This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/sUrIEpm5C4rBhagjdZq3jf6wqrY.roa File: sUrIEpm5C4rBhagjdZq3jf6wqrY.roa (raw, json) Hash identifier: jRLTkZKX0jd/Ii5LEPQsVlaAGfAK0xdao7SE2gBfvAA= Subject key identifier: B1:4A:C8:12:99:B9:0B:8A:C1:85:A8:23:75:9A:B7:8D:FE:B0:AA:B6 Certificate issuer: /CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14 Certificate serial: 019B7BA3D0549B3C62B767E1EBE7CEE92156 Authority key identifier: EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/sUrIEpm5C4rBhagjdZq3jf6wqrY.roa Signing time: Thu 01 Jan 2026 22:18:11 +0000 ROA not before: Thu 01 Jan 2026 22:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59588 IP address blocks: 185.254.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:d0:54:9b:3c:62:b7:67:e1:eb:e7:ce:e9:21:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14 Validity Not Before: Jan 1 22:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b14ac81299b90b8ac185a823759ab78dfeb0aab6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:1c:c2:37:0e:c8:7d:ef:3d:06:39:40:b5:01: d7:60:7f:c8:fb:dd:45:22:d0:9d:f3:e7:d7:f8:58: 04:56:9b:fa:9a:3b:2f:63:25:9e:dc:dd:71:31:21: ad:34:1b:d5:92:5a:d4:f9:39:44:48:31:85:d2:f2: 60:47:60:7e:07:aa:f6:11:98:fe:7b:fb:b3:79:83: f9:9b:8d:53:29:4b:4f:58:13:93:f9:b0:f5:da:e3: 9e:4d:6a:a2:19:73:62:b1:b7:2f:70:83:f9:ca:fd: b7:cc:7c:49:80:02:39:ad:55:4d:52:84:1b:d8:67: d1:c7:22:a8:10:18:83:00:db:33:04:ff:e9:b6:75: 5e:76:45:2b:b2:a0:f1:10:1c:a7:92:ff:47:62:cb: 67:2b:c1:6a:93:ba:f5:06:c8:fe:81:fe:ae:1a:7b: 2f:ac:f7:53:1b:e4:a5:4f:e4:c5:3b:2c:38:ae:f7: 66:e2:a8:64:ab:4b:fd:c1:3a:27:12:bd:58:7e:8d: 37:d8:0a:a4:cc:6c:9b:d0:2b:f6:fe:5d:dc:9c:04: 75:ed:36:19:8d:e4:dd:c3:ff:34:d8:1d:a1:10:3f: 55:3d:dc:6c:d0:5b:0c:32:ab:5c:77:64:18:7d:dc: d3:d3:9e:4a:80:90:e0:a7:39:bd:c7:1d:f7:cf:c4: 67:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:4A:C8:12:99:B9:0B:8A:C1:85:A8:23:75:9A:B7:8D:FE:B0:AA:B6 X509v3 Authority Key Identifier: keyid:EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/sUrIEpm5C4rBhagjdZq3jf6wqrY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.254.12.0/24 Signature Algorithm: sha256WithRSAEncryption 36:0b:68:6c:99:01:83:7c:bb:2c:7c:de:fe:0d:d6:99:cd:3c: fd:fb:40:cf:d6:3e:a6:c6:de:0d:99:66:00:48:e3:a4:7d:13: cd:0e:c7:f8:e1:63:2b:9d:f9:e3:ad:2b:bf:27:8f:26:1c:58: 3d:f9:0c:84:ce:06:8a:46:a8:ac:06:0f:86:83:65:5b:fc:fd: dd:ca:89:57:79:5b:7c:a2:83:71:eb:43:cf:aa:cd:85:a0:3e: f4:60:f4:30:30:34:0c:0c:2f:1e:3d:e1:ae:c9:e7:64:12:6b: 27:1a:69:40:69:0a:25:cc:4c:c2:87:69:e8:ad:ef:43:eb:59: c4:4a:6b:d7:64:88:e2:ff:50:c3:51:cc:f8:6d:1f:f0:0a:42: 61:3b:34:51:ab:54:bc:06:de:de:c8:a8:08:a5:23:7b:dc:1a: b0:78:78:78:19:48:6c:a6:31:e2:44:77:e9:54:ae:74:ec:08: 1e:02:c9:b4:6e:fe:24:68:9e:92:f3:42:29:06:e6:c5:e8:92: 38:d6:1c:eb:ca:17:c5:93:55:21:b0:41:20:61:b7:d0:9e:e2: da:84:ea:18:9e:39:61:d5:18:04:42:e7:73:26:95:72:ab:0d: 8d:2c:14:d0:eb:0a:8d:2f:5f:7d:77:76:5d:dc:d6:e4:a3:5e: 71:83:fc:c6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o9BUmzxit2fh6+fO6SFWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNTRkOWU0MWVhNWUyZDE2MWI3YzRjZGIyZTQ3MDJjNGYy NDhlMTQwHhcNMjYwMTAxMjIxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTRhYzgxMjk5YjkwYjhhYzE4NWE4MjM3NTlhYjc4ZGZlYjBhYWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhzCNw7Ife89BjlAtQHXYH/I+91F ItCd8+fX+FgEVpv6mjsvYyWe3N1xMSGtNBvVklrU+TlESDGF0vJgR2B+B6r2EZj+ e/uzeYP5m41TKUtPWBOT+bD12uOeTWqiGXNisbcvcIP5yv23zHxJgAI5rVVNUoQb 2GfRxyKoEBiDANszBP/ptnVedkUrsqDxEBynkv9HYstnK8Fqk7r1Bsj+gf6uGnsv rPdTG+SlT+TFOyw4rvdm4qhkq0v9wTonEr1Yfo032AqkzGyb0Cv2/l3cnAR17TYZ jeTdw/802B2hED9VPdxs0FsMMqtcd2QYfdzT055KgJDgpzm9xx33z8Rn5QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLFKyBKZuQuKwYWoI3Wat43+sKq2MB8GA1UdIwQY MBaAFO9U2eQepeLRYbfEzbLkcCxPJI4UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzFUWjVCNmw0dEZodDhUTnN1UndMRThramhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9lYzAwZTItY2JkYS00YjMyLThjMzIt ZmJjNmZjYjVlN2E2LzEvc1VySUVwbTVDNHJCaGFnamRacTNqZjZ3cXJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9lYzAwZTItY2JkYS00YjMyLThjMzItZmJjNmZjYjVlN2E2 LzEvNzFUWjVCNmw0dEZodDhUTnN1UndMRThramhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuf4MMA0G CSqGSIb3DQEBCwUAA4IBAQA2C2hsmQGDfLssfN7+DdaZzTz9+0DP1j6mxt4NmWYA SOOkfRPNDsf44WMrnfnjrSu/J48mHFg9+QyEzgaKRqisBg+Gg2Vb/P3dyolXeVt8 ooNx60PPqs2FoD70YPQwMDQMDC8ePeGuyedkEmsnGmlAaQolzEzCh2nore9D61nE SmvXZIji/1DDUcz4bR/wCkJhOzRRq1S8Bt7eyKgIpSN73BqweHh4GUhspjHiRHfp VK507AgeAsm0bv4kaJ6S80IpBubF6JI41hzryhfFk1UhsEEgYbfQnuLahOoYnjlh 1RgEQudzJpVyqw2NLBTQ6wqNL199d3Zd3Nbko15xg/zG -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:52 2026 by rpki-client