This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Eka03ixTa0rbIVY3EVccaPzZLnY.roa File: Eka03ixTa0rbIVY3EVccaPzZLnY.roa (raw, json) Hash identifier: QrVBhgLUzt0geoj7tl25NtLMy6PhBoLaxRHmC7VNEtc= Subject key identifier: 12:46:B4:DE:2C:53:6B:4A:DB:21:56:37:11:57:1C:68:FC:D9:2E:76 Certificate issuer: /CN=521f0cba10daa302e3b167cee5395f742f530b09 Certificate serial: 019B0CEA71DAE642BC556E947665318A07DE Authority key identifier: 52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Eka03ixTa0rbIVY3EVccaPzZLnY.roa Signing time: Thu 11 Dec 2025 10:17:29 +0000 ROA not before: Thu 11 Dec 2025 10:17:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9205 IP address blocks: 87.76.128.0/17 maxlen: 17 87.76.254.0/23 maxlen: 23 193.110.112.0/22 maxlen: 22 193.110.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.mft rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0c:ea:71:da:e6:42:bc:55:6e:94:76:65:31:8a:07:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521f0cba10daa302e3b167cee5395f742f530b09 Validity Not Before: Dec 11 10:17:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1246b4de2c536b4adb21563711571c68fcd92e76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ba:46:cd:1b:77:87:a8:72:7e:93:8f:e3:e3: 86:7f:ea:e8:5d:a6:a6:26:59:3b:c5:41:fd:e5:2b: a2:07:f9:be:f7:8d:ce:42:8b:8c:b2:70:b6:7a:8f: e1:e2:fa:63:0a:77:24:25:05:9b:86:7d:76:9a:5c: 11:b6:9f:9e:da:7e:70:b0:a9:7a:05:9e:d0:79:a6: 52:23:be:7f:ae:8a:df:b5:7f:eb:04:4d:13:7c:cd: b8:cb:9f:74:16:37:dc:ea:a9:d1:f8:7e:a0:ea:b2: 7e:b0:dd:9b:8d:15:7e:43:3d:35:be:32:f8:35:98: 57:4b:91:a2:4c:40:a1:16:97:97:3a:68:9d:88:31: 0f:ac:e3:ff:ac:8d:d9:76:47:0d:05:c7:e3:da:2e: 05:a1:e0:93:b7:49:17:80:84:f2:2d:87:a7:70:98: c1:4c:c4:47:ab:d2:a7:bf:ea:26:ba:88:7c:de:fb: 68:67:5c:a5:d2:41:97:75:3e:5a:e2:f0:31:3f:11: 68:85:38:bc:b9:2f:71:f6:f6:99:81:62:ec:6a:41: bf:a0:0e:71:22:13:b4:44:54:6d:a1:0d:49:3e:8a: d4:91:a2:85:83:84:36:01:32:42:26:c2:49:7c:4b: c7:38:92:cf:31:62:31:c8:44:02:ab:ac:89:41:b8: 88:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:46:B4:DE:2C:53:6B:4A:DB:21:56:37:11:57:1C:68:FC:D9:2E:76 X509v3 Authority Key Identifier: keyid:52:1F:0C:BA:10:DA:A3:02:E3:B1:67:CE:E5:39:5F:74:2F:53:0B:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh8MuhDaowLjsWfO5TlfdC9TCwk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Eka03ixTa0rbIVY3EVccaPzZLnY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/68ce36-74e4-443b-aef1-3bb8b075d69f/1/Uh8MuhDaowLjsWfO5TlfdC9TCwk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.76.128.0/17 193.110.112.0/22 Signature Algorithm: sha256WithRSAEncryption 00:fc:aa:2a:a7:01:90:aa:14:3d:9f:92:d7:26:99:d1:4c:6c: b0:8f:6c:a6:ce:81:f7:dc:34:a6:a0:9c:d0:82:c8:71:99:d1: c4:2f:b3:53:5b:40:dc:62:b0:b0:aa:86:47:bd:b4:39:0c:a5: 05:06:5b:90:c0:2b:78:a8:93:18:ff:fd:31:7f:cb:0f:4f:8d: 52:90:09:9a:38:05:85:ae:d6:39:02:65:c2:be:57:e7:85:50: cf:ef:07:3c:c3:b2:c9:93:cf:11:d9:a8:9f:b0:fe:5d:52:2d: 45:5b:87:6e:0a:ce:4a:be:d6:d6:c8:67:49:49:c6:03:ff:90: 36:34:3e:1b:c4:d8:82:9f:2a:aa:7f:b0:7d:b0:71:82:b8:2a: 2a:d2:ef:0c:b4:ad:08:ed:da:f9:31:9b:e4:5f:38:8e:3d:ad: f0:31:74:da:c0:2a:de:72:30:0c:c9:d4:a4:1d:b2:4f:1b:0d: cd:e0:8a:ce:75:43:4d:ec:df:fa:ab:dd:e9:fc:43:4d:ee:9c: 03:d8:95:59:4c:cf:ff:43:f9:8a:a9:eb:f8:73:d0:56:82:56: 37:a8:32:62:1d:ae:af:89:63:3b:5c:28:11:4b:d0:92:ad:12: 50:6a:e5:5b:fc:a9:a4:64:cd:89:cd:0b:6f:6d:b1:83:86:ab: c9:7a:c3:0c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsM6nHa5kK8VW6UdmUxigfeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyMWYwY2JhMTBkYWEzMDJlM2IxNjdjZWU1Mzk1Zjc0MmY1 MzBiMDkwHhcNMjUxMjExMTAxNzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjQ2YjRkZTJjNTM2YjRhZGIyMTU2MzcxMTU3MWM2OGZjZDkyZTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrpGzRt3h6hyfpOP4+OGf+roXaam Jlk7xUH95SuiB/m+943OQouMsnC2eo/h4vpjCnckJQWbhn12mlwRtp+e2n5wsKl6 BZ7QeaZSI75/rorftX/rBE0TfM24y590Fjfc6qnR+H6g6rJ+sN2bjRV+Qz01vjL4 NZhXS5GiTEChFpeXOmidiDEPrOP/rI3ZdkcNBcfj2i4FoeCTt0kXgITyLYencJjB TMRHq9Knv+omuoh83vtoZ1yl0kGXdT5a4vAxPxFohTi8uS9x9vaZgWLsakG/oA5x IhO0RFRtoQ1JPorUkaKFg4Q2ATJCJsJJfEvHOJLPMWIxyEQCq6yJQbiILwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBJGtN4sU2tK2yFWNxFXHGj82S52MB8GA1UdIwQY MBaAFFIfDLoQ2qMC47FnzuU5X3QvUwsJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEt M2JiOGIwNzVkNjlmLzEvRWthMDNpeFRhMHJiSVZZM0VWY2NhUHpaTG5ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82OGNlMzYtNzRlNC00NDNiLWFlZjEtM2JiOGIwNzVkNjlm LzEvVWg4TXVoRGFvd0xqc1dmTzVUbGZkQzlUQ3drLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQHV0yAAwQC wW5wMA0GCSqGSIb3DQEBCwUAA4IBAQAA/KoqpwGQqhQ9n5LXJpnRTGywj2ymzoH3 3DSmoJzQgshxmdHEL7NTW0DcYrCwqoZHvbQ5DKUFBluQwCt4qJMY//0xf8sPT41S kAmaOAWFrtY5AmXCvlfnhVDP7wc8w7LJk88R2aifsP5dUi1FW4duCs5KvtbWyGdJ ScYD/5A2ND4bxNiCnyqqf7B9sHGCuCoq0u8MtK0I7dr5MZvkXziOPa3wMXTawCre cjAMydSkHbJPGw3N4IrOdUNN7N/6q93p/ENN7pwD2JVZTM//Q/mKqev4c9BWglY3 qDJiHa6viWM7XCgRS9CSrRJQauVb/KmkZM2JzQtvbbGDhqvJesMM -----END CERTIFICATE-----Generated at Sun Dec 14 06:00:35 2025 by rpki-client