This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/EkYStzwgXm32LEuLnYV7wl1qBsI.roa File: EkYStzwgXm32LEuLnYV7wl1qBsI.roa (raw, json) Hash identifier: N7mlcXfarDGBfU57u461OhXjqlBTWu7CynWyY5v4cBI= Subject key identifier: 12:46:12:B7:3C:20:5E:6D:F6:2C:4B:8B:9D:85:7B:C2:5D:6A:06:C2 Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Certificate serial: 019B7A5B0BCABA283525781B73237A572D8C Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/EkYStzwgXm32LEuLnYV7wl1qBsI.roa Signing time: Thu 01 Jan 2026 16:19:05 +0000 ROA not before: Thu 01 Jan 2026 16:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203916 IP address blocks: 185.135.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:0b:ca:ba:28:35:25:78:1b:73:23:7a:57:2d:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Validity Not Before: Jan 1 16:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=124612b73c205e6df62c4b8b9d857bc25d6a06c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6f:14:19:6b:89:bc:e7:33:ce:71:1c:80:f7: 5c:c7:2e:ea:a0:9d:8b:89:ca:ba:8e:2a:4f:5d:9d: db:e0:fe:16:0e:0e:b6:9d:6f:7e:74:0c:cc:ce:9d: b3:df:bc:e2:9e:6a:cc:b0:46:15:9b:87:da:24:35: 13:f7:49:62:ef:40:2a:46:8e:9a:93:32:76:c3:4d: a7:66:09:a8:a2:eb:75:d1:8f:7a:98:a2:ee:5f:5e: 43:5b:bb:51:9b:98:bf:48:0f:ab:91:30:56:23:7d: 74:d3:7d:ea:f3:5e:b2:da:3f:de:43:e2:63:e3:ea: 6d:f0:66:d4:55:be:30:8a:3b:12:b2:e1:c5:1b:39: d3:dd:24:6f:62:c9:cd:a2:23:6f:9b:44:bd:2a:62: 03:03:3b:97:d0:d2:1d:9c:18:21:69:07:4f:5e:02: 0b:af:7e:aa:8e:13:42:86:a4:e4:17:f4:d0:f4:59: 7b:4d:7b:7b:6e:76:22:43:b1:91:ef:ff:65:d4:1b: 9a:c2:9b:dc:d2:ce:5e:58:16:38:87:d8:58:97:2f: cd:2b:35:85:9e:33:bd:1f:56:92:6c:bf:8a:9d:87: 5c:75:17:3c:a7:ff:c8:8a:ec:4d:bd:0c:3b:f1:83: cd:a2:a9:45:48:3f:b8:c9:cf:c9:26:49:2d:9e:19: d4:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:46:12:B7:3C:20:5E:6D:F6:2C:4B:8B:9D:85:7B:C2:5D:6A:06:C2 X509v3 Authority Key Identifier: keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/EkYStzwgXm32LEuLnYV7wl1qBsI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.135.47.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:52:b5:0a:23:0a:bb:61:9b:b8:c2:9c:73:e5:dc:64:6b:ec: de:3f:40:24:b2:00:b4:37:29:fe:d8:7b:2f:f0:2b:c8:1f:11: 9d:12:df:13:fc:92:42:32:78:8e:ef:e4:21:bd:70:93:89:51: 64:2f:d9:d1:54:c9:90:d9:19:4b:a0:b0:44:cf:0e:f9:2e:1d: df:28:d8:d1:c6:ca:82:d3:ff:15:0b:21:31:c5:d1:97:46:20: 9f:0d:4f:6f:d4:e5:ff:33:cc:3f:61:19:28:dc:d6:db:df:29: d1:f1:c0:a9:d0:b9:de:3a:43:40:00:5d:cd:69:72:b8:02:78: 9b:88:af:10:b5:4e:a2:14:e3:45:94:82:13:2c:36:3e:52:4e: 26:a6:6a:27:8d:9b:14:8b:1f:a4:98:9c:1f:ba:ed:84:75:47: cf:f9:ab:60:e2:d8:14:d2:a9:e2:91:d9:ac:9a:2c:b2:17:4f: b1:5b:59:56:95:d2:c3:35:16:2e:99:d0:4b:f9:c9:67:c7:0c: 98:34:8f:79:f0:b0:f7:4b:6a:14:49:36:a5:87:0d:f2:b2:97: 9b:c8:92:e5:56:bf:2f:fd:d1:93:c4:a4:44:1d:16:e5:7b:60: 29:39:77:7e:33:2e:35:a5:ca:17:d0:05:a9:cd:90:aa:ac:0e: e1:05:e5:63 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WwvKuig1JXgbcyN6Vy2MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw Y2MzNGIwHhcNMjYwMTAxMTYxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjQ2MTJiNzNjMjA1ZTZkZjYyYzRiOGI5ZDg1N2JjMjVkNmEwNmMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuW8UGWuJvOczznEcgPdcxy7qoJ2L icq6jipPXZ3b4P4WDg62nW9+dAzMzp2z37zinmrMsEYVm4faJDUT90li70AqRo6a kzJ2w02nZgmoout10Y96mKLuX15DW7tRm5i/SA+rkTBWI310033q816y2j/eQ+Jj 4+pt8GbUVb4wijsSsuHFGznT3SRvYsnNoiNvm0S9KmIDAzuX0NIdnBghaQdPXgIL r36qjhNChqTkF/TQ9Fl7TXt7bnYiQ7GR7/9l1Buawpvc0s5eWBY4h9hYly/NKzWF njO9H1aSbL+KnYdcdRc8p//IiuxNvQw78YPNoqlFSD+4yc/JJkktnhnUMwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBJGErc8IF5t9ixLi52Fe8JdagbCMB8GA1UdIwQY MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt MDk0ODk4OWU2ZDU1LzEvRWtZU3R6d2dYbTMyTEV1TG5ZVjd3bDFxQnNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1 LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYcvMA0G CSqGSIb3DQEBCwUAA4IBAQCLUrUKIwq7YZu4wpxz5dxka+zeP0AksgC0Nyn+2Hsv 8CvIHxGdEt8T/JJCMniO7+QhvXCTiVFkL9nRVMmQ2RlLoLBEzw75Lh3fKNjRxsqC 0/8VCyExxdGXRiCfDU9v1OX/M8w/YRko3Nbb3ynR8cCp0LneOkNAAF3NaXK4Anib iK8QtU6iFONFlIITLDY+Uk4mpmonjZsUix+kmJwfuu2EdUfP+atg4tgU0qnikdms miyyF0+xW1lWldLDNRYumdBL+clnxwyYNI958LD3S2oUSTalhw3yspebyJLlVr8v /dGTxKREHRble2ApOXd+My41pcoX0AWpzZCqrA7hBeVj -----END CERTIFICATE-----Generated at Mon Jan 5 13:06:16 2026 by rpki-client