This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/eDXxJ-0nUaJuRJ8r9tLMMsrPV9k.roa File: eDXxJ-0nUaJuRJ8r9tLMMsrPV9k.roa (raw, json) Hash identifier: VZENBgpRHMOQW00Ak5z3+ezYs7jMSDyUdIGCk++UNGg= Subject key identifier: 78:35:F1:27:ED:27:51:A2:6E:44:9F:2B:F6:D2:CC:32:CA:CF:57:D9 Certificate issuer: /CN=75a856785392da27d00bdb27091c5926c3155d89 Certificate serial: 019B77C676DD1F813480601A197C106B21AA Authority key identifier: 75:A8:56:78:53:92:DA:27:D0:0B:DB:27:09:1C:59:26:C3:15:5D:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dahWeFOS2ifQC9snCRxZJsMVXYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/eDXxJ-0nUaJuRJ8r9tLMMsrPV9k.roa Signing time: Thu 01 Jan 2026 04:17:33 +0000 ROA not before: Thu 01 Jan 2026 04:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15404 IP address blocks: 185.199.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft rsync://rpki.ripe.net/repository/DEFAULT/dahWeFOS2ifQC9snCRxZJsMVXYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:76:dd:1f:81:34:80:60:1a:19:7c:10:6b:21:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75a856785392da27d00bdb27091c5926c3155d89 Validity Not Before: Jan 1 04:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7835f127ed2751a26e449f2bf6d2cc32cacf57d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7d:d4:12:da:e3:73:91:aa:e2:6c:cc:4b:34: 29:e4:f4:fa:d8:e5:d7:58:31:38:e6:d7:b0:07:03: 45:86:8a:b6:ed:1f:c2:dd:35:c0:a7:9c:67:54:e5: 6a:e4:09:d2:8a:d2:d4:08:4b:83:00:e7:2e:ad:62: d8:d0:26:be:81:b9:af:e2:23:f8:f5:76:a0:ee:06: 0e:cc:cd:5f:ff:05:5d:e0:fa:35:6d:e3:06:80:fd: 92:02:f5:e8:e8:d3:d5:f7:4e:04:93:11:e1:2b:cd: 43:7f:01:d8:10:06:71:3a:a9:f1:07:dc:f7:1c:5a: 87:69:44:26:4e:cf:c3:0b:2b:d6:61:bd:23:c7:a9: 63:9e:53:46:75:41:ef:ee:ff:84:d3:ac:59:c2:f3: 94:21:79:8a:cc:03:27:37:bb:ad:fa:97:a5:2e:78: e5:87:bb:6f:94:b4:ab:ae:aa:de:11:dc:69:00:95: 5f:03:1a:0a:41:c9:6e:5d:82:ea:93:fc:13:75:52: 5e:30:6f:21:90:23:b5:03:a5:7c:48:c0:31:d8:f1: 04:e5:48:da:a6:a0:96:56:9f:80:d7:62:c9:f5:f1: e5:23:c9:d3:27:d0:b8:ca:6f:c1:49:60:da:95:99: 1a:d8:30:2e:97:4c:41:9a:b4:4e:54:1a:ed:e6:63: 6a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:35:F1:27:ED:27:51:A2:6E:44:9F:2B:F6:D2:CC:32:CA:CF:57:D9 X509v3 Authority Key Identifier: keyid:75:A8:56:78:53:92:DA:27:D0:0B:DB:27:09:1C:59:26:C3:15:5D:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dahWeFOS2ifQC9snCRxZJsMVXYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/eDXxJ-0nUaJuRJ8r9tLMMsrPV9k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.199.204.0/24 Signature Algorithm: sha256WithRSAEncryption 72:a6:a4:87:d2:17:86:20:7a:f3:f6:30:8d:ee:00:72:2f:88: 5d:c1:12:fc:a4:57:3a:50:bb:34:6e:6f:67:fd:05:bc:3c:50: 15:32:23:3a:46:51:f4:35:35:8f:23:0f:7e:84:ad:ae:cd:1d: 0e:4b:cf:80:9c:a6:3a:51:63:c5:ca:63:a4:0e:1c:85:16:e2: 1a:dd:8c:ac:af:c0:2b:0b:e1:dc:16:6c:02:34:34:95:5a:58: f9:ce:60:15:c5:5c:af:30:03:49:60:6a:ea:65:80:36:fe:b0: 92:ba:4f:b3:ed:bc:be:08:3f:53:de:a1:a7:bd:5d:8d:7f:d1: df:5d:dd:25:25:9d:54:25:cf:db:d8:39:74:97:2a:54:a0:c1: b1:66:2a:23:df:d6:97:26:ea:06:73:93:09:5c:a2:70:d8:16: 37:03:c2:e0:91:b5:56:30:a6:6f:f9:09:60:49:59:62:03:5a: 52:35:b1:e5:ba:cb:f4:3a:75:51:7d:f7:23:f5:44:95:86:f1: c8:67:64:6c:da:c5:4b:9d:83:4a:b3:ba:49:13:58:90:d2:34: 47:ab:9f:7c:e6:6d:a4:a3:13:81:b6:3b:d7:74:78:03:0a:18: ce:a1:65:b4:c1:98:34:c2:2d:36:b5:c1:a7:e6:40:03:0b:9d: b7:ac:38:af -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xnbdH4E0gGAaGXwQayGqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1YTg1Njc4NTM5MmRhMjdkMDBiZGIyNzA5MWM1OTI2YzMx NTVkODkwHhcNMjYwMTAxMDQxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODM1ZjEyN2VkMjc1MWEyNmU0NDlmMmJmNmQyY2MzMmNhY2Y1N2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt33UEtrjc5Gq4mzMSzQp5PT62OXX WDE45tewBwNFhoq27R/C3TXAp5xnVOVq5AnSitLUCEuDAOcurWLY0Ca+gbmv4iP4 9Xag7gYOzM1f/wVd4Po1beMGgP2SAvXo6NPV904EkxHhK81DfwHYEAZxOqnxB9z3 HFqHaUQmTs/DCyvWYb0jx6ljnlNGdUHv7v+E06xZwvOUIXmKzAMnN7ut+pelLnjl h7tvlLSrrqreEdxpAJVfAxoKQcluXYLqk/wTdVJeMG8hkCO1A6V8SMAx2PEE5Uja pqCWVp+A12LJ9fHlI8nTJ9C4ym/BSWDalZka2DAul0xBmrROVBrt5mNqWwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHg18SftJ1GibkSfK/bSzDLKz1fZMB8GA1UdIwQY MBaAFHWoVnhTkton0AvbJwkcWSbDFV2JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGFoV2VGT1MyaWZRQzlzbkNSeFpKc01WWFlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9lYzBkYTktZWE4Yy00YjhlLWEzMmEt YTViYzBjNzBjNTEzLzEvZURYeEotMG5VYUp1Uko4cjl0TE1Nc3JQVjlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9lYzBkYTktZWE4Yy00YjhlLWEzMmEtYTViYzBjNzBjNTEz LzEvZGFoV2VGT1MyaWZRQzlzbkNSeFpKc01WWFlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucfMMA0G CSqGSIb3DQEBCwUAA4IBAQBypqSH0heGIHrz9jCN7gByL4hdwRL8pFc6ULs0bm9n /QW8PFAVMiM6RlH0NTWPIw9+hK2uzR0OS8+AnKY6UWPFymOkDhyFFuIa3Yysr8Ar C+HcFmwCNDSVWlj5zmAVxVyvMANJYGrqZYA2/rCSuk+z7by+CD9T3qGnvV2Nf9Hf Xd0lJZ1UJc/b2Dl0lypUoMGxZioj39aXJuoGc5MJXKJw2BY3A8LgkbVWMKZv+Qlg SVliA1pSNbHlusv0OnVRffcj9USVhvHIZ2Rs2sVLnYNKs7pJE1iQ0jRHq5985m2k oxOBtjvXdHgDChjOoWW0wZg0wi02tcGn5kADC523rDiv -----END CERTIFICATE-----Generated at Wed Jan 21 13:17:14 2026 by rpki-client