This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/EB7WqqxXodos-Bnfwa3U1V_EWyk.roa
File: EB7WqqxXodos-Bnfwa3U1V_EWyk.roa (raw, json)
Hash identifier: mUbVMHBEzz3yLOktyc5V1n031Bt7w2ivVLElxz97H04=
Subject key identifier: 10:1E:D6:AA:AC:57:A1:DA:2C:F8:19:DF:C1:AD:D4:D5:5F:C4:5B:29
Certificate issuer: /CN=dc4e453affe895b6452b84027437c5c00fd37067
Certificate serial: 019B7C7F699DFC03A0CE9A83C84BF0EE11D6
Authority key identifier: DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/EB7WqqxXodos-Bnfwa3U1V_EWyk.roa
Signing time: Fri 02 Jan 2026 02:18:03 +0000
ROA not before: Fri 02 Jan 2026 02:18:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206309
IP address blocks: 185.179.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:7f:69:9d:fc:03:a0:ce:9a:83:c8:4b:f0:ee:11:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc4e453affe895b6452b84027437c5c00fd37067
Validity
Not Before: Jan 2 02:18:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=101ed6aaac57a1da2cf819dfc1add4d55fc45b29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:1c:1a:ee:cb:0d:83:1a:10:7b:5a:f2:fb:77:
b7:12:e2:0f:91:ba:63:41:4b:e2:56:49:d9:8d:1e:
d4:ee:af:53:32:9f:09:e3:0f:82:9c:c6:cd:e0:cf:
a2:40:6d:32:ab:10:a7:60:4f:64:1c:1c:82:ee:54:
12:2e:62:0d:b8:54:c0:25:96:ae:00:f2:0d:df:58:
22:2b:c7:2d:04:c9:7b:ac:2c:15:92:42:87:9c:a7:
1e:1b:72:ca:50:18:d4:5b:75:3e:db:b5:3f:1f:14:
e2:48:e7:95:21:fa:4e:27:a0:18:c4:5f:d6:3e:64:
58:6b:02:c4:60:71:aa:c1:1f:bc:38:17:0d:84:d5:
2b:bf:ca:e7:f8:ec:a0:6f:e8:0b:ad:0c:d7:2c:40:
dc:7c:9d:6d:c1:a0:d7:e2:3b:0e:d5:d4:b6:c0:41:
b1:0b:68:1c:71:61:23:35:dd:8b:51:8b:73:c9:ca:
32:72:47:9c:4f:ea:e3:84:29:e3:f2:93:5a:07:0a:
af:4d:8c:d4:20:cc:f5:8a:89:26:70:ba:e5:b0:4d:
35:ea:ab:d6:5e:20:8c:19:4c:36:9f:6d:08:b0:6f:
43:76:f5:7f:1f:5b:f4:a7:0b:8c:10:2f:92:71:93:
f5:eb:b7:08:db:65:5f:1e:29:4f:3b:07:43:a3:49:
e7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:1E:D6:AA:AC:57:A1:DA:2C:F8:19:DF:C1:AD:D4:D5:5F:C4:5B:29
X509v3 Authority Key Identifier:
keyid:DC:4E:45:3A:FF:E8:95:B6:45:2B:84:02:74:37:C5:C0:0F:D3:70:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3E5FOv_olbZFK4QCdDfFwA_TcGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/EB7WqqxXodos-Bnfwa3U1V_EWyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/3E5FOv_olbZFK4QCdDfFwA_TcGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.43.0/24
Signature Algorithm: sha256WithRSAEncryption
41:e8:c9:a2:22:ff:82:75:8d:e2:a9:c3:ff:9c:46:c1:b4:99:
34:bd:59:83:10:ac:70:e1:8c:2d:03:40:9a:73:b4:fd:94:5f:
03:69:a2:0a:a1:bd:a3:3a:91:3c:9a:db:3c:ca:76:13:2c:81:
5c:16:92:48:f1:09:97:aa:52:66:5b:8d:7d:a5:36:ed:c3:a1:
a9:7c:24:4d:59:e9:af:a1:e7:a4:44:14:eb:99:38:ac:06:d4:
3c:fe:36:22:92:3a:28:5c:2c:c0:f3:fc:da:f2:68:6f:87:15:
4f:25:58:47:8e:62:8d:5e:ce:05:e6:ee:dd:2c:54:31:cf:aa:
b8:ec:41:40:38:8e:f9:2b:04:42:9f:9c:d7:d4:85:4d:62:a4:
9f:07:d8:0a:24:73:52:2c:8d:5e:a4:fd:fb:e1:e8:8e:77:27:
82:56:ba:6c:4c:d3:9d:34:7c:ca:93:9d:57:12:1a:ab:b2:df:
7c:bb:89:ef:80:fe:31:39:92:98:08:a9:45:96:03:64:30:c7:
70:c5:e7:f3:5a:ab:99:94:e8:e6:b6:75:09:e4:8b:3e:3b:1b:
fa:b4:e7:6e:86:8c:f5:97:4e:12:2c:8b:89:7b:e4:51:35:d3:
c4:5e:87:12:7a:fa:76:f7:cb:b3:01:77:a0:dd:30:19:03:a1:
84:f6:3d:c9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt8f2md/AOgzpqDyEvw7hHWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNGU0NTNhZmZlODk1YjY0NTJiODQwMjc0MzdjNWMwMGZk
MzcwNjcwHhcNMjYwMTAyMDIxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDFlZDZhYWFjNTdhMWRhMmNmODE5ZGZjMWFkZDRkNTVmYzQ1YjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5xwa7ssNgxoQe1ry+3e3EuIPkbpj
QUviVknZjR7U7q9TMp8J4w+CnMbN4M+iQG0yqxCnYE9kHByC7lQSLmINuFTAJZau
APIN31giK8ctBMl7rCwVkkKHnKceG3LKUBjUW3U+27U/HxTiSOeVIfpOJ6AYxF/W
PmRYawLEYHGqwR+8OBcNhNUrv8rn+Oygb+gLrQzXLEDcfJ1twaDX4jsO1dS2wEGx
C2gccWEjNd2LUYtzycoyckecT+rjhCnj8pNaBwqvTYzUIMz1iokmcLrlsE016qvW
XiCMGUw2n20IsG9DdvV/H1v0pwuMEC+ScZP167cI22VfHilPOwdDo0nn+QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBAe1qqsV6HaLPgZ38Gt1NVfxFspMB8GA1UdIwQY
MBaAFNxORTr/6JW2RSuEAnQ3xcAP03BnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0U1Rk92X29sYlpGSzRRQ2REZkZ3QV9UY0djLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS81OGU2NTUtZTcxMy00NWQyLTk1OGEt
MTgyMjg2N2UxNTk2LzEvRUI3V3FxeFhvZG9zLUJuZndhM1UxVl9FV3lrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS81OGU2NTUtZTcxMy00NWQyLTk1OGEtMTgyMjg2N2UxNTk2
LzEvM0U1Rk92X29sYlpGSzRRQ2REZkZ3QV9UY0djLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubMrMA0G
CSqGSIb3DQEBCwUAA4IBAQBB6MmiIv+CdY3iqcP/nEbBtJk0vVmDEKxw4YwtA0Ca
c7T9lF8DaaIKob2jOpE8mts8ynYTLIFcFpJI8QmXqlJmW419pTbtw6GpfCRNWemv
oeekRBTrmTisBtQ8/jYikjooXCzA8/za8mhvhxVPJVhHjmKNXs4F5u7dLFQxz6q4
7EFAOI75KwRCn5zX1IVNYqSfB9gKJHNSLI1epP374eiOdyeCVrpsTNOdNHzKk51X
Ehqrst98u4nvgP4xOZKYCKlFlgNkMMdwxefzWquZlOjmtnUJ5Is+Oxv6tOduhoz1
l04SLIuJe+RRNdPEXocSevp298uzAXeg3TAZA6GE9j3J
-----END CERTIFICATE-----
Generated at Mon Jan 26 03:07:27 2026 by rpki-client