This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/eTNkVC7XWRHBzuyFVu3pxnwq3z4.roa File: eTNkVC7XWRHBzuyFVu3pxnwq3z4.roa (raw, json) Hash identifier: b8ZbPv94PI8PSCuaUsrniKkw7cN6jjfuOqQWfIOj1qo= Subject key identifier: 79:33:64:54:2E:D7:59:11:C1:CE:EC:85:56:ED:E9:C6:7C:2A:DF:3E Certificate issuer: /CN=43496584e5cf39b56874de8dc77aa3a6ff9e8a1e Certificate serial: 019B7F15FB9622793B905E5B4012441A4D43 Authority key identifier: 43:49:65:84:E5:CF:39:B5:68:74:DE:8D:C7:7A:A3:A6:FF:9E:8A:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/eTNkVC7XWRHBzuyFVu3pxnwq3z4.roa Signing time: Fri 02 Jan 2026 14:21:45 +0000 ROA not before: Fri 02 Jan 2026 14:21:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 185.1.106.0/24 maxlen: 24 2001:7f8:c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.mft rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:fb:96:22:79:3b:90:5e:5b:40:12:44:1a:4d:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43496584e5cf39b56874de8dc77aa3a6ff9e8a1e Validity Not Before: Jan 2 14:21:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=793364542ed75911c1ceec8556ede9c67c2adf3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:93:6f:4d:15:3f:b7:bb:fb:a8:17:96:48:e2: bc:6e:e8:b1:35:53:3f:80:66:79:98:11:29:78:31: ff:6b:26:01:16:dc:36:29:09:19:af:41:f9:66:fd: ec:c3:d4:b2:28:84:d8:19:9f:3d:74:5e:d9:35:fa: 05:66:1c:f7:b5:22:9b:56:c7:25:1a:79:d0:05:67: df:e0:a6:4a:f7:23:fc:69:61:d2:66:fc:e9:c2:e1: f9:e1:fe:55:f7:7d:d4:c7:50:ea:0a:d9:6d:24:00: c2:6a:e2:55:10:8f:58:84:0c:5f:38:18:28:2c:6b: f6:dc:78:c0:1a:85:24:25:85:75:25:25:33:16:c0: d9:ee:f2:00:b3:be:47:e1:9e:bd:8d:04:7e:6d:e4: 29:42:58:23:95:da:55:44:0d:c4:d6:ef:bf:4e:9e: 90:a6:9f:6d:a3:01:8c:2c:dc:73:fc:6a:12:c4:23: a9:6b:ea:6c:26:83:62:8d:99:a5:bb:63:49:2e:76: f4:f5:25:7e:51:66:06:cf:21:57:c6:64:6d:37:e2: 45:cb:d2:2e:96:45:b9:77:de:fe:7a:d3:a1:64:7f: 8c:80:19:b9:4c:75:af:71:6e:d9:85:6b:bf:db:fa: cb:44:f4:d4:97:9b:f7:16:17:e6:4b:06:11:f0:35: f8:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:33:64:54:2E:D7:59:11:C1:CE:EC:85:56:ED:E9:C6:7C:2A:DF:3E X509v3 Authority Key Identifier: keyid:43:49:65:84:E5:CF:39:B5:68:74:DE:8D:C7:7A:A3:A6:FF:9E:8A:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q0llhOXPObVodN6Nx3qjpv-eih4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/eTNkVC7XWRHBzuyFVu3pxnwq3z4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/fbc3a9-0564-4a2c-ab11-e2c9228aac53/1/Q0llhOXPObVodN6Nx3qjpv-eih4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.1.106.0/24 IPv6: 2001:7f8:c0::/48 Signature Algorithm: sha256WithRSAEncryption 88:9f:37:f6:15:20:05:1b:7f:85:40:aa:d1:ef:77:6a:da:f5: 09:06:f7:67:be:70:15:30:ed:5d:53:81:67:42:76:1a:59:fd: f7:9a:2b:a2:4b:70:a9:b3:96:26:26:d0:f6:99:cb:eb:b5:fb: bf:7f:47:08:14:3c:1d:ec:18:44:98:fa:cf:c7:f5:87:58:d0: 74:bf:8c:5b:c0:21:2e:97:a3:ad:5f:0e:6b:4c:af:3b:52:bc: 5d:6b:ba:e1:3f:df:92:03:b5:26:b5:f5:82:10:54:62:d5:4f: 01:f3:7b:57:84:d6:b1:aa:cd:b6:01:fe:b8:cf:68:15:b1:34: 56:d4:5e:3e:59:93:ad:5b:e9:be:72:fe:5c:e4:f3:57:3f:a2: 33:3f:a0:4f:e7:b7:70:12:01:79:fc:55:a8:62:aa:82:70:c6: 35:40:82:e6:f5:58:b8:76:b6:bd:0f:85:4c:3f:b9:7e:99:99: 6c:ac:b6:54:ef:af:11:b5:19:e1:22:3e:ec:5c:8e:aa:05:ef: 5f:de:28:6c:d1:b3:4b:7a:b4:02:b5:51:e0:4b:c7:f3:64:bc: a2:dd:71:2a:b5:9a:0f:54:07:b7:cc:05:7b:f8:78:4c:4b:d9: f3:d6:cc:ad:48:31:19:ac:89:12:01:61:cb:56:53:25:18:a1: d4:e4:5e:a3 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/FfuWInk7kF5bQBJEGk1DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzNDk2NTg0ZTVjZjM5YjU2ODc0ZGU4ZGM3N2FhM2E2ZmY5 ZThhMWUwHhcNMjYwMTAyMTQyMTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OTMzNjQ1NDJlZDc1OTExYzFjZWVjODU1NmVkZTljNjdjMmFkZjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupNvTRU/t7v7qBeWSOK8buixNVM/ gGZ5mBEpeDH/ayYBFtw2KQkZr0H5Zv3sw9SyKITYGZ89dF7ZNfoFZhz3tSKbVscl GnnQBWff4KZK9yP8aWHSZvzpwuH54f5V933Ux1DqCtltJADCauJVEI9YhAxfOBgo LGv23HjAGoUkJYV1JSUzFsDZ7vIAs75H4Z69jQR+beQpQlgjldpVRA3E1u+/Tp6Q pp9towGMLNxz/GoSxCOpa+psJoNijZmlu2NJLnb09SV+UWYGzyFXxmRtN+JFy9Iu lkW5d97+etOhZH+MgBm5THWvcW7ZhWu/2/rLRPTUl5v3FhfmSwYR8DX44QIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFHkzZFQu11kRwc7shVbt6cZ8Kt8+MB8GA1UdIwQY MBaAFENJZYTlzzm1aHTejcd6o6b/nooeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTBsbGhPWFBPYlZvZE42TngzcWpwdi1laWg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9mYmMzYTktMDU2NC00YTJjLWFiMTEt ZTJjOTIyOGFhYzUzLzEvZVROa1ZDN1hXUkhCenV5RlZ1M3B4bndxM3o0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9mYmMzYTktMDU2NC00YTJjLWFiMTEtZTJjOTIyOGFhYzUz LzEvUTBsbGhPWFBPYlZvZE42TngzcWpwdi1laWg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuQFqMA8E AgACMAkDBwAgAQf4AMAwDQYJKoZIhvcNAQELBQADggEBAIifN/YVIAUbf4VAqtHv d2ra9QkG92e+cBUw7V1TgWdCdhpZ/feaK6JLcKmzliYm0PaZy+u1+79/RwgUPB3s GESY+s/H9YdY0HS/jFvAIS6Xo61fDmtMrztSvF1ruuE/35IDtSa19YIQVGLVTwHz e1eE1rGqzbYB/rjPaBWxNFbUXj5Zk61b6b5y/lzk81c/ojM/oE/nt3ASAXn8Vahi qoJwxjVAgub1WLh2tr0PhUw/uX6ZmWystlTvrxG1GeEiPuxcjqoF71/eKGzRs0t6 tAK1UeBLx/NkvKLdcSq1mg9UB7fMBXv4eExL2fPWzK1IMRmsiRIBYctWUyUYodTk XqM= -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:36 2026 by rpki-client