This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/Es0ua-vxyxjcsLvaoi1mzGRFLDs.roa File: Es0ua-vxyxjcsLvaoi1mzGRFLDs.roa (raw, json) Hash identifier: f1TQFLKcOmbSU1W2vbI+gyaehRaTN+oWeXN0L2tAh3s= Subject key identifier: 12:CD:2E:6B:EB:F1:CB:18:DC:B0:BB:DA:A2:2D:66:CC:64:45:2C:3B Certificate issuer: /CN=ec6b71c67e1cc28078697952ad3f4f355f4e1341 Certificate serial: 019B76EB950E1E7E9F5379C85FA7BBA63A7F Authority key identifier: EC:6B:71:C6:7E:1C:C2:80:78:69:79:52:AD:3F:4F:35:5F:4E:13:41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/Es0ua-vxyxjcsLvaoi1mzGRFLDs.roa Signing time: Thu 01 Jan 2026 00:18:29 +0000 ROA not before: Thu 01 Jan 2026 00:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5464 IP address blocks: 91.237.100.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.mft rsync://rpki.ripe.net/repository/DEFAULT/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:95:0e:1e:7e:9f:53:79:c8:5f:a7:bb:a6:3a:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec6b71c67e1cc28078697952ad3f4f355f4e1341 Validity Not Before: Jan 1 00:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=12cd2e6bebf1cb18dcb0bbdaa22d66cc64452c3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:f1:47:3f:21:23:8d:25:77:55:36:f9:f0:b3: ac:d0:cb:f9:c2:7e:47:a3:ff:72:d0:31:b8:8b:cf: 37:97:f4:d3:00:cf:22:e5:9b:9d:c7:43:1b:9d:7c: fd:20:ed:32:aa:38:d3:c1:50:d7:e5:e3:6e:eb:70: a4:01:fb:11:39:7d:2d:89:84:35:85:f9:1f:25:19: bb:1a:54:e4:1d:65:78:41:88:82:69:ff:50:89:c3: 34:9b:57:74:99:b8:5b:ff:f5:24:05:fb:b8:02:8c: 63:6d:8d:71:f9:22:47:9f:05:c1:7e:7b:85:2d:76: c6:23:7d:ba:88:61:83:f0:95:f2:7c:02:9c:8c:01: c3:49:6a:0a:49:0c:30:a6:55:cb:20:31:6b:26:ad: b3:76:d3:cc:38:dd:a2:36:70:04:7a:60:f1:00:c7: 8e:1f:76:55:2d:1e:ae:e9:33:68:65:47:89:3a:0a: 86:21:5f:f7:1b:7a:8e:37:48:e4:98:22:57:b3:2f: 8b:9e:af:e8:38:de:f3:69:a9:80:00:bd:c0:f3:12: 9f:48:e1:06:e3:42:98:9b:5f:f3:8f:b2:19:14:00: f8:5d:1e:99:97:ca:b2:ca:26:04:59:28:10:b3:bc: 71:a8:69:6d:7d:5f:ae:4c:ae:98:f4:ec:56:69:aa: 4d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:CD:2E:6B:EB:F1:CB:18:DC:B0:BB:DA:A2:2D:66:CC:64:45:2C:3B X509v3 Authority Key Identifier: keyid:EC:6B:71:C6:7E:1C:C2:80:78:69:79:52:AD:3F:4F:35:5F:4E:13:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/Es0ua-vxyxjcsLvaoi1mzGRFLDs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/87e940-e2a1-436e-aa73-d3f6cd8e4444/1/7Gtxxn4cwoB4aXlSrT9PNV9OE0E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.237.100.0/23 Signature Algorithm: sha256WithRSAEncryption 2d:c7:d6:78:f5:bc:32:18:6f:7d:15:ac:1d:83:b3:de:f0:68: 38:23:fa:fd:51:3b:14:97:b3:d3:4c:8f:e1:0d:8c:a9:9b:8b: 9d:41:ee:8d:c7:2d:c1:1e:a7:93:8c:e3:8b:b8:54:33:57:5a: 3a:63:20:98:e9:ed:40:5c:09:93:9e:fb:0b:89:bf:5e:ac:6d: 97:3c:11:43:03:c5:3b:b4:ff:d0:a4:f2:37:f5:6f:50:72:4a: 00:52:84:92:40:d0:c4:c6:bf:ea:25:8c:c7:51:e7:04:00:6b: 91:62:2d:0b:45:06:91:af:7d:59:67:4f:7e:68:95:5a:5d:2c: 0a:63:2c:71:0e:d7:0a:91:8f:f6:2f:8d:4c:e4:47:6a:a5:c8: 10:74:84:ad:8e:27:1a:f9:84:3b:65:fe:a1:43:9d:c8:a8:c3: c6:df:e7:fd:ec:66:ea:c2:6c:ca:16:26:75:c9:28:88:7a:b5: 0c:48:f2:73:72:24:5b:e2:e8:32:96:5c:25:93:aa:d9:cd:01: 61:66:1c:d1:67:55:59:67:ef:70:4d:d9:38:38:64:1e:e0:ce: 46:49:8d:2d:b8:db:0d:1e:f4:04:5c:d2:f7:67:bb:44:99:8a: 62:d2:78:22:b3:b9:7f:51:4b:17:b9:3f:ab:73:19:93:be:5e: a2:dc:af:8d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt265UOHn6fU3nIX6e7pjp/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNmI3MWM2N2UxY2MyODA3ODY5Nzk1MmFkM2Y0ZjM1NWY0 ZTEzNDEwHhcNMjYwMTAxMDAxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMmNkMmU2YmViZjFjYjE4ZGNiMGJiZGFhMjJkNjZjYzY0NDUyYzNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7PFHPyEjjSV3VTb58LOs0Mv5wn5H o/9y0DG4i883l/TTAM8i5Zudx0MbnXz9IO0yqjjTwVDX5eNu63CkAfsROX0tiYQ1 hfkfJRm7GlTkHWV4QYiCaf9QicM0m1d0mbhb//UkBfu4AoxjbY1x+SJHnwXBfnuF LXbGI326iGGD8JXyfAKcjAHDSWoKSQwwplXLIDFrJq2zdtPMON2iNnAEemDxAMeO H3ZVLR6u6TNoZUeJOgqGIV/3G3qON0jkmCJXsy+Lnq/oON7zaamAAL3A8xKfSOEG 40KYm1/zj7IZFAD4XR6Zl8qyyiYEWSgQs7xxqGltfV+uTK6Y9OxWaapNgwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBLNLmvr8csY3LC72qItZsxkRSw7MB8GA1UdIwQY MBaAFOxrccZ+HMKAeGl5Uq0/TzVfThNBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0d0eHhuNGN3b0I0YVhsU3JUOVBOVjlPRTBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84N2U5NDAtZTJhMS00MzZlLWFhNzMt ZDNmNmNkOGU0NDQ0LzEvRXMwdWEtdnh5eGpjc0x2YW9pMW16R1JGTERzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy84N2U5NDAtZTJhMS00MzZlLWFhNzMtZDNmNmNkOGU0NDQ0 LzEvN0d0eHhuNGN3b0I0YVhsU3JUOVBOVjlPRTBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW+1kMA0G CSqGSIb3DQEBCwUAA4IBAQAtx9Z49bwyGG99Fawdg7Pe8Gg4I/r9UTsUl7PTTI/h DYypm4udQe6Nxy3BHqeTjOOLuFQzV1o6YyCY6e1AXAmTnvsLib9erG2XPBFDA8U7 tP/QpPI39W9QckoAUoSSQNDExr/qJYzHUecEAGuRYi0LRQaRr31ZZ09+aJVaXSwK YyxxDtcKkY/2L41M5EdqpcgQdIStjica+YQ7Zf6hQ53IqMPG3+f97GbqwmzKFiZ1 ySiIerUMSPJzciRb4ugyllwlk6rZzQFhZhzRZ1VZZ+9wTdk4OGQe4M5GSY0tuNsN HvQEXNL3Z7tEmYpi0ngis7l/UUsXuT+rcxmTvl6i3K+N -----END CERTIFICATE-----Generated at Mon Jan 26 01:15:15 2026 by rpki-client