This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/EGrdVNRIdLcLP0jBB7VRLj9IVgM.roa File: EGrdVNRIdLcLP0jBB7VRLj9IVgM.roa (raw, json) Hash identifier: M1gISMhpKhFU9UmPCNCI/doZU1g2NiTQmw7wAJBLP/M= Subject key identifier: 10:6A:DD:54:D4:48:74:B7:0B:3F:48:C1:07:B5:51:2E:3F:48:56:03 Certificate issuer: /CN=78703e7a62309bf027c1f10536926a19b7f14b1e Certificate serial: 019B7A5B92196F6A1141E36A815A109B1119 Authority key identifier: 78:70:3E:7A:62:30:9B:F0:27:C1:F1:05:36:92:6A:19:B7:F1:4B:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHA-emIwm_AnwfEFNpJqGbfxSx4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/EGrdVNRIdLcLP0jBB7VRLj9IVgM.roa Signing time: Thu 01 Jan 2026 16:19:40 +0000 ROA not before: Thu 01 Jan 2026 16:19:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205112 IP address blocks: 185.117.214.0/24 maxlen: 24 2a06:8784::/32 maxlen: 32 2a06:8784:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/eHA-emIwm_AnwfEFNpJqGbfxSx4.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/eHA-emIwm_AnwfEFNpJqGbfxSx4.mft rsync://rpki.ripe.net/repository/DEFAULT/eHA-emIwm_AnwfEFNpJqGbfxSx4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:92:19:6f:6a:11:41:e3:6a:81:5a:10:9b:11:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78703e7a62309bf027c1f10536926a19b7f14b1e Validity Not Before: Jan 1 16:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=106add54d44874b70b3f48c107b5512e3f485603 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:39:a9:0c:56:87:62:b2:b4:69:23:73:a8:24: 86:5c:2b:db:da:23:e7:9d:13:c0:11:4b:bf:19:41: f6:da:a5:50:41:95:e6:08:c1:ef:3c:d8:61:c1:cd: f4:09:79:16:8f:9b:1b:85:44:ed:dc:a2:0d:e1:2b: 37:c9:41:e3:49:51:61:a4:1b:2e:8d:da:cf:d9:b7: 22:e3:4e:38:0d:d3:ad:ae:28:a8:5f:af:e0:0d:8e: 2d:e2:bc:ad:72:fb:65:84:a5:46:67:47:38:78:af: 64:26:13:c6:27:cb:46:68:7f:0f:d2:e2:5e:9a:c0: 0c:81:05:ef:38:e1:bd:df:bf:49:7c:63:1c:bf:6f: e7:0f:9c:4c:7c:cc:fb:2e:2b:20:b3:00:8a:72:de: 3d:31:68:ef:a4:58:3d:cb:7a:29:ce:54:47:c7:a1: 09:3b:57:c1:46:26:35:c9:fc:22:9a:d8:cf:99:3d: 5b:c2:16:23:59:de:55:f0:36:8d:89:4e:0c:ce:9b: 9c:31:ed:84:a1:43:ae:b3:a8:a3:83:be:ab:21:11: 27:97:2c:12:db:f6:ee:aa:6d:62:e6:66:37:97:42: e2:da:0b:9e:5d:a0:58:ce:b0:00:ce:3d:6a:e1:76: bf:31:5e:90:35:e4:cc:a7:a2:85:3a:85:63:fb:23: 46:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:6A:DD:54:D4:48:74:B7:0B:3F:48:C1:07:B5:51:2E:3F:48:56:03 X509v3 Authority Key Identifier: keyid:78:70:3E:7A:62:30:9B:F0:27:C1:F1:05:36:92:6A:19:B7:F1:4B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHA-emIwm_AnwfEFNpJqGbfxSx4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/EGrdVNRIdLcLP0jBB7VRLj9IVgM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/5fd4bf-74d9-4072-b557-084cca1c8623/1/eHA-emIwm_AnwfEFNpJqGbfxSx4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.117.214.0/24 IPv6: 2a06:8784::/32 Signature Algorithm: sha256WithRSAEncryption 70:3c:2f:57:dd:9a:34:39:b1:e7:39:6f:e9:0f:e7:43:7d:ce: 91:d8:23:99:db:e3:03:65:07:0f:a7:24:55:60:a2:44:87:60: f3:61:fe:3e:a7:c3:40:8e:6a:8a:f0:59:ad:27:0c:f3:e6:3c: db:5c:7a:13:45:0c:50:b0:11:c0:c3:70:f5:2c:44:91:94:65: f1:a7:78:c7:4d:52:b8:2c:af:b2:13:be:a2:29:45:30:fa:40: 5d:65:27:d5:3d:9b:41:fb:3c:a2:9c:f5:cf:38:57:45:4e:34: c5:06:ec:bd:04:43:65:18:eb:66:a7:e0:4b:18:53:84:cf:2e: 58:5e:44:e0:33:95:52:36:dd:6e:f6:61:4e:39:a5:c1:b3:15: 69:7d:3f:2c:8d:16:be:c5:19:b1:ca:72:96:09:24:43:fa:86: 98:98:09:06:7d:ae:ee:59:1d:7e:71:dd:7d:19:c2:bf:5b:f6: bb:32:90:55:a9:58:cb:79:df:f1:ce:fc:2c:13:ce:73:97:89: cc:9e:32:bc:f1:a1:93:41:a1:65:61:8e:f4:5e:3f:57:a2:9d: bf:7a:95:2b:fb:21:7d:97:b8:2b:4d:20:b4:5e:6b:16:2d:98: 75:ab:4f:f2:53:a7:a3:de:58:4c:30:03:b9:0f:15:b3:23:93: 49:ab:8d:76 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6W5IZb2oRQeNqgVoQmxEZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4NzAzZTdhNjIzMDliZjAyN2MxZjEwNTM2OTI2YTE5Yjdm MTRiMWUwHhcNMjYwMTAxMTYxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDZhZGQ1NGQ0NDg3NGI3MGIzZjQ4YzEwN2I1NTEyZTNmNDg1NjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzmpDFaHYrK0aSNzqCSGXCvb2iPn nRPAEUu/GUH22qVQQZXmCMHvPNhhwc30CXkWj5sbhUTt3KIN4Ss3yUHjSVFhpBsu jdrP2bci4044DdOtriioX6/gDY4t4rytcvtlhKVGZ0c4eK9kJhPGJ8tGaH8P0uJe msAMgQXvOOG9379JfGMcv2/nD5xMfMz7LisgswCKct49MWjvpFg9y3opzlRHx6EJ O1fBRiY1yfwimtjPmT1bwhYjWd5V8DaNiU4MzpucMe2EoUOus6ijg76rIREnlywS 2/buqm1i5mY3l0Li2gueXaBYzrAAzj1q4Xa/MV6QNeTMp6KFOoVj+yNGaQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBBq3VTUSHS3Cz9IwQe1US4/SFYDMB8GA1UdIwQY MBaAFHhwPnpiMJvwJ8HxBTaSahm38UseMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUhBLWVtSXdtX0Fud2ZFRk5wSnFHYmZ4U3g0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy81ZmQ0YmYtNzRkOS00MDcyLWI1NTct MDg0Y2NhMWM4NjIzLzEvRUdyZFZOUklkTGNMUDBqQkI3VlJMajlJVmdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy81ZmQ0YmYtNzRkOS00MDcyLWI1NTctMDg0Y2NhMWM4NjIz LzEvZUhBLWVtSXdtX0Fud2ZFRk5wSnFHYmZ4U3g0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuXXWMA0E AgACMAcDBQAqBoeEMA0GCSqGSIb3DQEBCwUAA4IBAQBwPC9X3Zo0ObHnOW/pD+dD fc6R2COZ2+MDZQcPpyRVYKJEh2DzYf4+p8NAjmqK8FmtJwzz5jzbXHoTRQxQsBHA w3D1LESRlGXxp3jHTVK4LK+yE76iKUUw+kBdZSfVPZtB+zyinPXPOFdFTjTFBuy9 BENlGOtmp+BLGFOEzy5YXkTgM5VSNt1u9mFOOaXBsxVpfT8sjRa+xRmxynKWCSRD +oaYmAkGfa7uWR1+cd19GcK/W/a7MpBVqVjLed/xzvwsE85zl4nMnjK88aGTQaFl YY70Xj9Xop2/epUr+yF9l7grTSC0XmsWLZh1q0/yU6ej3lhMMAO5DxWzI5NJq412 -----END CERTIFICATE-----Generated at Mon Jan 26 19:19:16 2026 by rpki-client