This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/EF6wYbA_tNHh_pfGdOAXHWndG4Y.roa File: EF6wYbA_tNHh_pfGdOAXHWndG4Y.roa (raw, json) Hash identifier: HEnA/jjUwJsJS9frddwF7zCBLNyDgGbLAaT2mXeeKVM= Subject key identifier: 10:5E:B0:61:B0:3F:B4:D1:E1:FE:97:C6:74:E0:17:1D:69:DD:1B:86 Certificate issuer: /CN=cedd0d715e97fb91f78d07fe10696da601605115 Certificate serial: 019B7DCB1E658003ECC07A43300576DB34F4 Authority key identifier: CE:DD:0D:71:5E:97:FB:91:F7:8D:07:FE:10:69:6D:A6:01:60:51:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zt0NcV6X-5H3jQf-EGltpgFgURU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/EF6wYbA_tNHh_pfGdOAXHWndG4Y.roa Signing time: Fri 02 Jan 2026 08:20:22 +0000 ROA not before: Fri 02 Jan 2026 08:20:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39686 IP address blocks: 185.202.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.crl rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.mft rsync://rpki.ripe.net/repository/DEFAULT/zt0NcV6X-5H3jQf-EGltpgFgURU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:1e:65:80:03:ec:c0:7a:43:30:05:76:db:34:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cedd0d715e97fb91f78d07fe10696da601605115 Validity Not Before: Jan 2 08:20:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=105eb061b03fb4d1e1fe97c674e0171d69dd1b86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d0:c2:d8:d3:04:f3:36:35:80:ad:be:5c:6e: bd:68:4f:6e:70:d5:50:d3:22:ed:eb:50:87:1e:7a: 8f:66:17:6c:3d:e3:60:c3:e1:57:51:fd:08:cc:b7: f5:e8:c8:66:dd:a6:d7:6e:a7:55:f0:20:83:49:da: f7:79:dd:18:43:4d:7a:a4:55:aa:29:4e:72:ce:86: 96:1c:fe:87:a1:74:ca:e1:56:d2:b3:78:32:d5:b4: 4f:9f:15:6a:68:18:73:03:42:0e:f8:53:c6:fd:8e: 18:d8:dd:cc:04:93:5c:9b:fe:cc:52:20:cc:21:6f: 2c:39:eb:11:f7:68:8e:a7:10:fa:0f:a4:d5:d0:04: 9e:4d:46:2b:3b:91:75:a0:1e:14:31:ba:c6:ce:f3: bc:c4:37:85:63:d7:a7:70:ea:0d:57:92:ca:dd:4a: 83:15:d2:49:f0:1b:8a:aa:c6:ca:52:bb:28:9a:79: 53:15:aa:34:7b:e0:a9:44:73:a3:0b:08:a1:ec:83: 75:6f:85:44:80:ff:96:4d:d8:70:ab:04:71:66:e5: 27:22:05:70:34:c1:34:d9:b9:74:56:a9:6e:b8:82: da:9e:67:0d:77:cf:e9:cb:f7:40:19:ad:f9:f5:ac: f9:f6:d4:4c:f0:d7:42:ac:21:c0:27:0e:54:35:dc: 1f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:5E:B0:61:B0:3F:B4:D1:E1:FE:97:C6:74:E0:17:1D:69:DD:1B:86 X509v3 Authority Key Identifier: keyid:CE:DD:0D:71:5E:97:FB:91:F7:8D:07:FE:10:69:6D:A6:01:60:51:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zt0NcV6X-5H3jQf-EGltpgFgURU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/EF6wYbA_tNHh_pfGdOAXHWndG4Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/33a19d-2c03-44d0-8cbc-aaf32171eaa1/1/zt0NcV6X-5H3jQf-EGltpgFgURU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.202.224.0/24 Signature Algorithm: sha256WithRSAEncryption b7:6d:12:fa:6f:e4:4a:ce:4e:88:96:e0:5c:86:5e:fd:22:95: 71:01:f3:e4:93:4c:38:8a:de:b0:dc:d4:93:1a:7b:15:15:24: db:58:5d:c1:60:15:07:92:a1:01:86:d9:0c:4e:04:03:a5:4b: 16:49:fd:76:63:bf:50:0d:24:6e:d4:5d:fc:1f:17:95:84:cb: 93:f9:b1:6a:fd:e0:b1:c4:64:6c:b2:2c:b0:05:0e:7a:b3:36: 2c:40:84:ac:2f:c1:d6:b3:b5:fe:5c:c9:4f:19:42:85:0b:fd: 75:fc:2a:17:0b:85:f8:6e:f8:e9:e6:61:3d:a2:0a:8d:98:b3: 54:72:18:0d:ee:81:06:3b:85:26:4c:2f:d3:63:77:e1:93:fa: 22:a8:db:1c:6b:e6:90:af:2c:27:83:99:f5:66:d9:c8:04:93: 33:ac:ab:70:0d:93:dd:41:22:98:fc:ef:c2:ce:8f:05:93:96: 30:db:8e:fa:7e:75:4c:62:f6:d3:60:55:a2:5c:f1:3a:ab:a2: 37:b7:45:6b:ce:4b:41:3d:a1:fe:48:76:20:c3:89:a2:eb:85: 95:f0:8e:b3:41:73:aa:81:fe:aa:59:ea:07:3a:e1:b0:4e:d7: 72:bf:34:69:8a:89:72:b8:6b:d5:2a:b7:4a:ce:85:85:d3:79: eb:f3:4f:59 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yx5lgAPswHpDMAV22zT0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlZGQwZDcxNWU5N2ZiOTFmNzhkMDdmZTEwNjk2ZGE2MDE2 MDUxMTUwHhcNMjYwMTAyMDgyMDIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDVlYjA2MWIwM2ZiNGQxZTFmZTk3YzY3NGUwMTcxZDY5ZGQxYjg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNDC2NME8zY1gK2+XG69aE9ucNVQ 0yLt61CHHnqPZhdsPeNgw+FXUf0IzLf16Mhm3abXbqdV8CCDSdr3ed0YQ016pFWq KU5yzoaWHP6HoXTK4VbSs3gy1bRPnxVqaBhzA0IO+FPG/Y4Y2N3MBJNcm/7MUiDM IW8sOesR92iOpxD6D6TV0ASeTUYrO5F1oB4UMbrGzvO8xDeFY9encOoNV5LK3UqD FdJJ8BuKqsbKUrsomnlTFao0e+CpRHOjCwih7IN1b4VEgP+WTdhwqwRxZuUnIgVw NME02bl0VqluuILanmcNd8/py/dAGa359az59tRM8NdCrCHAJw5UNdwfEwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBBesGGwP7TR4f6XxnTgFx1p3RuGMB8GA1UdIwQY MBaAFM7dDXFel/uR940H/hBpbaYBYFEVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenQwTmNWNlgtNUgzalFmLUVHbHRwZ0ZnVVJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8zM2ExOWQtMmMwMy00NGQwLThjYmMt YWFmMzIxNzFlYWExLzEvRUY2d1liQV90TkhoX3BmR2RPQVhIV25kRzRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8zM2ExOWQtMmMwMy00NGQwLThjYmMtYWFmMzIxNzFlYWEx LzEvenQwTmNWNlgtNUgzalFmLUVHbHRwZ0ZnVVJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucrgMA0G CSqGSIb3DQEBCwUAA4IBAQC3bRL6b+RKzk6IluBchl79IpVxAfPkk0w4it6w3NST GnsVFSTbWF3BYBUHkqEBhtkMTgQDpUsWSf12Y79QDSRu1F38HxeVhMuT+bFq/eCx xGRssiywBQ56szYsQISsL8HWs7X+XMlPGUKFC/11/CoXC4X4bvjp5mE9ogqNmLNU chgN7oEGO4UmTC/TY3fhk/oiqNsca+aQrywng5n1ZtnIBJMzrKtwDZPdQSKY/O/C zo8Fk5Yw2476fnVMYvbTYFWiXPE6q6I3t0VrzktBPaH+SHYgw4mi64WV8I6zQXOq gf6qWeoHOuGwTtdyvzRpiolyuGvVKrdKzoWF03nr809Z -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:23 2026 by rpki-client