This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/EkKLuZw4LV_kTAmqXpErqPpsQB0.roa File: EkKLuZw4LV_kTAmqXpErqPpsQB0.roa (raw, json) Hash identifier: NBo+lqt+AsFMxVrnLsaa8l21I1AWQ5KFNlmQ5ApE1BQ= Subject key identifier: 12:42:8B:B9:9C:38:2D:5F:E4:4C:09:AA:5E:91:2B:A8:FA:6C:40:1D Certificate issuer: /CN=20e114a8fec3f53cbe9cbf6d6a0be0089e30c757 Certificate serial: 019B7C13283068E453F30F4CCB10B06FC803 Authority key identifier: 20:E1:14:A8:FE:C3:F5:3C:BE:9C:BF:6D:6A:0B:E0:08:9E:30:C7:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/EkKLuZw4LV_kTAmqXpErqPpsQB0.roa Signing time: Fri 02 Jan 2026 00:19:48 +0000 ROA not before: Fri 02 Jan 2026 00:19:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61984 IP address blocks: 185.51.176.0/22 maxlen: 22 2a01:b0e0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.mft rsync://rpki.ripe.net/repository/DEFAULT/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:28:30:68:e4:53:f3:0f:4c:cb:10:b0:6f:c8:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e114a8fec3f53cbe9cbf6d6a0be0089e30c757 Validity Not Before: Jan 2 00:19:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=12428bb99c382d5fe44c09aa5e912ba8fa6c401d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2b:d8:12:02:a4:62:45:6d:55:cd:04:76:89: 17:47:98:a4:5e:df:2c:bc:2b:c0:ef:26:08:92:9f: 5b:ed:9d:3f:5d:44:c5:cb:ed:8b:aa:3f:58:84:dc: ae:da:1f:70:f4:36:3d:40:4e:03:87:86:bf:fd:b4: c9:3f:25:58:ec:9b:13:22:5a:5b:86:5c:96:c2:92: 86:bd:57:cb:36:de:a2:9c:36:fe:e3:da:2d:9a:bc: 6b:bf:f0:3d:dd:75:e3:85:22:0c:fb:af:0e:c9:80: 33:83:b8:8a:7c:8b:a9:32:d1:18:8b:03:77:1f:7e: 07:c1:32:9e:db:4e:f2:35:e3:88:80:c9:fc:79:32: e6:2a:46:36:ce:bf:35:db:00:ba:f1:48:52:23:6b: 38:f8:30:cd:4e:48:17:ef:c8:63:85:70:96:bf:40: 81:35:a4:b1:ad:93:6c:4b:fd:01:4b:c0:90:9c:40: bd:bf:51:6e:91:41:35:4a:bf:4e:d1:58:d0:c2:b8: 2f:61:81:10:a2:53:5d:2b:64:1c:1b:65:20:6a:41: 06:2c:6b:b3:8f:ee:42:9f:4f:27:e0:d7:3a:bf:d8: 96:13:4c:dc:a1:83:49:f4:e8:62:21:1c:64:05:5a: 99:32:b6:4c:dc:3f:11:c3:95:06:02:3c:e9:91:00: b2:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:42:8B:B9:9C:38:2D:5F:E4:4C:09:AA:5E:91:2B:A8:FA:6C:40:1D X509v3 Authority Key Identifier: keyid:20:E1:14:A8:FE:C3:F5:3C:BE:9C:BF:6D:6A:0B:E0:08:9E:30:C7:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/EkKLuZw4LV_kTAmqXpErqPpsQB0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/595db6-8920-4231-ad01-3534c8c5a351/1/IOEUqP7D9Ty-nL9tagvgCJ4wx1c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.51.176.0/22 IPv6: 2a01:b0e0::/32 Signature Algorithm: sha256WithRSAEncryption 7e:38:c7:36:a1:cc:dd:c5:2f:54:7b:29:bd:77:be:7c:8f:df: b8:af:3c:23:da:da:66:e9:d6:3d:a8:52:94:66:5b:6b:ab:09: 79:af:aa:ee:0c:4c:66:f8:2e:07:c8:71:14:5a:b3:ca:68:a2: c9:41:05:9f:9e:66:da:f1:43:38:6a:fb:8f:cc:b5:48:bc:25: 82:a9:2e:f0:3d:f2:cc:6e:43:b2:34:93:61:2c:05:38:a3:0c: 87:28:f7:e1:ae:7b:bc:86:23:de:27:31:e5:20:f2:c3:5d:f0: 0c:e9:2e:89:47:4a:2f:5a:b8:c3:65:a2:cc:40:51:ef:84:c2: 93:ae:b6:b3:88:18:f4:f4:c7:1a:f1:a3:07:3c:09:ad:ce:bf: 88:95:54:69:31:cd:c3:20:61:05:a6:ef:4b:6f:9f:dc:6d:89: 52:37:8c:60:12:89:65:f7:42:85:48:f2:a3:c4:fa:72:76:05: b0:15:5f:fa:f5:5f:71:f0:1a:e0:48:68:83:77:e2:73:e9:16: 61:6a:e3:0b:af:86:dc:a5:f1:9e:e2:45:46:3f:f6:ae:d7:bb: 2e:f7:75:f1:52:c2:d9:db:12:72:e5:4e:d2:49:3c:a1:0c:60: 43:2f:27:36:ce:53:69:1b:6a:ee:c3:94:c7:87:54:54:f1:c5: 78:1e:3a:b2 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8EygwaORT8w9MyxCwb8gDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZTExNGE4ZmVjM2Y1M2NiZTljYmY2ZDZhMGJlMDA4OWUz MGM3NTcwHhcNMjYwMTAyMDAxOTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjQyOGJiOTljMzgyZDVmZTQ0YzA5YWE1ZTkxMmJhOGZhNmM0MDFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCvYEgKkYkVtVc0EdokXR5ikXt8s vCvA7yYIkp9b7Z0/XUTFy+2Lqj9YhNyu2h9w9DY9QE4Dh4a//bTJPyVY7JsTIlpb hlyWwpKGvVfLNt6inDb+49otmrxrv/A93XXjhSIM+68OyYAzg7iKfIupMtEYiwN3 H34HwTKe207yNeOIgMn8eTLmKkY2zr812wC68UhSI2s4+DDNTkgX78hjhXCWv0CB NaSxrZNsS/0BS8CQnEC9v1FukUE1Sr9O0VjQwrgvYYEQolNdK2QcG2UgakEGLGuz j+5Cn08n4Nc6v9iWE0zcoYNJ9OhiIRxkBVqZMrZM3D8Rw5UGAjzpkQCyoQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBJCi7mcOC1f5EwJql6RK6j6bEAdMB8GA1UdIwQY MBaAFCDhFKj+w/U8vpy/bWoL4AieMMdXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU9FVXFQN0Q5VHktbkw5dGFndmdDSjR3eDFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS81OTVkYjYtODkyMC00MjMxLWFkMDEt MzUzNGM4YzVhMzUxLzEvRWtLTHVadzRMVl9rVEFtcVhwRXJxUHBzUUIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS81OTVkYjYtODkyMC00MjMxLWFkMDEtMzUzNGM4YzVhMzUx LzEvSU9FVXFQN0Q5VHktbkw5dGFndmdDSjR3eDFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuTOwMA0E AgACMAcDBQAqAbDgMA0GCSqGSIb3DQEBCwUAA4IBAQB+OMc2oczdxS9Ueym9d758 j9+4rzwj2tpm6dY9qFKUZltrqwl5r6ruDExm+C4HyHEUWrPKaKLJQQWfnmba8UM4 avuPzLVIvCWCqS7wPfLMbkOyNJNhLAU4owyHKPfhrnu8hiPeJzHlIPLDXfAM6S6J R0ovWrjDZaLMQFHvhMKTrraziBj09Mca8aMHPAmtzr+IlVRpMc3DIGEFpu9Lb5/c bYlSN4xgEoll90KFSPKjxPpydgWwFV/69V9x8BrgSGiDd+Jz6RZhauMLr4bcpfGe 4kVGP/au17su93XxUsLZ2xJy5U7SSTyhDGBDLyc2zlNpG2ruw5THh1RU8cV4Hjqy -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:29 2026 by rpki-client