This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/s04AY0c7al_er-KtxkZG_la8-ms.roa File: s04AY0c7al_er-KtxkZG_la8-ms.roa (raw, json) Hash identifier: Xy1PgvCl533iuiU4yUJ4k1QIMmXrhbExDpf93B/WjgE= Subject key identifier: B3:4E:00:63:47:3B:6A:5F:DE:AF:E2:AD:C6:46:46:FE:56:BC:FA:6B Certificate issuer: /CN=eacdc1e247faa95318082a4ac5edbd80511f8df7 Certificate serial: 019AE4C8FFDF30CFC058B16DF6D975DB97A2 Authority key identifier: EA:CD:C1:E2:47:FA:A9:53:18:08:2A:4A:C5:ED:BD:80:51:1F:8D:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/s04AY0c7al_er-KtxkZG_la8-ms.roa Signing time: Wed 03 Dec 2025 15:16:09 +0000 ROA not before: Wed 03 Dec 2025 15:16:09 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 216389 IP address blocks: 185.73.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.mft rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e4:c8:ff:df:30:cf:c0:58:b1:6d:f6:d9:75:db:97:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eacdc1e247faa95318082a4ac5edbd80511f8df7 Validity Not Before: Dec 3 15:16:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b34e0063473b6a5fdeafe2adc64646fe56bcfa6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:25:33:e3:7e:f3:42:01:fe:6c:68:b4:9d:27: c6:66:6b:37:b8:ea:c2:27:fd:e3:79:97:36:ed:9d: 69:1f:b4:5a:8c:ed:81:70:c4:9b:03:91:49:5d:82: cf:48:92:91:ad:0f:27:7d:40:95:4a:16:18:3b:e9: 6e:f7:88:c7:10:e9:4f:96:7a:05:2d:65:3b:ac:61: ab:0c:d1:04:eb:d2:4a:3f:7c:92:fb:fb:7a:97:ab: 54:9e:b4:d9:2f:23:15:c4:a3:09:af:d0:1b:1c:97: 44:d3:73:6e:00:33:22:c7:b4:ac:45:8a:84:16:b8: 55:b0:88:3d:d7:da:3a:50:61:65:79:a0:bd:aa:ee: dd:d4:33:f7:3a:26:25:09:1d:d4:35:91:7b:fa:bf: 1b:92:ac:7a:45:8c:64:15:2d:20:b5:0f:4f:d1:7a: ca:9d:d4:5c:68:0b:4e:ae:59:8c:09:e6:f8:90:6c: 02:4b:03:29:6e:7f:04:a0:b2:e6:a1:39:d3:37:8d: 7f:be:7d:c9:b7:bb:f1:cf:bd:85:ad:f8:a4:a8:0f: c7:30:04:0b:9c:87:7e:4e:1b:98:77:3c:4b:37:1d: d0:3b:71:f4:fb:79:43:f5:f8:50:55:e1:80:0a:e3: b6:63:5d:ce:08:1c:6b:b7:57:05:44:f8:03:eb:ca: 74:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:4E:00:63:47:3B:6A:5F:DE:AF:E2:AD:C6:46:46:FE:56:BC:FA:6B X509v3 Authority Key Identifier: keyid:EA:CD:C1:E2:47:FA:A9:53:18:08:2A:4A:C5:ED:BD:80:51:1F:8D:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6s3B4kf6qVMYCCpKxe29gFEfjfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/s04AY0c7al_er-KtxkZG_la8-ms.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e6c44c-3125-4fe6-a00d-628ccf00dfbd/1/6s3B4kf6qVMYCCpKxe29gFEfjfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.73.128.0/24 Signature Algorithm: sha256WithRSAEncryption 30:70:e7:89:e3:86:4f:e7:73:a7:96:46:62:4a:02:02:8b:d1: d8:a8:ba:1f:07:f3:bb:dc:3a:1b:75:28:66:64:8d:a7:ba:d1: cc:be:8c:4e:ad:15:e9:11:5b:ca:9d:a9:71:99:07:de:6d:e7: 07:2d:10:77:b2:9a:7b:7a:1c:7c:a2:91:fb:0c:ff:ce:0a:3f: 6a:63:7b:ab:3a:20:8b:4d:01:10:b9:06:00:10:74:f7:cd:1f: 9b:d6:63:7a:78:28:56:0a:5d:7c:78:c7:0b:84:61:15:84:6c: 10:1d:bf:0c:3d:6c:03:11:8a:36:9c:e0:df:f7:ff:32:cb:e0: 6d:2d:35:01:dd:1b:b5:36:47:8d:64:16:eb:87:73:f0:03:f0: 30:ef:f8:eb:5d:59:bb:f6:81:63:03:ac:d4:06:98:8c:86:71: d7:f5:b7:ba:33:9b:f8:27:d8:0d:90:67:38:6d:1a:ab:1a:69: 43:4e:ec:33:e8:ce:44:d3:56:31:59:bb:74:f3:da:ae:81:f9: 1a:cc:c6:35:f0:3b:55:ca:2b:2c:6b:7d:48:32:68:7e:7c:ce: be:39:30:9c:a0:a5:4b:e2:80:0a:67:7e:4d:22:87:17:45:40: 7e:d4:33:90:81:31:f2:00:bf:44:5b:93:77:75:3a:64:85:2c: 10:b6:24:3b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrkyP/fMM/AWLFt9tl125eiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhY2RjMWUyNDdmYWE5NTMxODA4MmE0YWM1ZWRiZDgwNTEx ZjhkZjcwHhcNMjUxMjAzMTUxNjA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzRlMDA2MzQ3M2I2YTVmZGVhZmUyYWRjNjQ2NDZmZTU2YmNmYTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyUz437zQgH+bGi0nSfGZms3uOrC J/3jeZc27Z1pH7RajO2BcMSbA5FJXYLPSJKRrQ8nfUCVShYYO+lu94jHEOlPlnoF LWU7rGGrDNEE69JKP3yS+/t6l6tUnrTZLyMVxKMJr9AbHJdE03NuADMix7SsRYqE FrhVsIg919o6UGFleaC9qu7d1DP3OiYlCR3UNZF7+r8bkqx6RYxkFS0gtQ9P0XrK ndRcaAtOrlmMCeb4kGwCSwMpbn8EoLLmoTnTN41/vn3Jt7vxz72FrfikqA/HMAQL nId+ThuYdzxLNx3QO3H0+3lD9fhQVeGACuO2Y13OCBxrt1cFRPgD68p09QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLNOAGNHO2pf3q/ircZGRv5WvPprMB8GA1UdIwQY MBaAFOrNweJH+qlTGAgqSsXtvYBRH433MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnMzQjRrZjZxVk1ZQ0NwS3hlMjlnRkVmamZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9lNmM0NGMtMzEyNS00ZmU2LWEwMGQt NjI4Y2NmMDBkZmJkLzEvczA0QVkwYzdhbF9lci1LdHhrWkdfbGE4LW1zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9lNmM0NGMtMzEyNS00ZmU2LWEwMGQtNjI4Y2NmMDBkZmJk LzEvNnMzQjRrZjZxVk1ZQ0NwS3hlMjlnRkVmamZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUmAMA0G CSqGSIb3DQEBCwUAA4IBAQAwcOeJ44ZP53OnlkZiSgICi9HYqLofB/O73DobdShm ZI2nutHMvoxOrRXpEVvKnalxmQfebecHLRB3spp7ehx8opH7DP/OCj9qY3urOiCL TQEQuQYAEHT3zR+b1mN6eChWCl18eMcLhGEVhGwQHb8MPWwDEYo2nODf9/8yy+Bt LTUB3Ru1NkeNZBbrh3PwA/Aw7/jrXVm79oFjA6zUBpiMhnHX9be6M5v4J9gNkGc4 bRqrGmlDTuwz6M5E01YxWbt089qugfkazMY18DtVyissa31IMmh+fM6+OTCcoKVL 4oAKZ35NIocXRUB+1DOQgTHyAL9EW5N3dTpkhSwQtiQ7 -----END CERTIFICATE-----Generated at Sat Dec 6 12:54:22 2025 by rpki-client