73:4e:b3:0d:65: cb:8e:a1:74:3e:ea:07:09:af:85:d6:14:30:08:5e:52:f9:d3: 51:ed:97:02:f1:88:c7:2d:df:61:39:0d:35:e8:69:a7:c7:8b: ab:df:52:9d:fc:e6:6c:79:76:ad:1a:9a:be:ac:cf:3f:a4:e6: 8d:60:25:36:17:07:c0:1a:6b:3e:a1:5e:ec:1d:93:f5:e4:53: 03:5f:b3:b2:8b:f5:9b:a2:c5:ff:33:44:25:18:11:52:c6:cd: 97:8c:7a:4c:f5:32:64:fd:87:f8:4e:40:ed:c8:97:f5:6a:4c: 54:5b:13:4c:4e:f1:0c:48:3e:a8:4d:6b:7e:47:8a:21:db:2f: cf:53:d6:b4:d6:d2:f4:d8:66:3b:5f:36:3b:87:7f:9d:cf:10: 60:f0:64:77:b7:4f:2d:d3:46:27:2e:f1:50:7e:e8:91:13:15: 64:fa:f1:58 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZv6zmxkX+WiS3Zx7fjesYD1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2 NWE0NzgwHhcNMjYwMTI2MTQ1NjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjQ4Njg1OWJjMGQ5MzJkOWU1MzkzMGZkOTY1NTViNmJlMjIxOTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ITSjpkQhvyyMey6ndNHdpYycPRN u0FRjQUHXwpOYyQuTmTSoX4keC8Km8gGWTFPDmX0rX5Uq8xhd9Oa+OeNQf0Ocwt2 ZBqRzbemaFvK/MwqXmkDqsIsyWPhsVJRpnpiXjICgCfSNI+FyQyzO65M2qa1xlJG yT+cK0ImVIJRg9hTSjcoBN99BeUghgi7PjqsKAC2xTSwBF/1CDguTRoFl+QGJPFp FWn8pnWb3GvUZ42mdYm5zUyKE5mUcccFPnIdS5arKotbJcWHgEv+cQj4+e63wZ49 KU6c88AvrA1Ysm7XnT8tXrufTg4ycrnxrSCCqKFCtEsPcVy0HUJBwbuAMwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBJIaFm8DZMtnlOTD9llVba+IhktMB8GA1UdIwQY MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt ZmUwNjU5MTc2YTU2LzEvRWtob1did05reTJlVTVNUDJXVlZ0cjRpR1MwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2 LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALvluAwQA ueetMA0GCSqGSIb3DQEBCwUAA4IBAQBIMSQRvgwspkmZIbq2vfqvLqEnuu2ZMp6G JsQ7Rzqquv1BoDtHHVcpyW9Ufie2h6J9WFHReAu8CYseUuK4mFpNqWEi9ZaOQta1 qDp1Bw4tjY4qn5DJc06zDWXLjqF0PuoHCa+F1hQwCF5S+dNR7ZcC8YjHLd9hOQ01 6Gmnx4ur31Kd/OZseXatGpq+rM8/pOaNYCU2FwfAGms+oV7sHZP15FMDX7Oyi/Wb osX/M0QlGBFSxs2XjHpM9TJk/Yf4TkDtyJf1akxUWxNMTvEMSD6oTWt+R4oh2y/P U9a01tL02GY7XzY7h3+dzxBg8GR3t08t00YnLvFQfuiRExVk+vFY -----END CERTIFICATE-----Generated at Fri Jan 30 13:56:07 2026 by rpki-client