This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/eS8NOcR5VsM5X-FoIr-qZi-nfSQ.roa File: eS8NOcR5VsM5X-FoIr-qZi-nfSQ.roa (raw, json) Hash identifier: oTJIYUc5ybeC7DTGSDxwOuEroX+3xhqZe6zX/QEBvRI= Subject key identifier: 79:2F:0D:39:C4:79:56:C3:39:5F:E1:68:22:BF:AA:66:2F:A7:7D:24 Certificate issuer: /CN=b8d5b3d379d21162e2b522c43801fb9603988245 Certificate serial: 019B7D5C720A9779400C974581E1DF8B6BE6 Authority key identifier: B8:D5:B3:D3:79:D2:11:62:E2:B5:22:C4:38:01:FB:96:03:98:82:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNWz03nSEWLitSLEOAH7lgOYgkU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/eS8NOcR5VsM5X-FoIr-qZi-nfSQ.roa Signing time: Fri 02 Jan 2026 06:19:28 +0000 ROA not before: Fri 02 Jan 2026 06:19:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42705 IP address blocks: 185.243.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.mft rsync://rpki.ripe.net/repository/DEFAULT/uNWz03nSEWLitSLEOAH7lgOYgkU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:72:0a:97:79:40:0c:97:45:81:e1:df:8b:6b:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8d5b3d379d21162e2b522c43801fb9603988245 Validity Not Before: Jan 2 06:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=792f0d39c47956c3395fe16822bfaa662fa77d24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0b:65:21:06:6d:8d:ed:b4:10:4d:5f:c9:67: bc:74:77:21:53:e9:e2:69:70:9b:cd:0b:ca:5e:38: af:ff:90:5d:bb:54:ac:04:98:da:a1:bd:24:11:4e: 70:f8:15:0d:72:f6:67:cf:c7:ff:4c:d0:6f:83:7f: ec:dd:4a:dc:56:0e:a3:af:d6:aa:5b:c3:b2:2c:6b: 8b:04:cf:3c:d3:ab:1e:7f:6a:40:f7:ac:aa:a9:1a: 1a:58:7b:d2:c7:07:be:3d:33:d7:dd:eb:80:94:5a: 06:93:a4:de:ed:7e:34:39:a6:6f:e0:13:33:23:6c: 86:43:d8:bd:73:a9:c5:da:cd:f4:f4:b1:30:1a:48: fc:1e:06:f7:b5:92:19:65:21:67:d7:56:e8:80:4b: c3:c6:b1:01:ba:4e:7a:81:85:1e:4d:f6:97:c7:c1: 63:66:81:63:82:b5:2f:f2:16:50:62:f6:f6:d1:38: 81:b4:c2:f7:5c:ff:59:9a:7b:ea:d0:ba:9d:0d:0b: e8:6b:1b:90:43:a9:7a:b5:4c:7b:7e:72:da:35:11: 0e:cb:56:33:82:6f:88:a0:b4:ca:b9:80:f6:67:59: 0d:cf:11:45:9c:0d:ad:2d:02:6c:94:3d:36:01:52: 90:3c:f3:93:51:a6:f6:02:6c:2a:51:68:b1:ea:b5: 4f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:2F:0D:39:C4:79:56:C3:39:5F:E1:68:22:BF:AA:66:2F:A7:7D:24 X509v3 Authority Key Identifier: keyid:B8:D5:B3:D3:79:D2:11:62:E2:B5:22:C4:38:01:FB:96:03:98:82:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNWz03nSEWLitSLEOAH7lgOYgkU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/eS8NOcR5VsM5X-FoIr-qZi-nfSQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.243.128.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:2a:81:a4:a0:6c:b9:d2:f2:6e:2b:28:97:3a:6c:b3:21:3b: 75:ff:83:22:03:01:46:92:d0:2d:3d:b5:70:6b:cf:3e:6b:62: 7b:29:6a:45:e6:3c:78:df:3e:6e:78:b3:67:85:98:e1:11:32: 58:cd:65:5b:ff:59:9b:2d:08:00:22:9d:bd:53:ee:b6:8b:79: 95:88:98:6e:1d:a2:bd:93:a6:76:b2:3e:83:aa:cf:81:91:8a: 3a:e0:c3:81:6d:89:20:7d:79:40:eb:8c:d8:e2:bd:b7:4e:5a: 3d:7c:8a:10:23:ad:45:d9:f3:a0:d1:7b:ac:19:64:79:40:c0: af:e6:b1:c2:2d:2b:dd:90:03:0e:11:e0:b3:73:47:45:23:2f: 15:a2:ef:dd:c3:1e:f3:0e:81:65:00:f7:dc:13:d6:a6:68:68: ec:b9:3e:23:ac:b3:0e:71:40:74:30:e9:b0:9d:f6:c1:06:fe: 8d:f4:b6:79:b5:55:11:6e:5b:48:d5:cd:c5:e3:b7:a0:c6:59: 4b:84:5b:76:24:e0:a2:bd:d1:9c:80:ed:2f:1c:3c:9c:ee:3b: c1:82:f8:4b:39:25:77:62:4d:43:51:f6:d9:5b:29:01:85:cc: c8:38:58:49:20:72:a8:12:7c:c9:32:ad:7c:6f:0e:88:07:78: a3:05:7b:94 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XHIKl3lADJdFgeHfi2vmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4ZDViM2QzNzlkMjExNjJlMmI1MjJjNDM4MDFmYjk2MDM5 ODgyNDUwHhcNMjYwMTAyMDYxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OTJmMGQzOWM0Nzk1NmMzMzk1ZmUxNjgyMmJmYWE2NjJmYTc3ZDI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugtlIQZtje20EE1fyWe8dHchU+ni aXCbzQvKXjiv/5Bdu1SsBJjaob0kEU5w+BUNcvZnz8f/TNBvg3/s3UrcVg6jr9aq W8OyLGuLBM8806sef2pA96yqqRoaWHvSxwe+PTPX3euAlFoGk6Te7X40OaZv4BMz I2yGQ9i9c6nF2s309LEwGkj8Hgb3tZIZZSFn11bogEvDxrEBuk56gYUeTfaXx8Fj ZoFjgrUv8hZQYvb20TiBtML3XP9Zmnvq0LqdDQvoaxuQQ6l6tUx7fnLaNREOy1Yz gm+IoLTKuYD2Z1kNzxFFnA2tLQJslD02AVKQPPOTUab2AmwqUWix6rVPFwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHkvDTnEeVbDOV/haCK/qmYvp30kMB8GA1UdIwQY MBaAFLjVs9N50hFi4rUixDgB+5YDmIJFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdU5XejAzblNFV0xpdFNMRU9BSDdsZ09ZZ2tVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9lZjNlNDMtN2JmNy00MDRmLWE5YTMt YjNlOTI1NWQyYjNlLzEvZVM4Tk9jUjVWc001WC1Gb0lyLXFaaS1uZlNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9lZjNlNDMtN2JmNy00MDRmLWE5YTMtYjNlOTI1NWQyYjNl LzEvdU5XejAzblNFV0xpdFNMRU9BSDdsZ09ZZ2tVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufOAMA0G CSqGSIb3DQEBCwUAA4IBAQA8KoGkoGy50vJuKyiXOmyzITt1/4MiAwFGktAtPbVw a88+a2J7KWpF5jx43z5ueLNnhZjhETJYzWVb/1mbLQgAIp29U+62i3mViJhuHaK9 k6Z2sj6Dqs+BkYo64MOBbYkgfXlA64zY4r23Tlo9fIoQI61F2fOg0XusGWR5QMCv 5rHCLSvdkAMOEeCzc0dFIy8Vou/dwx7zDoFlAPfcE9amaGjsuT4jrLMOcUB0MOmw nfbBBv6N9LZ5tVURbltI1c3F47egxllLhFt2JOCivdGcgO0vHDyc7jvBgvhLOSV3 Yk1DUfbZWykBhczIOFhJIHKoEnzJMq18bw6IB3ijBXuU -----END CERTIFICATE-----Generated at Tue Jan 20 04:28:43 2026 by rpki-client