This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/ED9fPzOepDgkuJo-elslIFPUuoE.roa File: ED9fPzOepDgkuJo-elslIFPUuoE.roa (raw, json) Hash identifier: 6gPQSH/gpSv5/wqic1Y/TmKzEmUsxiYhBSwpI3RrMfE= Subject key identifier: 10:3F:5F:3F:33:9E:A4:38:24:B8:9A:3E:7A:5B:25:20:53:D4:BA:81 Certificate issuer: /CN=cbffc771f2ed58fc2821ee74cda853fd2e36c428 Certificate serial: 019B7C7FDAAAEEAECB5248CDFE555CD2BDE4 Authority key identifier: CB:FF:C7:71:F2:ED:58:FC:28:21:EE:74:CD:A8:53:FD:2E:36:C4:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y__HcfLtWPwoIe50zahT_S42xCg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/ED9fPzOepDgkuJo-elslIFPUuoE.roa Signing time: Fri 02 Jan 2026 02:18:32 +0000 ROA not before: Fri 02 Jan 2026 02:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198949 IP address blocks: 185.49.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.crl rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft rsync://rpki.ripe.net/repository/DEFAULT/y__HcfLtWPwoIe50zahT_S42xCg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:da:aa:ee:ae:cb:52:48:cd:fe:55:5c:d2:bd:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbffc771f2ed58fc2821ee74cda853fd2e36c428 Validity Not Before: Jan 2 02:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=103f5f3f339ea43824b89a3e7a5b252053d4ba81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7c:10:95:fe:a1:04:07:b4:71:ec:a4:07:44: 8d:f1:5a:17:cc:09:21:45:43:34:30:a7:8d:42:c7: 33:ef:2c:49:f7:17:b9:63:18:f3:d6:b6:a9:d7:6c: e5:62:f2:27:a4:41:c1:1d:17:4d:12:28:7e:a4:4e: 4d:92:d5:4f:22:08:cb:d4:55:a5:85:9d:3d:15:84: 20:3d:c1:04:82:c0:86:d9:82:ac:60:6f:bb:78:2b: 81:ee:9c:71:71:f9:be:6b:e2:78:c7:20:a4:a2:11: 46:95:b1:36:47:d1:12:c5:46:0b:4d:31:62:5d:71: c0:a8:42:81:e8:28:10:cd:42:75:56:e0:fd:44:db: 31:44:37:78:45:4d:1b:13:10:0d:82:68:27:47:50: 5e:bd:0f:26:84:c8:ba:5e:8f:5e:81:d5:58:b2:1f: 8f:b8:51:2c:44:b0:b5:98:69:79:57:6c:64:18:15: 3f:2b:c3:90:98:83:c6:9c:df:1a:d1:86:7c:66:aa: 3c:81:b4:9b:72:a3:e8:65:4b:c9:4c:20:4a:ae:54: 5d:ef:93:91:44:2d:29:50:91:8f:38:77:60:e9:98: 9d:05:86:6b:c5:fc:42:b4:f5:73:80:9f:ac:55:b5: 6b:88:1a:4c:95:71:ad:64:45:22:89:7c:a9:e9:db: 0d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:3F:5F:3F:33:9E:A4:38:24:B8:9A:3E:7A:5B:25:20:53:D4:BA:81 X509v3 Authority Key Identifier: keyid:CB:FF:C7:71:F2:ED:58:FC:28:21:EE:74:CD:A8:53:FD:2E:36:C4:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y__HcfLtWPwoIe50zahT_S42xCg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/ED9fPzOepDgkuJo-elslIFPUuoE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.49.16.0/22 Signature Algorithm: sha256WithRSAEncryption 20:08:d8:cb:b4:38:ae:78:e2:18:97:63:ce:29:cd:ba:5d:4a: 3d:2a:2f:80:b6:51:eb:82:81:15:9a:7f:f4:a1:fe:f3:a2:27: cd:0b:1d:d2:1a:bb:f8:a9:e9:bd:80:06:9f:f4:43:3e:79:a9: 29:d8:67:b6:6c:2d:13:8d:d6:51:71:b2:78:cd:6d:2b:26:87: b2:b1:37:18:66:fc:71:f5:5e:b0:4f:26:18:04:77:1f:76:f2: 10:1c:e1:ca:a3:ce:78:38:7c:2b:b9:bd:6d:7d:fc:2d:95:f1: d0:d9:d2:94:e7:a5:9e:e7:11:da:96:5e:6f:e3:05:58:11:13: 5b:c5:ca:16:d1:24:73:f7:85:6b:61:4c:01:da:28:2a:b3:d6: ea:a3:5e:68:f8:b3:c3:9e:9e:79:16:96:ce:cc:33:22:77:55: f3:d4:93:4c:5f:26:3f:56:21:63:b9:0a:3c:0d:de:cc:43:10: 62:6d:09:59:45:cc:07:e0:88:be:49:98:fc:bb:21:c3:1f:f9: 43:fe:f9:1e:1d:04:b4:cc:92:21:59:f0:81:8a:16:ef:d2:1d: 81:cd:6e:b2:df:a5:32:9c:be:c0:2d:a7:c1:8d:88:69:94:bf: 20:9f:ea:12:d5:e7:a3:49:2e:01:54:af:2a:1f:81:b4:8a:0b: 17:67:15:11 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f9qq7q7LUkjN/lVc0r3kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZmZjNzcxZjJlZDU4ZmMyODIxZWU3NGNkYTg1M2ZkMmUz NmM0MjgwHhcNMjYwMTAyMDIxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDNmNWYzZjMzOWVhNDM4MjRiODlhM2U3YTViMjUyMDUzZDRiYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnwQlf6hBAe0ceykB0SN8VoXzAkh RUM0MKeNQscz7yxJ9xe5Yxjz1rap12zlYvInpEHBHRdNEih+pE5NktVPIgjL1FWl hZ09FYQgPcEEgsCG2YKsYG+7eCuB7pxxcfm+a+J4xyCkohFGlbE2R9ESxUYLTTFi XXHAqEKB6CgQzUJ1VuD9RNsxRDd4RU0bExANgmgnR1BevQ8mhMi6Xo9egdVYsh+P uFEsRLC1mGl5V2xkGBU/K8OQmIPGnN8a0YZ8Zqo8gbSbcqPoZUvJTCBKrlRd75OR RC0pUJGPOHdg6ZidBYZrxfxCtPVzgJ+sVbVriBpMlXGtZEUiiXyp6dsNdwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBA/Xz8znqQ4JLiaPnpbJSBT1LqBMB8GA1UdIwQY MBaAFMv/x3Hy7Vj8KCHudM2oU/0uNsQoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveV9fSGNmTHRXUHdvSWU1MHphaFRfUzQyeENnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9lNTJlMTQtN2FhZC00M2U0LTg4YzQt N2E0MDU0NTUxZmQ0LzEvRUQ5ZlB6T2VwRGdrdUpvLWVsc2xJRlBVdW9FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS9lNTJlMTQtN2FhZC00M2U0LTg4YzQtN2E0MDU0NTUxZmQ0 LzEveV9fSGNmTHRXUHdvSWU1MHphaFRfUzQyeENnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuTEQMA0G CSqGSIb3DQEBCwUAA4IBAQAgCNjLtDiueOIYl2POKc26XUo9Ki+AtlHrgoEVmn/0 of7zoifNCx3SGrv4qem9gAaf9EM+eakp2Ge2bC0TjdZRcbJ4zW0rJoeysTcYZvxx 9V6wTyYYBHcfdvIQHOHKo854OHwrub1tffwtlfHQ2dKU56We5xHall5v4wVYERNb xcoW0SRz94VrYUwB2igqs9bqo15o+LPDnp55FpbOzDMid1Xz1JNMXyY/ViFjuQo8 Dd7MQxBibQlZRcwH4Ii+SZj8uyHDH/lD/vkeHQS0zJIhWfCBihbv0h2BzW6y36Uy nL7ALafBjYhplL8gn+oS1eejSS4BVK8qH4G0igsXZxUR -----END CERTIFICATE-----Generated at Wed Jan 7 22:29:27 2026 by rpki-client