This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/ePSKdM4YEw7nrcVv4bZ9z02JRvQ.roa File: ePSKdM4YEw7nrcVv4bZ9z02JRvQ.roa (raw, json) Hash identifier: bnWD5jhtetwyDhxUQbSnGO43JXVbXQTaCmHV3dR+gF0= Subject key identifier: 78:F4:8A:74:CE:18:13:0E:E7:AD:C5:6F:E1:B6:7D:CF:4D:89:46:F4 Certificate issuer: /CN=a3190f6efd79ea7333f9bccd85a04352d915b239 Certificate serial: 019B77C6DE0033F050222BA5C69BCDBA193C Authority key identifier: A3:19:0F:6E:FD:79:EA:73:33:F9:BC:CD:85:A0:43:52:D9:15:B2:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oxkPbv156nMz-bzNhaBDUtkVsjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/ePSKdM4YEw7nrcVv4bZ9z02JRvQ.roa Signing time: Thu 01 Jan 2026 04:18:00 +0000 ROA not before: Thu 01 Jan 2026 04:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207139 IP address blocks: 185.169.115.0/24 maxlen: 24 2a01:8787::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.crl rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.mft rsync://rpki.ripe.net/repository/DEFAULT/oxkPbv156nMz-bzNhaBDUtkVsjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:de:00:33:f0:50:22:2b:a5:c6:9b:cd:ba:19:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3190f6efd79ea7333f9bccd85a04352d915b239 Validity Not Before: Jan 1 04:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=78f48a74ce18130ee7adc56fe1b67dcf4d8946f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e1:db:76:4a:4f:04:6b:33:d0:0b:4e:d9:9e: 20:72:60:41:10:bf:b7:93:01:27:4f:70:f3:ef:76: 8e:99:9a:21:c5:70:8f:21:bf:08:e5:a7:e0:bd:53: 38:87:a4:fe:b7:a6:ed:75:07:38:10:af:2f:09:16: 54:fb:26:de:f3:a0:97:13:bc:48:b5:d3:aa:ed:c3: 6c:f9:4d:dc:a1:75:34:76:5d:e3:94:d7:73:63:17: 95:ca:62:13:3c:f4:7e:74:88:d7:8d:3f:8e:4a:f2: e3:d5:41:06:35:e9:7b:dc:0d:47:da:7f:61:87:d1: 7f:b6:7e:02:af:4a:40:a1:31:75:e6:34:be:51:03: 67:13:b9:b9:14:98:c9:d3:bf:18:28:65:e4:33:fa: 85:db:01:de:0b:4e:22:fe:96:65:7d:45:35:09:af: 5f:74:68:3f:7c:e6:f4:db:dc:89:c9:0e:3b:2f:9b: 59:60:c2:0c:81:4b:23:df:87:61:51:b8:e4:c0:79: 6b:2b:12:e2:be:59:35:26:68:fa:cd:3b:ce:ee:06: 02:1d:62:e1:95:92:d6:a3:40:47:65:71:a4:01:d5: 38:70:aa:19:a8:84:82:0e:8f:08:0c:dc:6a:a6:7c: 10:82:16:ca:0c:6d:3c:7b:c3:32:4a:95:40:71:7a: e8:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:F4:8A:74:CE:18:13:0E:E7:AD:C5:6F:E1:B6:7D:CF:4D:89:46:F4 X509v3 Authority Key Identifier: keyid:A3:19:0F:6E:FD:79:EA:73:33:F9:BC:CD:85:A0:43:52:D9:15:B2:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oxkPbv156nMz-bzNhaBDUtkVsjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/ePSKdM4YEw7nrcVv4bZ9z02JRvQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.169.115.0/24 IPv6: 2a01:8787::/32 Signature Algorithm: sha256WithRSAEncryption 1a:a8:30:a4:f7:24:43:09:6d:c5:44:bb:60:28:f8:9b:c6:1f: 23:c1:c2:ee:82:88:14:28:31:b3:84:d5:01:ae:1c:db:0d:f2: b9:92:95:bc:43:7c:af:03:47:ca:e8:0d:9a:a5:42:11:49:69: 8a:7d:7c:cb:d3:8f:7c:72:74:e4:1f:8b:7b:18:ef:0f:2b:43: d3:f0:4a:5d:89:57:6a:91:eb:c0:fc:fa:23:d6:c4:3c:4b:c4: 1d:5c:17:a3:d8:5d:d0:17:f4:9d:8d:00:4f:59:a5:19:33:3e: 71:95:ff:7c:4a:17:f3:63:87:09:72:4c:51:7a:56:1a:dd:ed: cc:f0:ce:ca:1a:5d:4e:64:8e:fd:32:40:44:fd:67:4e:fa:88: 9b:e1:c3:51:d8:7d:7f:04:07:14:95:cb:5d:d4:35:6a:4b:02: 64:61:e3:dc:34:a1:47:85:47:d9:9f:e0:fa:e2:99:89:83:5c: ef:2d:28:68:27:5f:31:b0:6b:95:d2:1a:ba:15:d1:88:e0:82: 53:77:58:fb:22:4b:a7:b4:49:36:44:d5:16:62:f2:c4:4b:d8: c6:6a:b9:3a:24:66:93:16:ab:a6:ec:54:b3:4b:22:73:0e:fb: 4a:df:c6:75:17:38:5e:2d:89:08:97:a1:78:e9:d2:2a:55:90: 5b:69:4d:99 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3xt4AM/BQIiulxpvNuhk8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzMTkwZjZlZmQ3OWVhNzMzM2Y5YmNjZDg1YTA0MzUyZDkx NWIyMzkwHhcNMjYwMTAxMDQxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OGY0OGE3NGNlMTgxMzBlZTdhZGM1NmZlMWI2N2RjZjRkODk0NmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuHbdkpPBGsz0AtO2Z4gcmBBEL+3 kwEnT3Dz73aOmZohxXCPIb8I5afgvVM4h6T+t6btdQc4EK8vCRZU+ybe86CXE7xI tdOq7cNs+U3coXU0dl3jlNdzYxeVymITPPR+dIjXjT+OSvLj1UEGNel73A1H2n9h h9F/tn4Cr0pAoTF15jS+UQNnE7m5FJjJ078YKGXkM/qF2wHeC04i/pZlfUU1Ca9f dGg/fOb029yJyQ47L5tZYMIMgUsj34dhUbjkwHlrKxLivlk1Jmj6zTvO7gYCHWLh lZLWo0BHZXGkAdU4cKoZqISCDo8IDNxqpnwQghbKDG08e8MySpVAcXrosQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFHj0inTOGBMO563Fb+G2fc9NiUb0MB8GA1UdIwQY MBaAFKMZD279eepzM/m8zYWgQ1LZFbI5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3hrUGJ2MTU2bk16LWJ6TmhhQkRVdGtWc2prLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9mNmNmZDctYTIyOC00NTkxLTllZjUt NWY0Yjg3YWRhNGI1LzEvZVBTS2RNNFlFdzducmNWdjRiWjl6MDJKUnZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My9mNmNmZDctYTIyOC00NTkxLTllZjUtNWY0Yjg3YWRhNGI1 LzEvb3hrUGJ2MTU2bk16LWJ6TmhhQkRVdGtWc2prLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAualzMA0E AgACMAcDBQAqAYeHMA0GCSqGSIb3DQEBCwUAA4IBAQAaqDCk9yRDCW3FRLtgKPib xh8jwcLugogUKDGzhNUBrhzbDfK5kpW8Q3yvA0fK6A2apUIRSWmKfXzL0498cnTk H4t7GO8PK0PT8EpdiVdqkevA/Poj1sQ8S8QdXBej2F3QF/SdjQBPWaUZMz5xlf98 ShfzY4cJckxRelYa3e3M8M7KGl1OZI79MkBE/WdO+oib4cNR2H1/BAcUlctd1DVq SwJkYePcNKFHhUfZn+D64pmJg1zvLShoJ18xsGuV0hq6FdGI4IJTd1j7IkuntEk2 RNUWYvLES9jGark6JGaTFqum7FSzSyJzDvtK38Z1FzheLYkIl6F46dIqVZBbaU2Z -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:32 2026 by rpki-client