This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/jEyhnawA1v0gtesf0kIlyVmfvFc.roa File: jEyhnawA1v0gtesf0kIlyVmfvFc.roa (raw, json) Hash identifier: YkjZV8m/I/sTlivm0IaJ7KD648BRtxn2dN92ii6NY5I= Subject key identifier: 8C:4C:A1:9D:AC:00:D6:FD:20:B5:EB:1F:D2:42:25:C9:59:9F:BC:57 Certificate issuer: /CN=bc63a36d5c80651a89a76906c9e3402fb34568da Certificate serial: 019AE4A3758646ACC598C069CB0E771D96AF Authority key identifier: BC:63:A3:6D:5C:80:65:1A:89:A7:69:06:C9:E3:40:2F:B3:45:68:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGOjbVyAZRqJp2kGyeNAL7NFaNo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/jEyhnawA1v0gtesf0kIlyVmfvFc.roa Signing time: Wed 03 Dec 2025 14:35:08 +0000 ROA not before: Wed 03 Dec 2025 14:35:08 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 32787 IP address blocks: 185.145.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.crl rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft rsync://rpki.ripe.net/repository/DEFAULT/vGOjbVyAZRqJp2kGyeNAL7NFaNo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 17:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e4:a3:75:86:46:ac:c5:98:c0:69:cb:0e:77:1d:96:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc63a36d5c80651a89a76906c9e3402fb34568da Validity Not Before: Dec 3 14:35:08 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8c4ca19dac00d6fd20b5eb1fd24225c9599fbc57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:27:ce:a3:42:6a:7a:24:6c:09:b0:27:21:b9: 8b:c9:45:22:6e:97:d5:5d:9f:ae:70:10:78:4d:0a: 1f:cd:a0:8a:18:16:1a:89:40:c8:02:19:2d:01:46: ff:4e:18:82:24:4b:0d:17:2f:8c:90:af:82:bc:e6: 85:31:27:c5:50:f7:e2:e4:15:76:45:db:af:76:2f: 76:34:fb:74:ba:e2:fc:03:83:bb:13:b0:94:e1:5c: ef:44:b8:8b:58:78:09:41:91:41:bb:6b:74:86:3b: e7:23:5f:c6:f2:ad:44:5e:7f:f3:05:9f:2a:4d:6e: 9a:b8:0e:a8:88:3e:84:b3:77:53:3c:8a:89:c6:da: 2b:ac:33:64:ff:30:d2:83:f3:b9:80:bc:32:51:65: 5c:ac:62:95:1f:d9:56:c8:a2:56:33:a2:16:31:0e: 7e:8e:93:f9:9b:6f:af:1b:9b:98:e8:9e:0e:88:98: 03:e7:16:03:a7:bf:89:e6:55:46:2f:bc:69:cd:17: 88:d9:93:46:14:48:03:79:3c:77:12:41:67:60:12: 9f:be:06:e9:43:f0:dc:20:96:81:33:d8:24:36:6b: 29:dd:ba:10:e4:8c:a8:a5:f5:22:08:ba:2b:43:2a: 2b:e8:f1:51:14:2c:9b:3d:36:2a:ae:b3:07:0e:fb: cc:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:4C:A1:9D:AC:00:D6:FD:20:B5:EB:1F:D2:42:25:C9:59:9F:BC:57 X509v3 Authority Key Identifier: keyid:BC:63:A3:6D:5C:80:65:1A:89:A7:69:06:C9:E3:40:2F:B3:45:68:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGOjbVyAZRqJp2kGyeNAL7NFaNo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/jEyhnawA1v0gtesf0kIlyVmfvFc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.145.100.0/24 Signature Algorithm: sha256WithRSAEncryption 07:50:26:44:75:7c:f6:48:0d:d6:4b:b0:c0:b7:c4:88:e0:d0: 7f:c0:47:8b:b2:d6:78:bd:4d:67:92:f6:37:18:5b:dd:cd:f4: 5e:b2:ac:0d:b5:44:d9:73:aa:e9:93:ca:1a:00:57:e8:e4:6c: dd:7c:e0:e7:3a:97:17:61:58:b3:10:bc:39:7f:d3:c7:21:f4: bf:40:a9:99:f0:f3:87:90:aa:1c:9d:64:f1:49:27:dc:f3:30: 13:d7:d1:cf:5b:a1:fc:e2:4d:64:1c:20:63:81:4c:3c:63:d1: 46:5c:7c:97:22:54:0f:b9:4a:ca:49:3a:f8:6b:27:51:e6:44: 0f:a5:f0:f1:ac:bb:eb:30:3f:16:76:3f:ce:fb:5e:66:39:bd: d5:a3:bd:ec:fd:f6:c0:0e:7c:cb:5a:81:57:e0:64:4f:95:be: 1e:93:3a:0a:be:aa:d7:c6:f3:b9:9e:7c:05:9b:e7:ca:67:e5: 83:1e:0f:82:2f:2b:b9:2b:b7:c2:8e:d5:ae:13:8b:63:6a:70: 11:d6:19:4a:0e:7a:f4:3e:97:06:5c:6f:c2:63:c3:49:55:64: fb:02:9a:45:26:7c:fa:aa:e4:46:81:22:e4:af:1b:7c:ae:56: 43:55:74:40:a9:18:2e:73:b7:3a:f0:bb:67:ea:b1:75:e9:70: 55:0b:5c:63 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrko3WGRqzFmMBpyw53HZavMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNjNhMzZkNWM4MDY1MWE4OWE3NjkwNmM5ZTM0MDJmYjM0 NTY4ZGEwHhcNMjUxMjAzMTQzNTA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YzRjYTE5ZGFjMDBkNmZkMjBiNWViMWZkMjQyMjVjOTU5OWZiYzU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ifOo0JqeiRsCbAnIbmLyUUibpfV XZ+ucBB4TQofzaCKGBYaiUDIAhktAUb/ThiCJEsNFy+MkK+CvOaFMSfFUPfi5BV2 Rduvdi92NPt0uuL8A4O7E7CU4VzvRLiLWHgJQZFBu2t0hjvnI1/G8q1EXn/zBZ8q TW6auA6oiD6Es3dTPIqJxtorrDNk/zDSg/O5gLwyUWVcrGKVH9lWyKJWM6IWMQ5+ jpP5m2+vG5uY6J4OiJgD5xYDp7+J5lVGL7xpzReI2ZNGFEgDeTx3EkFnYBKfvgbp Q/DcIJaBM9gkNmsp3boQ5IyopfUiCLorQyor6PFRFCybPTYqrrMHDvvMOQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIxMoZ2sANb9ILXrH9JCJclZn7xXMB8GA1UdIwQY MBaAFLxjo21cgGUaiadpBsnjQC+zRWjaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkdPamJWeUFaUnFKcDJrR3llTkFMN05GYU5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9jM2FiNjktNzE2Mi00MjIyLWFhMjAt NGUzYjIwZWMxNmEzLzEvakV5aG5hd0ExdjBndGVzZjBrSWx5Vm1mdkZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni9jM2FiNjktNzE2Mi00MjIyLWFhMjAtNGUzYjIwZWMxNmEz LzEvdkdPamJWeUFaUnFKcDJrR3llTkFMN05GYU5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZFkMA0G CSqGSIb3DQEBCwUAA4IBAQAHUCZEdXz2SA3WS7DAt8SI4NB/wEeLstZ4vU1nkvY3 GFvdzfResqwNtUTZc6rpk8oaAFfo5GzdfODnOpcXYVizELw5f9PHIfS/QKmZ8POH kKocnWTxSSfc8zAT19HPW6H84k1kHCBjgUw8Y9FGXHyXIlQPuUrKSTr4aydR5kQP pfDxrLvrMD8Wdj/O+15mOb3Vo73s/fbADnzLWoFX4GRPlb4ekzoKvqrXxvO5nnwF m+fKZ+WDHg+CLyu5K7fCjtWuE4tjanAR1hlKDnr0PpcGXG/CY8NJVWT7AppFJnz6 quRGgSLkrxt8rlZDVXRAqRguc7c68Ltn6rF16XBVC1xj -----END CERTIFICATE-----Generated at Sat Dec 6 00:06:43 2025 by rpki-client