This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/Ektmdzt5jQJJ2UEC9Cw_K2nGNFo.roa File: Ektmdzt5jQJJ2UEC9Cw_K2nGNFo.roa (raw, json) Hash identifier: TBpqT8fTXZLKBY0dY50i8lDxpFsie5KI3JzPXnT27lA= Subject key identifier: 12:4B:66:77:3B:79:8D:02:49:D9:41:02:F4:2C:3F:2B:69:C6:34:5A Certificate issuer: /CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce Certificate serial: 019B7AC89C0E0DC50EE45FC40D6199D5BF3A Authority key identifier: 46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/Ektmdzt5jQJJ2UEC9Cw_K2nGNFo.roa Signing time: Thu 01 Jan 2026 18:18:46 +0000 ROA not before: Thu 01 Jan 2026 18:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3257 IP address blocks: 146.19.50.0/24 maxlen: 24 185.214.166.0/24 maxlen: 24 185.253.3.0/24 maxlen: 24 194.26.218.0/24 maxlen: 24 213.134.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:9c:0e:0d:c5:0e:e4:5f:c4:0d:61:99:d5:bf:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce Validity Not Before: Jan 1 18:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=124b66773b798d0249d94102f42c3f2b69c6345a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:04:27:98:fb:f0:49:7a:af:85:3d:cc:1a:3b: 94:72:8e:0f:cd:e1:b7:5b:b0:a1:91:b2:88:f9:f5: 8c:0f:eb:75:38:bb:e6:7a:a1:d7:e1:52:1a:f4:45: 25:c3:12:26:cd:a4:a7:42:aa:04:ad:a2:99:64:31: 67:19:76:65:5e:4c:da:99:b0:9d:9c:04:55:b9:c0: 00:1c:71:06:fd:d3:a7:af:fa:99:57:6a:70:ac:72: 13:50:e6:17:3b:57:fb:92:9e:37:af:f7:49:dd:36: 30:ab:d6:e1:64:18:1d:5b:e0:2a:12:c0:81:d0:bf: 8f:a7:50:72:81:d1:cb:4a:10:47:15:d1:10:5a:a3: c5:b3:b9:04:e3:eb:b7:1e:f9:41:da:54:da:99:60: 9b:f0:cb:5d:d3:2c:77:2c:3d:f8:a8:72:a4:0a:2f: 33:68:d5:c1:aa:e3:f3:61:e0:9d:64:1e:21:c7:77: 1b:9e:c5:fb:c9:95:73:42:f7:c8:f3:00:e6:8b:0f: 80:f7:f7:57:d5:96:43:63:b0:34:f0:f4:35:50:c8: 9b:2d:3b:83:33:3f:d1:d5:0b:f8:3f:7c:7c:a0:fc: 79:e9:b5:6f:d7:2e:45:de:66:07:44:07:0b:ad:d1: b5:eb:95:78:5c:ec:77:ed:ca:a3:65:4c:d4:fa:ed: 71:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:4B:66:77:3B:79:8D:02:49:D9:41:02:F4:2C:3F:2B:69:C6:34:5A X509v3 Authority Key Identifier: keyid:46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/Ektmdzt5jQJJ2UEC9Cw_K2nGNFo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.19.50.0/24 185.214.166.0/24 185.253.3.0/24 194.26.218.0/24 213.134.25.0/24 Signature Algorithm: sha256WithRSAEncryption c8:51:ff:6d:e0:72:f0:65:e1:c8:8f:4c:31:f0:f5:9b:de:45: df:7f:cf:ed:2a:d2:05:c4:fc:94:6d:9a:cf:c0:2f:a1:fb:53: 57:6b:e3:7d:ef:3e:29:c4:df:85:82:d0:19:f5:af:23:7e:c0: ee:5b:d5:de:5b:0e:fc:45:d3:ef:67:05:5f:74:41:dc:85:d8: e5:f0:34:01:8c:65:fe:9c:30:75:e7:10:2a:1a:ae:a1:e6:b4: fa:e2:1c:9b:6c:23:60:1a:a5:78:6b:17:1b:21:ed:df:d3:8a: 60:9c:1f:fe:e5:33:4d:e1:81:8c:b8:0e:57:0e:dd:1c:41:b4: c0:75:c6:15:65:fd:4c:b7:6a:50:9c:a2:70:85:65:98:ac:4e: 29:22:1f:65:f3:a0:3d:c5:92:ef:6e:5c:1e:22:c1:e5:18:e8: b2:b6:4c:51:06:26:8e:af:82:fe:01:48:1b:9a:83:74:57:31: f4:93:84:e8:e2:95:b5:50:58:b2:7f:76:cb:d4:cd:f5:c7:05: 33:c3:b6:c9:c9:d4:11:d2:2a:f1:9c:99:22:f9:97:c3:99:8d: 93:bd:e4:5a:c7:56:4f:69:b5:b8:04:e7:8e:de:a3:09:32:a9: c7:c5:4e:77:0d:2f:56:ec:47:d9:95:8d:86:52:1a:a1:c5:8b: 43:da:a5:a2 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt6yJwODcUO5F/EDWGZ1b86MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2OGI1OTJmMzExMGJjNmMzNTI0OWE4MjcxYTBkYWMxYTlh Y2IwY2UwHhcNMjYwMTAxMTgxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjRiNjY3NzNiNzk4ZDAyNDlkOTQxMDJmNDJjM2YyYjY5YzYzNDVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAQnmPvwSXqvhT3MGjuUco4PzeG3 W7ChkbKI+fWMD+t1OLvmeqHX4VIa9EUlwxImzaSnQqoEraKZZDFnGXZlXkzambCd nARVucAAHHEG/dOnr/qZV2pwrHITUOYXO1f7kp43r/dJ3TYwq9bhZBgdW+AqEsCB 0L+Pp1BygdHLShBHFdEQWqPFs7kE4+u3HvlB2lTamWCb8Mtd0yx3LD34qHKkCi8z aNXBquPzYeCdZB4hx3cbnsX7yZVzQvfI8wDmiw+A9/dX1ZZDY7A08PQ1UMibLTuD Mz/R1Qv4P3x8oPx56bVv1y5F3mYHRAcLrdG165V4XOx37cqjZUzU+u1x3QIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFBJLZnc7eY0CSdlBAvQsPytpxjRaMB8GA1UdIwQY MBaAFEaLWS8xELxsNSSagnGg2sGprLDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUm90Wkx6RVF2R3cxSkpxQ2NhRGF3YW1zc000LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yOWUxNjYtOThkMi00OWYyLTg0OTct MDUwMzc0OWFkZWEwLzEvRWt0bWR6dDVqUUpKMlVFQzlDd19LMm5HTkZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8yOWUxNjYtOThkMi00OWYyLTg0OTctMDUwMzc0OWFkZWEw LzEvUm90Wkx6RVF2R3cxSkpxQ2NhRGF3YW1zc000LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAkhMyAwQA udamAwQAuf0DAwQAwhraAwQA1YYZMA0GCSqGSIb3DQEBCwUAA4IBAQDIUf9t4HLw ZeHIj0wx8PWb3kXff8/tKtIFxPyUbZrPwC+h+1NXa+N97z4pxN+FgtAZ9a8jfsDu W9XeWw78RdPvZwVfdEHchdjl8DQBjGX+nDB15xAqGq6h5rT64hybbCNgGqV4axcb Ie3f04pgnB/+5TNN4YGMuA5XDt0cQbTAdcYVZf1Mt2pQnKJwhWWYrE4pIh9l86A9 xZLvblweIsHlGOiytkxRBiaOr4L+AUgbmoN0VzH0k4To4pW1UFiyf3bL1M31xwUz w7bJydQR0irxnJki+ZfDmY2TveRax1ZPabW4BOeO3qMJMqnHxU53DS9W7EfZlY2G UhqhxYtD2qWi -----END CERTIFICATE-----Generated at Fri Jan 2 16:26:00 2026 by rpki-client