This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/94d02e-6947-4286-a608-a27f55018a5c/1/eIDEz-ltOZWfQnqxmuicXJ-eN1k.roa File: eIDEz-ltOZWfQnqxmuicXJ-eN1k.roa (raw, json) Hash identifier: myCqJR4Ozz6PWjYPkgO8/LM7du3E2KAp2v5EM7cx86c= Subject key identifier: 78:80:C4:CF:E9:6D:39:95:9F:42:7A:B1:9A:E8:9C:5C:9F:9E:37:59 Certificate issuer: /CN=6de8ac4959725e4fed1c330d22b5cd060241a514 Certificate serial: 019B22B13A13E6A4DE64F2C069645E00CB58 Authority key identifier: 6D:E8:AC:49:59:72:5E:4F:ED:1C:33:0D:22:B5:CD:06:02:41:A5:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/beisSVlyXk_tHDMNIrXNBgJBpRQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/94d02e-6947-4286-a608-a27f55018a5c/1/eIDEz-ltOZWfQnqxmuicXJ-eN1k.roa Signing time: Mon 15 Dec 2025 15:46:38 +0000 ROA not before: Mon 15 Dec 2025 15:46:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 211075 IP address blocks: 185.92.152.0/22 maxlen: 22 185.206.230.0/24 maxlen: 24 2a11:9c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/94d02e-6947-4286-a608-a27f55018a5c/1/beisSVlyXk_tHDMNIrXNBgJBpRQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/94d02e-6947-4286-a608-a27f55018a5c/1/beisSVlyXk_tHDMNIrXNBgJBpRQ.mft rsync://rpki.ripe.net/repository/DEFAULT/beisSVlyXk_tHDMNIrXNBgJBpRQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:b1:3a:13:e6:a4:de:64:f2:c0:69:64:5e:00:cb:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6de8ac4959725e4fed1c330d22b5cd060241a514 Validity Not Before: Dec 15 15:46:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7880c4cfe96d39959f427ab19ae89c5c9f9e3759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0c:bf:c4:09:e8:e6:76:ff:f1:cf:4e:04:f6: 69:61:14:38:b3:fb:27:46:12:a5:fe:aa:17:f7:ba: a6:41:22:70:b1:e8:d9:e0:b8:62:f8:50:ce:47:d9: 8a:90:13:c4:10:18:f8:1a:ab:07:a9:be:ea:27:76: 6d:c7:96:52:cc:4c:04:f4:90:5c:ba:2b:5c:b9:bd: 1d:21:f9:bf:d0:be:a7:f8:f9:ca:fd:b2:2f:ec:de: 1e:d0:ba:3f:c3:f1:7d:7f:e8:c3:04:81:77:0c:1d: 84:1b:f6:26:5e:78:89:24:5b:ca:41:44:a8:75:25: fd:d4:d4:93:d1:24:7f:42:e5:95:9d:50:a6:6f:f2: 5c:60:b4:e0:aa:43:cd:03:a2:35:e3:95:57:8f:45: e7:22:a1:71:c8:b5:c7:67:72:4d:e4:9e:45:5e:af: 53:13:e5:7b:05:e5:13:55:7f:e1:d7:a4:ea:71:a3: 4b:8b:1d:eb:16:ac:82:f9:ce:06:fa:2c:33:47:00: a9:16:f5:67:3e:3b:54:02:b2:07:65:cb:59:3c:ac: 0a:cd:db:8f:9d:ab:bc:1e:9a:a5:7e:5c:f3:a3:6b: 51:24:78:a8:71:89:dd:ac:5a:0e:ac:c0:79:a4:ce: 60:4a:7e:d1:b6:33:15:1e:53:a7:4d:fa:ab:c4:f1: 1d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:80:C4:CF:E9:6D:39:95:9F:42:7A:B1:9A:E8:9C:5C:9F:9E:37:59 X509v3 Authority Key Identifier: keyid:6D:E8:AC:49:59:72:5E:4F:ED:1C:33:0D:22:B5:CD:06:02:41:A5:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/beisSVlyXk_tHDMNIrXNBgJBpRQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/94d02e-6947-4286-a608-a27f55018a5c/1/eIDEz-ltOZWfQnqxmuicXJ-eN1k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/94d02e-6947-4286-a608-a27f55018a5c/1/beisSVlyXk_tHDMNIrXNBgJBpRQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.92.152.0/22 185.206.230.0/24 IPv6: 2a11:9c0::/32 Signature Algorithm: sha256WithRSAEncryption 04:04:7e:f6:d7:fe:38:1e:2f:56:96:2d:c3:4d:eb:38:4c:b5: 1a:4f:71:09:dd:20:4e:0c:45:f7:b5:61:60:86:8b:ee:67:9c: d5:81:52:f0:9f:06:62:c7:e2:3c:50:bf:bf:bc:ba:e2:72:c6: dc:a9:f6:49:57:93:10:cf:69:ff:37:1b:16:f4:10:6f:89:d5: a2:21:8e:fb:b8:c9:d4:92:e0:17:7a:84:ee:0a:67:de:2b:f9: bb:20:df:71:33:46:4f:58:27:6e:14:22:d4:c4:fe:dc:a7:e9: c3:76:19:7c:c3:3c:8d:d0:2c:53:9f:5a:b5:91:b5:9f:7d:b2: ea:08:41:3c:d5:21:5d:8b:55:56:64:35:77:2d:69:2c:a4:4f: 15:99:83:d8:a5:78:6c:fa:70:05:75:de:a2:57:55:19:c5:94: a9:ab:1d:01:e1:ee:11:3b:d6:1d:eb:03:c4:30:02:c9:2d:ba: 7d:10:d6:a3:c0:5c:97:bd:04:50:12:dd:0f:ce:ce:4d:1c:94: cf:43:b3:f6:4e:62:51:58:ab:0c:72:8f:18:12:6f:0d:32:dd: 89:1a:55:37:cc:93:34:37:48:b3:f2:0c:65:b3:55:c2:a8:e0: 4c:6b:82:01:80:42:3c:2e:37:a7:91:5e:10:4e:a8:30:fe:10: d3:14:cc:bd -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZsisToT5qTeZPLAaWReAMtYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZThhYzQ5NTk3MjVlNGZlZDFjMzMwZDIyYjVjZDA2MDI0 MWE1MTQwHhcNMjUxMjE1MTU0NjM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODgwYzRjZmU5NmQzOTk1OWY0MjdhYjE5YWU4OWM1YzlmOWUzNzU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQy/xAno5nb/8c9OBPZpYRQ4s/sn RhKl/qoX97qmQSJwsejZ4Lhi+FDOR9mKkBPEEBj4GqsHqb7qJ3Ztx5ZSzEwE9JBc uitcub0dIfm/0L6n+PnK/bIv7N4e0Lo/w/F9f+jDBIF3DB2EG/YmXniJJFvKQUSo dSX91NST0SR/QuWVnVCmb/JcYLTgqkPNA6I145VXj0XnIqFxyLXHZ3JN5J5FXq9T E+V7BeUTVX/h16TqcaNLix3rFqyC+c4G+iwzRwCpFvVnPjtUArIHZctZPKwKzduP nau8Hpqlflzzo2tRJHiocYndrFoOrMB5pM5gSn7RtjMVHlOnTfqrxPEd6QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFHiAxM/pbTmVn0J6sZronFyfnjdZMB8GA1UdIwQY MBaAFG3orElZcl5P7RwzDSK1zQYCQaUUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmVpc1NWbHlYa190SERNTklyWE5CZ0pCcFJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85NGQwMmUtNjk0Ny00Mjg2LWE2MDgt YTI3ZjU1MDE4YTVjLzEvZUlERXotbHRPWldmUW5xeG11aWNYSi1lTjFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS85NGQwMmUtNjk0Ny00Mjg2LWE2MDgtYTI3ZjU1MDE4YTVj LzEvYmVpc1NWbHlYa190SERNTklyWE5CZ0pCcFJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuVyYAwQA uc7mMA0EAgACMAcDBQAqEQnAMA0GCSqGSIb3DQEBCwUAA4IBAQAEBH721/44Hi9W li3DTes4TLUaT3EJ3SBODEX3tWFghovuZ5zVgVLwnwZix+I8UL+/vLricsbcqfZJ V5MQz2n/NxsW9BBvidWiIY77uMnUkuAXeoTuCmfeK/m7IN9xM0ZPWCduFCLUxP7c p+nDdhl8wzyN0CxTn1q1kbWffbLqCEE81SFdi1VWZDV3LWkspE8VmYPYpXhs+nAF dd6iV1UZxZSpqx0B4e4RO9Yd6wPEMALJLbp9ENajwFyXvQRQEt0Pzs5NHJTPQ7P2 TmJRWKsMco8YEm8NMt2JGlU3zJM0N0iz8gxls1XCqOBMa4IBgEI8LjenkV4QTqgw /hDTFMy9 -----END CERTIFICATE-----Generated at Wed Dec 17 18:07:11 2025 by rpki-client