This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/EApMV8-N-zmao3CAo-NQpD3Lz2A.roa File: EApMV8-N-zmao3CAo-NQpD3Lz2A.roa (raw, json) Hash identifier: aR54mqSnxFgOPc79I9yN0jBUTDGkCFj+YEV/eOtu4c4= Subject key identifier: 10:0A:4C:57:CF:8D:FB:39:9A:A3:70:80:A3:E3:50:A4:3D:CB:CF:60 Certificate issuer: /CN=8402924861cbc088c655a872535a903108a07bf1 Certificate serial: 019B797E8A586F7F9FC77913863ACEE27673 Authority key identifier: 84:02:92:48:61:CB:C0:88:C6:55:A8:72:53:5A:90:31:08:A0:7B:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hAKSSGHLwIjGVahyU1qQMQige_E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/EApMV8-N-zmao3CAo-NQpD3Lz2A.roa Signing time: Thu 01 Jan 2026 12:18:14 +0000 ROA not before: Thu 01 Jan 2026 12:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50673 IP address blocks: 185.233.66.0/24 maxlen: 24 217.65.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/hAKSSGHLwIjGVahyU1qQMQige_E.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/hAKSSGHLwIjGVahyU1qQMQige_E.mft rsync://rpki.ripe.net/repository/DEFAULT/hAKSSGHLwIjGVahyU1qQMQige_E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 06:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:8a:58:6f:7f:9f:c7:79:13:86:3a:ce:e2:76:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8402924861cbc088c655a872535a903108a07bf1 Validity Not Before: Jan 1 12:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=100a4c57cf8dfb399aa37080a3e350a43dcbcf60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:06:3a:de:26:4b:70:88:f5:69:b1:fd:e9:49: 30:2a:0b:ea:69:e3:a4:78:5f:f5:3b:b5:88:af:7f: 92:0b:5e:b3:f6:2f:83:48:0b:3d:5c:3e:90:02:f7: e2:94:0a:4f:c3:14:1f:8a:f8:05:8f:14:3e:33:56: 85:7d:a7:0e:e7:df:64:f7:ae:82:a1:85:7e:09:4d: fc:fd:b4:9f:5d:f0:19:80:ee:40:41:35:ca:6b:d3: 0a:4c:a7:d3:6c:5b:2c:12:00:14:f3:db:b8:02:51: f7:49:7e:f1:43:ef:fb:bc:5f:ba:01:c1:71:54:13: 6d:3a:df:42:0d:d2:df:78:b3:d4:23:ec:27:90:e8: 42:37:04:e9:dc:83:eb:a6:32:b0:fc:b5:01:21:ee: 65:d9:ea:9e:92:1a:ef:26:8e:c6:dd:f5:ce:63:72: 20:8b:bb:aa:9b:44:1b:73:ad:f4:0c:b5:47:86:f3: 94:74:ac:b2:99:2b:b7:b2:51:be:b8:ca:23:bb:79: 35:56:34:02:fb:a5:b1:6b:86:b4:cb:33:f3:29:99: 41:65:1d:b2:2a:2f:7a:d3:79:a7:3d:b9:4e:2e:2d: a8:d7:58:2b:de:ca:9b:0c:89:22:f0:8f:d9:53:c8: ba:32:01:9f:a1:a9:7a:bb:02:0c:02:9b:2a:53:92: 1e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:0A:4C:57:CF:8D:FB:39:9A:A3:70:80:A3:E3:50:A4:3D:CB:CF:60 X509v3 Authority Key Identifier: keyid:84:02:92:48:61:CB:C0:88:C6:55:A8:72:53:5A:90:31:08:A0:7B:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAKSSGHLwIjGVahyU1qQMQige_E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/EApMV8-N-zmao3CAo-NQpD3Lz2A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0924fa-54fb-4254-b64e-0ac9b3bae6f5/1/hAKSSGHLwIjGVahyU1qQMQige_E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.233.66.0/24 217.65.131.0/24 Signature Algorithm: sha256WithRSAEncryption 19:2e:0d:8e:db:d2:ab:b4:9e:72:11:cf:8d:4a:8e:0b:91:48: 60:80:1b:12:6a:4b:3e:d4:67:3c:fa:92:11:9e:43:e9:9f:3b: 52:a0:7d:9e:84:62:f0:af:f4:65:52:e2:25:3e:f3:df:c6:06: 58:9e:6b:9e:3f:5a:8a:08:46:be:cc:c6:9f:e0:e7:44:e9:1d: 1a:13:37:6d:7f:da:67:7f:bc:09:50:a9:5c:16:2c:19:f5:5d: 42:b4:4a:7a:10:d8:f8:b4:99:a3:55:ee:d0:63:42:8f:2b:e2: 91:b4:8f:a2:cf:54:2e:7a:6e:d9:b7:a9:87:8c:48:67:99:b5: ea:55:5e:dc:e8:b7:b4:c8:aa:8f:09:07:c5:58:d9:87:59:f2: 3a:a4:3d:1d:ba:4d:1f:81:92:9b:b8:d6:ae:18:c4:e6:b3:04: f1:0f:7d:7e:fb:f6:79:e1:e7:bf:44:fa:0f:f2:31:b6:12:69: 40:d9:35:80:34:fa:ba:32:b8:7d:77:56:e3:ae:0f:08:2e:dc: 2c:1e:db:8c:eb:1b:c6:eb:7c:8a:ef:b8:0a:05:47:ab:85:fe: 25:45:a1:85:d1:b9:63:73:e7:c7:36:09:ca:d4:45:ce:13:e7: b0:05:90:cd:08:95:04:77:6b:3a:3a:89:ec:2c:7a:b4:58:f3: ee:58:36:c4 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5fopYb3+fx3kThjrO4nZzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0MDI5MjQ4NjFjYmMwODhjNjU1YTg3MjUzNWE5MDMxMDhh MDdiZjEwHhcNMjYwMTAxMTIxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDBhNGM1N2NmOGRmYjM5OWFhMzcwODBhM2UzNTBhNDNkY2JjZjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQY63iZLcIj1abH96UkwKgvqaeOk eF/1O7WIr3+SC16z9i+DSAs9XD6QAvfilApPwxQfivgFjxQ+M1aFfacO599k966C oYV+CU38/bSfXfAZgO5AQTXKa9MKTKfTbFssEgAU89u4AlH3SX7xQ+/7vF+6AcFx VBNtOt9CDdLfeLPUI+wnkOhCNwTp3IPrpjKw/LUBIe5l2eqekhrvJo7G3fXOY3Ig i7uqm0Qbc630DLVHhvOUdKyymSu3slG+uMoju3k1VjQC+6Wxa4a0yzPzKZlBZR2y Ki9603mnPblOLi2o11gr3sqbDIki8I/ZU8i6MgGfoal6uwIMApsqU5IeRQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBAKTFfPjfs5mqNwgKPjUKQ9y89gMB8GA1UdIwQY MBaAFIQCkkhhy8CIxlWoclNakDEIoHvxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEFLU1NHSEx3SWpHVmFoeVUxcVFNUWlnZV9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8wOTI0ZmEtNTRmYi00MjU0LWI2NGUt MGFjOWIzYmFlNmY1LzEvRUFwTVY4LU4tem1hbzNDQW8tTlFwRDNMejJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi8wOTI0ZmEtNTRmYi00MjU0LWI2NGUtMGFjOWIzYmFlNmY1 LzEvaEFLU1NHSEx3SWpHVmFoeVUxcVFNUWlnZV9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuelCAwQA 2UGDMA0GCSqGSIb3DQEBCwUAA4IBAQAZLg2O29KrtJ5yEc+NSo4LkUhggBsSaks+ 1Gc8+pIRnkPpnztSoH2ehGLwr/RlUuIlPvPfxgZYnmueP1qKCEa+zMaf4OdE6R0a Ezdtf9pnf7wJUKlcFiwZ9V1CtEp6ENj4tJmjVe7QY0KPK+KRtI+iz1Quem7Zt6mH jEhnmbXqVV7c6Le0yKqPCQfFWNmHWfI6pD0duk0fgZKbuNauGMTmswTxD31++/Z5 4ee/RPoP8jG2EmlA2TWANPq6Mrh9d1bjrg8ILtwsHtuM6xvG63yK77gKBUerhf4l RaGF0bljc+fHNgnK1EXOE+ewBZDNCJUEd2s6OonsLHq0WPPuWDbE -----END CERTIFICATE-----Generated at Sun Jan 11 11:46:07 2026 by rpki-client