This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/EKZLxpjVdfNY2in_WGz5DPXQZMs.roa File: EKZLxpjVdfNY2in_WGz5DPXQZMs.roa (raw, json) Hash identifier: VwlDyrORXf/S3FMXQwOBkOrlJVu4NgsUK2iHT25VeYg= Subject key identifier: 10:A6:4B:C6:98:D5:75:F3:58:DA:29:FF:58:6C:F9:0C:F5:D0:64:CB Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019AAC66E8CCCD74A1C05045520BCBB32DE1 Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/EKZLxpjVdfNY2in_WGz5DPXQZMs.roa Signing time: Sat 22 Nov 2025 16:30:16 +0000 ROA not before: Sat 22 Nov 2025 16:30:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 199414 IP address blocks: 31.58.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ac:66:e8:cc:cd:74:a1:c0:50:45:52:0b:cb:b3:2d:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Nov 22 16:30:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=10a64bc698d575f358da29ff586cf90cf5d064cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4f:58:b2:21:ab:24:06:d5:b6:83:95:b8:9c: 5c:e1:51:ef:e1:9f:c5:e5:eb:43:50:8e:3e:df:d7: 29:28:43:2c:08:48:0e:6c:ce:97:3e:78:12:0a:40: e1:2e:ba:ea:e0:fb:96:9d:c9:fc:6f:87:73:75:7b: 9a:c5:be:ed:55:03:93:59:be:23:c1:f5:f0:9d:bc: 33:c0:64:eb:8c:cf:b9:51:d1:26:66:83:1f:56:c7: 37:0d:a1:c0:33:ce:87:e7:d1:04:02:7e:c2:fb:08: 2e:1a:b9:f7:4d:93:ab:00:ff:cf:9a:96:9b:35:6e: 64:72:1b:83:3c:b0:a9:47:46:0f:1e:bd:69:e8:f2: aa:cf:3b:46:a0:0c:bf:41:9c:57:d7:ec:c1:ba:43: 22:61:7d:c6:0c:5a:5e:bd:70:81:50:12:ba:eb:37: 05:a2:be:4d:ab:98:18:74:7c:47:da:8e:5e:2a:99: 12:ee:75:9f:4f:9d:3c:51:ea:08:49:84:25:a0:f1: cd:a3:c0:1d:e1:9d:3c:4e:bb:cf:e1:d1:d9:e3:58: 00:8c:7a:c7:28:53:a6:83:22:80:44:ac:b4:59:55: d3:58:7d:02:f1:16:87:7f:0e:97:3d:2e:cb:67:50: 4f:ca:6f:65:94:0f:df:9c:8a:cf:c3:f0:b2:78:d5: 67:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:A6:4B:C6:98:D5:75:F3:58:DA:29:FF:58:6C:F9:0C:F5:D0:64:CB X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/EKZLxpjVdfNY2in_WGz5DPXQZMs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.58.228.0/24 Signature Algorithm: sha256WithRSAEncryption 23:60:3f:61:32:dd:aa:86:c1:38:90:49:5e:1e:ca:b3:ad:07: 87:ce:a3:06:4f:6e:bb:68:73:65:bf:b1:49:2e:bb:f9:6d:1f: da:db:98:0d:bd:c8:66:b4:d3:cd:10:c4:bc:69:0e:0b:dd:94: ee:f6:c0:96:10:47:74:99:fb:2a:13:52:c3:d4:36:79:7d:c3: 24:81:54:0f:7d:37:c4:c0:eb:05:85:71:f5:2e:8a:a5:23:86: e5:ce:c0:f3:d5:11:65:f2:39:93:bb:17:cf:05:c3:70:29:7c: 8a:92:f4:ef:5a:76:3c:8e:4b:5c:88:c9:a0:cf:56:97:69:6a: fb:39:c3:e5:b0:0d:5b:0d:e7:2d:65:95:fe:93:ad:73:da:c0: 13:08:32:b6:eb:cd:e3:1f:ba:21:6e:89:b6:1b:ae:48:a4:db: 14:53:55:1d:f9:02:9c:ca:36:b7:14:d6:0b:d1:5d:c7:92:d3: 43:9e:11:ab:9f:72:dd:b8:86:27:21:aa:92:66:af:04:ce:cb: eb:91:7f:e0:6a:90:6b:62:4e:68:c6:d9:ad:a1:d3:cf:7a:47: c1:3b:03:d2:0d:ae:33:c5:26:57:0b:d1:0c:77:c8:20:36:2f: 6a:7c:f8:b9:a5:fb:4e:66:25:fb:a3:db:92:2d:04:d0:e1:0c: 0b:6c:02:78 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqsZujMzXShwFBFUgvLsy3hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjUxMTIyMTYzMDE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMGE2NGJjNjk4ZDU3NWYzNThkYTI5ZmY1ODZjZjkwY2Y1ZDA2NGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyE9YsiGrJAbVtoOVuJxc4VHv4Z/F 5etDUI4+39cpKEMsCEgObM6XPngSCkDhLrrq4PuWncn8b4dzdXuaxb7tVQOTWb4j wfXwnbwzwGTrjM+5UdEmZoMfVsc3DaHAM86H59EEAn7C+wguGrn3TZOrAP/Pmpab NW5kchuDPLCpR0YPHr1p6PKqzztGoAy/QZxX1+zBukMiYX3GDFpevXCBUBK66zcF or5Nq5gYdHxH2o5eKpkS7nWfT508UeoISYQloPHNo8Ad4Z08TrvP4dHZ41gAjHrH KFOmgyKARKy0WVXTWH0C8RaHfw6XPS7LZ1BPym9llA/fnIrPw/CyeNVnnwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBCmS8aY1XXzWNop/1hs+Qz10GTLMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvRUtaTHhwalZkZk5ZMmluX1dHejVEUFhRWk1zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHzrkMA0G CSqGSIb3DQEBCwUAA4IBAQAjYD9hMt2qhsE4kEleHsqzrQeHzqMGT267aHNlv7FJ Lrv5bR/a25gNvchmtNPNEMS8aQ4L3ZTu9sCWEEd0mfsqE1LD1DZ5fcMkgVQPfTfE wOsFhXH1LoqlI4blzsDz1RFl8jmTuxfPBcNwKXyKkvTvWnY8jktciMmgz1aXaWr7 OcPlsA1bDectZZX+k61z2sATCDK2683jH7ohbom2G65IpNsUU1Ud+QKcyja3FNYL 0V3HktNDnhGrn3LduIYnIaqSZq8EzsvrkX/gapBrYk5oxtmtodPPekfBOwPSDa4z xSZXC9EMd8ggNi9qfPi5pftOZiX7o9uSLQTQ4QwLbAJ4 -----END CERTIFICATE-----Generated at Sat Nov 22 21:12:14 2025 by rpki-client