This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/ERk4GXsIm4eHgca_Hp8ZDKKXt6M.roa File: ERk4GXsIm4eHgca_Hp8ZDKKXt6M.roa (raw, json) Hash identifier: dcFF9g5BS39gpPUrlypM3KPzuStbqdjSPSt1zZxl6YU= Subject key identifier: 11:19:38:19:7B:08:9B:87:87:81:C6:BF:1E:9F:19:0C:A2:97:B7:A3 Certificate issuer: /CN=fab65124aeb603a0dd5c5cee1a0ab6521397db60 Certificate serial: 019B77590D1D575370D65736C131A744356A Authority key identifier: FA:B6:51:24:AE:B6:03:A0:DD:5C:5C:EE:1A:0A:B6:52:13:97:DB:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-rZRJK62A6DdXFzuGgq2UhOX22A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/ERk4GXsIm4eHgca_Hp8ZDKKXt6M.roa Signing time: Thu 01 Jan 2026 02:18:03 +0000 ROA not before: Thu 01 Jan 2026 02:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6730 IP address blocks: 185.51.184.0/22 maxlen: 22 2a01:b460::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.mft rsync://rpki.ripe.net/repository/DEFAULT/1-rZRJK62A6DdXFzuGgq2UhOX22A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:0d:1d:57:53:70:d6:57:36:c1:31:a7:44:35:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fab65124aeb603a0dd5c5cee1a0ab6521397db60 Validity Not Before: Jan 1 02:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=111938197b089b878781c6bf1e9f190ca297b7a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b1:ba:16:a6:f2:6b:7d:a3:9e:2c:8d:d7:89: c2:90:f4:73:6e:9c:af:90:73:df:ee:6a:27:ec:93: b7:2b:38:70:fe:36:49:38:f8:45:ef:03:a1:4e:35: b9:e6:2a:b5:99:3a:ba:33:3a:1e:e4:1d:8e:16:2a: eb:5a:ef:3d:0a:3c:a7:41:5f:01:ba:16:75:71:0d: d9:37:d4:8e:19:f0:50:d2:8e:1c:2d:3a:f2:19:53: a1:2d:d5:00:8b:9a:d5:ad:82:11:8a:96:e7:87:bf: a1:aa:70:8e:2a:f3:bc:e0:6d:9a:25:b1:b9:78:1b: b9:44:96:0a:17:da:66:07:d6:ad:f2:9b:07:cf:eb: 50:24:4c:62:e4:db:62:b7:90:a8:79:4d:80:a4:6c: be:27:9b:b2:a5:f3:60:f7:84:d8:bd:29:e0:87:02: e3:a7:0e:3b:78:f1:b9:fb:7f:4f:15:46:10:26:d2: d8:ad:af:76:90:19:09:d1:9c:46:ef:7c:cf:71:80: 7e:a3:29:8f:51:c5:97:90:34:1f:be:0b:a1:6b:1a: df:de:7f:98:c6:36:50:75:3b:be:07:43:45:8d:f7: a4:0f:07:3a:f1:01:7a:17:55:06:f1:62:88:62:f8: a0:35:17:7b:49:25:de:32:ac:52:54:d0:d8:33:39: 93:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:19:38:19:7B:08:9B:87:87:81:C6:BF:1E:9F:19:0C:A2:97:B7:A3 X509v3 Authority Key Identifier: keyid:FA:B6:51:24:AE:B6:03:A0:DD:5C:5C:EE:1A:0A:B6:52:13:97:DB:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-rZRJK62A6DdXFzuGgq2UhOX22A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/ERk4GXsIm4eHgca_Hp8ZDKKXt6M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.51.184.0/22 IPv6: 2a01:b460::/32 Signature Algorithm: sha256WithRSAEncryption 48:78:3e:bd:46:07:bf:e5:6b:98:8d:0b:1a:45:f3:e3:06:f3: 39:3c:1b:74:98:05:4d:7c:c4:7b:24:2d:13:cd:a3:f5:ca:c3: 6d:13:b7:e3:9c:37:f1:2c:c8:8d:e0:e4:6e:5f:50:50:d1:ae: eb:8e:a9:81:70:bb:e4:8e:24:ff:87:a5:88:21:09:2d:c3:98: 13:2b:45:c6:47:ad:50:57:f9:0c:d5:96:1b:65:9d:18:73:ef: 0f:a5:78:d6:01:06:c5:fc:57:8c:73:ef:98:11:1f:2d:4d:2e: bd:1e:82:6b:43:89:04:6d:46:38:0b:cf:ea:36:62:62:d9:63: 2b:2a:f1:2d:40:1d:25:5c:8b:32:c5:c4:d4:68:48:75:1a:af: d4:6a:0d:7e:e6:ff:97:67:ff:cf:54:f5:e4:ff:5e:2c:0f:b6: 0c:f8:0e:bd:6c:ca:c8:1b:ed:25:ad:51:a6:ff:5e:5b:43:76: f5:29:0f:4c:99:a8:c2:42:be:d3:99:b7:cf:a5:0e:56:9f:6b: eb:ca:42:f2:d7:ac:94:3c:af:1a:dd:16:52:54:fb:64:3e:75: 51:71:7d:31:fe:bc:e5:09:89:30:47:7e:ec:be:8d:74:88:ec: 1b:11:51:68:6b:4e:7b:e5:24:d2:ea:57:0f:c3:ec:20:10:ed: 3d:ff:ce:35 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt3WQ0dV1Nw1lc2wTGnRDVqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhYjY1MTI0YWViNjAzYTBkZDVjNWNlZTFhMGFiNjUyMTM5 N2RiNjAwHhcNMjYwMTAxMDIxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMTE5MzgxOTdiMDg5Yjg3ODc4MWM2YmYxZTlmMTkwY2EyOTdiN2EzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bG6Fqbya32jniyN14nCkPRzbpyv kHPf7mon7JO3Kzhw/jZJOPhF7wOhTjW55iq1mTq6Mzoe5B2OFirrWu89CjynQV8B uhZ1cQ3ZN9SOGfBQ0o4cLTryGVOhLdUAi5rVrYIRipbnh7+hqnCOKvO84G2aJbG5 eBu5RJYKF9pmB9at8psHz+tQJExi5Ntit5CoeU2ApGy+J5uypfNg94TYvSnghwLj pw47ePG5+39PFUYQJtLYra92kBkJ0ZxG73zPcYB+oymPUcWXkDQfvguhaxrf3n+Y xjZQdTu+B0NFjfekDwc68QF6F1UG8WKIYvigNRd7SSXeMqxSVNDYMzmTpwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFBEZOBl7CJuHh4HGvx6fGQyil7ejMB8GA1UdIwQY MBaAFPq2USSutgOg3Vxc7hoKtlITl9tgMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1yWlJKSzYyQTZEZFhGenVHZ3EyVWhPWDIyQS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWUvZWYxNjk5LThjMTMtNDIzNS1hNTg5 LTYzZmU2YmU2MmRjOS8xL0VSazRHWHNJbTRlSGdjYV9IcDhaREtLWHQ2TS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOWUvZWYxNjk5LThjMTMtNDIzNS1hNTg5LTYzZmU2YmU2MmRj OS8xLzEtclpSSks2MkE2RGRYRnp1R2dxMlVoT1gyMkEuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAK5M7gw DQQCAAIwBwMFACoBtGAwDQYJKoZIhvcNAQELBQADggEBAEh4Pr1GB7/la5iNCxpF 8+MG8zk8G3SYBU18xHskLRPNo/XKw20Tt+OcN/EsyI3g5G5fUFDRruuOqYFwu+SO JP+HpYghCS3DmBMrRcZHrVBX+QzVlhtlnRhz7w+leNYBBsX8V4xz75gRHy1NLr0e gmtDiQRtRjgLz+o2YmLZYysq8S1AHSVcizLFxNRoSHUar9RqDX7m/5dn/89U9eT/ XiwPtgz4Dr1sysgb7SWtUab/XltDdvUpD0yZqMJCvtOZt8+lDlafa+vKQvLXrJQ8 rxrdFlJU+2Q+dVFxfTH+vOUJiTBHfuy+jXSI7BsRUWhrTnvlJNLqVw/D7CAQ7T3/ zjU= -----END CERTIFICATE-----Generated at Sun Jan 25 23:03:47 2026 by rpki-client