This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/GEzUOZiRURxvXNLAUBjBDJ3ZpbY.roa File: GEzUOZiRURxvXNLAUBjBDJ3ZpbY.roa (raw, json) Hash identifier: YiX7Qs2KST8thxfSYFwxFXSaSOJJEYBSqj0X1pLOywI= Subject key identifier: 18:4C:D4:39:98:91:51:1C:6F:5C:D2:C0:50:18:C1:0C:9D:D9:A5:B6 Certificate issuer: /CN=ca19abeb8ab9e63890a223c2fd6ba568498bdbba Certificate serial: 019B797E9D29C0BD7941047E9F8C1199A308 Authority key identifier: CA:19:AB:EB:8A:B9:E6:38:90:A2:23:C2:FD:6B:A5:68:49:8B:DB:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhmr64q55jiQoiPC_WulaEmL27o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/GEzUOZiRURxvXNLAUBjBDJ3ZpbY.roa Signing time: Thu 01 Jan 2026 12:18:19 +0000 ROA not before: Thu 01 Jan 2026 12:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48918 IP address blocks: 94.186.128.0/17 maxlen: 24 2a02:c98::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/yhmr64q55jiQoiPC_WulaEmL27o.crl rsync://rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/yhmr64q55jiQoiPC_WulaEmL27o.mft rsync://rpki.ripe.net/repository/DEFAULT/yhmr64q55jiQoiPC_WulaEmL27o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 15:35:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:9d:29:c0:bd:79:41:04:7e:9f:8c:11:99:a3:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca19abeb8ab9e63890a223c2fd6ba568498bdbba Validity Not Before: Jan 1 12:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=184cd4399891511c6f5cd2c05018c10c9dd9a5b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2e:66:ad:8b:66:3c:ec:2f:f9:1c:0a:72:2b: aa:dc:46:11:34:b0:fc:2f:af:0c:84:fb:59:d1:d7: d4:3b:25:86:9f:8e:de:ac:0c:e6:00:b4:7a:9d:b6: e4:c6:e2:84:9e:94:70:d1:98:74:63:91:04:9d:99: f3:e3:85:73:77:29:20:a0:92:b5:5d:de:fb:ee:41: 2d:80:03:15:7e:09:30:29:79:93:d5:6b:b8:eb:af: e2:02:51:6d:87:a3:25:3f:8e:51:08:b8:c0:4c:f1: 60:f1:04:dc:6c:ce:2d:fa:f4:4b:c3:50:80:5f:39: 42:95:6b:79:03:88:0d:36:e8:1d:de:d3:e4:c9:16: cf:19:cd:88:1b:84:f4:29:8c:7f:8d:e5:db:14:27: e3:bb:a9:c3:12:1c:f1:35:b9:4a:67:14:3c:c8:ee: 08:fb:aa:e4:c4:d3:f1:50:a4:6e:c3:7b:d3:d9:67: 52:70:c2:7e:d7:8e:90:e6:d6:cf:e3:b5:af:13:e5: c9:dc:fc:57:dc:91:ae:5e:fb:a6:dd:9d:4c:36:7a: a1:27:d8:6d:5b:af:98:a4:83:06:91:89:d7:42:69: 6a:95:89:c3:3a:85:91:f6:b3:f4:8e:00:c4:a0:35: 7b:f2:a9:0a:3f:33:46:a9:ed:15:d4:8e:57:9c:fe: a8:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:4C:D4:39:98:91:51:1C:6F:5C:D2:C0:50:18:C1:0C:9D:D9:A5:B6 X509v3 Authority Key Identifier: keyid:CA:19:AB:EB:8A:B9:E6:38:90:A2:23:C2:FD:6B:A5:68:49:8B:DB:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhmr64q55jiQoiPC_WulaEmL27o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/GEzUOZiRURxvXNLAUBjBDJ3ZpbY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/b17e1d-fd91-4923-9d3c-13bbcd0f9376/1/yhmr64q55jiQoiPC_WulaEmL27o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.186.128.0/17 IPv6: 2a02:c98::/32 Signature Algorithm: sha256WithRSAEncryption 62:b6:2d:39:30:5e:14:42:6c:e2:3e:93:ee:53:69:94:e9:fe: 3c:70:be:cc:82:98:71:06:40:2e:d2:65:e0:fb:ab:65:12:21: f8:16:45:e1:75:b7:a9:db:84:8f:6d:31:13:f2:01:ce:56:a7: c8:9c:d6:b1:ee:bc:d5:2c:1c:65:62:f5:eb:0b:02:3c:db:f9: 8b:04:f4:03:33:93:df:be:dc:2e:6d:39:94:26:a2:92:06:88: 8e:ab:8c:bf:e2:9b:3e:76:1b:ed:ea:20:4b:e4:df:91:f1:df: d1:83:25:01:cb:e2:49:76:a1:2f:42:39:23:e7:f9:c2:f3:46: a1:7c:1b:ff:0d:90:26:02:1f:d9:ab:d4:1c:e0:d4:79:b7:bc: d2:3c:fb:fa:a1:c0:1f:9f:4c:94:dc:62:70:9d:34:74:0f:3a: d4:6e:a8:1f:7f:3e:c6:33:f9:a5:25:39:6a:a5:9a:bb:61:88: 20:e1:7a:63:84:c8:95:ad:d2:41:d2:a5:af:46:1a:51:ca:d0: f8:f3:f0:b0:e6:54:7a:c0:eb:22:cd:87:21:b8:fa:23:af:47: 0e:ef:58:76:6a:c0:a0:f8:18:13:d8:e2:e3:64:29:5a:c8:1f: ed:f4:a3:05:e4:bc:7f:03:09:8d:56:6e:7e:03:27:36:e7:56: c7:e0:65:c1 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5fp0pwL15QQR+n4wRmaMIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhMTlhYmViOGFiOWU2Mzg5MGEyMjNjMmZkNmJhNTY4NDk4 YmRiYmEwHhcNMjYwMTAxMTIxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODRjZDQzOTk4OTE1MTFjNmY1Y2QyYzA1MDE4YzEwYzlkZDlhNWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAry5mrYtmPOwv+RwKciuq3EYRNLD8 L68MhPtZ0dfUOyWGn47erAzmALR6nbbkxuKEnpRw0Zh0Y5EEnZnz44VzdykgoJK1 Xd777kEtgAMVfgkwKXmT1Wu466/iAlFth6MlP45RCLjATPFg8QTcbM4t+vRLw1CA XzlClWt5A4gNNugd3tPkyRbPGc2IG4T0KYx/jeXbFCfju6nDEhzxNblKZxQ8yO4I +6rkxNPxUKRuw3vT2WdScMJ+146Q5tbP47WvE+XJ3PxX3JGuXvum3Z1MNnqhJ9ht W6+YpIMGkYnXQmlqlYnDOoWR9rP0jgDEoDV78qkKPzNGqe0V1I5XnP6oaQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBhM1DmYkVEcb1zSwFAYwQyd2aW2MB8GA1UdIwQY MBaAFMoZq+uKueY4kKIjwv1rpWhJi9u6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWhtcjY0cTU1amlRb2lQQ19XdWxhRW1MMjdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9iMTdlMWQtZmQ5MS00OTIzLTlkM2Mt MTNiYmNkMGY5Mzc2LzEvR0V6VU9aaVJVUnh2WE5MQVVCakJESjNacGJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9iMTdlMWQtZmQ5MS00OTIzLTlkM2MtMTNiYmNkMGY5Mzc2 LzEveWhtcjY0cTU1amlRb2lQQ19XdWxhRW1MMjdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQHXrqAMA0E AgACMAcDBQAqAgyYMA0GCSqGSIb3DQEBCwUAA4IBAQBiti05MF4UQmziPpPuU2mU 6f48cL7MgphxBkAu0mXg+6tlEiH4FkXhdbep24SPbTET8gHOVqfInNax7rzVLBxl YvXrCwI82/mLBPQDM5PfvtwubTmUJqKSBoiOq4y/4ps+dhvt6iBL5N+R8d/RgyUB y+JJdqEvQjkj5/nC80ahfBv/DZAmAh/Zq9Qc4NR5t7zSPPv6ocAfn0yU3GJwnTR0 DzrUbqgffz7GM/mlJTlqpZq7YYgg4XpjhMiVrdJB0qWvRhpRytD48/Cw5lR6wOsi zYchuPojr0cO71h2asCg+BgT2OLjZClayB/t9KMF5Lx/AwmNVm5+Ayc251bH4GXB -----END CERTIFICATE-----Generated at Tue Feb 3 00:09:10 2026 by rpki-client