This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/ESOn4YVwMvjEwp43_BIg6dF4bME.roa File: ESOn4YVwMvjEwp43_BIg6dF4bME.roa (raw, json) Hash identifier: R9TTpag0gjQGiKGRJHhKu7HUgpmc2rwTNbk37Twi9mw= Subject key identifier: 11:23:A7:E1:85:70:32:F8:C4:C2:9E:37:FC:12:20:E9:D1:78:6C:C1 Certificate issuer: /CN=193743467b4da41c6295e9351153309586ba2399 Certificate serial: 019B7834745D41F959385DFE7F2439861BDF Authority key identifier: 19:37:43:46:7B:4D:A4:1C:62:95:E9:35:11:53:30:95:86:BA:23:99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/ESOn4YVwMvjEwp43_BIg6dF4bME.roa Signing time: Thu 01 Jan 2026 06:17:42 +0000 ROA not before: Thu 01 Jan 2026 06:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212283 IP address blocks: 213.149.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.crl rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.mft rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:74:5d:41:f9:59:38:5d:fe:7f:24:39:86:1b:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=193743467b4da41c6295e9351153309586ba2399 Validity Not Before: Jan 1 06:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1123a7e1857032f8c4c29e37fc1220e9d1786cc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:5c:2c:16:b3:fd:36:63:5b:7f:d8:5f:8e:8a: 99:ed:d8:e6:14:92:17:ab:91:ca:ac:33:43:2e:2e: 34:2f:ea:2a:26:61:bb:a4:88:3b:6c:1a:81:da:a5: 75:9c:07:17:a8:8b:67:0c:48:bb:25:fd:9f:fa:81: 19:ec:87:f9:ca:6c:bf:12:63:bf:b6:b2:7c:13:e4: 21:2d:f5:87:40:6f:b7:a3:85:df:3d:40:fa:33:3d: fa:1a:ab:78:6f:d2:ec:38:7a:07:b8:41:e5:da:4b: d9:e0:f8:06:0c:c7:c7:7c:48:b2:9a:ac:d0:dd:8f: 1d:b2:66:5c:34:ff:3b:fb:68:db:9c:f9:dd:4f:41: 8a:a2:30:cd:d5:8c:69:73:80:a1:17:39:48:0a:b0: a2:08:98:3b:09:44:0d:12:ca:ef:a0:9e:e6:7f:b5: 36:db:59:97:ba:2e:13:0b:12:a8:93:18:5c:fc:a4: ef:be:2b:f2:7a:f9:67:2e:dc:bb:50:94:5e:5d:5a: 05:63:9e:f1:e1:a4:f1:f7:37:8f:ed:97:af:6f:96: a8:f0:79:1a:ac:73:43:55:86:a4:16:40:f8:54:a9: ef:82:08:54:5d:e4:77:11:04:b2:91:a4:76:a5:cc: b1:fb:76:b4:52:88:02:17:cc:89:a1:00:5c:53:44: fa:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:23:A7:E1:85:70:32:F8:C4:C2:9E:37:FC:12:20:E9:D1:78:6C:C1 X509v3 Authority Key Identifier: keyid:19:37:43:46:7B:4D:A4:1C:62:95:E9:35:11:53:30:95:86:BA:23:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GTdDRntNpBxilek1EVMwlYa6I5k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/ESOn4YVwMvjEwp43_BIg6dF4bME.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/36703a-122b-4116-b317-ca5fccbf7a8c/1/GTdDRntNpBxilek1EVMwlYa6I5k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.149.145.0/24 Signature Algorithm: sha256WithRSAEncryption 74:78:23:12:40:b1:83:70:d4:86:66:17:ca:82:ea:8c:45:59: db:da:70:d9:f0:57:e5:28:58:5b:dc:94:44:e8:c8:54:67:5a: 8c:ec:60:24:fd:37:13:f4:8e:94:bd:e0:35:be:a8:df:06:f6: 41:97:19:30:70:e1:39:36:3e:3e:7b:2e:aa:f1:90:7a:c2:02: 2c:ec:7c:1e:74:ab:ce:f4:44:17:0a:71:87:9d:f2:fa:fe:10: bf:3a:0f:0a:13:c0:c6:b9:9d:59:d9:93:af:dc:ba:76:0b:a6: 82:c7:dd:ba:20:61:3b:66:7e:9a:f7:c3:67:ca:3a:50:ed:2c: fe:7c:d9:64:77:2d:84:0a:ec:6f:89:ab:fc:53:17:2c:88:3f: 71:5a:fe:33:41:f6:9c:d8:b4:d8:a0:ca:ec:02:53:96:a9:5c: 1b:ef:4d:c0:2e:2c:46:1a:1f:75:23:03:4a:93:e1:0f:93:ef: f5:f9:bc:1a:98:bd:f6:06:f3:44:c1:9a:d2:f3:81:f4:bd:8a: 03:1a:ed:4c:06:87:5f:93:e1:b3:2c:3f:3a:ed:33:e2:0e:31: 47:92:9b:5f:41:9c:00:3b:3a:4a:90:c9:af:46:e2:4d:9e:ed: 0d:67:49:ac:67:1d:7f:46:7b:f1:bd:7d:7b:b3:6f:06:49:56: 38:6d:8d:a6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NHRdQflZOF3+fyQ5hhvfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5Mzc0MzQ2N2I0ZGE0MWM2Mjk1ZTkzNTExNTMzMDk1ODZi YTIzOTkwHhcNMjYwMTAxMDYxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMTIzYTdlMTg1NzAzMmY4YzRjMjllMzdmYzEyMjBlOWQxNzg2Y2MxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilwsFrP9NmNbf9hfjoqZ7djmFJIX q5HKrDNDLi40L+oqJmG7pIg7bBqB2qV1nAcXqItnDEi7Jf2f+oEZ7If5ymy/EmO/ trJ8E+QhLfWHQG+3o4XfPUD6Mz36Gqt4b9LsOHoHuEHl2kvZ4PgGDMfHfEiymqzQ 3Y8dsmZcNP87+2jbnPndT0GKojDN1Yxpc4ChFzlICrCiCJg7CUQNEsrvoJ7mf7U2 21mXui4TCxKokxhc/KTvvivyevlnLty7UJReXVoFY57x4aTx9zeP7Zevb5ao8Hka rHNDVYakFkD4VKnvgghUXeR3EQSykaR2pcyx+3a0UogCF8yJoQBcU0T6oQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBEjp+GFcDL4xMKeN/wSIOnReGzBMB8GA1UdIwQY MBaAFBk3Q0Z7TaQcYpXpNRFTMJWGuiOZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1RkRFJudE5wQnhpbGVrMUVWTXdsWWE2STVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8zNjcwM2EtMTIyYi00MTE2LWIzMTct Y2E1ZmNjYmY3YThjLzEvRVNPbjRZVndNdmpFd3A0M19CSWc2ZEY0Yk1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8zNjcwM2EtMTIyYi00MTE2LWIzMTctY2E1ZmNjYmY3YThj LzEvR1RkRFJudE5wQnhpbGVrMUVWTXdsWWE2STVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1ZWRMA0G CSqGSIb3DQEBCwUAA4IBAQB0eCMSQLGDcNSGZhfKguqMRVnb2nDZ8FflKFhb3JRE 6MhUZ1qM7GAk/TcT9I6UveA1vqjfBvZBlxkwcOE5Nj4+ey6q8ZB6wgIs7HwedKvO 9EQXCnGHnfL6/hC/Og8KE8DGuZ1Z2ZOv3Lp2C6aCx926IGE7Zn6a98NnyjpQ7Sz+ fNlkdy2ECuxviav8UxcsiD9xWv4zQfac2LTYoMrsAlOWqVwb703ALixGGh91IwNK k+EPk+/1+bwamL32BvNEwZrS84H0vYoDGu1MBodfk+GzLD867TPiDjFHkptfQZwA OzpKkMmvRuJNnu0NZ0msZx1/RnvxvX17s28GSVY4bY2m -----END CERTIFICATE-----Generated at Sun Jan 25 19:35:29 2026 by rpki-client