This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/we3xcWz3LSd5AgDRHj0SC-9kOl4.roa File: we3xcWz3LSd5AgDRHj0SC-9kOl4.roa (raw, json) Hash identifier: hLnYWm/JIur3cJVhWeECJl7YhBgW2E3tRZoZ7DkpneQ= Subject key identifier: C1:ED:F1:71:6C:F7:2D:27:79:02:00:D1:1E:3D:12:0B:EF:64:3A:5E Certificate issuer: /CN=122a646bed4c417a6b4805f93d77a7a465e34b93 Certificate serial: 019B7EA6F23CE8A1E60C30FA50F3C091E448 Authority key identifier: 12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/we3xcWz3LSd5AgDRHj0SC-9kOl4.roa Signing time: Fri 02 Jan 2026 12:20:28 +0000 ROA not before: Fri 02 Jan 2026 12:20:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205148 IP address blocks: 93.159.187.0/24 maxlen: 24 2a00:1578:100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.crl rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.mft rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:f2:3c:e8:a1:e6:0c:30:fa:50:f3:c0:91:e4:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=122a646bed4c417a6b4805f93d77a7a465e34b93 Validity Not Before: Jan 2 12:20:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c1edf1716cf72d27790200d11e3d120bef643a5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:98:f4:94:9f:c3:42:6c:23:4b:66:6b:70:0a: 69:42:27:26:98:1f:af:98:72:67:01:8a:43:6c:ef: b1:70:f6:18:ea:3a:3c:bd:db:ea:35:4d:45:31:1c: 43:33:1e:2f:32:85:c0:f9:60:1e:0d:04:c7:2d:8d: fa:ec:1e:15:43:48:9d:5c:32:f8:43:ee:7f:d6:3c: e1:59:a7:5b:31:14:ea:8f:dc:99:c6:07:02:b1:91: 91:3c:60:5d:4d:9e:10:0e:1c:81:42:37:26:9e:22: 6e:09:26:1b:9b:34:8f:1b:6c:fe:dd:ec:3b:cd:66: e3:a1:e8:c1:e3:ff:73:b2:83:21:8a:8a:93:de:cd: 67:51:2d:2d:32:44:04:77:d6:e0:cf:62:dd:20:c5: f4:82:e9:e1:2d:2f:7b:a1:8d:6e:60:67:fe:c3:93: bd:cb:cc:34:76:5c:a4:ec:df:9c:78:01:d1:cb:8a: 5b:7e:1e:e4:4d:64:59:10:fb:7b:b7:f3:47:9b:70: 8e:0b:d3:ca:9f:9f:b2:cf:7a:fb:b6:7c:bf:bf:f4: ba:19:5b:52:c2:f1:18:29:26:d9:0e:b0:37:4d:b8: 92:bc:25:a5:ea:34:e7:35:34:82:04:fe:c4:6c:b2: fd:cd:e6:3c:56:9a:55:c3:ce:a0:be:cd:74:95:b7: 46:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:ED:F1:71:6C:F7:2D:27:79:02:00:D1:1E:3D:12:0B:EF:64:3A:5E X509v3 Authority Key Identifier: keyid:12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/we3xcWz3LSd5AgDRHj0SC-9kOl4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.159.187.0/24 IPv6: 2a00:1578:100::/40 Signature Algorithm: sha256WithRSAEncryption 8c:3c:0d:8d:dc:fa:ea:19:c6:ed:fb:18:69:08:a6:96:93:f5: 89:cf:cb:3c:19:b5:68:53:36:db:bc:de:53:43:f8:07:32:fa: 9e:b0:c8:bc:20:ba:0f:d6:8d:70:34:ee:ca:d7:7d:30:f7:64: 9f:63:2e:f7:0f:c1:76:ac:36:12:c4:f9:2c:86:97:08:2b:71: fb:1f:e0:59:ce:59:ef:fa:7f:22:3f:48:c0:d7:09:12:00:a0: ac:a0:1f:35:dd:45:9e:db:c6:9f:13:dd:b7:99:88:c3:a8:95: 3d:71:a8:23:88:18:80:41:51:4d:d0:9b:ab:aa:43:4b:61:5c: bc:fd:47:1d:cb:0f:74:56:a4:01:9e:40:4a:f2:6c:b4:55:be: f2:54:1b:d9:9f:ef:ac:71:4a:a7:9a:0b:db:0c:cf:c8:a5:24: 9a:9c:aa:ec:d0:cf:46:6b:d9:48:03:41:9b:fe:9c:4a:c8:b7: 92:fc:c7:78:16:6e:09:a2:e5:e9:2b:c8:5a:d0:75:cd:3f:9a: 2e:35:8c:73:f7:c9:db:56:5f:e5:58:70:ee:0d:96:0d:fb:90: 2c:4d:6c:03:1a:89:9e:80:ef:1f:48:50:eb:4d:a4:49:da:1a: 69:d5:99:95:6a:c4:70:73:bc:2e:8b:0c:21:c9:17:ac:c8:72: 78:fd:ff:1c -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt+pvI86KHmDDD6UPPAkeRIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyMmE2NDZiZWQ0YzQxN2E2YjQ4MDVmOTNkNzdhN2E0NjVl MzRiOTMwHhcNMjYwMTAyMTIyMDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMWVkZjE3MTZjZjcyZDI3NzkwMjAwZDExZTNkMTIwYmVmNjQzYTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJj0lJ/DQmwjS2ZrcAppQicmmB+v mHJnAYpDbO+xcPYY6jo8vdvqNU1FMRxDMx4vMoXA+WAeDQTHLY367B4VQ0idXDL4 Q+5/1jzhWadbMRTqj9yZxgcCsZGRPGBdTZ4QDhyBQjcmniJuCSYbmzSPG2z+3ew7 zWbjoejB4/9zsoMhioqT3s1nUS0tMkQEd9bgz2LdIMX0gunhLS97oY1uYGf+w5O9 y8w0dlyk7N+ceAHRy4pbfh7kTWRZEPt7t/NHm3COC9PKn5+yz3r7tny/v/S6GVtS wvEYKSbZDrA3TbiSvCWl6jTnNTSCBP7EbLL9zeY8VppVw86gvs10lbdG9QIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFMHt8XFs9y0neQIA0R49EgvvZDpeMB8GA1UdIwQY MBaAFBIqZGvtTEF6a0gF+T13p6Rl40uTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWlwa2EtMU1RWHByU0FYNVBYZW5wR1hqUzVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9hNTk2ZTItMjlkMi00OGM2LTliYWIt NWNiZDFmM2ZmMzlhLzEvd2UzeGNXejNMU2Q1QWdEUkhqMFNDLTlrT2w0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9hNTk2ZTItMjlkMi00OGM2LTliYWItNWNiZDFmM2ZmMzlh LzEvRWlwa2EtMU1RWHByU0FYNVBYZW5wR1hqUzVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAXZ+7MA4E AgACMAgDBgAqABV4ATANBgkqhkiG9w0BAQsFAAOCAQEAjDwNjdz66hnG7fsYaQim lpP1ic/LPBm1aFM227zeU0P4BzL6nrDIvCC6D9aNcDTuytd9MPdkn2Mu9w/Bdqw2 EsT5LIaXCCtx+x/gWc5Z7/p/Ij9IwNcJEgCgrKAfNd1FntvGnxPdt5mIw6iVPXGo I4gYgEFRTdCbq6pDS2FcvP1HHcsPdFakAZ5ASvJstFW+8lQb2Z/vrHFKp5oL2wzP yKUkmpyq7NDPRmvZSANBm/6cSsi3kvzHeBZuCaLl6SvIWtB1zT+aLjWMc/fJ21Zf 5Vhw7g2WDfuQLE1sAxqJnoDvH0hQ602kSdoaadWZlWrEcHO8LosMIckXrMhyeP3/ HA== -----END CERTIFICATE-----Generated at Sun Jan 25 19:35:54 2026 by rpki-client