This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/EKT0Q2_Fww_5bqKJ5tigq-uh6lM.roa File: EKT0Q2_Fww_5bqKJ5tigq-uh6lM.roa (raw, json) Hash identifier: EQv6uK3gDiLduy3cdtniJ2jHS0lIPbNjWuFHpfbEB+o= Subject key identifier: 10:A4:F4:43:6F:C5:C3:0F:F9:6E:A2:89:E6:D8:A0:AB:EB:A1:EA:53 Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a Certificate serial: 019B77C730B5D62B65F49D20F9EEA3F9F8B3 Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/EKT0Q2_Fww_5bqKJ5tigq-uh6lM.roa Signing time: Thu 01 Jan 2026 04:18:21 +0000 ROA not before: Thu 01 Jan 2026 04:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35645 IP address blocks: 193.232.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:30:b5:d6:2b:65:f4:9d:20:f9:ee:a3:f9:f8:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a Validity Not Before: Jan 1 04:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=10a4f4436fc5c30ff96ea289e6d8a0abeba1ea53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:22:82:17:94:0c:0f:5b:0f:5d:fe:55:f6:1d: 7d:06:9c:a8:37:e6:db:d7:65:7e:53:54:80:3e:67: 24:ce:01:a6:0e:31:5b:32:d8:29:b3:27:c0:83:f9: 0a:9a:ca:a3:bb:2a:45:7b:da:14:fc:5b:67:13:18: 61:ba:61:0e:86:f5:6b:c5:66:b9:c2:7e:45:e7:ac: 31:4a:f4:55:96:d2:14:ea:99:5f:1d:a8:d7:5e:53: 18:c6:79:ab:3b:35:39:54:9b:6b:bf:31:bb:68:d2: a3:70:c7:cd:9e:cc:d5:fa:3b:9d:d2:a1:98:aa:9a: 14:82:e3:3b:23:7a:05:39:49:33:4f:c8:71:97:99: b3:76:30:3a:22:2d:32:98:82:32:83:b8:b3:fc:35: bc:e6:b5:4c:b9:97:e2:53:97:c3:c8:96:a8:64:91: c2:9c:b7:1f:0f:30:c6:8e:a4:c2:35:76:21:9c:90: 87:a0:b2:57:a3:91:2c:1d:e7:c2:9d:59:7a:8b:6e: b8:95:3e:69:ce:00:e6:89:fd:3e:e4:93:29:cf:90: 01:13:2f:92:96:54:68:2e:1c:95:8e:27:75:69:ad: 91:70:ab:2b:eb:b5:9c:4d:6c:d7:cc:fe:d4:43:77: ba:f0:84:58:3f:03:38:1b:ce:da:3f:da:4f:ec:5c: 87:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:A4:F4:43:6F:C5:C3:0F:F9:6E:A2:89:E6:D8:A0:AB:EB:A1:EA:53 X509v3 Authority Key Identifier: keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/EKT0Q2_Fww_5bqKJ5tigq-uh6lM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.232.8.0/24 Signature Algorithm: sha256WithRSAEncryption 32:bc:7e:1d:99:3e:ae:c2:7a:67:44:64:5e:c1:6c:06:82:d9: 7f:60:56:86:ae:27:0c:d6:f0:dc:2e:d2:17:f8:4d:1d:de:6d: 57:c4:08:a6:a0:89:65:c7:1f:f7:48:89:c7:5d:cf:15:e1:77: 01:85:69:7d:66:3b:f4:1e:8b:8a:fc:07:fe:3c:76:84:9f:b0: 27:0c:36:02:d4:de:23:b3:89:1d:fc:52:d7:34:53:bf:3c:21: e1:aa:f4:e6:9b:b6:d3:d1:b9:0f:3d:85:bd:d5:db:de:41:8c: 85:dd:cc:74:92:a3:d4:09:76:87:32:e8:20:ae:75:68:8d:6c: 27:21:3f:ec:49:3b:0b:8f:3b:54:52:74:c5:3f:3e:2d:d5:16: a5:ab:b9:ef:9a:3f:88:d6:ad:65:01:fd:fb:50:c4:12:bf:15: c3:bf:ac:a3:3d:ea:c9:7d:8a:de:ae:dc:bb:ff:cd:12:f7:74: 86:97:a2:04:3d:28:34:9e:0f:5a:e1:42:70:09:07:ac:b5:cd: 64:f2:74:4f:7b:78:f4:c9:ca:35:68:c2:70:a5:67:79:7e:b4: f3:1f:86:65:ef:68:a1:0f:83:03:ef:17:14:8a:be:8c:fd:18: e4:0b:4e:9c:24:ac:90:38:4a:40:37:86:eb:10:5f:7f:0a:36: 94:95:e8:59 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xzC11itl9J0g+e6j+fizMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1M2EzYjVmNTE4MDgxNjhjMjEyYzA5NGEyYmFhZmYzOGUx NjQ2NGEwHhcNMjYwMTAxMDQxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMGE0ZjQ0MzZmYzVjMzBmZjk2ZWEyODllNmQ4YTBhYmViYTFlYTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiKCF5QMD1sPXf5V9h19BpyoN+bb 12V+U1SAPmckzgGmDjFbMtgpsyfAg/kKmsqjuypFe9oU/FtnExhhumEOhvVrxWa5 wn5F56wxSvRVltIU6plfHajXXlMYxnmrOzU5VJtrvzG7aNKjcMfNnszV+jud0qGY qpoUguM7I3oFOUkzT8hxl5mzdjA6Ii0ymIIyg7iz/DW85rVMuZfiU5fDyJaoZJHC nLcfDzDGjqTCNXYhnJCHoLJXo5EsHefCnVl6i264lT5pzgDmif0+5JMpz5ABEy+S llRoLhyVjid1aa2RcKsr67WcTWzXzP7UQ3e68IRYPwM4G87aP9pP7FyHfQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBCk9ENvxcMP+W6iiebYoKvroepTMB8GA1UdIwQY MBaAFCU6O19RgIFowhLAlKK6r/OOFkZKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQt OWU5YTFlMDM3MzhlLzEvRUtUMFEyX0Z3d181YnFLSjV0aWdxLXVoNmxNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQtOWU5YTFlMDM3Mzhl LzEvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwegIMA0G CSqGSIb3DQEBCwUAA4IBAQAyvH4dmT6uwnpnRGRewWwGgtl/YFaGricM1vDcLtIX +E0d3m1XxAimoIllxx/3SInHXc8V4XcBhWl9Zjv0HouK/Af+PHaEn7AnDDYC1N4j s4kd/FLXNFO/PCHhqvTmm7bT0bkPPYW91dveQYyF3cx0kqPUCXaHMuggrnVojWwn IT/sSTsLjztUUnTFPz4t1Ralq7nvmj+I1q1lAf37UMQSvxXDv6yjPerJfYrerty7 /80S93SGl6IEPSg0ng9a4UJwCQestc1k8nRPe3j0yco1aMJwpWd5frTzH4Zl72ih D4MD7xcUir6M/RjkC06cJKyQOEpAN4brEF9/CjaUlehZ -----END CERTIFICATE-----Generated at Sun Jan 25 21:16:11 2026 by rpki-client