This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/ESKSicApbc_Lc7K1oxfrHyvWB2A.roa File: ESKSicApbc_Lc7K1oxfrHyvWB2A.roa (raw, json) Hash identifier: 9hp563pGKax4wS0ioE86wmQq8LK8c0yOcQLKfH9tKgk= Subject key identifier: 11:22:92:89:C0:29:6D:CF:CB:73:B2:B5:A3:17:EB:1F:2B:D6:07:60 Certificate issuer: /CN=d27b877f899341269bec67c6e3a0a888ba7ae98d Certificate serial: 019B7B36C718723C01F0FF0FEE14BE784566 Authority key identifier: D2:7B:87:7F:89:93:41:26:9B:EC:67:C6:E3:A0:A8:88:BA:7A:E9:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nuHf4mTQSab7GfG46CoiLp66Y0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/ESKSicApbc_Lc7K1oxfrHyvWB2A.roa Signing time: Thu 01 Jan 2026 20:19:06 +0000 ROA not before: Thu 01 Jan 2026 20:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 195.234.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.mft rsync://rpki.ripe.net/repository/DEFAULT/0nuHf4mTQSab7GfG46CoiLp66Y0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:c7:18:72:3c:01:f0:ff:0f:ee:14:be:78:45:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d27b877f899341269bec67c6e3a0a888ba7ae98d Validity Not Before: Jan 1 20:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=11229289c0296dcfcb73b2b5a317eb1f2bd60760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a0:e3:78:f7:ec:3f:db:d5:cc:be:db:81:66: ad:34:8a:c7:e2:cb:ea:78:44:f7:93:a1:0a:52:37: a7:1c:bc:e3:dd:43:ab:d2:16:fa:d8:b1:9a:5d:71: 12:47:c8:de:ac:8d:ec:c1:93:62:80:20:3e:48:81: 34:18:9f:9c:90:66:9a:b2:73:25:7f:a1:ca:74:9f: cd:1e:11:67:ab:91:f6:d3:4c:0d:21:89:f3:c0:e7: 7a:93:28:1d:77:41:b9:a2:46:ba:09:f3:f2:85:2a: ac:c5:3f:0a:13:fc:92:f1:cb:dc:22:1e:90:08:10: 78:c4:70:6a:ab:09:5a:a9:b9:eb:c9:86:c4:55:93: 2b:cc:36:bf:af:29:38:6a:39:66:15:e3:45:8f:bb: ae:60:3b:e2:d4:7e:6b:b2:44:a4:79:75:29:81:6f: 78:bd:f8:d1:83:ff:b1:51:8e:78:ed:6b:da:55:df: 35:8e:fb:58:9f:1c:89:53:4e:50:e7:7e:db:59:bc: 0e:c3:d4:e1:12:c2:5e:4c:ac:bb:80:45:a5:9f:af: 26:3c:e0:5e:92:83:96:12:06:df:59:86:7e:25:a7: b8:5c:a7:8a:97:5e:40:07:bf:59:02:42:7f:9e:64: 95:82:1a:b1:2f:65:23:a3:cd:a9:56:2f:35:4e:05: ca:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:22:92:89:C0:29:6D:CF:CB:73:B2:B5:A3:17:EB:1F:2B:D6:07:60 X509v3 Authority Key Identifier: keyid:D2:7B:87:7F:89:93:41:26:9B:EC:67:C6:E3:A0:A8:88:BA:7A:E9:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nuHf4mTQSab7GfG46CoiLp66Y0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/ESKSicApbc_Lc7K1oxfrHyvWB2A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.234.34.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:c6:47:a6:fe:44:a4:3e:77:eb:88:ff:30:13:89:41:dc:d9: 3d:2e:f8:4c:54:f0:d2:15:64:40:62:e3:86:27:7b:d5:88:d6: 0c:2a:a1:38:74:05:bb:f7:30:c6:4a:5f:34:af:2b:33:87:ff: 20:35:2f:a0:9c:2a:fa:e0:b5:e4:6e:f0:e5:c8:df:22:70:f4: 50:1d:3f:e4:04:5c:f4:8a:f6:68:55:47:86:80:30:63:e2:13: 8f:f6:3f:a7:51:64:c2:ab:90:f9:ca:c4:a7:8c:e1:c9:59:15: 88:fd:78:6d:e9:fd:00:ff:1e:02:be:8e:f1:38:13:aa:79:e0: 4c:60:92:49:fa:8c:1a:60:98:61:6c:18:90:0b:2c:ea:f5:89: 8d:a0:16:f8:e7:f6:c0:2f:3e:fd:fc:76:53:8c:8e:4a:8c:1c: db:f0:e7:2d:f7:eb:88:64:41:4f:13:ff:88:59:02:1f:17:12: a7:42:cf:1a:7a:ad:81:16:2f:1f:31:4a:d3:a1:c9:2b:da:b3: f6:6b:fd:33:56:03:8d:fd:f2:c7:04:43:0a:66:17:36:b4:d8: 30:3b:ae:90:ea:c0:48:c3:fc:41:a3:dc:da:0c:14:11:6e:4e: 4f:88:11:3c:12:1d:d3:b6:86:ca:bd:98:8c:17:ff:ca:e7:c4: be:08:02:f2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NscYcjwB8P8P7hS+eEVmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyN2I4NzdmODk5MzQxMjY5YmVjNjdjNmUzYTBhODg4YmE3 YWU5OGQwHhcNMjYwMTAxMjAxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMTIyOTI4OWMwMjk2ZGNmY2I3M2IyYjVhMzE3ZWIxZjJiZDYwNzYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2aDjePfsP9vVzL7bgWatNIrH4svq eET3k6EKUjenHLzj3UOr0hb62LGaXXESR8jerI3swZNigCA+SIE0GJ+ckGaasnMl f6HKdJ/NHhFnq5H200wNIYnzwOd6kygdd0G5oka6CfPyhSqsxT8KE/yS8cvcIh6Q CBB4xHBqqwlaqbnryYbEVZMrzDa/ryk4ajlmFeNFj7uuYDvi1H5rskSkeXUpgW94 vfjRg/+xUY547WvaVd81jvtYnxyJU05Q537bWbwOw9ThEsJeTKy7gEWln68mPOBe koOWEgbfWYZ+Jae4XKeKl15AB79ZAkJ/nmSVghqxL2Ujo82pVi81TgXK5wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBEikonAKW3Py3OytaMX6x8r1gdgMB8GA1UdIwQY MBaAFNJ7h3+Jk0Emm+xnxuOgqIi6eumNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMG51SGY0bVRRU2FiN0dmRzQ2Q29pTHA2NlkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS80NDVlZDAtNDhiMy00MDhlLWExYmMt OTk3OWRmNTJiMDE4LzEvRVNLU2ljQXBiY19MYzdLMW94ZnJIeXZXQjJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS80NDVlZDAtNDhiMy00MDhlLWExYmMtOTk3OWRmNTJiMDE4 LzEvMG51SGY0bVRRU2FiN0dmRzQ2Q29pTHA2NlkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw+oiMA0G CSqGSIb3DQEBCwUAA4IBAQCaxkem/kSkPnfriP8wE4lB3Nk9LvhMVPDSFWRAYuOG J3vViNYMKqE4dAW79zDGSl80ryszh/8gNS+gnCr64LXkbvDlyN8icPRQHT/kBFz0 ivZoVUeGgDBj4hOP9j+nUWTCq5D5ysSnjOHJWRWI/Xht6f0A/x4Cvo7xOBOqeeBM YJJJ+owaYJhhbBiQCyzq9YmNoBb45/bALz79/HZTjI5KjBzb8Oct9+uIZEFPE/+I WQIfFxKnQs8aeq2BFi8fMUrTockr2rP2a/0zVgON/fLHBEMKZhc2tNgwO66Q6sBI w/xBo9zaDBQRbk5PiBE8Eh3TtobKvZiMF//K58S+CALy -----END CERTIFICATE-----Generated at Fri Jan 2 09:29:57 2026 by rpki-client