This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/xC-EAU29A34DWs98hyrYzhXpyZ8.roa File: xC-EAU29A34DWs98hyrYzhXpyZ8.roa (raw, json) Hash identifier: jAQevc7Xb/Yzwsa/p7bJP+rHW+tHRc2iSYt5PmCJM2M= Subject key identifier: C4:2F:84:01:4D:BD:03:7E:03:5A:CF:7C:87:2A:D8:CE:15:E9:C9:9F Certificate issuer: /CN=a5c6373eab19cf43dd2f43111398383ee2bad030 Certificate serial: 019B7BA521EDAC8100A3AE06192F726DBB43 Authority key identifier: A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/xC-EAU29A34DWs98hyrYzhXpyZ8.roa Signing time: Thu 01 Jan 2026 22:19:38 +0000 ROA not before: Thu 01 Jan 2026 22:19:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202636 IP address blocks: 185.142.200.0/24 maxlen: 24 185.142.201.0/24 maxlen: 24 185.142.202.0/24 maxlen: 24 185.142.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:21:ed:ac:81:00:a3:ae:06:19:2f:72:6d:bb:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5c6373eab19cf43dd2f43111398383ee2bad030 Validity Not Before: Jan 1 22:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c42f84014dbd037e035acf7c872ad8ce15e9c99f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fe:e8:8b:3d:96:2c:27:71:0e:af:20:ed:0b: cd:63:9f:c4:bd:d5:1f:83:a8:76:94:73:2d:9c:91: 91:8c:10:b9:a0:62:7c:2d:b3:52:f4:32:6a:b8:c2: 6f:3d:f0:2b:57:0d:a0:a1:40:12:a3:15:47:4c:0b: cf:6e:be:0f:e0:3d:f7:a7:9d:05:36:a2:df:63:42: 84:2c:79:5c:30:99:9b:56:0c:d0:8a:fa:58:d2:b1: 86:4c:f6:c2:ab:68:c3:27:f5:5b:b7:6e:1a:e4:47: 47:02:df:32:a3:79:d1:5b:99:3f:7f:24:c5:6f:cb: 78:7c:1f:09:16:be:b0:ca:e3:06:45:95:1b:35:f6: 89:4c:5a:4e:62:6e:3c:9f:3c:55:dc:82:db:bd:54: a9:0d:b8:7f:e6:94:cf:9f:b0:18:f2:7e:2e:01:76: c2:4f:b3:75:11:91:63:69:1b:5b:95:4d:d5:47:7f: 1b:f6:90:21:10:ed:cd:d4:70:10:8c:fb:f2:2f:1a: ed:a7:66:f3:82:54:a5:b0:d3:01:c2:71:ac:0c:e0: 59:a8:01:6a:8f:35:59:a6:0b:f3:1e:3d:52:91:f6: 03:ba:00:27:40:29:c7:57:ef:36:d0:0f:d2:0f:fb: 1c:6d:f3:e1:04:a5:cb:b5:1c:d5:95:0b:7e:5c:4f: 5e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:2F:84:01:4D:BD:03:7E:03:5A:CF:7C:87:2A:D8:CE:15:E9:C9:9F X509v3 Authority Key Identifier: keyid:A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/xC-EAU29A34DWs98hyrYzhXpyZ8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.142.200.0/22 Signature Algorithm: sha256WithRSAEncryption 54:65:87:3b:c6:44:4c:3c:4a:a4:6d:3a:bc:da:94:f8:97:e9: 89:67:9a:79:cf:84:c6:1b:a1:8f:af:5c:cf:06:7d:3f:4c:01: fc:c6:8e:ab:09:19:01:56:ac:06:b3:d1:7c:56:80:77:79:20: 74:01:a0:2a:d6:14:3e:51:8d:c7:dc:73:2a:4b:53:1c:83:b3: 49:cb:9f:d2:0b:4d:11:e9:85:56:0c:17:23:90:17:e0:b6:6c: 57:e2:04:24:ea:92:93:06:1c:9c:c2:c5:16:f9:b6:b7:5b:79: 1b:8c:e6:65:d1:9d:41:1b:d5:d1:16:c9:c4:15:11:57:aa:31: 4e:a7:4b:76:69:32:eb:f5:2b:50:c4:53:6d:5d:4b:9f:59:ed: 24:8a:86:1e:43:f2:63:aa:24:4b:46:b8:b6:93:9b:93:ce:cb: bb:6b:76:ae:14:dd:35:fc:5f:81:ed:3a:11:68:43:21:4a:5f: 51:cc:5d:bb:11:db:0b:30:ba:dd:d8:46:14:8a:f5:84:2a:c4: bd:98:d9:d6:08:5b:9f:2b:62:19:47:89:84:7c:e3:68:51:33: b8:a4:e8:1b:a4:88:fb:6d:59:00:3f:3e:80:09:95:c8:06:55: cd:21:a7:1b:7d:97:ad:c3:47:a3:05:9c:99:a2:55:d7:b2:27: 75:42:5d:cf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pSHtrIEAo64GGS9ybbtDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YzYzNzNlYWIxOWNmNDNkZDJmNDMxMTEzOTgzODNlZTJi YWQwMzAwHhcNMjYwMTAxMjIxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDJmODQwMTRkYmQwMzdlMDM1YWNmN2M4NzJhZDhjZTE1ZTljOTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuv7oiz2WLCdxDq8g7QvNY5/EvdUf g6h2lHMtnJGRjBC5oGJ8LbNS9DJquMJvPfArVw2goUASoxVHTAvPbr4P4D33p50F NqLfY0KELHlcMJmbVgzQivpY0rGGTPbCq2jDJ/Vbt24a5EdHAt8yo3nRW5k/fyTF b8t4fB8JFr6wyuMGRZUbNfaJTFpOYm48nzxV3ILbvVSpDbh/5pTPn7AY8n4uAXbC T7N1EZFjaRtblU3VR38b9pAhEO3N1HAQjPvyLxrtp2bzglSlsNMBwnGsDOBZqAFq jzVZpgvzHj1SkfYDugAnQCnHV+820A/SD/scbfPhBKXLtRzVlQt+XE9emwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMQvhAFNvQN+A1rPfIcq2M4V6cmfMB8GA1UdIwQY MBaAFKXGNz6rGc9D3S9DEROYOD7iutAwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGNZM1Bxc1p6MFBkTDBNUkU1ZzRQdUs2MERBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9mMGY1ZTMtNjA1MC00ZTJkLWE0ZWEt YTRlYTBhNjNmNzY2LzEveEMtRUFVMjlBMzREV3M5OGh5cll6aFhweVo4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9mMGY1ZTMtNjA1MC00ZTJkLWE0ZWEtYTRlYTBhNjNmNzY2 LzEvcGNZM1Bxc1p6MFBkTDBNUkU1ZzRQdUs2MERBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuY7IMA0G CSqGSIb3DQEBCwUAA4IBAQBUZYc7xkRMPEqkbTq82pT4l+mJZ5p5z4TGG6GPr1zP Bn0/TAH8xo6rCRkBVqwGs9F8VoB3eSB0AaAq1hQ+UY3H3HMqS1Mcg7NJy5/SC00R 6YVWDBcjkBfgtmxX4gQk6pKTBhycwsUW+ba3W3kbjOZl0Z1BG9XRFsnEFRFXqjFO p0t2aTLr9StQxFNtXUufWe0kioYeQ/JjqiRLRri2k5uTzsu7a3auFN01/F+B7ToR aEMhSl9RzF27EdsLMLrd2EYUivWEKsS9mNnWCFufK2IZR4mEfONoUTO4pOgbpIj7 bVkAPz6ACZXIBlXNIacbfZetw0ejBZyZolXXsid1Ql3P -----END CERTIFICATE-----Generated at Wed Jan 21 10:28:39 2026 by rpki-client