This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/eQBqd8VSQ_-EDmCXW9sFFYDeMQk.roa File: eQBqd8VSQ_-EDmCXW9sFFYDeMQk.roa (raw, json) Hash identifier: dEI6v24yV0EpcI35EHdwZC8mHRo0m2mxSHgvKT9A5+8= Subject key identifier: 79:00:6A:77:C5:52:43:FF:84:0E:60:97:5B:DB:05:15:80:DE:31:09 Certificate issuer: /CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0 Certificate serial: 019B7C7F8ABBB51FBE666CF510A93435DF4F Authority key identifier: 1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/eQBqd8VSQ_-EDmCXW9sFFYDeMQk.roa Signing time: Fri 02 Jan 2026 02:18:11 +0000 ROA not before: Fri 02 Jan 2026 02:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203936 IP address blocks: 185.238.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:8a:bb:b5:1f:be:66:6c:f5:10:a9:34:35:df:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0 Validity Not Before: Jan 2 02:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=79006a77c55243ff840e60975bdb051580de3109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b8:48:49:6f:56:b7:5d:23:9a:48:5b:a2:7e: 69:3f:fb:58:c2:ad:7f:f1:04:d2:09:70:7a:10:d1: 68:69:49:b9:35:76:20:35:07:1e:02:96:71:4b:a3: 95:04:bc:fd:69:d7:24:5e:37:f5:1f:9d:3d:f6:61: 29:bf:95:5a:d9:e9:4b:2d:26:9e:cb:ed:79:74:e3: 04:bd:26:e5:af:0e:10:62:a0:90:9d:40:1c:32:6b: ad:07:bf:67:e2:ce:a7:7c:b8:eb:07:46:c8:36:c3: 3d:8d:f9:62:ac:92:76:d3:02:3b:8c:e9:25:45:5f: 4f:96:90:cd:f0:c4:4f:16:6c:ba:54:a5:12:17:b4: 0c:ff:d6:9c:82:dc:b7:fc:12:06:29:66:db:4c:e3: 85:dc:ab:57:b0:5f:0b:42:80:21:ba:72:fe:d1:8e: 19:87:e3:f1:e6:3d:26:b2:12:60:8a:8a:a9:bf:96: f2:5a:a2:11:da:03:bc:55:81:e2:eb:3e:c2:f2:1b: 41:9a:96:b7:df:b8:e3:ca:43:fd:c3:44:22:aa:1b: e4:a0:b5:18:34:de:4f:86:fd:3b:0b:f2:76:a2:fb: 4b:12:06:a3:cb:55:26:d0:23:ad:e9:fb:14:85:35: b2:3e:e2:ff:43:b6:5c:d9:84:de:db:87:71:dc:e0: dd:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:00:6A:77:C5:52:43:FF:84:0E:60:97:5B:DB:05:15:80:DE:31:09 X509v3 Authority Key Identifier: keyid:1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/eQBqd8VSQ_-EDmCXW9sFFYDeMQk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.238.87.0/24 Signature Algorithm: sha256WithRSAEncryption 17:be:1e:be:2b:37:e4:af:0d:c1:4d:ca:2b:28:d5:e5:40:6b: 57:47:92:ef:3e:ed:1d:18:64:bd:00:48:7f:87:9b:e0:20:de: 67:a4:9a:e7:c1:4a:8c:d0:cb:f0:7c:56:47:c5:16:16:b2:68: ab:5b:cf:a8:9d:f9:99:d9:e4:13:04:cb:60:08:b2:69:4f:fa: f0:b9:b4:f1:9f:07:51:01:4f:f3:f6:35:e8:0b:fb:69:25:9b: 65:5f:5a:cc:f0:d3:7b:36:6b:7b:7f:39:50:e8:43:b2:81:55: 8d:e8:2a:fa:83:72:f2:4c:68:31:6c:f6:16:bb:a7:c9:ea:2f: 7f:2f:a3:7d:a8:68:33:84:d1:f5:f5:2e:03:9e:10:6c:97:f7: 84:6e:d0:9e:3f:b0:73:2e:4c:05:22:b6:e5:a1:cc:a7:30:a6: 29:e0:28:44:89:50:f6:77:51:99:a7:18:71:31:0f:72:e0:94: 6b:86:dd:44:77:d8:99:d9:76:03:9d:c3:fa:e5:95:aa:27:64: a1:69:68:04:ed:9a:89:8f:b2:c8:3f:7f:87:6b:e8:25:2a:7b: 81:34:8d:0d:40:07:4f:17:72:d3:34:5e:c8:a7:1f:65:dd:36: 65:7c:ac:be:6e:d3:ec:04:c6:83:9e:b4:4c:de:9d:85:d9:5f: 5d:c8:fe:90 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f4q7tR++Zmz1EKk0Nd9PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkMGM3ZTdiYjI3YzUzM2E5OTdkMjc3Y2FkZDQxN2VjN2Jk Mjg0ZjAwHhcNMjYwMTAyMDIxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OTAwNmE3N2M1NTI0M2ZmODQwZTYwOTc1YmRiMDUxNTgwZGUzMTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7hISW9Wt10jmkhbon5pP/tYwq1/ 8QTSCXB6ENFoaUm5NXYgNQceApZxS6OVBLz9adckXjf1H5099mEpv5Va2elLLSae y+15dOMEvSblrw4QYqCQnUAcMmutB79n4s6nfLjrB0bINsM9jflirJJ20wI7jOkl RV9PlpDN8MRPFmy6VKUSF7QM/9acgty3/BIGKWbbTOOF3KtXsF8LQoAhunL+0Y4Z h+Px5j0mshJgioqpv5byWqIR2gO8VYHi6z7C8htBmpa337jjykP9w0QiqhvkoLUY NN5Phv07C/J2ovtLEgajy1Um0COt6fsUhTWyPuL/Q7Zc2YTe24dx3ODdowIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHkAanfFUkP/hA5gl1vbBRWA3jEJMB8GA1UdIwQY MBaAFB0MfnuyfFM6mX0nfK3UF+x70oTwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFF4LWU3SjhVenFaZlNkOHJkUVg3SHZTaFBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9kZGQzNDktYWM1MC00M2U1LWE4OGEt YjI4ZjA3YjJmNDViLzEvZVFCcWQ4VlNRXy1FRG1DWFc5c0ZGWURlTVFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9kZGQzNDktYWM1MC00M2U1LWE4OGEtYjI4ZjA3YjJmNDVi LzEvSFF4LWU3SjhVenFaZlNkOHJkUVg3SHZTaFBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAue5XMA0G CSqGSIb3DQEBCwUAA4IBAQAXvh6+Kzfkrw3BTcorKNXlQGtXR5LvPu0dGGS9AEh/ h5vgIN5npJrnwUqM0MvwfFZHxRYWsmirW8+onfmZ2eQTBMtgCLJpT/rwubTxnwdR AU/z9jXoC/tpJZtlX1rM8NN7Nmt7fzlQ6EOygVWN6Cr6g3LyTGgxbPYWu6fJ6i9/ L6N9qGgzhNH19S4DnhBsl/eEbtCeP7BzLkwFIrblocynMKYp4ChEiVD2d1GZpxhx MQ9y4JRrht1Ed9iZ2XYDncP65ZWqJ2ShaWgE7ZqJj7LIP3+Ha+glKnuBNI0NQAdP F3LTNF7Ipx9l3TZlfKy+btPsBMaDnrRM3p2F2V9dyP6Q -----END CERTIFICATE-----Generated at Mon Jan 26 02:23:29 2026 by rpki-client