This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/ePgicjUrPKkWpYUPEwCOI6NxH2s.roa File: ePgicjUrPKkWpYUPEwCOI6NxH2s.roa (raw, json) Hash identifier: VJNbv4D3CoI4ABjj0o/uprVNSr2dEP8ItrpiyHnLNLI= Subject key identifier: 78:F8:22:72:35:2B:3C:A9:16:A5:85:0F:13:00:8E:23:A3:71:1F:6B Certificate issuer: /CN=32c78eeef7acb451fc37575feb9114dfccc1cdfb Certificate serial: 019B79107EF081A7208D28968D7F97D75054 Authority key identifier: 32:C7:8E:EE:F7:AC:B4:51:FC:37:57:5F:EB:91:14:DF:CC:C1:CD:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/ePgicjUrPKkWpYUPEwCOI6NxH2s.roa Signing time: Thu 01 Jan 2026 10:18:02 +0000 ROA not before: Thu 01 Jan 2026 10:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209235 IP address blocks: 185.130.194.0/24 maxlen: 24 2a09:c0c0::/29 maxlen: 48 2a09:c0c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.mft rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:7e:f0:81:a7:20:8d:28:96:8d:7f:97:d7:50:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32c78eeef7acb451fc37575feb9114dfccc1cdfb Validity Not Before: Jan 1 10:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=78f82272352b3ca916a5850f13008e23a3711f6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:fa:3c:80:ea:19:13:02:f5:ad:aa:93:c8:7b: 51:39:a7:19:b2:cd:92:21:03:1c:90:bd:b2:fb:b6: a2:7f:a7:36:e7:52:a3:e4:1b:0a:01:e6:4b:68:ac: 3f:af:1f:9e:fb:c1:3f:75:f5:e1:f1:66:76:b2:cf: 3b:3e:9c:75:18:24:dc:b9:29:34:f4:e3:fb:5f:8f: 0c:18:a1:05:59:68:3f:27:c3:e3:4d:1f:4e:8a:39: 28:f3:23:ae:59:36:63:4a:a0:82:bd:02:52:60:2f: 3b:ae:12:d9:75:bd:01:f3:20:80:f0:a8:a8:5d:c5: 8c:10:c5:ec:42:bf:b9:0c:66:43:ab:2d:a3:0d:8a: ba:de:95:7a:98:d0:ba:19:ef:e1:3a:f0:45:75:3b: 5b:18:ef:a6:ce:f7:5f:5a:fe:5d:69:71:2c:0f:56: 6e:64:d5:dc:d7:66:fa:62:35:f6:13:97:87:80:dc: 92:be:ba:1f:98:00:df:2b:34:93:53:f4:7e:dc:fb: 72:f3:0e:fb:d1:87:e0:fd:fe:34:59:ad:b8:3b:7f: 48:00:ab:72:68:d5:ea:c9:2b:f1:20:62:c0:8a:8e: 74:17:7e:11:8f:4b:a4:d6:3c:ec:54:10:0d:9d:ce: 79:3a:0b:70:81:c0:0d:bd:c3:49:e2:3b:6e:d9:3d: f9:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:F8:22:72:35:2B:3C:A9:16:A5:85:0F:13:00:8E:23:A3:71:1F:6B X509v3 Authority Key Identifier: keyid:32:C7:8E:EE:F7:AC:B4:51:FC:37:57:5F:EB:91:14:DF:CC:C1:CD:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/ePgicjUrPKkWpYUPEwCOI6NxH2s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.130.194.0/24 IPv6: 2a09:c0c0::/29 Signature Algorithm: sha256WithRSAEncryption 00:00:bb:30:23:92:38:7c:1a:58:f9:42:cd:d3:6a:f6:0f:1f: f7:eb:94:45:1c:99:39:4d:ab:fc:ad:60:0d:b4:a3:52:76:bd: de:f3:d2:63:44:cd:6d:bf:b0:12:43:c2:ad:5f:79:40:55:ac: c0:a3:47:3d:02:5e:e6:bd:e7:7a:2d:97:b1:a1:92:cd:19:53: 2f:cb:7b:54:55:71:ea:44:4a:6e:bc:e5:1e:9c:d3:83:f8:72: 8c:67:3c:86:b8:77:ec:ff:e9:13:79:e6:37:47:ed:1b:c5:33: 49:a9:ec:a0:d9:4f:f6:86:5b:a3:d6:d9:b5:5f:da:d0:10:e8: a8:79:ed:e4:eb:65:fc:e1:ec:8b:35:37:7e:80:d2:ab:94:e6: c4:58:14:9c:3e:a1:8b:81:35:c7:35:8d:a0:ad:04:d7:7c:1b: 23:07:dd:fb:b8:d3:6f:a2:30:64:77:f5:ad:35:51:a3:ab:fb: 7e:51:c4:05:bc:58:54:be:b3:5f:21:d7:6e:ed:5d:30:36:8c: be:30:b7:37:b3:f9:61:d2:20:88:0f:9f:0c:5e:ad:84:20:b1: a0:17:6d:bf:07:27:42:1f:3b:e4:66:9d:06:0f:a3:4f:1c:fb: db:89:1d:f9:51:dd:bf:d6:fa:b3:d3:71:8e:52:93:2c:91:9a: af:54:b3:e6 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5EH7wgacgjSiWjX+X11BUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyYzc4ZWVlZjdhY2I0NTFmYzM3NTc1ZmViOTExNGRmY2Nj MWNkZmIwHhcNMjYwMTAxMTAxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OGY4MjI3MjM1MmIzY2E5MTZhNTg1MGYxMzAwOGUyM2EzNzExZjZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfo8gOoZEwL1raqTyHtROacZss2S IQMckL2y+7aif6c251Kj5BsKAeZLaKw/rx+e+8E/dfXh8WZ2ss87Ppx1GCTcuSk0 9OP7X48MGKEFWWg/J8PjTR9Oijko8yOuWTZjSqCCvQJSYC87rhLZdb0B8yCA8Kio XcWMEMXsQr+5DGZDqy2jDYq63pV6mNC6Ge/hOvBFdTtbGO+mzvdfWv5daXEsD1Zu ZNXc12b6YjX2E5eHgNySvrofmADfKzSTU/R+3Pty8w770Yfg/f40Wa24O39IAKty aNXqySvxIGLAio50F34Rj0uk1jzsVBANnc55OgtwgcANvcNJ4jtu2T35jQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFHj4InI1KzypFqWFDxMAjiOjcR9rMB8GA1UdIwQY MBaAFDLHju73rLRR/DdXX+uRFN/Mwc37MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXNlTzd2ZXN0Rkg4TjFkZjY1RVUzOHpCemZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8yMjViY2ItNmQzZC00YzBlLTgyNGYt MmYxYzhlNDA4YjY0LzEvZVBnaWNqVXJQS2tXcFlVUEV3Q09JNk54SDJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8yMjViY2ItNmQzZC00YzBlLTgyNGYtMmYxYzhlNDA4YjY0 LzEvTXNlTzd2ZXN0Rkg4TjFkZjY1RVUzOHpCemZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuYLCMA0E AgACMAcDBQMqCcDAMA0GCSqGSIb3DQEBCwUAA4IBAQAAALswI5I4fBpY+ULN02r2 Dx/365RFHJk5Tav8rWANtKNSdr3e89JjRM1tv7ASQ8KtX3lAVazAo0c9Al7mved6 LZexoZLNGVMvy3tUVXHqREpuvOUenNOD+HKMZzyGuHfs/+kTeeY3R+0bxTNJqeyg 2U/2hluj1tm1X9rQEOioee3k62X84eyLNTd+gNKrlObEWBScPqGLgTXHNY2grQTX fBsjB937uNNvojBkd/WtNVGjq/t+UcQFvFhUvrNfIddu7V0wNoy+MLc3s/lh0iCI D58MXq2EILGgF22/BydCHzvkZp0GD6NPHPvbiR35Ud2/1vqz03GOUpMskZqvVLPm -----END CERTIFICATE-----Generated at Mon Jan 26 04:20:16 2026 by rpki-client