This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/Ez7vdg6eB07lFL05DPjqJKCOdIo.roa File: Ez7vdg6eB07lFL05DPjqJKCOdIo.roa (raw, json) Hash identifier: fBYYvlQ87n8J9SuhX/gsPnpOFHNxq/I9XnmkEjxP+Js= Subject key identifier: 13:3E:EF:76:0E:9E:07:4E:E5:14:BD:39:0C:F8:EA:24:A0:8E:74:8A Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f Certificate serial: 019B77C6C50CFCAC93C55421ADF2BC9DFFD3 Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/Ez7vdg6eB07lFL05DPjqJKCOdIo.roa Signing time: Thu 01 Jan 2026 04:17:53 +0000 ROA not before: Thu 01 Jan 2026 04:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42532 IP address blocks: 37.128.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:c5:0c:fc:ac:93:c5:54:21:ad:f2:bc:9d:ff:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f Validity Not Before: Jan 1 04:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=133eef760e9e074ee514bd390cf8ea24a08e748a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:13:38:23:12:6f:22:09:c2:d8:66:ce:8a:22: b2:7d:6c:f7:75:29:dd:02:3b:c4:8c:e7:39:d4:b5: f0:0e:46:a6:a9:1a:4f:6f:a0:05:b6:0f:15:a2:21: 90:c9:c7:f0:75:5b:b3:cc:0a:3c:42:d5:e8:32:f9: e3:a8:9f:8c:d1:97:fb:3f:dc:29:d0:ba:18:ad:08: 62:a1:87:2a:b0:06:d4:20:31:8b:69:20:4a:4d:09: 1b:12:a2:88:45:69:b8:f8:1e:0c:e1:a6:67:39:80: 6d:7c:9a:1d:f5:f1:22:e2:6a:9d:6b:3d:29:e2:77: 9f:d9:35:be:9f:89:9d:7b:b1:39:b9:8a:e6:63:b0: cd:15:e3:33:75:8b:35:c3:ff:70:11:61:a8:db:5f: a2:5a:fa:e8:6b:2e:a3:ec:5b:f9:37:c8:cb:bc:e6: ad:4c:db:77:26:e7:66:9b:14:b3:f9:69:78:5f:65: 87:98:38:cb:fc:a0:65:cb:f8:06:73:4b:8b:18:e5: 41:c8:5a:2e:c6:54:33:47:27:f1:fc:b6:eb:aa:36: c5:5d:39:e8:0e:c1:da:68:47:c2:15:fc:85:71:60: 4c:0c:b6:1e:07:ab:6b:26:a5:3d:ba:e9:91:25:b5: 66:11:a9:4b:74:69:02:ee:cf:11:b0:19:c5:6c:f4: 66:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:3E:EF:76:0E:9E:07:4E:E5:14:BD:39:0C:F8:EA:24:A0:8E:74:8A X509v3 Authority Key Identifier: keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/Ez7vdg6eB07lFL05DPjqJKCOdIo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.128.204.0/22 Signature Algorithm: sha256WithRSAEncryption a0:25:f0:93:11:0f:dd:b9:39:bb:90:fc:d1:95:9f:a3:19:a2: 4c:6c:1a:39:ee:3c:2c:72:fc:5f:af:52:60:f6:50:39:d5:f8: 72:c1:14:6d:f7:a8:6b:a2:d1:b4:c4:78:55:8d:26:75:1b:3d: fe:0a:6b:cb:c1:bc:4f:4f:86:53:de:00:ce:ae:7b:88:f7:02: 24:53:46:fa:d8:a4:dc:4d:06:8b:70:d9:ce:c2:79:8a:bc:3d: 63:e5:60:6b:2f:46:69:14:6a:32:0d:7e:a1:af:0d:3c:c0:58: 14:69:60:5a:d2:e7:ac:80:b8:28:f8:b0:b2:06:e8:95:10:9d: 96:3a:2e:18:c3:56:bb:31:8f:36:88:92:47:1c:1f:d6:71:40: 02:bb:a4:e4:88:44:62:ae:8c:78:22:4f:99:bc:ad:f6:ef:b3: 3d:b5:ef:f6:e8:8f:e4:fd:68:70:aa:b2:33:9c:b1:81:31:53: bf:10:bf:44:72:f9:c7:a5:84:4a:f2:03:99:02:07:99:04:47: 22:3e:28:f1:93:b6:be:d2:3f:cd:ae:d0:02:18:06:24:96:c1: ad:d1:28:13:ce:16:23:0e:ed:81:be:7b:08:7f:83:46:b6:61: ec:b2:cc:f4:44:e7:f4:72:8f:9c:3f:03:54:cb:ac:89:19:09: 52:f5:1c:0a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xsUM/KyTxVQhrfK8nf/TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1 MWM3N2YwHhcNMjYwMTAxMDQxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzNlZWY3NjBlOWUwNzRlZTUxNGJkMzkwY2Y4ZWEyNGEwOGU3NDhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphM4IxJvIgnC2GbOiiKyfWz3dSnd AjvEjOc51LXwDkamqRpPb6AFtg8VoiGQycfwdVuzzAo8QtXoMvnjqJ+M0Zf7P9wp 0LoYrQhioYcqsAbUIDGLaSBKTQkbEqKIRWm4+B4M4aZnOYBtfJod9fEi4mqdaz0p 4nef2TW+n4mde7E5uYrmY7DNFeMzdYs1w/9wEWGo21+iWvroay6j7Fv5N8jLvOat TNt3JudmmxSz+Wl4X2WHmDjL/KBly/gGc0uLGOVByFouxlQzRyfx/LbrqjbFXTno DsHaaEfCFfyFcWBMDLYeB6trJqU9uumRJbVmEalLdGkC7s8RsBnFbPRmBwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBM+73YOngdO5RS9OQz46iSgjnSKMB8GA1UdIwQY MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt MmNmODA2YjJkMGYyLzEvRXo3dmRnNmVCMDdsRkwwNURQanFKS0NPZElvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJYDMMA0G CSqGSIb3DQEBCwUAA4IBAQCgJfCTEQ/duTm7kPzRlZ+jGaJMbBo57jwscvxfr1Jg 9lA51fhywRRt96hrotG0xHhVjSZ1Gz3+CmvLwbxPT4ZT3gDOrnuI9wIkU0b62KTc TQaLcNnOwnmKvD1j5WBrL0ZpFGoyDX6hrw08wFgUaWBa0uesgLgo+LCyBuiVEJ2W Oi4Yw1a7MY82iJJHHB/WcUACu6TkiERirox4Ik+ZvK3277M9te/26I/k/WhwqrIz nLGBMVO/EL9EcvnHpYRK8gOZAgeZBEciPijxk7a+0j/NrtACGAYklsGt0SgTzhYj Du2BvnsIf4NGtmHsssz0ROf0co+cPwNUy6yJGQlS9RwK -----END CERTIFICATE-----Generated at Wed Jan 21 12:19:13 2026 by rpki-client