This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/EsBecN6jyUPom0lR7fBtvD4EJAA.roa File: EsBecN6jyUPom0lR7fBtvD4EJAA.roa (raw, json) Hash identifier: Pc0Q6aLby7aPGyIvtbMD/7dqAXIuzl/Uhstg+PAdUTY= Subject key identifier: 12:C0:5E:70:DE:A3:C9:43:E8:9B:49:51:ED:F0:6D:BC:3E:04:24:00 Certificate issuer: /CN=0ef47d753d25289fd98794974aa0536010567bd9 Certificate serial: 019B7D5CEBF84CE0BF8A1ECE3BAE4CC04502 Authority key identifier: 0E:F4:7D:75:3D:25:28:9F:D9:87:94:97:4A:A0:53:60:10:56:7B:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/EsBecN6jyUPom0lR7fBtvD4EJAA.roa Signing time: Fri 02 Jan 2026 06:20:00 +0000 ROA not before: Fri 02 Jan 2026 06:20:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207505 IP address blocks: 185.242.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.crl rsync://rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.mft rsync://rpki.ripe.net/repository/DEFAULT/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:eb:f8:4c:e0:bf:8a:1e:ce:3b:ae:4c:c0:45:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ef47d753d25289fd98794974aa0536010567bd9 Validity Not Before: Jan 2 06:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=12c05e70dea3c943e89b4951edf06dbc3e042400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:d1:c2:0c:45:bf:15:95:ae:ea:74:9b:bf:ca: 58:2b:17:6f:d3:7c:3c:f0:e9:81:80:3f:7d:3e:5f: 79:01:cf:0b:5c:57:15:f3:64:b4:f9:d7:b2:be:3d: 38:61:b5:46:0a:33:9b:4a:0c:1b:8d:65:70:1e:56: c4:1d:1a:8f:f1:9e:c1:8b:eb:ea:0c:60:d5:d5:c9: 04:7e:42:ec:c3:3c:70:89:5c:b2:b0:a4:d3:1b:d8: 9b:ef:2e:c5:77:23:b6:d8:a8:07:26:db:b1:8e:69: 03:fa:13:ed:d6:76:00:4d:fa:06:89:03:07:43:47: db:0f:71:50:8a:3b:e5:8c:6b:ac:3d:32:1d:30:ca: 7e:63:dd:96:a8:de:53:ae:53:4c:68:ec:66:87:e4: 54:aa:82:34:48:f7:01:18:e5:47:ef:28:5f:6a:26: 55:ac:89:01:ac:49:fa:87:c4:b3:7f:4d:bb:b3:3e: 6f:7e:36:10:8b:13:f0:bc:ab:4b:77:9e:76:c7:1c: 0a:d3:d3:0f:20:91:c3:84:12:f7:0f:44:2f:15:e0: d3:70:aa:b5:8f:2d:08:01:4b:b3:fd:fc:78:69:fa: 22:4f:fa:e8:57:88:82:7c:27:36:e4:6f:7d:34:aa: a4:5f:fd:5f:45:57:02:23:be:8f:49:6a:6a:a0:8b: ab:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:C0:5E:70:DE:A3:C9:43:E8:9B:49:51:ED:F0:6D:BC:3E:04:24:00 X509v3 Authority Key Identifier: keyid:0E:F4:7D:75:3D:25:28:9F:D9:87:94:97:4A:A0:53:60:10:56:7B:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/EsBecN6jyUPom0lR7fBtvD4EJAA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.242.219.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:84:db:8c:9d:f6:76:89:ee:24:df:b1:4d:54:e8:4e:20:be: 07:26:96:4d:20:c5:33:18:84:25:db:21:44:1a:a6:03:f4:f7: 49:13:a8:18:9e:d3:ac:be:1f:c2:6b:4c:fc:e5:eb:8a:f7:3f: 0f:3b:2e:18:e8:6b:bc:48:73:97:f5:7d:84:bb:96:97:69:94: 7b:ed:d7:63:d6:1d:e6:dc:b1:ea:29:49:73:17:47:27:1b:7a: fc:bd:69:e0:bc:89:04:38:40:72:35:d4:39:35:4e:ff:cf:d0: 44:b1:42:86:0d:47:58:b9:15:28:54:48:93:57:99:b9:8c:30: 66:e9:2e:90:6f:59:24:59:56:fe:12:b4:51:03:95:18:24:85: 1e:eb:ec:b9:6a:ef:46:0d:ee:f7:63:ba:dd:5e:7e:52:53:bc: d7:f2:ee:4d:ca:59:5e:fc:ad:2c:80:90:46:d2:91:bc:4b:6c: 43:ab:57:b0:50:f7:5d:fa:7b:eb:64:3f:98:72:a3:4e:f6:dd: 84:fe:2e:83:88:c3:83:63:41:82:18:db:29:ad:da:12:8a:b6: ca:4c:a9:36:8c:a8:41:38:dd:49:02:9d:52:0a:ce:7a:25:6a: 54:73:78:ef:9e:5e:f8:6a:a1:cb:a4:04:65:1d:15:0d:51:7f: 00:33:25:9b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XOv4TOC/ih7OO65MwEUCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlZjQ3ZDc1M2QyNTI4OWZkOTg3OTQ5NzRhYTA1MzYwMTA1 NjdiZDkwHhcNMjYwMTAyMDYyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMmMwNWU3MGRlYTNjOTQzZTg5YjQ5NTFlZGYwNmRiYzNlMDQyNDAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtHCDEW/FZWu6nSbv8pYKxdv03w8 8OmBgD99Pl95Ac8LXFcV82S0+deyvj04YbVGCjObSgwbjWVwHlbEHRqP8Z7Bi+vq DGDV1ckEfkLswzxwiVyysKTTG9ib7y7FdyO22KgHJtuxjmkD+hPt1nYATfoGiQMH Q0fbD3FQijvljGusPTIdMMp+Y92WqN5TrlNMaOxmh+RUqoI0SPcBGOVH7yhfaiZV rIkBrEn6h8Szf027sz5vfjYQixPwvKtLd552xxwK09MPIJHDhBL3D0QvFeDTcKq1 jy0IAUuz/fx4afoiT/roV4iCfCc25G99NKqkX/1fRVcCI76PSWpqoIuruQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBLAXnDeo8lD6JtJUe3wbbw+BCQAMB8GA1UdIwQY MBaAFA70fXU9JSif2YeUl0qgU2AQVnvZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHZSOWRUMGxLSl9aaDVTWFNxQlRZQkJXZTlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9kZDhiYzUtODZlZi00MTM1LWJmMWYt YTRjOGQ5ODk1YTQzLzEvRXNCZWNONmp5VVBvbTBsUjdmQnR2RDRFSkFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9kZDhiYzUtODZlZi00MTM1LWJmMWYtYTRjOGQ5ODk1YTQz LzEvRHZSOWRUMGxLSl9aaDVTWFNxQlRZQkJXZTlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufLbMA0G CSqGSIb3DQEBCwUAA4IBAQB7hNuMnfZ2ie4k37FNVOhOIL4HJpZNIMUzGIQl2yFE GqYD9PdJE6gYntOsvh/Ca0z85euK9z8POy4Y6Gu8SHOX9X2Eu5aXaZR77ddj1h3m 3LHqKUlzF0cnG3r8vWngvIkEOEByNdQ5NU7/z9BEsUKGDUdYuRUoVEiTV5m5jDBm 6S6Qb1kkWVb+ErRRA5UYJIUe6+y5au9GDe73Y7rdXn5SU7zX8u5Nylle/K0sgJBG 0pG8S2xDq1ewUPdd+nvrZD+YcqNO9t2E/i6DiMODY0GCGNsprdoSirbKTKk2jKhB ON1JAp1SCs56JWpUc3jvnl74aqHLpARlHRUNUX8AMyWb -----END CERTIFICATE-----Generated at Sun Jan 25 09:04:50 2026 by rpki-client