This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/x852Qr21e9Y3cRbTT8Dri2xYpzo.roa File: x852Qr21e9Y3cRbTT8Dri2xYpzo.roa (raw, json) Hash identifier: Wj7bL93u97KVkBnN00S5teBWbQNJ9k/I9gGz8uHqwY0= Subject key identifier: C7:CE:76:42:BD:B5:7B:D6:37:71:16:D3:4F:C0:EB:8B:6C:58:A7:3A Certificate issuer: /CN=122a646bed4c417a6b4805f93d77a7a465e34b93 Certificate serial: 019B7EA6F0B933704D3207BE134799381710 Authority key identifier: 12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/x852Qr21e9Y3cRbTT8Dri2xYpzo.roa Signing time: Fri 02 Jan 2026 12:20:28 +0000 ROA not before: Fri 02 Jan 2026 12:20:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49785 IP address blocks: 93.159.190.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.crl rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.mft rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:f0:b9:33:70:4d:32:07:be:13:47:99:38:17:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=122a646bed4c417a6b4805f93d77a7a465e34b93 Validity Not Before: Jan 2 12:20:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c7ce7642bdb57bd6377116d34fc0eb8b6c58a73a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:5d:87:c0:ba:38:ea:28:6e:fd:90:28:b8:48: d7:54:2e:aa:1c:60:ee:cb:37:6a:b0:aa:3f:7f:80: 2d:46:1e:87:74:95:01:5e:20:11:d5:7d:33:cb:a2: 3e:a9:2a:93:1c:7c:37:fc:c5:ec:4f:21:4b:4d:c6: 15:90:a1:d4:3c:8f:ad:0a:e2:f9:f9:cb:17:38:14: 0c:79:3a:09:ac:cc:02:87:65:55:17:73:c1:54:26: 58:c4:fc:dd:81:ce:07:eb:c8:8e:ea:30:bb:11:a8: 7c:8e:5b:2f:d4:b7:90:4d:be:a5:4d:f9:db:46:5c: 4a:c5:ef:4e:22:bb:85:b5:7f:88:9a:1e:35:b6:ce: 13:ce:05:f2:03:0d:e6:50:82:65:2b:fe:a1:f9:57: 6c:a5:58:a6:63:51:f1:54:16:a7:dd:65:f9:62:8d: 0d:88:4d:23:85:26:1e:56:12:9b:dd:8a:8b:eb:b4: 95:74:8a:56:f4:24:12:02:17:70:7d:ee:86:13:c2: 21:16:35:46:41:1e:18:ee:5c:fd:65:35:7b:4e:45: 5f:b5:e8:8d:73:5e:8a:50:5d:d7:6b:22:88:f4:ee: 7f:bb:c8:75:1f:ad:d9:2f:19:d2:2f:a2:f2:27:7e: 70:bd:d7:63:a8:ba:7e:f9:c9:69:90:68:7d:ce:24: ee:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:CE:76:42:BD:B5:7B:D6:37:71:16:D3:4F:C0:EB:8B:6C:58:A7:3A X509v3 Authority Key Identifier: keyid:12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/x852Qr21e9Y3cRbTT8Dri2xYpzo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.159.190.0/23 Signature Algorithm: sha256WithRSAEncryption 0e:b7:5f:8e:10:3c:8e:96:6f:99:17:12:42:bc:69:70:ec:16: d8:b5:69:4c:37:1f:64:52:ec:9f:8c:20:05:8a:f2:f0:00:17: 38:17:80:88:65:1d:a2:cb:80:a1:b1:71:d3:c4:55:7c:dd:61: ac:75:1c:54:f9:02:30:dc:9a:84:df:28:9f:87:7f:9b:ac:32: d7:53:a6:66:a2:b2:3a:fc:9e:c0:ef:e7:c1:ee:63:a5:c0:8e: 91:45:65:72:de:72:73:93:1e:45:17:80:69:6c:6e:99:38:14: 7c:f6:ed:f2:e3:81:a7:14:d5:94:de:cc:47:dd:cb:43:b6:f2: fe:1d:14:51:ac:74:35:59:66:b8:7a:93:c0:3a:f2:d5:bc:51: 63:b3:49:47:c1:8b:53:73:d8:b1:23:b7:34:20:ed:35:3e:80: a9:f2:28:c4:8b:d6:b1:88:81:65:b5:8d:d7:2f:b7:2d:01:bd: aa:5a:57:2d:74:28:5a:b7:a4:48:98:21:e7:42:64:18:55:90: 78:c5:1e:d9:15:1c:05:9a:6e:83:2c:b7:6a:51:35:e6:c5:aa: 34:a4:9f:01:1d:4f:b2:c5:e1:56:1f:bb:8b:ce:85:1d:d8:3b: 92:55:99:2f:45:dd:2d:04:3c:1d:a4:df:dd:8c:ca:2d:df:4d: 4a:bd:8f:c2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pvC5M3BNMge+E0eZOBcQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyMmE2NDZiZWQ0YzQxN2E2YjQ4MDVmOTNkNzdhN2E0NjVl MzRiOTMwHhcNMjYwMTAyMTIyMDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjN2NlNzY0MmJkYjU3YmQ2Mzc3MTE2ZDM0ZmMwZWI4YjZjNThhNzNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkl2HwLo46ihu/ZAouEjXVC6qHGDu yzdqsKo/f4AtRh6HdJUBXiAR1X0zy6I+qSqTHHw3/MXsTyFLTcYVkKHUPI+tCuL5 +csXOBQMeToJrMwCh2VVF3PBVCZYxPzdgc4H68iO6jC7Eah8jlsv1LeQTb6lTfnb RlxKxe9OIruFtX+Imh41ts4TzgXyAw3mUIJlK/6h+VdspVimY1HxVBan3WX5Yo0N iE0jhSYeVhKb3YqL67SVdIpW9CQSAhdwfe6GE8IhFjVGQR4Y7lz9ZTV7TkVfteiN c16KUF3XayKI9O5/u8h1H63ZLxnSL6LyJ35wvddjqLp++clpkGh9ziTuLwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMfOdkK9tXvWN3EW00/A64tsWKc6MB8GA1UdIwQY MBaAFBIqZGvtTEF6a0gF+T13p6Rl40uTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWlwa2EtMU1RWHByU0FYNVBYZW5wR1hqUzVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9hNTk2ZTItMjlkMi00OGM2LTliYWIt NWNiZDFmM2ZmMzlhLzEveDg1MlFyMjFlOVkzY1JiVFQ4RHJpMnhZcHpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9hNTk2ZTItMjlkMi00OGM2LTliYWItNWNiZDFmM2ZmMzlh LzEvRWlwa2EtMU1RWHByU0FYNVBYZW5wR1hqUzVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXZ++MA0G CSqGSIb3DQEBCwUAA4IBAQAOt1+OEDyOlm+ZFxJCvGlw7BbYtWlMNx9kUuyfjCAF ivLwABc4F4CIZR2iy4ChsXHTxFV83WGsdRxU+QIw3JqE3yifh3+brDLXU6ZmorI6 /J7A7+fB7mOlwI6RRWVy3nJzkx5FF4BpbG6ZOBR89u3y44GnFNWU3sxH3ctDtvL+ HRRRrHQ1WWa4epPAOvLVvFFjs0lHwYtTc9ixI7c0IO01PoCp8ijEi9axiIFltY3X L7ctAb2qWlctdChat6RImCHnQmQYVZB4xR7ZFRwFmm6DLLdqUTXmxao0pJ8BHU+y xeFWH7uLzoUd2DuSVZkvRd0tBDwdpN/djMot301KvY/C -----END CERTIFICATE-----Generated at Mon Jan 26 23:22:40 2026 by rpki-client