This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/E2EZMSzil8xzd1f_ZPOUKocZU-0.roa
File: E2EZMSzil8xzd1f_ZPOUKocZU-0.roa (raw, json)
Hash identifier: JgMBhhLpoO+yr4hgNf1ty5vp4R+3BqGLZpT/xULTOiU=
Subject key identifier: 13:61:19:31:2C:E2:97:CC:73:77:57:FF:64:F3:94:2A:87:19:53:ED
Certificate issuer: /CN=423d93054f063cf8a291861735f90059ab9ec169
Certificate serial: 019B7F151A445001ED095201082C7D299F23
Authority key identifier: 42:3D:93:05:4F:06:3C:F8:A2:91:86:17:35:F9:00:59:AB:9E:C1:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/E2EZMSzil8xzd1f_ZPOUKocZU-0.roa
Signing time: Fri 02 Jan 2026 14:20:48 +0000
ROA not before: Fri 02 Jan 2026 14:20:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206495
IP address blocks: 185.188.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:15:1a:44:50:01:ed:09:52:01:08:2c:7d:29:9f:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=423d93054f063cf8a291861735f90059ab9ec169
Validity
Not Before: Jan 2 14:20:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=136119312ce297cc737757ff64f3942a871953ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:34:8f:4f:ea:43:96:fd:2e:7e:06:35:25:19:
b8:a2:6f:eb:97:a1:b9:0a:6a:58:3c:6c:fd:d8:37:
f4:1a:ee:ed:95:d7:3a:97:3e:53:4e:6f:de:80:66:
9e:86:d0:37:4f:74:46:03:8e:9e:a7:7b:14:cc:3c:
c4:91:10:d9:28:fb:88:1a:ec:ac:e0:bf:b6:56:08:
78:14:55:78:34:6f:a7:37:fe:82:2a:7c:65:3c:1e:
ff:d7:32:80:ec:14:5a:8f:6f:cf:81:f0:16:0b:f0:
6e:42:80:80:c5:21:66:89:d5:05:e3:d4:6d:70:b9:
1b:d5:d1:5d:97:85:99:6c:d5:c4:16:50:88:8a:ac:
cc:9e:d3:ff:3c:19:30:77:de:5c:50:dd:de:41:58:
80:bb:f6:45:0b:4b:a9:4b:21:3d:ae:bf:af:8e:4d:
ed:72:13:17:be:5f:ec:6d:48:bd:3b:65:55:fe:45:
c6:c8:71:1a:f7:5e:56:aa:1d:68:2e:df:b5:45:03:
8f:af:2f:1a:58:81:bb:71:83:60:ff:f2:4b:53:b0:
86:69:85:a0:25:9f:1f:74:87:77:fe:ad:2f:64:f2:
68:c5:cf:9c:2e:82:40:c4:30:04:31:42:ff:4c:37:
ae:83:82:49:63:67:46:f3:7f:6c:b2:73:87:72:7f:
1b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:61:19:31:2C:E2:97:CC:73:77:57:FF:64:F3:94:2A:87:19:53:ED
X509v3 Authority Key Identifier:
keyid:42:3D:93:05:4F:06:3C:F8:A2:91:86:17:35:F9:00:59:AB:9E:C1:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/E2EZMSzil8xzd1f_ZPOUKocZU-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.113.0/24
Signature Algorithm: sha256WithRSAEncryption
92:a3:20:6a:9c:9c:98:a3:22:0d:1a:17:ca:c1:94:40:dd:ef:
45:b2:80:de:11:34:94:28:38:69:52:36:06:69:c7:c6:8c:49:
b4:f9:2b:45:ce:a7:6d:cd:bc:91:89:14:a0:03:5a:ff:5f:b8:
5e:b0:ca:ad:70:f9:b7:10:fe:cd:22:37:1f:51:a0:7f:58:a6:
7f:a7:08:98:87:db:93:1e:cb:8e:d6:86:61:17:29:26:fc:59:
1f:39:ff:0e:fb:98:28:82:9a:28:41:fe:4f:d2:e2:45:0c:22:
36:78:26:7f:d0:b3:ae:db:bb:73:7f:1b:af:3b:3e:8b:56:81:
d9:b4:c4:1a:1a:f9:47:55:43:a3:1c:7b:e5:ef:f6:6d:69:fe:
f3:40:ec:2a:2d:f5:c8:6c:54:86:f4:c5:86:7b:61:e8:8b:15:
a2:ca:b0:e5:04:70:07:4f:92:81:7b:11:46:9e:b1:01:47:52:
e1:56:ee:9d:66:02:38:94:5d:a1:d5:d1:d5:17:b7:a7:f3:79:
b2:c7:22:80:e5:60:35:7c:8a:5c:c0:e9:8a:89:2b:c0:ab:49:
42:56:fe:85:72:86:a1:81:ae:5d:e9:91:83:c4:6e:48:c5:d9:
16:60:9b:d7:7c:8e:cb:ad:13:63:d1:95:4a:6e:b6:0c:1a:06:
0e:3c:82:e2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt/FRpEUAHtCVIBCCx9KZ8jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyM2Q5MzA1NGYwNjNjZjhhMjkxODYxNzM1ZjkwMDU5YWI5
ZWMxNjkwHhcNMjYwMTAyMTQyMDQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzYxMTkzMTJjZTI5N2NjNzM3NzU3ZmY2NGYzOTQyYTg3MTk1M2VkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjSPT+pDlv0ufgY1JRm4om/rl6G5
CmpYPGz92Df0Gu7tldc6lz5TTm/egGaehtA3T3RGA46ep3sUzDzEkRDZKPuIGuys
4L+2Vgh4FFV4NG+nN/6CKnxlPB7/1zKA7BRaj2/PgfAWC/BuQoCAxSFmidUF49Rt
cLkb1dFdl4WZbNXEFlCIiqzMntP/PBkwd95cUN3eQViAu/ZFC0upSyE9rr+vjk3t
chMXvl/sbUi9O2VV/kXGyHEa915Wqh1oLt+1RQOPry8aWIG7cYNg//JLU7CGaYWg
JZ8fdId3/q0vZPJoxc+cLoJAxDAEMUL/TDeug4JJY2dG839ssnOHcn8bzQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBNhGTEs4pfMc3dX/2TzlCqHGVPtMB8GA1UdIwQY
MBaAFEI9kwVPBjz4opGGFzX5AFmrnsFpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWoyVEJVOEdQUGlpa1lZWE5ma0FXYXVld1drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8wYzJlYzMtMzg0NC00YjVmLTlmNTgt
NWYxYjY5MDQ4ZmUyLzEvRTJFWk1TemlsOHh6ZDFmX1pQT1VLb2NaVS0wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS8wYzJlYzMtMzg0NC00YjVmLTlmNTgtNWYxYjY5MDQ4ZmUy
LzEvUWoyVEJVOEdQUGlpa1lZWE5ma0FXYXVld1drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubxxMA0G
CSqGSIb3DQEBCwUAA4IBAQCSoyBqnJyYoyINGhfKwZRA3e9FsoDeETSUKDhpUjYG
acfGjEm0+StFzqdtzbyRiRSgA1r/X7hesMqtcPm3EP7NIjcfUaB/WKZ/pwiYh9uT
HsuO1oZhFykm/FkfOf8O+5gogpooQf5P0uJFDCI2eCZ/0LOu27tzfxuvOz6LVoHZ
tMQaGvlHVUOjHHvl7/Ztaf7zQOwqLfXIbFSG9MWGe2HoixWiyrDlBHAHT5KBexFG
nrEBR1LhVu6dZgI4lF2h1dHVF7en83myxyKA5WA1fIpcwOmKiSvAq0lCVv6Fcoah
ga5d6ZGDxG5IxdkWYJvXfI7LrRNj0ZVKbrYMGgYOPILi
-----END CERTIFICATE-----
Generated at Mon Jan 26 07:07:23 2026 by rpki-client