This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/Ewp2ty2AesH2Jd9VIJPXFtxGGxY.roa File: Ewp2ty2AesH2Jd9VIJPXFtxGGxY.roa (raw, json) Hash identifier: ZxzzP3F2j7XnslqpQi6FYUYx4xkKMdzCPqasRFAy5H4= Subject key identifier: 13:0A:76:B7:2D:80:7A:C1:F6:25:DF:55:20:93:D7:16:DC:46:1B:16 Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3 Certificate serial: 019B77C679F76EE46E659932518B4C6052E9 Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/Ewp2ty2AesH2Jd9VIJPXFtxGGxY.roa Signing time: Thu 01 Jan 2026 04:17:34 +0000 ROA not before: Thu 01 Jan 2026 04:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200361 IP address blocks: 212.21.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:79:f7:6e:e4:6e:65:99:32:51:8b:4c:60:52:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3 Validity Not Before: Jan 1 04:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=130a76b72d807ac1f625df552093d716dc461b16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c9:76:f3:97:07:ce:84:f3:6c:d8:1a:81:5a: b3:2d:d9:9f:7e:d8:12:9c:4e:d1:52:61:20:aa:0c: bc:c4:2f:87:54:1f:28:58:95:b9:06:96:fb:4b:a9: a9:58:d4:49:57:56:17:32:a8:f4:ce:bf:d3:10:4a: 83:55:c6:80:68:c3:6f:67:54:6c:2c:a9:23:b8:d2: 5b:0f:1c:f6:42:a0:07:c4:be:eb:b5:a1:5a:f0:21: 61:eb:cf:85:19:d5:42:c3:63:a4:75:93:00:77:69: f8:cc:af:a0:e4:a9:10:44:1e:6f:5b:21:98:d4:8b: e1:58:3e:d1:a9:26:9d:fb:de:77:6b:42:d5:a8:4d: 28:f7:f4:ec:be:c7:64:ea:ab:d3:08:d0:ba:1b:c1: 44:26:81:cc:de:fe:d6:c5:51:f7:55:75:ef:e1:65: 22:0e:69:44:5c:07:b9:96:7f:76:1d:ba:35:48:7e: 91:6f:34:67:fe:a3:f7:b5:3b:2a:f5:4d:0d:96:97: fe:de:08:7c:2b:42:0c:23:ad:67:15:f8:26:c2:94: 2b:99:72:06:a4:1b:a8:7b:af:1f:32:c2:0a:fe:9b: aa:4c:ff:2a:38:72:ec:66:97:6e:5d:ac:27:ac:9b: f9:d5:3d:1f:79:bf:f8:99:4a:0e:53:7a:e5:b4:12: fa:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:0A:76:B7:2D:80:7A:C1:F6:25:DF:55:20:93:D7:16:DC:46:1B:16 X509v3 Authority Key Identifier: keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/Ewp2ty2AesH2Jd9VIJPXFtxGGxY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.21.134.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:83:29:8a:06:94:9e:ee:98:16:9a:6e:b4:a3:7c:61:e0:ce: 51:81:ab:95:4c:ad:3a:d4:8e:70:74:bd:b0:9b:94:ab:55:8a: 98:63:5f:5a:77:3d:75:44:60:b7:3a:17:f5:5f:31:2c:bc:6e: 52:c6:95:ea:5d:96:31:02:d1:d5:9e:ed:4f:83:85:52:62:14: 5f:b5:9a:f3:94:cb:46:c5:9d:78:5d:3d:74:10:2d:5a:df:21: f0:53:11:85:fa:49:e2:ea:a5:de:73:bd:59:71:80:b2:fb:cc: ca:bf:e9:2c:83:62:4c:53:6f:27:48:ca:f1:16:c8:9a:9e:57: f1:4e:b4:95:7f:a9:87:61:1a:37:68:a5:a7:6a:6c:86:16:ad: df:60:71:a3:d2:ff:a0:a8:00:1b:9a:8c:72:51:74:13:76:30: 4a:fa:96:3f:f0:42:f3:f0:42:84:d4:95:aa:fe:49:47:63:f0: 8b:0e:9b:05:f1:ca:4b:f2:05:b0:df:d5:20:7d:72:ec:cc:4b: e3:73:04:ff:bf:e6:82:40:95:b6:da:f5:ca:7a:c4:6f:d8:1e: 8b:6e:12:38:a4:f3:ee:c5:7a:7d:db:b2:f7:97:99:3b:7e:82: 1e:e8:fe:65:e7:42:f8:f8:75:9a:40:85:30:7c:36:ab:4e:81: b7:52:59:90 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xnn3buRuZZkyUYtMYFLpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViZWM5MDMwYzcwYTNkNDE5MmQ1OWMyOGRjYzhkNTQ3Njk0 MzQwYjMwHhcNMjYwMTAxMDQxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzBhNzZiNzJkODA3YWMxZjYyNWRmNTUyMDkzZDcxNmRjNDYxYjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcl285cHzoTzbNgagVqzLdmfftgS nE7RUmEgqgy8xC+HVB8oWJW5Bpb7S6mpWNRJV1YXMqj0zr/TEEqDVcaAaMNvZ1Rs LKkjuNJbDxz2QqAHxL7rtaFa8CFh68+FGdVCw2OkdZMAd2n4zK+g5KkQRB5vWyGY 1IvhWD7RqSad+953a0LVqE0o9/Tsvsdk6qvTCNC6G8FEJoHM3v7WxVH3VXXv4WUi DmlEXAe5ln92Hbo1SH6RbzRn/qP3tTsq9U0Nlpf+3gh8K0IMI61nFfgmwpQrmXIG pBuoe68fMsIK/puqTP8qOHLsZpduXawnrJv51T0feb/4mUoOU3rltBL6SQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBMKdrctgHrB9iXfVSCT1xbcRhsWMB8GA1UdIwQY MBaAFOvskDDHCj1BktWcKNzI1UdpQ0CzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8zNzJiODctOTVmNC00Yzk4LWE2ZjQt NGE2Zjg2ODMyNjVjLzEvRXdwMnR5MkFlc0gySmQ5VklKUFhGdHhHR3hZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8zNzJiODctOTVmNC00Yzk4LWE2ZjQtNGE2Zjg2ODMyNjVj LzEvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1BWGMA0G CSqGSIb3DQEBCwUAA4IBAQA6gymKBpSe7pgWmm60o3xh4M5RgauVTK061I5wdL2w m5SrVYqYY19adz11RGC3Ohf1XzEsvG5SxpXqXZYxAtHVnu1Pg4VSYhRftZrzlMtG xZ14XT10EC1a3yHwUxGF+kni6qXec71ZcYCy+8zKv+ksg2JMU28nSMrxFsianlfx TrSVf6mHYRo3aKWnamyGFq3fYHGj0v+gqAAbmoxyUXQTdjBK+pY/8ELz8EKE1JWq /klHY/CLDpsF8cpL8gWw39UgfXLszEvjcwT/v+aCQJW22vXKesRv2B6LbhI4pPPu xXp927L3l5k7foIe6P5l50L4+HWaQIUwfDarToG3UlmQ -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:45 2026 by rpki-client