This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/GEk2YBzVV2gm-LB4E-0QcSjlOaw.roa File: GEk2YBzVV2gm-LB4E-0QcSjlOaw.roa (raw, json) Hash identifier: 6ltbKXfP63Sbrv2a4WDFBu+kJMReN4SiNF3HfveZocU= Subject key identifier: 18:49:36:60:1C:D5:57:68:26:F8:B0:78:13:ED:10:71:28:E5:39:AC Certificate issuer: /CN=3626b9e44465f0bd713c0a1e050103d3911dcd67 Certificate serial: 019B79ECBEDDA3B24F1C5D953CAB09F8FD30 Authority key identifier: 36:26:B9:E4:44:65:F0:BD:71:3C:0A:1E:05:01:03:D3:91:1D:CD:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nia55ERl8L1xPAoeBQED05EdzWc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/GEk2YBzVV2gm-LB4E-0QcSjlOaw.roa Signing time: Thu 01 Jan 2026 14:18:36 +0000 ROA not before: Thu 01 Jan 2026 14:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30848 IP address blocks: 185.116.62.0/24 maxlen: 24 185.116.62.0/29 maxlen: 29 185.116.62.0/30 maxlen: 30 185.116.62.0/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.crl rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.mft rsync://rpki.ripe.net/repository/DEFAULT/Nia55ERl8L1xPAoeBQED05EdzWc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:be:dd:a3:b2:4f:1c:5d:95:3c:ab:09:f8:fd:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3626b9e44465f0bd713c0a1e050103d3911dcd67 Validity Not Before: Jan 1 14:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=184936601cd5576826f8b07813ed107128e539ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ab:04:01:e3:8c:98:63:93:7a:40:0f:c7:c1: 99:b9:f3:5e:b9:d6:33:e0:05:93:7c:0c:11:47:2c: d0:f9:04:ee:18:d0:92:5f:51:e2:37:ea:6f:54:13: 4e:91:98:c5:ae:f7:d7:56:0d:b1:e5:86:0f:ce:9e: 77:e7:4f:8a:56:7b:48:4a:12:88:85:fb:fd:a0:a8: 16:96:54:bb:fe:27:ae:d3:5c:c3:6f:1a:0c:d8:2a: 37:0a:9d:b7:9b:4c:2a:e6:5d:6a:8c:69:6a:a0:bc: 09:35:84:a2:36:a6:9a:20:2d:20:df:9b:ea:1a:17: 83:30:ff:3d:ef:a5:4a:40:6e:53:7f:9d:20:4d:37: fd:e6:c6:9a:9b:83:e9:f1:ac:f0:90:77:af:4b:75: ff:cc:d6:1c:1c:1a:e1:c5:0c:0b:e7:9c:cd:ba:b2: 23:82:e4:fe:cd:60:78:ff:18:f9:c6:d4:3e:60:ac: 5b:0f:2f:09:2c:b0:58:4b:ce:ee:f6:77:a9:2d:55: 41:a8:80:5a:df:78:5d:43:a1:cd:4e:33:df:07:eb: 86:36:d7:03:26:fe:26:15:12:19:8c:2c:d3:01:b1: 67:ff:cf:34:aa:06:9b:de:d4:b1:03:c3:d6:0f:06: 2b:8b:05:de:47:25:87:dd:2e:f5:35:db:1d:9f:4b: d5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:49:36:60:1C:D5:57:68:26:F8:B0:78:13:ED:10:71:28:E5:39:AC X509v3 Authority Key Identifier: keyid:36:26:B9:E4:44:65:F0:BD:71:3C:0A:1E:05:01:03:D3:91:1D:CD:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nia55ERl8L1xPAoeBQED05EdzWc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/GEk2YBzVV2gm-LB4E-0QcSjlOaw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.116.62.0/24 Signature Algorithm: sha256WithRSAEncryption 16:0a:93:91:de:08:e6:aa:45:38:11:18:8c:5c:4c:fb:48:4b: e8:b5:8c:d4:cc:a3:8f:1f:c7:80:ef:f3:22:d4:08:66:4b:92: 85:93:2e:d2:74:51:a1:f6:ab:5d:3a:97:8c:63:4b:68:96:55: 87:cb:4d:aa:c7:3c:8f:bc:22:7b:7f:b0:fe:a9:b0:25:30:c4: 80:d1:b0:86:1b:9f:bc:50:a1:8d:0f:07:27:79:b8:e0:37:cb: d6:58:87:bb:4a:4c:81:fc:d3:23:ba:bf:56:fd:b3:6b:d8:6b: 41:9b:17:9a:c4:59:a8:c7:45:e7:75:96:a8:3b:f9:2d:92:a3: da:a8:f7:9e:64:d4:09:c3:0e:da:dd:e0:5e:cf:3a:a2:b0:b8: f2:6d:b5:59:24:56:f2:6f:d0:c8:74:a3:9a:42:f7:cb:47:0a: c5:90:9e:4d:f9:1a:40:62:c7:b0:48:2b:65:0b:b1:a6:70:4f: 32:11:18:e2:03:e1:54:e8:be:ee:cb:3e:21:1c:81:40:4b:34: de:29:f9:2c:76:0a:78:a2:69:8d:dc:74:81:f8:80:7f:c9:dd: 3c:1a:6d:9b:1b:f2:7c:59:5c:4f:b8:67:66:2b:7d:16:11:14: c2:96:ad:41:bc:d9:39:17:18:d8:ee:15:c1:52:8b:a0:76:bd: 8b:3f:89:e7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57L7do7JPHF2VPKsJ+P0wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2MjZiOWU0NDQ2NWYwYmQ3MTNjMGExZTA1MDEwM2QzOTEx ZGNkNjcwHhcNMjYwMTAxMTQxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODQ5MzY2MDFjZDU1NzY4MjZmOGIwNzgxM2VkMTA3MTI4ZTUzOWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6sEAeOMmGOTekAPx8GZufNeudYz 4AWTfAwRRyzQ+QTuGNCSX1HiN+pvVBNOkZjFrvfXVg2x5YYPzp5350+KVntIShKI hfv9oKgWllS7/ieu01zDbxoM2Co3Cp23m0wq5l1qjGlqoLwJNYSiNqaaIC0g35vq GheDMP8976VKQG5Tf50gTTf95saam4Pp8azwkHevS3X/zNYcHBrhxQwL55zNurIj guT+zWB4/xj5xtQ+YKxbDy8JLLBYS87u9nepLVVBqIBa33hdQ6HNTjPfB+uGNtcD Jv4mFRIZjCzTAbFn/880qgab3tSxA8PWDwYriwXeRyWH3S71Ndsdn0vVXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBhJNmAc1VdoJviweBPtEHEo5TmsMB8GA1UdIwQY MBaAFDYmueREZfC9cTwKHgUBA9ORHc1nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmlhNTVFUmw4TDF4UEFvZUJRRUQwNUVkeldjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8wMjJhZjUtODYyYy00MjhlLWJlZTgt MjhhNDY4MWMzN2Q2LzEvR0VrMllCelZWMmdtLUxCNEUtMFFjU2psT2F3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8wMjJhZjUtODYyYy00MjhlLWJlZTgtMjhhNDY4MWMzN2Q2 LzEvTmlhNTVFUmw4TDF4UEFvZUJRRUQwNUVkeldjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXQ+MA0G CSqGSIb3DQEBCwUAA4IBAQAWCpOR3gjmqkU4ERiMXEz7SEvotYzUzKOPH8eA7/Mi 1AhmS5KFky7SdFGh9qtdOpeMY0tollWHy02qxzyPvCJ7f7D+qbAlMMSA0bCGG5+8 UKGNDwcnebjgN8vWWIe7SkyB/NMjur9W/bNr2GtBmxeaxFmox0XndZaoO/ktkqPa qPeeZNQJww7a3eBezzqisLjybbVZJFbyb9DIdKOaQvfLRwrFkJ5N+RpAYsewSCtl C7GmcE8yERjiA+FU6L7uyz4hHIFASzTeKfksdgp4ommN3HSB+IB/yd08Gm2bG/J8 WVxPuGdmK30WERTClq1BvNk5FxjY7hXBUougdr2LP4nn -----END CERTIFICATE-----Generated at Tue Jan 27 08:31:06 2026 by rpki-client