This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/EdkIr_aloLjy1asrooEt3vPzf5A.roa File: EdkIr_aloLjy1asrooEt3vPzf5A.roa (raw, json) Hash identifier: gtPxzWeHEIa/RG6GCOlFbr/rigyq2NrvE6Ua39yZA0s= Subject key identifier: 11:D9:08:AF:F6:A5:A0:B8:F2:D5:AB:2B:A2:81:2D:DE:F3:F3:7F:90 Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7 Certificate serial: 019B7910409315FCF6AE6E6FC304534BD5AB Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/EdkIr_aloLjy1asrooEt3vPzf5A.roa Signing time: Thu 01 Jan 2026 10:17:46 +0000 ROA not before: Thu 01 Jan 2026 10:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 401783 IP address blocks: 195.216.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:40:93:15:fc:f6:ae:6e:6f:c3:04:53:4b:d5:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7 Validity Not Before: Jan 1 10:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=11d908aff6a5a0b8f2d5ab2ba2812ddef3f37f90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:28:02:45:b4:f7:26:06:dd:98:3d:54:ed:cb: 95:91:37:30:69:00:f2:8d:67:87:33:39:aa:e7:b6: 9c:9a:70:b2:12:24:e9:d4:87:2e:aa:56:a3:b3:69: 4a:c8:b7:5e:59:12:9d:d5:2f:b2:7b:01:40:bd:95: 00:e5:87:e0:4c:67:01:cf:c5:fb:af:b1:8c:ca:3c: 61:71:2a:24:a4:37:b8:24:3e:fa:11:53:76:5f:90: 97:6f:57:60:ee:f7:4e:06:61:d3:71:23:ea:37:b2: dd:7d:4e:9f:9a:d6:ba:c8:5e:16:e0:c0:dc:af:85: 25:bb:2d:87:0b:24:81:7e:a5:45:17:d5:f5:a2:5a: 1b:f5:30:54:3e:ff:7a:16:1a:db:d0:ec:66:c3:81: 33:4c:62:a8:22:3a:48:0b:c6:6a:40:d2:fb:4e:31: 75:f4:bd:1b:13:21:af:23:d4:e9:c2:e4:bd:8c:4b: 64:be:67:93:9d:f6:a4:18:a6:1b:4c:01:0c:48:91: 85:67:be:2e:1d:aa:74:ff:08:d6:ce:d4:9f:f0:63: aa:08:37:d3:23:5b:e4:eb:f5:aa:67:33:80:1d:dc: c3:a7:a5:89:55:21:3d:a4:58:c9:5b:e1:d7:bd:16: a2:cf:75:80:43:21:4a:e3:a5:2f:11:bb:eb:92:ea: 58:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:D9:08:AF:F6:A5:A0:B8:F2:D5:AB:2B:A2:81:2D:DE:F3:F3:7F:90 X509v3 Authority Key Identifier: keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/EdkIr_aloLjy1asrooEt3vPzf5A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.216.174.0/24 Signature Algorithm: sha256WithRSAEncryption 52:11:0c:04:23:61:5a:dc:d5:5f:71:a9:04:3c:3d:af:1a:65: 32:e1:34:1f:15:a4:e7:a5:46:e9:08:9e:f7:f0:16:2d:65:68: 18:1d:68:e2:e2:54:75:ac:35:55:32:d2:f5:17:d6:f2:f5:0e: dc:fa:36:38:50:79:30:d6:b0:ce:ed:41:40:45:20:dd:4e:1d: 3b:d9:5f:dc:e2:fa:2c:5d:a9:47:69:9f:03:c2:01:07:5d:ca: 9a:b4:f0:29:c3:ef:7b:d0:5d:bd:e7:c7:20:95:ac:41:0f:39: 59:2f:87:1a:31:6e:6a:f4:db:60:8d:af:d8:a6:fa:54:c0:f9: 91:05:95:e6:af:72:6b:8a:e2:98:05:64:10:1e:ba:84:09:bd: 95:89:47:80:30:99:e5:92:85:98:b7:eb:32:0a:a0:13:41:01: 96:e3:7a:42:44:1d:5f:a2:93:3e:3c:fc:15:f9:30:4e:16:eb: 11:fc:fa:17:0c:c6:41:87:16:9c:01:55:22:cc:9b:77:7a:11: 4e:60:95:2f:d3:7e:bc:09:01:16:26:74:74:5c:f6:ef:e0:f2: db:8e:94:5f:0d:be:2c:1e:12:69:37:05:75:36:25:2d:7c:13: 1d:62:ba:f3:75:71:52:68:2c:71:af:70:9b:01:62:35:bb:7d: e6:82:fc:1a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EECTFfz2rm5vwwRTS9WrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YjdkNjY5OTgzNWJmZTlhODA4MWRmYzExNGRmMWJmNmQy MTVkYTcwHhcNMjYwMTAxMTAxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMWQ5MDhhZmY2YTVhMGI4ZjJkNWFiMmJhMjgxMmRkZWYzZjM3ZjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5SgCRbT3JgbdmD1U7cuVkTcwaQDy jWeHMzmq57acmnCyEiTp1Icuqlajs2lKyLdeWRKd1S+yewFAvZUA5YfgTGcBz8X7 r7GMyjxhcSokpDe4JD76EVN2X5CXb1dg7vdOBmHTcSPqN7LdfU6fmta6yF4W4MDc r4Uluy2HCySBfqVFF9X1olob9TBUPv96Fhrb0Oxmw4EzTGKoIjpIC8ZqQNL7TjF1 9L0bEyGvI9TpwuS9jEtkvmeTnfakGKYbTAEMSJGFZ74uHap0/wjWztSf8GOqCDfT I1vk6/WqZzOAHdzDp6WJVSE9pFjJW+HXvRaiz3WAQyFK46UvEbvrkupYZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBHZCK/2paC48tWrK6KBLd7z83+QMB8GA1UdIwQY MBaAFGW31mmYNb/pqAgd/BFN8b9tIV2nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDct OWU0MTNlYmY0MmYzLzEvRWRrSXJfYWxvTGp5MWFzcm9vRXQzdlB6ZjVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDctOWU0MTNlYmY0MmYz LzEvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw9iuMA0G CSqGSIb3DQEBCwUAA4IBAQBSEQwEI2Fa3NVfcakEPD2vGmUy4TQfFaTnpUbpCJ73 8BYtZWgYHWji4lR1rDVVMtL1F9by9Q7c+jY4UHkw1rDO7UFARSDdTh072V/c4vos XalHaZ8DwgEHXcqatPApw+970F2958cglaxBDzlZL4caMW5q9Ntgja/YpvpUwPmR BZXmr3JriuKYBWQQHrqECb2ViUeAMJnlkoWYt+syCqATQQGW43pCRB1fopM+PPwV +TBOFusR/PoXDMZBhxacAVUizJt3ehFOYJUv0368CQEWJnR0XPbv4PLbjpRfDb4s HhJpNwV1NiUtfBMdYrrzdXFSaCxxr3CbAWI1u33mgvwa -----END CERTIFICATE-----Generated at Mon Jan 19 11:24:43 2026 by rpki-client