This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/bdab9d-458b-4d6a-9d9b-aeec7a859c59/1/eSJ9M3YRMULj0vRUBV74lXf_M64.roa File: eSJ9M3YRMULj0vRUBV74lXf_M64.roa (raw, json) Hash identifier: UuL1eC7zK/jssD2ClTL9pItbGfU98/yXUav7BdprTQk= Subject key identifier: 79:22:7D:33:76:11:31:42:E3:D2:F4:54:05:5E:F8:95:77:FF:33:AE Certificate issuer: /CN=a61ada61202413cd8fca2f49742527ad021f9676 Certificate serial: 019B7CEDEA5AC20832DCF90460CB7FD72649 Authority key identifier: A6:1A:DA:61:20:24:13:CD:8F:CA:2F:49:74:25:27:AD:02:1F:96:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/phraYSAkE82Pyi9JdCUnrQIflnY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/bdab9d-458b-4d6a-9d9b-aeec7a859c59/1/eSJ9M3YRMULj0vRUBV74lXf_M64.roa Signing time: Fri 02 Jan 2026 04:18:45 +0000 ROA not before: Fri 02 Jan 2026 04:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 11170 IP address blocks: 185.38.242.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/bdab9d-458b-4d6a-9d9b-aeec7a859c59/1/phraYSAkE82Pyi9JdCUnrQIflnY.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/bdab9d-458b-4d6a-9d9b-aeec7a859c59/1/phraYSAkE82Pyi9JdCUnrQIflnY.mft rsync://rpki.ripe.net/repository/DEFAULT/phraYSAkE82Pyi9JdCUnrQIflnY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:ea:5a:c2:08:32:dc:f9:04:60:cb:7f:d7:26:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a61ada61202413cd8fca2f49742527ad021f9676 Validity Not Before: Jan 2 04:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=79227d3376113142e3d2f454055ef89577ff33ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ae:0d:4d:7f:5f:05:19:09:d5:df:24:f8:01: 90:53:44:74:17:55:6f:08:4c:1d:f5:e5:02:21:43: 4b:0b:e4:c3:66:9e:a9:e4:c3:11:82:46:e6:0d:cc: 81:7d:d7:1c:1c:bd:11:68:c4:75:87:e0:d2:4b:82: d9:64:6b:91:fb:8e:6f:e3:82:6a:03:b8:92:07:f8: d3:0b:34:c2:f0:a5:d8:4f:cc:c3:38:61:a1:de:46: 41:73:5a:9a:05:43:8c:a3:9a:6f:6f:bd:15:83:6f: 0a:e0:07:99:3f:25:fd:c7:a3:71:f9:3d:8e:38:d8: 77:32:5d:a8:96:42:d9:36:48:16:a3:44:6d:dc:ea: c8:49:7b:ea:45:e3:9e:b9:7c:53:c7:63:b2:1e:81: 68:5c:71:a0:79:57:bb:72:4b:63:a7:63:b1:e3:59: 2b:58:45:00:8b:ad:ee:24:e9:f1:0b:fa:70:91:a3: a1:41:da:74:8b:70:5d:95:7a:a7:6c:4a:b5:27:89: fe:50:a8:da:e2:7b:53:2e:30:62:dd:60:64:5a:6e: 8e:c4:a2:1d:b7:db:6f:8a:bc:8a:de:71:92:d1:2e: 83:9b:de:9a:bb:0e:84:ba:6d:24:8a:e6:96:8d:dc: 07:21:89:ac:be:4f:fa:1d:b9:37:85:8c:ce:68:1c: c7:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:22:7D:33:76:11:31:42:E3:D2:F4:54:05:5E:F8:95:77:FF:33:AE X509v3 Authority Key Identifier: keyid:A6:1A:DA:61:20:24:13:CD:8F:CA:2F:49:74:25:27:AD:02:1F:96:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phraYSAkE82Pyi9JdCUnrQIflnY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bdab9d-458b-4d6a-9d9b-aeec7a859c59/1/eSJ9M3YRMULj0vRUBV74lXf_M64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bdab9d-458b-4d6a-9d9b-aeec7a859c59/1/phraYSAkE82Pyi9JdCUnrQIflnY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.38.242.0/23 Signature Algorithm: sha256WithRSAEncryption 8b:3a:d3:84:14:d1:ea:72:40:f5:b1:64:8f:9c:7d:8a:49:b8: 6d:35:42:3e:20:f0:8a:55:bc:ab:6f:56:34:d7:48:cf:41:2c: 32:74:d7:15:c8:86:92:29:50:8f:96:23:92:a2:93:19:d6:1b: 37:cc:61:51:fe:79:90:9e:3d:68:c7:9b:25:b7:94:b2:d2:33: 8d:c0:e3:4e:6e:45:e7:6c:5e:44:c5:72:fa:9c:91:32:2b:40: a8:cf:a5:a2:79:0b:10:47:82:5f:f3:60:38:62:10:27:6c:26: 98:d2:09:e4:4e:fc:82:e8:5b:56:e6:02:b1:29:5f:af:e8:19: 4d:e0:82:a8:39:d9:a6:62:54:44:89:91:1f:dc:a4:5e:4c:ab: f8:c7:26:b8:0b:0d:6c:79:36:a5:77:ce:74:57:f9:d0:63:ba: 3c:d3:51:26:a8:41:c4:7f:8b:8d:cd:34:45:58:ea:c1:79:09: b8:2f:38:97:39:ba:e0:dc:63:a2:da:6a:d4:70:f2:87:2f:1a: d6:e5:81:3b:da:91:ed:ad:49:68:8e:88:e6:f5:2c:9d:10:60: d9:69:a2:19:a5:50:6c:fa:97:74:cc:45:d3:2e:a6:88:8f:0a: 09:f3:b9:23:83:a3:0a:0c:2c:4c:cf:61:19:bd:f8:db:3b:a6: a1:06:34:4a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87epawggy3PkEYMt/1yZJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MWFkYTYxMjAyNDEzY2Q4ZmNhMmY0OTc0MjUyN2FkMDIx Zjk2NzYwHhcNMjYwMTAyMDQxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OTIyN2QzMzc2MTEzMTQyZTNkMmY0NTQwNTVlZjg5NTc3ZmYzM2FlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvK4NTX9fBRkJ1d8k+AGQU0R0F1Vv CEwd9eUCIUNLC+TDZp6p5MMRgkbmDcyBfdccHL0RaMR1h+DSS4LZZGuR+45v44Jq A7iSB/jTCzTC8KXYT8zDOGGh3kZBc1qaBUOMo5pvb70Vg28K4AeZPyX9x6Nx+T2O ONh3Ml2olkLZNkgWo0Rt3OrISXvqReOeuXxTx2OyHoFoXHGgeVe7cktjp2Ox41kr WEUAi63uJOnxC/pwkaOhQdp0i3BdlXqnbEq1J4n+UKja4ntTLjBi3WBkWm6OxKId t9tviryK3nGS0S6Dm96auw6Eum0kiuaWjdwHIYmsvk/6Hbk3hYzOaBzHawIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHkifTN2ETFC49L0VAVe+JV3/zOuMB8GA1UdIwQY MBaAFKYa2mEgJBPNj8ovSXQlJ60CH5Z2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGhyYVlTQWtFODJQeWk5SmRDVW5yUUlmbG5ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9iZGFiOWQtNDU4Yi00ZDZhLTlkOWIt YWVlYzdhODU5YzU5LzEvZVNKOU0zWVJNVUxqMHZSVUJWNzRsWGZfTTY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9iZGFiOWQtNDU4Yi00ZDZhLTlkOWItYWVlYzdhODU5YzU5 LzEvcGhyYVlTQWtFODJQeWk5SmRDVW5yUUlmbG5ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuSbyMA0G CSqGSIb3DQEBCwUAA4IBAQCLOtOEFNHqckD1sWSPnH2KSbhtNUI+IPCKVbyrb1Y0 10jPQSwydNcVyIaSKVCPliOSopMZ1hs3zGFR/nmQnj1ox5slt5Sy0jONwONObkXn bF5ExXL6nJEyK0Coz6WieQsQR4Jf82A4YhAnbCaY0gnkTvyC6FtW5gKxKV+v6BlN 4IKoOdmmYlREiZEf3KReTKv4xya4Cw1seTald850V/nQY7o801EmqEHEf4uNzTRF WOrBeQm4LziXObrg3GOi2mrUcPKHLxrW5YE72pHtrUlojojm9SydEGDZaaIZpVBs +pd0zEXTLqaIjwoJ87kjg6MKDCxMz2EZvfjbO6ahBjRK -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:58 2026 by rpki-client