This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/Ejhr2SjU79WexoLM933hU-lAuY4.roa File: Ejhr2SjU79WexoLM933hU-lAuY4.roa (raw, json) Hash identifier: sbdmAESMfnDvo8YrN5dMxTuEo2EnQnZWK09ir3Dff9I= Subject key identifier: 12:38:6B:D9:28:D4:EF:D5:9E:C6:82:CC:F7:7D:E1:53:E9:40:B9:8E Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75 Certificate serial: 019B7E38D265CFE26167F0862653162B1BED Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/Ejhr2SjU79WexoLM933hU-lAuY4.roa Signing time: Fri 02 Jan 2026 10:20:11 +0000 ROA not before: Fri 02 Jan 2026 10:20:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 217.119.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 08:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:d2:65:cf:e2:61:67:f0:86:26:53:16:2b:1b:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75 Validity Not Before: Jan 2 10:20:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=12386bd928d4efd59ec682ccf77de153e940b98e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:19:f9:5c:b4:90:b8:e0:8f:3d:fa:a6:a9:b9: c7:f1:84:72:83:ed:32:60:b4:fa:75:67:09:ce:d7: 39:b7:10:e3:66:f4:96:8c:6e:11:35:1e:cb:f2:66: 67:40:5c:86:ad:c6:ad:af:78:39:c5:4c:de:4e:42: 59:5b:55:ba:e8:12:4e:bd:be:02:f2:80:1f:0f:c2: e5:86:22:a6:01:4e:f7:04:0d:d8:56:bd:37:bc:51: 59:ef:db:a5:f0:11:0d:22:84:52:2d:17:dd:ef:cd: d8:53:18:c0:3b:06:a2:e8:e0:d5:d3:9a:03:35:d3: 3f:c4:7e:29:93:14:1a:44:93:43:4a:79:d9:80:cf: 1b:6d:9e:8d:3f:e2:96:7c:d9:b0:11:0d:71:64:fc: d8:1a:8e:fc:08:b3:60:90:1f:b9:e2:96:54:f6:45: 28:84:c2:33:d6:06:05:7c:99:77:a4:41:21:67:bf: 9d:4d:55:db:ff:9c:93:1f:80:f5:78:2d:d9:a0:06: 5d:8c:f3:a8:e0:09:66:8b:00:86:db:a2:3f:81:26: 7e:8a:c2:a1:52:c7:ea:a5:d8:e5:a2:24:f6:4f:11: 92:32:c7:99:ed:7b:a8:3e:06:22:a8:58:b5:ba:9b: 43:68:c1:c7:cc:df:c1:ff:c0:db:b4:07:ce:35:25: fb:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:38:6B:D9:28:D4:EF:D5:9E:C6:82:CC:F7:7D:E1:53:E9:40:B9:8E X509v3 Authority Key Identifier: keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/Ejhr2SjU79WexoLM933hU-lAuY4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.119.143.0/24 Signature Algorithm: sha256WithRSAEncryption 31:42:ca:78:42:7c:13:64:ed:c5:e9:cc:05:0d:8d:72:4f:fc: ca:84:97:93:f5:69:ac:73:f9:ae:6d:5a:3b:76:b5:b5:f0:84: 19:2d:c2:06:99:9a:e2:cb:30:68:67:04:f6:25:64:30:11:4a: f0:ab:72:a2:a7:e7:05:4b:18:a7:4e:05:11:a3:17:50:ba:81: a6:cc:10:8b:b3:31:fe:4d:d8:47:94:10:18:74:bc:c1:5d:c9: ee:6f:6c:98:ad:ad:3c:97:de:66:60:33:7f:9a:a5:99:27:f5: 15:75:ec:70:48:73:39:1e:f8:03:e7:25:f1:d6:3b:2d:04:08: 9e:8e:90:5c:c0:71:ff:5f:7a:49:15:bd:c1:79:f5:77:05:b0: ee:3d:d8:9a:e2:c1:a6:d8:8d:f9:9a:14:3d:f3:cd:73:35:fb: 0b:c0:6d:8c:6a:23:b0:a7:9d:56:60:93:c6:4b:ee:6e:ae:dc: 4d:b8:47:bf:a9:14:47:33:7c:b3:ca:04:a4:54:6e:27:3c:51: c5:c3:34:14:7b:96:c6:e6:37:f6:99:a8:ed:1b:8e:b7:2b:1b: 9a:2f:ee:9f:23:9c:05:3b:e5:1d:2b:f4:e2:40:6f:3f:b6:09: 22:ca:40:5c:ec:f5:9b:90:ee:d8:3b:94:78:8c:53:57:58:e1: fa:7f:b7:36 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ONJlz+JhZ/CGJlMWKxvtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3YjUwNDJmYzIwZDliYWIxNjc2ZTA5YWY3ZmYxYmE1YmZh ZGFlNzUwHhcNMjYwMTAyMTAyMDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjM4NmJkOTI4ZDRlZmQ1OWVjNjgyY2NmNzdkZTE1M2U5NDBiOThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBn5XLSQuOCPPfqmqbnH8YRyg+0y YLT6dWcJztc5txDjZvSWjG4RNR7L8mZnQFyGrcatr3g5xUzeTkJZW1W66BJOvb4C 8oAfD8LlhiKmAU73BA3YVr03vFFZ79ul8BENIoRSLRfd783YUxjAOwai6ODV05oD NdM/xH4pkxQaRJNDSnnZgM8bbZ6NP+KWfNmwEQ1xZPzYGo78CLNgkB+54pZU9kUo hMIz1gYFfJl3pEEhZ7+dTVXb/5yTH4D1eC3ZoAZdjPOo4AlmiwCG26I/gSZ+isKh UsfqpdjloiT2TxGSMseZ7XuoPgYiqFi1uptDaMHHzN/B/8DbtAfONSX7GQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBI4a9ko1O/VnsaCzPd94VPpQLmOMB8GA1UdIwQY MBaAFBe1BC/CDZurFnbgmvf/G6W/ra51MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS82NWU1NDMtN2U3YS00YWFiLWFjNzQt YmM2Nzk0ZTk1ZTVhLzEvRWpocjJTalU3OVdleG9MTTkzM2hVLWxBdVk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS82NWU1NDMtN2U3YS00YWFiLWFjNzQtYmM2Nzk0ZTk1ZTVh LzEvRjdVRUw4SU5tNnNXZHVDYTlfOGJwYi10cm5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2XePMA0G CSqGSIb3DQEBCwUAA4IBAQAxQsp4QnwTZO3F6cwFDY1yT/zKhJeT9Wmsc/mubVo7 drW18IQZLcIGmZriyzBoZwT2JWQwEUrwq3Kip+cFSxinTgURoxdQuoGmzBCLszH+ TdhHlBAYdLzBXcnub2yYra08l95mYDN/mqWZJ/UVdexwSHM5HvgD5yXx1jstBAie jpBcwHH/X3pJFb3BefV3BbDuPdia4sGm2I35mhQ9881zNfsLwG2MaiOwp51WYJPG S+5urtxNuEe/qRRHM3yzygSkVG4nPFHFwzQUe5bG5jf2majtG463KxuaL+6fI5wF O+UdK/TiQG8/tgkiykBc7PWbkO7YO5R4jFNXWOH6f7c2 -----END CERTIFICATE-----Generated at Fri Jan 9 17:06:03 2026 by rpki-client