This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/EZD3o1Jh1Z1Yh1oogNIIIocP_Yw.roa File: EZD3o1Jh1Z1Yh1oogNIIIocP_Yw.roa (raw, json) Hash identifier: 1QZ4sSS9wl+mQnHE/1HG2lGmR2bE2ruhxj7gVXkY5pI= Subject key identifier: 11:90:F7:A3:52:61:D5:9D:58:87:5A:28:80:D2:08:22:87:0F:FD:8C Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6 Certificate serial: 019B7910EE8C05C5F9102A9E794EA21A66A6 Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/EZD3o1Jh1Z1Yh1oogNIIIocP_Yw.roa Signing time: Thu 01 Jan 2026 10:18:31 +0000 ROA not before: Thu 01 Jan 2026 10:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31400 IP address blocks: 5.183.95.0/24 maxlen: 24 45.86.163.0/24 maxlen: 24 46.30.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 16:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:ee:8c:05:c5:f9:10:2a:9e:79:4e:a2:1a:66:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6 Validity Not Before: Jan 1 10:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1190f7a35261d59d58875a2880d20822870ffd8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e8:9d:b0:cb:a4:ae:af:ad:4f:dc:2a:ba:35: 70:8e:c5:4b:df:8a:18:2a:d4:67:98:28:a6:96:0d: 1f:98:1b:ea:dd:69:cd:2b:d5:b8:d2:60:ae:d2:41: ee:a6:c6:18:2b:fe:d4:60:53:24:4e:71:ef:1a:f6: 11:df:d0:ba:94:7a:5f:e5:a5:84:17:86:8d:ae:1f: 21:10:48:42:6b:cc:11:8c:73:3b:0d:be:08:8c:af: ba:df:2a:f1:fa:13:f4:c4:b3:a9:45:43:40:97:6f: c6:f1:25:e6:97:56:cf:ea:bb:0d:c1:20:14:96:72: 38:ba:34:f8:76:e1:df:28:bd:cd:6a:31:90:de:6e: 87:20:54:57:a3:eb:c0:b0:b2:12:8d:41:57:72:d7: 62:83:ba:a1:0e:99:31:c6:2b:c6:0f:e1:4f:c1:12: dd:19:71:60:45:e3:95:52:61:98:53:71:8e:04:fe: 09:82:e9:86:80:a4:98:f8:a4:73:e8:d2:fc:44:97: 4b:da:05:78:08:85:f6:34:a7:9f:b9:ca:81:50:c6: 8b:40:94:42:3f:f7:02:e7:40:04:7b:e7:15:26:92: b6:04:93:2f:e2:76:ff:b1:8b:7e:62:b0:ae:65:17: c3:48:86:11:61:60:7f:7e:c9:ed:c4:0a:f2:c0:4c: 53:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:90:F7:A3:52:61:D5:9D:58:87:5A:28:80:D2:08:22:87:0F:FD:8C X509v3 Authority Key Identifier: keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/EZD3o1Jh1Z1Yh1oogNIIIocP_Yw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.183.95.0/24 45.86.163.0/24 46.30.189.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:30:27:2c:ec:42:1d:f2:e0:ad:3b:bc:45:37:35:f5:62:60: 9b:4f:54:dd:6f:86:b2:66:a3:0a:42:74:3b:42:63:03:64:21: 6c:45:c5:34:3b:9d:62:29:42:4a:55:45:9a:60:8a:4b:73:2c: 13:83:0f:b9:89:7a:ac:df:cd:0a:48:81:1f:8d:99:cb:9b:d5: 03:d2:a3:a3:22:0e:aa:aa:91:e9:79:ed:bc:19:5f:40:8f:6f: f4:1b:80:85:d3:7d:0d:7c:c9:0c:13:8c:48:cc:f1:27:da:a0: cc:3e:ab:95:22:34:bb:27:d0:56:88:51:89:2f:32:ef:21:7b: b5:c7:65:fb:ea:57:59:62:20:bc:53:66:84:7f:68:36:e3:aa: 50:44:83:7f:27:45:0a:ca:6b:55:80:e4:fc:25:3b:c6:3e:fe: 03:f1:42:7d:7f:15:04:3b:31:f8:25:76:c7:7c:33:4f:1b:b5: e9:74:34:ec:bd:42:79:45:7c:7f:6c:7e:1d:a7:4a:58:ba:f8: 49:b9:ad:e3:e3:69:7f:77:ac:da:d0:52:93:4e:1d:82:4b:b4: d1:e9:86:38:c1:2d:fb:31:07:83:fb:4d:6f:41:d1:e9:54:36: fe:27:2e:0f:8a:cf:0e:e8:ab:ad:40:50:59:ac:41:07:84:4d: 22:de:c6:66 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5EO6MBcX5ECqeeU6iGmamMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZDBjNDlhMGU5N2UwZDVmM2NlZDNiN2I2YjlmNzJjYTBj YjUzZDYwHhcNMjYwMTAxMTAxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMTkwZjdhMzUyNjFkNTlkNTg4NzVhMjg4MGQyMDgyMjg3MGZmZDhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluidsMukrq+tT9wqujVwjsVL34oY KtRnmCimlg0fmBvq3WnNK9W40mCu0kHupsYYK/7UYFMkTnHvGvYR39C6lHpf5aWE F4aNrh8hEEhCa8wRjHM7Db4IjK+63yrx+hP0xLOpRUNAl2/G8SXml1bP6rsNwSAU lnI4ujT4duHfKL3NajGQ3m6HIFRXo+vAsLISjUFXctdig7qhDpkxxivGD+FPwRLd GXFgReOVUmGYU3GOBP4JgumGgKSY+KRz6NL8RJdL2gV4CIX2NKefucqBUMaLQJRC P/cC50AEe+cVJpK2BJMv4nb/sYt+YrCuZRfDSIYRYWB/fsntxArywExTmQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFBGQ96NSYdWdWIdaKIDSCCKHD/2MMB8GA1UdIwQY MBaAFOLQxJoOl+DV887Tt7a59yygy1PWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEt NDY5MGEwMDcxNDFmLzEvRVpEM28xSmgxWjFZaDFvb2dOSUlJb2NQX1l3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEtNDY5MGEwMDcxNDFm LzEvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABbdfAwQA LVajAwQALh69MA0GCSqGSIb3DQEBCwUAA4IBAQBaMCcs7EId8uCtO7xFNzX1YmCb T1Tdb4ayZqMKQnQ7QmMDZCFsRcU0O51iKUJKVUWaYIpLcywTgw+5iXqs380KSIEf jZnLm9UD0qOjIg6qqpHpee28GV9Aj2/0G4CF030NfMkME4xIzPEn2qDMPquVIjS7 J9BWiFGJLzLvIXu1x2X76ldZYiC8U2aEf2g246pQRIN/J0UKymtVgOT8JTvGPv4D 8UJ9fxUEOzH4JXbHfDNPG7XpdDTsvUJ5RXx/bH4dp0pYuvhJua3j42l/d6za0FKT Th2CS7TR6YY4wS37MQeD+01vQdHpVDb+Jy4Pis8O6KutQFBZrEEHhE0i3sZm -----END CERTIFICATE-----Generated at Sun Jan 25 03:16:14 2026 by rpki-client