This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/ExTCIeQK6Vb8OCwCNuc_-quqRmI.roa File: ExTCIeQK6Vb8OCwCNuc_-quqRmI.roa (raw, json) Hash identifier: yAl2sJH2YaylYmZhqm6jDAUkF463bPlFn5SJl2V0nqk= Subject key identifier: 13:14:C2:21:E4:0A:E9:56:FC:38:2C:02:36:E7:3F:FA:AB:AA:46:62 Certificate issuer: /CN=a5c6373eab19cf43dd2f43111398383ee2bad030 Certificate serial: 019B7BA5206FFD1A3F217F5DCBD634D61209 Authority key identifier: A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/ExTCIeQK6Vb8OCwCNuc_-quqRmI.roa Signing time: Thu 01 Jan 2026 22:19:37 +0000 ROA not before: Thu 01 Jan 2026 22:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 185.228.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:20:6f:fd:1a:3f:21:7f:5d:cb:d6:34:d6:12:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5c6373eab19cf43dd2f43111398383ee2bad030 Validity Not Before: Jan 1 22:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1314c221e40ae956fc382c0236e73ffaabaa4662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3f:41:cf:6a:71:b3:66:ae:3c:45:1a:a2:c3: 1e:80:75:b2:b3:bc:4d:e4:2f:d4:e0:22:79:2a:02: 98:5f:2f:9e:60:19:bd:17:b7:5a:9d:9a:cb:6d:10: 52:c6:1f:a0:70:72:13:8a:cb:59:ff:0c:16:f2:73: ff:b0:98:6a:aa:62:a6:49:4d:b2:f7:e1:63:66:c7: b0:08:ad:fd:de:b0:aa:b3:a0:ec:d1:a9:bd:76:fb: eb:2b:b4:1a:57:cf:6e:0d:c1:20:d2:a5:4b:68:da: e3:3c:8c:69:19:2c:ce:c8:c8:ef:3f:8b:95:d2:d6: b5:04:f4:59:39:c1:c3:a5:20:af:a4:7f:f7:2e:ee: 3f:ef:28:b9:b2:2d:d6:cb:e1:96:d5:a3:75:4f:57: ef:70:04:0e:11:62:86:26:59:48:c0:e7:65:9e:2d: 16:0c:c1:37:66:94:af:8c:ab:16:44:55:fb:10:0d: 43:b6:e0:04:2b:3c:c9:cf:a7:c7:d1:b4:90:71:92: a6:e1:64:90:03:2d:47:ef:cc:a1:fd:f1:22:b4:9f: 0a:67:15:a0:a3:29:f7:c6:42:cd:36:de:f4:6a:c9: 6b:b3:2d:52:20:79:67:1e:b5:ee:b0:cd:a3:95:62: 89:ad:01:48:e1:6a:df:fc:46:fa:17:b3:f0:c6:bd: b6:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:14:C2:21:E4:0A:E9:56:FC:38:2C:02:36:E7:3F:FA:AB:AA:46:62 X509v3 Authority Key Identifier: keyid:A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/ExTCIeQK6Vb8OCwCNuc_-quqRmI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.228.2.0/24 Signature Algorithm: sha256WithRSAEncryption 80:2f:c4:24:b6:79:fb:ed:4a:fa:cb:36:97:14:f1:60:3a:88: 6f:52:a8:cc:8d:3a:50:58:6a:6e:e3:d6:b3:f7:59:bc:24:45: 0f:c4:84:d8:31:25:b5:d0:ef:58:0a:9f:d6:55:0b:2f:c4:86: ed:e0:b9:39:ca:c1:56:2f:88:5e:8f:00:6e:cc:c8:ad:04:0c: df:e2:a0:ab:d7:85:a5:7f:d9:b1:7a:a5:71:78:d4:1a:fd:65: 86:85:29:66:9d:82:54:75:25:92:38:60:b4:3d:89:c9:26:59: 8b:32:63:b3:55:e3:20:d4:bf:e9:60:dd:d6:28:d0:11:fd:8c: d7:96:ef:7b:9f:72:06:d0:7b:55:83:22:65:88:13:68:96:af: 54:ca:c7:32:c6:94:4b:9d:1b:a9:bd:24:d9:35:0a:7f:a5:c1: 7d:a5:15:89:de:17:a4:f3:8f:a9:1e:28:22:98:11:e0:05:cd: b4:1f:69:24:51:25:24:1c:2b:50:ab:36:42:0e:41:17:48:d3: 36:29:75:e4:f6:03:ff:97:aa:31:22:6e:31:ee:cb:96:70:51: 6c:5c:cd:4c:61:0c:56:e2:36:e7:ce:65:e7:ca:b3:b0:ca:ee: 9c:27:e7:c6:74:d2:aa:aa:db:f3:c1:66:b3:bb:6e:07:84:66: 77:24:13:4f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pSBv/Ro/IX9dy9Y01hIJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YzYzNzNlYWIxOWNmNDNkZDJmNDMxMTEzOTgzODNlZTJi YWQwMzAwHhcNMjYwMTAxMjIxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzE0YzIyMWU0MGFlOTU2ZmMzODJjMDIzNmU3M2ZmYWFiYWE0NjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArz9Bz2pxs2auPEUaosMegHWys7xN 5C/U4CJ5KgKYXy+eYBm9F7danZrLbRBSxh+gcHITistZ/wwW8nP/sJhqqmKmSU2y 9+FjZsewCK393rCqs6Ds0am9dvvrK7QaV89uDcEg0qVLaNrjPIxpGSzOyMjvP4uV 0ta1BPRZOcHDpSCvpH/3Lu4/7yi5si3Wy+GW1aN1T1fvcAQOEWKGJllIwOdlni0W DME3ZpSvjKsWRFX7EA1DtuAEKzzJz6fH0bSQcZKm4WSQAy1H78yh/fEitJ8KZxWg oyn3xkLNNt70aslrsy1SIHlnHrXusM2jlWKJrQFI4Wrf/Eb6F7Pwxr22kQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBMUwiHkCulW/DgsAjbnP/qrqkZiMB8GA1UdIwQY MBaAFKXGNz6rGc9D3S9DEROYOD7iutAwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGNZM1Bxc1p6MFBkTDBNUkU1ZzRQdUs2MERBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9mMGY1ZTMtNjA1MC00ZTJkLWE0ZWEt YTRlYTBhNjNmNzY2LzEvRXhUQ0llUUs2VmI4T0N3Q051Y18tcXVxUm1JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9mMGY1ZTMtNjA1MC00ZTJkLWE0ZWEtYTRlYTBhNjNmNzY2 LzEvcGNZM1Bxc1p6MFBkTDBNUkU1ZzRQdUs2MERBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueQCMA0G CSqGSIb3DQEBCwUAA4IBAQCAL8Qktnn77Ur6yzaXFPFgOohvUqjMjTpQWGpu49az 91m8JEUPxITYMSW10O9YCp/WVQsvxIbt4Lk5ysFWL4hejwBuzMitBAzf4qCr14Wl f9mxeqVxeNQa/WWGhSlmnYJUdSWSOGC0PYnJJlmLMmOzVeMg1L/pYN3WKNAR/YzX lu97n3IG0HtVgyJliBNolq9UyscyxpRLnRupvSTZNQp/pcF9pRWJ3hek84+pHigi mBHgBc20H2kkUSUkHCtQqzZCDkEXSNM2KXXk9gP/l6oxIm4x7suWcFFsXM1MYQxW 4jbnzmXnyrOwyu6cJ+fGdNKqqtvzwWazu24HhGZ3JBNP -----END CERTIFICATE-----Generated at Wed Jan 21 10:28:40 2026 by rpki-client