This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/Hb7ebDFFRZqJEOZO-n-RjqAsiO8.roa File: Hb7ebDFFRZqJEOZO-n-RjqAsiO8.roa (raw, json) Hash identifier: 9v/kq6wq1tmBm34TkO2qwrxM6Dr/nUlLL4cuH+DHyQY= Subject key identifier: 1D:BE:DE:6C:31:45:45:9A:89:10:E6:4E:FA:7F:91:8E:A0:2C:88:EF Certificate issuer: /CN=e1ef9694aa48d81279e8ede430795f2768d2dd52 Certificate serial: 019AE2B9562AEA3EF13553E2CF4086BB0C3B Authority key identifier: E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/Hb7ebDFFRZqJEOZO-n-RjqAsiO8.roa Signing time: Wed 03 Dec 2025 05:39:48 +0000 ROA not before: Wed 03 Dec 2025 05:39:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 185.39.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.mft rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e2:b9:56:2a:ea:3e:f1:35:53:e2:cf:40:86:bb:0c:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1ef9694aa48d81279e8ede430795f2768d2dd52 Validity Not Before: Dec 3 05:39:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1dbede6c3145459a8910e64efa7f918ea02c88ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:16:40:20:68:b4:e0:da:78:ad:53:01:cd:54: 0a:a4:33:9f:47:fb:32:69:09:94:50:0e:50:3e:fa: da:14:a1:67:26:be:0b:8f:03:a6:26:36:cb:04:d8: e1:52:88:09:f3:42:1f:92:66:23:fe:03:82:85:f4: 9d:1f:d5:69:f3:2b:b8:25:83:84:90:63:b8:7d:60: 1d:13:e9:d0:f0:f4:6b:25:25:f7:e2:0a:77:fa:7d: c0:7f:04:d9:b3:65:7c:cf:fa:5d:27:46:9d:cb:8b: fc:35:d5:0c:d3:56:5b:54:96:1c:f2:c2:5a:5b:d2: 86:14:84:4e:9a:44:fb:0c:60:f3:cb:b7:4f:33:c0: ca:8c:43:f8:58:0b:bb:9e:20:d6:e0:cf:3c:a8:39: 50:ed:60:bc:f2:09:a0:5d:94:91:53:9a:ab:ec:20: a1:ed:58:10:7d:b8:2f:32:f4:6f:c0:7c:69:2e:83: ba:3e:78:e3:7a:c3:82:0c:a5:a3:b7:d6:2f:87:0c: 8a:a0:02:e7:ca:f7:a2:14:6e:23:a3:94:8d:1e:0e: 8e:be:1b:b3:e6:6c:41:a3:fd:2e:b7:e5:c5:31:94: f5:5f:e3:c9:11:0f:a6:18:c0:5c:e1:8c:b8:9f:a6: b8:3b:fb:42:52:f8:26:1a:f0:51:06:a5:98:92:f8: 48:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:BE:DE:6C:31:45:45:9A:89:10:E6:4E:FA:7F:91:8E:A0:2C:88:EF X509v3 Authority Key Identifier: keyid:E1:EF:96:94:AA:48:D8:12:79:E8:ED:E4:30:79:5F:27:68:D2:DD:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/Hb7ebDFFRZqJEOZO-n-RjqAsiO8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b05667-e850-4c45-aee3-aded1c469eaf/1/4e-WlKpI2BJ56O3kMHlfJ2jS3VI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.39.50.0/24 Signature Algorithm: sha256WithRSAEncryption 26:2c:7a:8e:69:f4:e5:65:ae:f7:27:9b:32:a7:f3:e0:65:2d: 00:1a:59:60:64:dd:1f:14:83:37:cc:49:93:95:1c:a5:b6:ea: f1:fc:ca:ba:12:4c:1b:86:34:9a:00:76:86:d7:ec:b0:a1:a2: 08:68:5b:7d:a2:6d:9a:8e:d5:50:14:63:50:b3:c1:5a:f1:9f: 78:61:94:14:35:94:95:55:48:ab:00:93:91:46:a1:0f:5d:2a: d1:88:17:80:3a:ae:0c:5f:2a:8c:df:cf:49:27:71:9f:65:78: cf:d0:ca:ae:71:98:56:79:27:1b:c3:8a:ba:60:70:46:58:27: c5:85:cc:e8:b1:4b:7b:9f:d2:9a:3a:8c:0a:b8:bd:2c:28:de: 9b:35:88:7b:d2:2a:80:5c:cc:ea:d1:c1:b6:c3:79:ac:7a:90: 93:e7:db:6b:9f:c0:db:8e:61:37:a4:3f:16:3c:ae:53:ad:99: 10:89:84:6a:52:bc:c8:93:44:30:65:98:53:c7:10:54:49:18: 28:09:6d:44:c6:1e:f8:7c:15:f0:8e:49:d5:90:9b:18:6e:5b: dc:83:7e:26:de:62:7f:67:f2:34:97:4d:c3:12:69:9f:74:8b: f6:01:e3:d4:33:e9:28:67:c0:f2:4a:73:f7:07:a8:ae:6f:73: c7:f4:ff:17 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZriuVYq6j7xNVPiz0CGuww7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZWY5Njk0YWE0OGQ4MTI3OWU4ZWRlNDMwNzk1ZjI3Njhk MmRkNTIwHhcNMjUxMjAzMDUzOTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZGJlZGU2YzMxNDU0NTlhODkxMGU2NGVmYTdmOTE4ZWEwMmM4OGVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphZAIGi04Np4rVMBzVQKpDOfR/sy aQmUUA5QPvraFKFnJr4LjwOmJjbLBNjhUogJ80IfkmYj/gOChfSdH9Vp8yu4JYOE kGO4fWAdE+nQ8PRrJSX34gp3+n3AfwTZs2V8z/pdJ0ady4v8NdUM01ZbVJYc8sJa W9KGFIROmkT7DGDzy7dPM8DKjEP4WAu7niDW4M88qDlQ7WC88gmgXZSRU5qr7CCh 7VgQfbgvMvRvwHxpLoO6PnjjesOCDKWjt9YvhwyKoALnyveiFG4jo5SNHg6Ovhuz 5mxBo/0ut+XFMZT1X+PJEQ+mGMBc4Yy4n6a4O/tCUvgmGvBRBqWYkvhIJwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB2+3mwxRUWaiRDmTvp/kY6gLIjvMB8GA1UdIwQY MBaAFOHvlpSqSNgSeejt5DB5Xydo0t1SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGUtV2xLcEkyQko1Nk8za01IbGZKMmpTM1ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iMDU2NjctZTg1MC00YzQ1LWFlZTMt YWRlZDFjNDY5ZWFmLzEvSGI3ZWJERkZSWnFKRU9aTy1uLVJqcUFzaU84LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9iMDU2NjctZTg1MC00YzQ1LWFlZTMtYWRlZDFjNDY5ZWFm LzEvNGUtV2xLcEkyQko1Nk8za01IbGZKMmpTM1ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuScyMA0G CSqGSIb3DQEBCwUAA4IBAQAmLHqOafTlZa73J5syp/PgZS0AGllgZN0fFIM3zEmT lRylturx/Mq6EkwbhjSaAHaG1+ywoaIIaFt9om2ajtVQFGNQs8Fa8Z94YZQUNZSV VUirAJORRqEPXSrRiBeAOq4MXyqM389JJ3GfZXjP0MqucZhWeScbw4q6YHBGWCfF hczosUt7n9KaOowKuL0sKN6bNYh70iqAXMzq0cG2w3msepCT59trn8DbjmE3pD8W PK5TrZkQiYRqUrzIk0QwZZhTxxBUSRgoCW1Exh74fBXwjknVkJsYblvcg34m3mJ/ Z/I0l03DEmmfdIv2AePUM+koZ8DySnP3B6iub3PH9P8X -----END CERTIFICATE-----Generated at Sat Dec 6 17:19:53 2025 by rpki-client