This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b10e06-257c-4995-879d-6d07d7f1a701/1/Es-P_bdxjcTCOpzJlBfusPdxWF8.roa File: Es-P_bdxjcTCOpzJlBfusPdxWF8.roa (raw, json) Hash identifier: 3Ormem72O/mCAM9pP5kCR7lMJ8Mol6CBrDFrWlq7SlQ= Subject key identifier: 12:CF:8F:FD:B7:71:8D:C4:C2:3A:9C:C9:94:17:EE:B0:F7:71:58:5F Certificate issuer: /CN=c17cc37f1ed81ac37b20faf0f42c41ab808f13c1 Certificate serial: 019B7D5CE82213A406BC78E801052BCCC1E3 Authority key identifier: C1:7C:C3:7F:1E:D8:1A:C3:7B:20:FA:F0:F4:2C:41:AB:80:8F:13:C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wXzDfx7YGsN7IPrw9CxBq4CPE8E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b10e06-257c-4995-879d-6d07d7f1a701/1/Es-P_bdxjcTCOpzJlBfusPdxWF8.roa Signing time: Fri 02 Jan 2026 06:19:59 +0000 ROA not before: Fri 02 Jan 2026 06:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199643 IP address blocks: 185.7.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b10e06-257c-4995-879d-6d07d7f1a701/1/wXzDfx7YGsN7IPrw9CxBq4CPE8E.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/b10e06-257c-4995-879d-6d07d7f1a701/1/wXzDfx7YGsN7IPrw9CxBq4CPE8E.mft rsync://rpki.ripe.net/repository/DEFAULT/wXzDfx7YGsN7IPrw9CxBq4CPE8E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:e8:22:13:a4:06:bc:78:e8:01:05:2b:cc:c1:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c17cc37f1ed81ac37b20faf0f42c41ab808f13c1 Validity Not Before: Jan 2 06:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=12cf8ffdb7718dc4c23a9cc99417eeb0f771585f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:93:fc:f6:cc:3e:6e:03:ce:f0:f5:ec:3e:75: 5e:80:3d:f4:65:9e:d6:13:f9:61:aa:d8:7d:ae:04: 79:77:14:97:15:48:7b:26:72:28:b0:4f:52:51:31: 73:fc:8d:02:9b:37:1f:1f:40:e0:a3:16:2b:bf:72: 9a:8b:2e:8a:75:54:f5:2e:04:6a:81:07:48:3a:06: d5:16:33:5b:24:5a:e5:23:22:1e:2a:b9:78:c8:5e: 9b:bd:42:fa:b1:f0:b6:94:cc:9d:37:6a:e2:58:af: d5:05:12:1e:cd:07:3c:36:9e:71:d2:95:f5:ae:89: d3:fa:e1:b9:02:81:f8:f2:00:5c:98:5a:f4:bb:3b: e6:51:d1:69:a4:37:9a:62:35:04:d8:4c:7c:ec:13: 44:40:4e:f6:70:94:76:66:57:25:8c:ed:34:26:45: cb:d6:35:53:67:3f:3e:ab:e5:72:fc:bb:06:5f:71: 64:03:ac:cb:60:e9:5c:c4:f8:25:14:87:41:97:58: b1:0e:30:68:b1:13:94:61:40:19:a9:1f:fb:5e:64: c3:b8:8d:b4:08:df:77:19:06:86:9c:58:09:1a:c1: b8:36:89:57:9e:5c:77:0d:3c:c7:09:d0:0f:dd:40: 78:b2:6b:bd:5b:7b:a9:23:c6:db:b0:50:1c:90:07: 9a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:CF:8F:FD:B7:71:8D:C4:C2:3A:9C:C9:94:17:EE:B0:F7:71:58:5F X509v3 Authority Key Identifier: keyid:C1:7C:C3:7F:1E:D8:1A:C3:7B:20:FA:F0:F4:2C:41:AB:80:8F:13:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXzDfx7YGsN7IPrw9CxBq4CPE8E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b10e06-257c-4995-879d-6d07d7f1a701/1/Es-P_bdxjcTCOpzJlBfusPdxWF8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b10e06-257c-4995-879d-6d07d7f1a701/1/wXzDfx7YGsN7IPrw9CxBq4CPE8E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.7.128.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:a1:f5:1d:27:c5:e1:e0:c7:00:7d:ae:2f:6a:48:2e:cc:22: da:fa:20:33:c3:01:48:61:ba:5e:b7:2e:ec:bd:7c:be:61:59: 43:94:f8:d6:5d:c8:8a:f6:9a:c0:81:39:b0:12:95:17:03:80: 3b:6a:a2:94:a2:6a:84:81:80:ee:ff:5c:5f:08:6f:7e:25:a5: c1:a1:c7:39:4a:1b:e6:d2:89:d2:b9:b3:31:bd:ce:5a:99:86: d6:92:72:0b:eb:03:9e:c8:99:cd:89:5b:c2:af:9c:40:40:56: 89:2a:25:02:74:a3:aa:9d:e1:ed:2c:03:f1:6b:51:8e:12:47: 62:5b:5d:f0:19:67:93:2f:63:07:4f:95:94:c5:dd:d4:e7:99: ee:df:f8:4a:aa:ae:5e:d7:4b:6a:f4:84:2b:4c:b2:9c:63:37: 3a:3a:6b:06:a3:d7:bf:c0:f0:38:2c:8a:1a:88:da:72:a2:c1: 9e:99:c9:a8:52:3e:af:50:fc:12:bb:34:a5:e4:7a:24:89:5d: c4:2e:80:e0:91:6e:29:ad:10:08:f7:11:96:38:a5:cb:19:01: d7:b9:0a:0d:ee:11:35:a2:5c:be:90:9a:92:b3:62:1c:f1:19: 6d:90:56:86:5b:53:c4:68:03:44:3e:c3:94:7c:71:6f:68:db: c8:62:ea:71 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XOgiE6QGvHjoAQUrzMHjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxN2NjMzdmMWVkODFhYzM3YjIwZmFmMGY0MmM0MWFiODA4 ZjEzYzEwHhcNMjYwMTAyMDYxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMmNmOGZmZGI3NzE4ZGM0YzIzYTljYzk5NDE3ZWViMGY3NzE1ODVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJP89sw+bgPO8PXsPnVegD30ZZ7W E/lhqth9rgR5dxSXFUh7JnIosE9SUTFz/I0CmzcfH0DgoxYrv3Kaiy6KdVT1LgRq gQdIOgbVFjNbJFrlIyIeKrl4yF6bvUL6sfC2lMydN2riWK/VBRIezQc8Np5x0pX1 ronT+uG5AoH48gBcmFr0uzvmUdFppDeaYjUE2Ex87BNEQE72cJR2ZlcljO00JkXL 1jVTZz8+q+Vy/LsGX3FkA6zLYOlcxPglFIdBl1ixDjBosROUYUAZqR/7XmTDuI20 CN93GQaGnFgJGsG4NolXnlx3DTzHCdAP3UB4smu9W3upI8bbsFAckAeaGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBLPj/23cY3EwjqcyZQX7rD3cVhfMB8GA1UdIwQY MBaAFMF8w38e2BrDeyD68PQsQauAjxPBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1h6RGZ4N1lHc043SVBydzlDeEJxNENQRThFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9iMTBlMDYtMjU3Yy00OTk1LTg3OWQt NmQwN2Q3ZjFhNzAxLzEvRXMtUF9iZHhqY1RDT3B6SmxCZnVzUGR4V0Y4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9iMTBlMDYtMjU3Yy00OTk1LTg3OWQtNmQwN2Q3ZjFhNzAx LzEvd1h6RGZ4N1lHc043SVBydzlDeEJxNENQRThFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQeAMA0G CSqGSIb3DQEBCwUAA4IBAQBvofUdJ8Xh4McAfa4vakguzCLa+iAzwwFIYbpety7s vXy+YVlDlPjWXciK9prAgTmwEpUXA4A7aqKUomqEgYDu/1xfCG9+JaXBocc5Shvm 0onSubMxvc5amYbWknIL6wOeyJnNiVvCr5xAQFaJKiUCdKOqneHtLAPxa1GOEkdi W13wGWeTL2MHT5WUxd3U55nu3/hKqq5e10tq9IQrTLKcYzc6OmsGo9e/wPA4LIoa iNpyosGemcmoUj6vUPwSuzSl5HokiV3ELoDgkW4prRAI9xGWOKXLGQHXuQoN7hE1 oly+kJqSs2Ic8RltkFaGW1PEaANEPsOUfHFvaNvIYupx -----END CERTIFICATE-----Generated at Sun Jan 25 15:13:37 2026 by rpki-client