This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/EKgYi5uwmdQ3SbZogfsfQT2cobM.roa File: EKgYi5uwmdQ3SbZogfsfQT2cobM.roa (raw, json) Hash identifier: Y3gYmZwUht9JEwQTGH6EyDKQhtm/rC13n1867BeBzvQ= Subject key identifier: 10:A8:18:8B:9B:B0:99:D4:37:49:B6:68:81:FB:1F:41:3D:9C:A1:B3 Certificate issuer: /CN=25a879d628fe5ec8a761c4748679993f9c69f8b4 Certificate serial: 019B7910FBECE3A72721535C89A6F16AF512 Authority key identifier: 25:A8:79:D6:28:FE:5E:C8:A7:61:C4:74:86:79:99:3F:9C:69:F8:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/EKgYi5uwmdQ3SbZogfsfQT2cobM.roa Signing time: Thu 01 Jan 2026 10:18:34 +0000 ROA not before: Thu 01 Jan 2026 10:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1764 IP address blocks: 185.245.64.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.crl rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:fb:ec:e3:a7:27:21:53:5c:89:a6:f1:6a:f5:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25a879d628fe5ec8a761c4748679993f9c69f8b4 Validity Not Before: Jan 1 10:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=10a8188b9bb099d43749b66881fb1f413d9ca1b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:5c:7e:f7:ae:80:4e:1c:d3:db:d9:0e:a3:51: cf:dd:81:82:81:cf:57:36:06:46:e0:8f:5b:76:ed: 0d:08:f3:9b:8b:69:05:af:13:26:e0:9d:d6:31:92: e0:fa:7a:13:bc:0e:da:3f:0c:eb:d5:8e:84:0a:72: 88:56:8d:c9:cb:48:36:a6:1e:6c:e7:6e:ac:81:9b: f7:d1:2f:4e:46:b3:de:06:c1:66:97:58:79:3d:a5: 47:09:99:90:f6:20:7d:27:7f:98:4c:c7:61:46:60: 82:38:e9:14:26:86:1f:f3:22:4c:19:9d:92:06:e8: 59:a0:63:63:95:53:e2:38:53:36:41:56:61:d7:04: c1:ae:ed:f7:b2:1a:ed:33:de:42:15:dd:b5:a8:d4: e4:9a:75:99:dc:9e:9d:84:20:fb:02:06:f8:7f:91: bc:16:c3:22:85:b1:83:19:d1:e9:f7:a8:ce:76:a5: 17:8a:ee:df:0b:98:d7:c7:64:e1:0d:85:0f:a9:15: 37:e9:56:c6:11:0b:d6:40:9a:45:44:bd:8b:d2:05: 37:d2:fb:97:02:49:d0:1b:40:a4:66:d7:50:61:3a: 6c:b4:ef:0b:9b:9a:53:d8:f2:c7:2e:7d:d7:d1:4f: dd:c6:c1:63:3c:09:50:53:57:36:ae:52:4f:1f:5a: 69:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:A8:18:8B:9B:B0:99:D4:37:49:B6:68:81:FB:1F:41:3D:9C:A1:B3 X509v3 Authority Key Identifier: keyid:25:A8:79:D6:28:FE:5E:C8:A7:61:C4:74:86:79:99:3F:9C:69:F8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/EKgYi5uwmdQ3SbZogfsfQT2cobM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.245.64.0/23 Signature Algorithm: sha256WithRSAEncryption 61:4e:24:38:75:0e:41:96:1f:d1:ef:03:17:4e:78:51:d8:6a: f7:70:7f:19:ce:7b:6a:68:a3:11:b6:a8:41:91:9a:11:d9:25: 9a:e4:64:89:03:4b:c3:5f:75:86:ac:8b:b1:cb:5c:60:d7:c0: b5:30:fa:22:8d:c1:f6:be:45:c1:98:2e:de:f4:f8:b0:6c:e5: 07:2d:0b:fb:7c:71:31:e5:dd:98:cd:eb:fb:af:4e:a0:29:6f: 62:79:18:ec:c8:fc:bc:8b:8f:94:41:29:c6:29:47:a7:2d:16: 2a:f5:4c:47:76:0e:00:b9:60:cb:20:40:f3:5a:da:15:6a:6e: c5:58:fb:88:86:0e:8b:e6:9a:d3:7c:37:d8:8d:1a:34:aa:28: cf:04:65:67:bf:74:e5:59:0f:4d:bb:6f:2e:6f:89:e8:ce:69: 1d:61:36:af:c4:ad:10:2d:b9:59:6b:e5:d7:c9:06:e7:c5:37: 2f:38:77:e6:bb:53:ce:48:9b:0b:8d:0a:95:85:08:9f:f3:96: c8:15:ba:ac:45:94:cb:4a:ed:75:5f:f6:4f:2b:28:4d:60:5c: d6:5c:52:4b:dc:bf:ad:b4:db:25:4e:1c:d9:83:e0:80:d7:75: fb:bb:4a:87:af:1a:de:ba:e6:1c:03:35:cb:63:6b:ea:fb:2b: 6f:03:6f:b7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EPvs46cnIVNciabxavUSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1YTg3OWQ2MjhmZTVlYzhhNzYxYzQ3NDg2Nzk5OTNmOWM2 OWY4YjQwHhcNMjYwMTAxMTAxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMGE4MTg4YjliYjA5OWQ0Mzc0OWI2Njg4MWZiMWY0MTNkOWNhMWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1x+966AThzT29kOo1HP3YGCgc9X NgZG4I9bdu0NCPObi2kFrxMm4J3WMZLg+noTvA7aPwzr1Y6ECnKIVo3Jy0g2ph5s 526sgZv30S9ORrPeBsFml1h5PaVHCZmQ9iB9J3+YTMdhRmCCOOkUJoYf8yJMGZ2S BuhZoGNjlVPiOFM2QVZh1wTBru33shrtM95CFd21qNTkmnWZ3J6dhCD7Agb4f5G8 FsMihbGDGdHp96jOdqUXiu7fC5jXx2ThDYUPqRU36VbGEQvWQJpFRL2L0gU30vuX AknQG0CkZtdQYTpstO8Lm5pT2PLHLn3X0U/dxsFjPAlQU1c2rlJPH1ppAQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBCoGIubsJnUN0m2aIH7H0E9nKGzMB8GA1UdIwQY MBaAFCWoedYo/l7Ip2HEdIZ5mT+cafi0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmFoNTFpai1Yc2luWWNSMGhubVpQNXhwLUxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8yOGQ1YTctNDhmMS00NDE0LWE4NTMt ZDg2YjRjYWVkMTFkLzEvRUtnWWk1dXdtZFEzU2Jab2dmc2ZRVDJjb2JNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS8yOGQ1YTctNDhmMS00NDE0LWE4NTMtZDg2YjRjYWVkMTFk LzEvSmFoNTFpai1Yc2luWWNSMGhubVpQNXhwLUxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBufVAMA0G CSqGSIb3DQEBCwUAA4IBAQBhTiQ4dQ5Blh/R7wMXTnhR2Gr3cH8ZzntqaKMRtqhB kZoR2SWa5GSJA0vDX3WGrIuxy1xg18C1MPoijcH2vkXBmC7e9PiwbOUHLQv7fHEx 5d2Yzev7r06gKW9ieRjsyPy8i4+UQSnGKUenLRYq9UxHdg4AuWDLIEDzWtoVam7F WPuIhg6L5prTfDfYjRo0qijPBGVnv3TlWQ9Nu28ub4nozmkdYTavxK0QLblZa+XX yQbnxTcvOHfmu1POSJsLjQqVhQif85bIFbqsRZTLSu11X/ZPKyhNYFzWXFJL3L+t tNslThzZg+CA13X7u0qHrxreuuYcAzXLY2vq+ytvA2+3 -----END CERTIFICATE-----Generated at Sun Jan 25 22:15:16 2026 by rpki-client