This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/EYEi3UyV4PPxbsXZPvHf3qct6b0.roa File: EYEi3UyV4PPxbsXZPvHf3qct6b0.roa (raw, json) Hash identifier: J8PkbU826kQSW013HrTZ3nJm8J4WQxOLN5tFHZuHLNw= Subject key identifier: 11:81:22:DD:4C:95:E0:F3:F1:6E:C5:D9:3E:F1:DF:DE:A7:2D:E9:BD Certificate issuer: /CN=25bbed0bff7ffeab67f302b411a00701854a6c30 Certificate serial: 019B7D5C9C5E2D6A177511B2C80EB4BE095E Authority key identifier: 25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/EYEi3UyV4PPxbsXZPvHf3qct6b0.roa Signing time: Fri 02 Jan 2026 06:19:39 +0000 ROA not before: Fri 02 Jan 2026 06:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61317 IP address blocks: 185.189.244.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 06:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:9c:5e:2d:6a:17:75:11:b2:c8:0e:b4:be:09:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25bbed0bff7ffeab67f302b411a00701854a6c30 Validity Not Before: Jan 2 06:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=118122dd4c95e0f3f16ec5d93ef1dfdea72de9bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:2e:e4:92:d6:c7:7e:d8:08:4d:38:46:3c:ce: 8c:77:2c:a7:00:4f:d3:45:2d:2d:fe:87:66:12:9e: 59:be:2b:8a:9d:87:9c:98:eb:79:61:d8:9f:fa:63: c6:12:af:d2:9a:a8:da:9e:bb:b5:47:c0:2c:64:22: 50:c0:4f:45:05:79:60:fc:d3:41:ac:5b:6e:66:8a: 22:a0:48:b0:0b:43:21:d6:01:4f:e1:24:3f:d8:8e: e5:b8:40:3b:d4:19:d0:54:43:e6:7a:4f:fb:f0:25: 10:f1:c8:db:cc:e9:29:41:d4:b3:e4:05:0e:af:63: 82:21:30:31:2f:24:d8:96:11:1d:18:92:b5:af:f5: 73:1a:f4:0a:0c:49:90:7e:38:e4:5c:df:45:d0:61: 33:05:b4:19:9b:4c:c9:c8:21:3b:93:80:90:4b:43: 2c:28:03:a3:7a:4e:a2:56:8b:7e:07:f8:36:a1:fe: fa:89:64:33:76:e9:c1:ff:92:ad:c2:a5:bc:4e:92: 66:74:aa:d8:7f:e5:42:c7:06:a8:76:2d:26:48:9a: 57:f2:b2:d4:5e:60:37:ce:47:2a:5b:88:f9:4a:10: 58:49:86:d7:57:7d:a8:11:6f:db:9e:f7:18:ff:e1: 5b:be:2d:8f:ca:33:20:e6:15:a2:c1:a5:9a:08:94: 3a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:81:22:DD:4C:95:E0:F3:F1:6E:C5:D9:3E:F1:DF:DE:A7:2D:E9:BD X509v3 Authority Key Identifier: keyid:25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/EYEi3UyV4PPxbsXZPvHf3qct6b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.189.244.0/23 Signature Algorithm: sha256WithRSAEncryption 86:98:fc:a5:a8:d6:22:83:94:c8:39:e4:2f:76:02:62:3b:4f: c2:b1:6f:0f:69:b5:9c:a0:29:bf:fa:1d:68:66:82:33:82:40: b3:0d:86:cc:24:75:a1:14:1d:ef:10:78:03:22:c6:c7:5d:d3: d1:93:dd:9f:fe:f9:f9:41:06:12:7b:7e:43:09:78:bc:e6:71: 12:48:5b:3e:d9:94:a4:4a:ea:f4:a9:9f:cb:da:06:44:4b:91: 8a:04:ca:88:09:8d:91:a2:f3:31:d1:83:84:b4:9f:36:b6:21: 5f:a8:6c:67:91:aa:54:a0:1c:56:dd:0b:ac:04:26:72:c4:c8: 04:1e:ed:8f:4c:8b:52:6c:43:4f:81:b4:76:5b:f3:81:46:ad: ff:d4:62:11:3b:ec:77:08:27:ce:fd:fb:b0:c5:dc:87:35:80: 63:ce:43:69:5f:75:fd:95:3c:af:7e:a5:a7:4a:89:4a:70:ab: d5:3b:6f:1b:5f:ce:b2:63:1f:ea:8e:11:6d:fe:ac:0e:f1:5a: 09:20:98:78:5e:78:99:0d:86:d5:ca:9b:72:b3:88:e8:d6:76: 2f:cf:89:63:43:ba:40:47:b1:32:c6:15:51:90:ea:e8:fb:ce: c5:dc:0d:f4:b8:b0:47:50:c9:cf:41:85:68:16:f6:7d:0a:07: 45:57:ad:cf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XJxeLWoXdRGyyA60vgleMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1YmJlZDBiZmY3ZmZlYWI2N2YzMDJiNDExYTAwNzAxODU0 YTZjMzAwHhcNMjYwMTAyMDYxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMTgxMjJkZDRjOTVlMGYzZjE2ZWM1ZDkzZWYxZGZkZWE3MmRlOWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4S7kktbHftgITThGPM6MdyynAE/T RS0t/odmEp5ZviuKnYecmOt5Ydif+mPGEq/Smqjanru1R8AsZCJQwE9FBXlg/NNB rFtuZooioEiwC0Mh1gFP4SQ/2I7luEA71BnQVEPmek/78CUQ8cjbzOkpQdSz5AUO r2OCITAxLyTYlhEdGJK1r/VzGvQKDEmQfjjkXN9F0GEzBbQZm0zJyCE7k4CQS0Ms KAOjek6iVot+B/g2of76iWQzdunB/5KtwqW8TpJmdKrYf+VCxwaodi0mSJpX8rLU XmA3zkcqW4j5ShBYSYbXV32oEW/bnvcY/+Fbvi2PyjMg5hWiwaWaCJQ6lwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBGBIt1MleDz8W7F2T7x396nLem9MB8GA1UdIwQY MBaAFCW77Qv/f/6rZ/MCtBGgBwGFSmwwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmJ2dENfOV9fcXRuOHdLMEVhQUhBWVZLYkRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8zYjlhZmYtZjAwZC00MTg3LWFmOTQt NTcxN2I0NTQ0MjM3LzEvRVlFaTNVeVY0UFB4YnNYWlB2SGYzcWN0NmIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8zYjlhZmYtZjAwZC00MTg3LWFmOTQtNTcxN2I0NTQ0MjM3 LzEvSmJ2dENfOV9fcXRuOHdLMEVhQUhBWVZLYkRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBub30MA0G CSqGSIb3DQEBCwUAA4IBAQCGmPylqNYig5TIOeQvdgJiO0/CsW8PabWcoCm/+h1o ZoIzgkCzDYbMJHWhFB3vEHgDIsbHXdPRk92f/vn5QQYSe35DCXi85nESSFs+2ZSk Sur0qZ/L2gZES5GKBMqICY2RovMx0YOEtJ82tiFfqGxnkapUoBxW3QusBCZyxMgE Hu2PTItSbENPgbR2W/OBRq3/1GIRO+x3CCfO/fuwxdyHNYBjzkNpX3X9lTyvfqWn SolKcKvVO28bX86yYx/qjhFt/qwO8VoJIJh4XniZDYbVyptys4jo1nYvz4ljQ7pA R7EyxhVRkOro+87F3A30uLBHUMnPQYVoFvZ9CgdFV63P -----END CERTIFICATE-----Generated at Thu Jan 8 12:56:57 2026 by rpki-client