This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/Et_E8L3JnyGGi7EORm0tAklWkLY.roa File: Et_E8L3JnyGGi7EORm0tAklWkLY.roa (raw, json) Hash identifier: SpPpnnc6LbJxToXLzGDYpTEBRnHYaBTsGIvm0GxadyE= Subject key identifier: 12:DF:C4:F0:BD:C9:9F:21:86:8B:B1:0E:46:6D:2D:02:49:56:90:B6 Certificate issuer: /CN=b60d6ca95e2770f55340d909ec7c97eeca3fe20e Certificate serial: 019B7C7FC4D42204465CEDFA963FEC392B53 Authority key identifier: B6:0D:6C:A9:5E:27:70:F5:53:40:D9:09:EC:7C:97:EE:CA:3F:E2:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tg1sqV4ncPVTQNkJ7HyX7so_4g4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/Et_E8L3JnyGGi7EORm0tAklWkLY.roa Signing time: Fri 02 Jan 2026 02:18:26 +0000 ROA not before: Fri 02 Jan 2026 02:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31531 IP address blocks: 185.248.128.0/23 maxlen: 24 194.31.168.0/24 maxlen: 24 194.31.169.0/24 maxlen: 24 194.31.170.0/24 maxlen: 24 2a0d:e580::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.mft rsync://rpki.ripe.net/repository/DEFAULT/tg1sqV4ncPVTQNkJ7HyX7so_4g4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:c4:d4:22:04:46:5c:ed:fa:96:3f:ec:39:2b:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b60d6ca95e2770f55340d909ec7c97eeca3fe20e Validity Not Before: Jan 2 02:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=12dfc4f0bdc99f21868bb10e466d2d02495690b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ff:d2:25:93:e6:2a:27:c8:bb:2a:c3:ab:70: af:31:2b:ed:2c:ee:b5:cb:3d:b9:93:33:72:c5:51: d6:ca:7f:24:e8:68:65:3c:a1:b9:bb:9f:17:7d:e1: 8a:9b:37:62:0d:f8:c2:d9:d2:83:07:95:01:51:3b: c5:8d:be:4c:75:ea:1c:f3:4b:a7:36:e6:ab:44:ac: a4:0e:dc:59:8b:e6:5d:75:1c:5d:ec:2b:eb:e2:85: 33:7e:3d:d0:20:95:45:e1:34:ba:32:88:3a:12:4b: 5f:be:7d:85:bc:98:12:1d:1e:55:15:f1:de:bc:65: 45:f0:69:33:bb:e0:55:d6:66:ae:d0:6a:41:14:69: 14:18:f6:d1:02:d7:b1:64:ae:cf:fd:6f:44:5e:6d: 65:26:16:67:9c:91:7f:34:8e:b0:35:2c:b2:d2:58: fd:e9:9e:c9:f6:ff:df:c7:43:51:a6:cf:7c:5d:80: 47:f5:bd:6d:61:57:bf:24:a0:85:ba:9a:31:20:87: 67:03:c3:8d:22:9b:a0:f0:bd:6a:e6:50:6c:24:4c: ae:f1:bc:b7:98:b7:d3:c3:1a:a7:36:ee:35:c5:ed: c4:2a:83:11:19:a5:52:c3:ba:50:de:49:c6:08:71: 62:ab:04:e9:26:3e:23:70:d3:18:05:d3:bf:17:4e: d1:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:DF:C4:F0:BD:C9:9F:21:86:8B:B1:0E:46:6D:2D:02:49:56:90:B6 X509v3 Authority Key Identifier: keyid:B6:0D:6C:A9:5E:27:70:F5:53:40:D9:09:EC:7C:97:EE:CA:3F:E2:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tg1sqV4ncPVTQNkJ7HyX7so_4g4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/Et_E8L3JnyGGi7EORm0tAklWkLY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.248.128.0/23 194.31.168.0-194.31.170.255 IPv6: 2a0d:e580::/29 Signature Algorithm: sha256WithRSAEncryption 8f:63:e1:ab:a0:95:75:78:a2:e6:4a:92:bb:37:f4:c0:68:74: 40:fa:4f:18:db:bd:c7:65:a8:59:18:70:7b:54:c6:6b:ab:7f: 31:4b:e9:98:f8:ae:6e:2a:ba:db:30:6d:d1:b9:aa:d1:1e:dd: ce:06:77:fb:db:8e:fc:19:06:62:9d:e2:c8:da:02:8c:75:c7: b8:d3:b0:28:8e:2e:3f:43:44:4c:e1:b1:80:ae:f7:f4:d6:1b: eb:7a:45:14:51:86:fb:fe:0d:db:8e:c3:8f:8f:f8:3e:d5:2d: 8a:53:5f:95:2a:78:3f:6a:e3:b5:cf:b3:61:c4:fc:fc:f9:99: 84:e0:2c:99:e5:7d:23:ca:3e:2e:66:c9:aa:5b:9a:54:6d:69: d3:6a:b2:46:ee:84:fb:0c:ed:ea:fd:b5:c4:21:ca:5e:59:c0: 34:97:96:e8:e9:57:0b:35:77:af:fb:0d:12:fb:3c:0f:b9:f7: fd:e7:d2:23:32:87:37:97:66:b2:db:a1:35:53:03:7c:77:94: 89:86:19:8f:c2:22:28:eb:2f:da:ef:45:3f:83:09:69:ad:d4: 8c:92:7b:9d:c5:81:8e:fd:68:fb:bb:35:e8:92:79:d4:c4:bb: 57:1c:09:41:24:9a:bb:bd:32:ab:a1:6b:80:76:02:52:69:15: 82:06:48:1f -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt8f8TUIgRGXO36lj/sOStTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MGQ2Y2E5NWUyNzcwZjU1MzQwZDkwOWVjN2M5N2VlY2Ez ZmUyMGUwHhcNMjYwMTAyMDIxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMmRmYzRmMGJkYzk5ZjIxODY4YmIxMGU0NjZkMmQwMjQ5NTY5MGI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzP/SJZPmKifIuyrDq3CvMSvtLO61 yz25kzNyxVHWyn8k6GhlPKG5u58XfeGKmzdiDfjC2dKDB5UBUTvFjb5Mdeoc80un NuarRKykDtxZi+ZddRxd7Cvr4oUzfj3QIJVF4TS6Mog6Ektfvn2FvJgSHR5VFfHe vGVF8Gkzu+BV1mau0GpBFGkUGPbRAtexZK7P/W9EXm1lJhZnnJF/NI6wNSyy0lj9 6Z7J9v/fx0NRps98XYBH9b1tYVe/JKCFupoxIIdnA8ONIpug8L1q5lBsJEyu8by3 mLfTwxqnNu41xe3EKoMRGaVSw7pQ3knGCHFiqwTpJj4jcNMYBdO/F07RWwIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFBLfxPC9yZ8hhouxDkZtLQJJVpC2MB8GA1UdIwQY MBaAFLYNbKleJ3D1U0DZCex8l+7KP+IOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGcxc3FWNG5jUFZUUU5rSjdIeVg3c29fNGc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8wMzNlOGItYmRlMS00ZjkwLWJhZjUt MjM4NDdhNDBkOWU0LzEvRXRfRThMM0pueUdHaTdFT1JtMHRBa2xXa0xZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8wMzNlOGItYmRlMS00ZjkwLWJhZjUtMjM4NDdhNDBkOWU0 LzEvdGcxc3FWNG5jUFZUUU5rSjdIeVg3c29fNGc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUAwQBufiAMAwD BAPCH6gDBADCH6owDQQCAAIwBwMFAyoN5YAwDQYJKoZIhvcNAQELBQADggEBAI9j 4auglXV4ouZKkrs39MBodED6TxjbvcdlqFkYcHtUxmurfzFL6Zj4rm4qutswbdG5 qtEe3c4Gd/vbjvwZBmKd4sjaAox1x7jTsCiOLj9DREzhsYCu9/TWG+t6RRRRhvv+ DduOw4+P+D7VLYpTX5UqeD9q47XPs2HE/Pz5mYTgLJnlfSPKPi5myapbmlRtadNq skbuhPsM7er9tcQhyl5ZwDSXlujpVws1d6/7DRL7PA+59/3n0iMyhzeXZrLboTVT A3x3lImGGY/CIijrL9rvRT+DCWmt1IySe53FgY79aPu7NeiSedTEu1ccCUEkmru9 Mquha4B2AlJpFYIGSB8= -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:54 2026 by rpki-client