This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/EDpzrWsoSnUz1OhSo-Gj-PKuvNo.roa File: EDpzrWsoSnUz1OhSo-Gj-PKuvNo.roa (raw, json) Hash identifier: dANUwJam5+zKOyDlUkf5BwY7okeP4thkJmdbhqamOmo= Subject key identifier: 10:3A:73:AD:6B:28:4A:75:33:D4:E8:52:A3:E1:A3:F8:F2:AE:BC:DA Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4 Certificate serial: 019B77C6B59538AA19457DCCBE29E45B08F8 Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/EDpzrWsoSnUz1OhSo-Gj-PKuvNo.roa Signing time: Thu 01 Jan 2026 04:17:49 +0000 ROA not before: Thu 01 Jan 2026 04:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209973 IP address blocks: 188.130.244.0/24 maxlen: 24 188.130.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:b5:95:38:aa:19:45:7d:cc:be:29:e4:5b:08:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4 Validity Not Before: Jan 1 04:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=103a73ad6b284a7533d4e852a3e1a3f8f2aebcda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b9:b0:dd:f9:46:cf:75:28:7e:3e:d0:64:5a: c0:1b:7c:2c:17:4f:75:12:a3:6e:48:b4:5f:15:67: 1c:9d:9a:38:d9:72:df:f4:7a:0d:f3:a9:13:88:8b: cb:32:6d:78:26:bc:b0:d6:b9:a6:fd:3e:0f:d9:0e: 00:43:ad:8c:48:c9:a9:1e:73:1e:ff:5a:fe:49:ac: c3:43:ee:47:6b:d5:08:b1:cd:5f:95:c7:41:72:53: 94:aa:7f:fd:07:10:31:a7:b6:d9:69:68:60:65:ad: f0:97:d8:b1:62:c3:79:ea:e0:b4:d6:53:dc:ec:a1: 60:bb:97:43:b6:ee:69:b9:a1:55:8a:e5:9e:1a:1f: d4:10:3c:79:d2:29:56:fa:b5:bc:55:dd:fd:6d:ac: 46:48:1e:7e:7f:62:18:eb:27:97:3d:10:02:89:d9: f3:ae:43:45:5b:01:e3:af:1f:7e:87:23:ab:0a:d1: 23:65:14:86:44:be:7e:b7:52:e0:f8:e7:97:7b:c1: d4:30:0b:93:5c:70:53:46:87:5e:33:7e:0b:fd:a5: b4:1f:2e:e0:61:e1:ff:f0:d6:da:8b:5a:c0:5d:a4: 55:80:f2:62:ce:a3:33:39:c1:6a:40:bd:61:80:8a: 27:17:ac:07:f5:10:63:33:5b:f6:ea:01:e2:0a:93: 64:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:3A:73:AD:6B:28:4A:75:33:D4:E8:52:A3:E1:A3:F8:F2:AE:BC:DA X509v3 Authority Key Identifier: keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/EDpzrWsoSnUz1OhSo-Gj-PKuvNo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.130.244.0/23 Signature Algorithm: sha256WithRSAEncryption 66:bc:3b:ba:fb:34:08:f2:01:67:61:b1:61:be:b4:99:14:dd: 86:05:3e:c1:ca:f9:71:ea:98:0b:5a:b8:ec:41:21:8a:15:c3: 5d:3b:ac:73:6f:6e:67:f4:2a:a6:3b:ed:4d:60:88:04:5c:c5: 94:be:5a:73:fa:a2:e8:bd:ca:c3:48:6d:93:b3:20:0a:da:da: b8:19:ba:ac:78:56:1b:12:71:f3:8f:96:93:29:95:b8:b8:65: 5a:09:1b:6a:c4:b9:43:41:66:eb:83:6c:32:fe:5c:97:44:90: de:9f:32:4b:28:64:71:92:23:a5:2b:17:a4:34:c7:ad:7f:42: 81:60:46:6c:8b:26:6a:d4:5f:6f:35:d6:54:58:4f:04:cf:17: 88:52:b2:e9:fa:89:e9:2a:5a:ba:18:2a:6a:1e:35:ed:9d:cc: a1:b0:99:50:dd:82:fb:68:1c:ab:51:bc:6e:ba:86:4d:0c:8e: 62:97:41:59:de:d4:3c:5b:aa:50:73:af:15:68:65:87:31:32: b2:d9:7b:2e:bb:bd:69:6c:40:2e:6c:01:fa:09:f8:48:d8:c4: 04:d8:07:1e:bf:d0:3c:c2:1f:c3:38:e9:64:dd:8e:2a:6c:cf: 7a:29:5c:e7:da:bd:52:e0:58:46:04:bf:93:ce:3a:16:df:56: bf:72:1e:83 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xrWVOKoZRX3MvinkWwj4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0 MjAzYjQwHhcNMjYwMTAxMDQxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDNhNzNhZDZiMjg0YTc1MzNkNGU4NTJhM2UxYTNmOGYyYWViY2RhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbmw3flGz3Uofj7QZFrAG3wsF091 EqNuSLRfFWccnZo42XLf9HoN86kTiIvLMm14Jryw1rmm/T4P2Q4AQ62MSMmpHnMe /1r+SazDQ+5Ha9UIsc1flcdBclOUqn/9BxAxp7bZaWhgZa3wl9ixYsN56uC01lPc 7KFgu5dDtu5puaFViuWeGh/UEDx50ilW+rW8Vd39baxGSB5+f2IY6yeXPRACidnz rkNFWwHjrx9+hyOrCtEjZRSGRL5+t1Lg+OeXe8HUMAuTXHBTRodeM34L/aW0Hy7g YeH/8Nbai1rAXaRVgPJizqMzOcFqQL1hgIonF6wH9RBjM1v26gHiCpNkGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBA6c61rKEp1M9ToUqPho/jyrrzaMB8GA1UdIwQY MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt MTY2OTljOTZkZDVlLzEvRURwenJXc29TblV6MU9oU28tR2otUEt1dk5vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBvIL0MA0G CSqGSIb3DQEBCwUAA4IBAQBmvDu6+zQI8gFnYbFhvrSZFN2GBT7Byvlx6pgLWrjs QSGKFcNdO6xzb25n9CqmO+1NYIgEXMWUvlpz+qLovcrDSG2TsyAK2tq4GbqseFYb EnHzj5aTKZW4uGVaCRtqxLlDQWbrg2wy/lyXRJDenzJLKGRxkiOlKxekNMetf0KB YEZsiyZq1F9vNdZUWE8EzxeIUrLp+onpKlq6GCpqHjXtncyhsJlQ3YL7aByrUbxu uoZNDI5il0FZ3tQ8W6pQc68VaGWHMTKy2Xsuu71pbEAubAH6CfhI2MQE2Acev9A8 wh/DOOlk3Y4qbM96KVzn2r1S4FhGBL+TzjoW31a/ch6D -----END CERTIFICATE-----Generated at Sun Jan 25 20:58:57 2026 by rpki-client