This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/EwEAwaqNHf561X6ESt5fUc4qEvM.roa File: EwEAwaqNHf561X6ESt5fUc4qEvM.roa (raw, json) Hash identifier: dADc7/n3GiQ5KQfcfqyZ4vohLTK/4Wso69sE0etaJy4= Subject key identifier: 13:01:00:C1:AA:8D:1D:FE:7A:D5:7E:84:4A:DE:5F:51:CE:2A:12:F3 Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Certificate serial: 019B77C7787EE1CC3DB84A78491698800D5D Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/EwEAwaqNHf561X6ESt5fUc4qEvM.roa Signing time: Thu 01 Jan 2026 04:18:39 +0000 ROA not before: Thu 01 Jan 2026 04:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204130 IP address blocks: 185.47.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:78:7e:e1:cc:3d:b8:4a:78:49:16:98:80:0d:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Validity Not Before: Jan 1 04:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=130100c1aa8d1dfe7ad57e844ade5f51ce2a12f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5d:33:2e:31:c7:3c:c7:86:91:16:1e:ea:95: 46:66:c3:21:f4:e0:67:b6:50:4e:d8:31:e0:83:bb: 43:29:8c:fb:c0:7b:1c:84:3b:9f:14:c8:09:c6:92: c6:cc:63:13:c2:e0:ee:ea:41:32:6f:cb:3b:1c:50: 17:03:29:c7:55:64:73:b1:8a:f7:f3:50:f1:81:50: 6b:3d:22:61:11:48:c3:e4:0f:5e:7f:f5:94:0a:d0: 72:72:42:8f:b3:39:ce:91:66:fb:c6:dd:e1:86:09: b9:31:d3:60:25:1f:ab:c9:41:b3:ae:95:c4:bd:ea: 0c:52:ad:1f:f8:25:8f:4e:49:47:0f:34:94:de:4c: dd:16:eb:35:18:98:9f:9e:44:e1:9c:ab:e9:3a:b3: 1b:60:17:13:c1:61:39:af:dd:11:7c:17:00:6f:b5: 6f:7d:dc:57:a8:74:15:c5:40:f4:5d:e2:39:92:1c: 6d:0f:88:16:f2:b7:d0:40:d0:6b:9d:ca:f4:24:85: 4f:0a:d1:1e:01:1f:3f:f5:e9:8d:fb:3a:55:e9:f9: 9f:be:50:c8:1d:2e:b8:af:26:d7:ec:15:42:af:f4: d6:7c:5f:5b:d9:12:a8:bd:80:9b:a9:0b:37:10:04: aa:90:06:51:53:37:d6:93:38:71:ab:14:c4:2c:b9: 12:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:01:00:C1:AA:8D:1D:FE:7A:D5:7E:84:4A:DE:5F:51:CE:2A:12:F3 X509v3 Authority Key Identifier: keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/EwEAwaqNHf561X6ESt5fUc4qEvM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.47.8.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:65:52:c0:4d:3c:2a:36:df:62:92:50:94:6c:b0:e8:dd:2c: ed:9a:25:dd:57:83:39:59:f5:08:1d:df:b3:6a:00:8f:4f:00: 38:ac:e1:1f:2e:8d:47:62:6f:93:a4:a2:0b:0d:95:e2:35:8d: 89:8e:25:c6:e3:38:c4:a6:19:b2:43:0d:22:c4:7f:f6:de:11: 7d:b7:25:17:d1:11:22:81:61:95:c5:ed:89:e7:8f:ed:47:c6: 1a:b8:63:3e:86:37:7d:65:fd:83:39:04:68:21:93:9c:2c:7c: 5b:4a:8f:8c:30:ca:93:2c:a4:00:fa:cd:19:36:b3:a5:23:01: 2b:76:9c:d7:57:9e:e5:8e:bd:25:4e:b8:44:d4:d6:a6:70:d6: 83:0e:e6:96:00:d8:f2:af:a0:94:34:97:c1:07:f0:cb:20:f3: 2e:08:f9:87:94:0b:3a:ab:0f:81:fb:d0:4f:de:4b:35:7e:cf: 8b:a6:9b:67:0a:d2:c8:02:fe:44:86:eb:c5:9e:7b:0d:cf:90: f4:c1:14:53:39:c5:d9:7e:0a:ff:90:b1:71:28:f3:cb:d3:74: 30:a9:33:b9:16:cc:31:42:df:23:3f:14:73:c5:66:00:76:a3: e3:83:34:e1:85:c2:6d:55:d8:2f:26:d6:96:5c:63:b0:de:e6: be:58:eb:e6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x3h+4cw9uEp4SRaYgA1dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YWRkOWI2NzFmN2EzNmViMjM2N2UzNGZlZTRiY2IxM2I4 ZjY2Y2MwHhcNMjYwMTAxMDQxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzAxMDBjMWFhOGQxZGZlN2FkNTdlODQ0YWRlNWY1MWNlMmExMmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtV0zLjHHPMeGkRYe6pVGZsMh9OBn tlBO2DHgg7tDKYz7wHschDufFMgJxpLGzGMTwuDu6kEyb8s7HFAXAynHVWRzsYr3 81DxgVBrPSJhEUjD5A9ef/WUCtByckKPsznOkWb7xt3hhgm5MdNgJR+ryUGzrpXE veoMUq0f+CWPTklHDzSU3kzdFus1GJifnkThnKvpOrMbYBcTwWE5r90RfBcAb7Vv fdxXqHQVxUD0XeI5khxtD4gW8rfQQNBrncr0JIVPCtEeAR8/9emN+zpV6fmfvlDI HS64rybX7BVCr/TWfF9b2RKovYCbqQs3EASqkAZRUzfWkzhxqxTELLkSFQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBMBAMGqjR3+etV+hEreX1HOKhLzMB8GA1UdIwQY MBaAFIit2bZx96NusjZ+NP7kvLE7j2bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEt YTFiOTZiOWI3MGY4LzEvRXdFQXdhcU5IZjU2MVg2RVN0NWZVYzRxRXZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEtYTFiOTZiOWI3MGY4 LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuS8IMA0G CSqGSIb3DQEBCwUAA4IBAQCeZVLATTwqNt9iklCUbLDo3SztmiXdV4M5WfUIHd+z agCPTwA4rOEfLo1HYm+TpKILDZXiNY2JjiXG4zjEphmyQw0ixH/23hF9tyUX0REi gWGVxe2J54/tR8YauGM+hjd9Zf2DOQRoIZOcLHxbSo+MMMqTLKQA+s0ZNrOlIwEr dpzXV57ljr0lTrhE1NamcNaDDuaWANjyr6CUNJfBB/DLIPMuCPmHlAs6qw+B+9BP 3ks1fs+LpptnCtLIAv5EhuvFnnsNz5D0wRRTOcXZfgr/kLFxKPPL03QwqTO5Fswx Qt8jPxRzxWYAdqPjgzThhcJtVdgvJtaWXGOw3ua+WOvm -----END CERTIFICATE-----Generated at Sun Jan 25 15:07:07 2026 by rpki-client