This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/EJLUutCnpxs2buS5GTPPkrccxLQ.roa File: EJLUutCnpxs2buS5GTPPkrccxLQ.roa (raw, json) Hash identifier: Bg7r4OK7LAMvfuKSI5cI+lyL8O8THM0mepcAvupe9MY= Subject key identifier: 10:92:D4:BA:D0:A7:A7:1B:36:6E:E4:B9:19:33:CF:92:B7:1C:C4:B4 Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80 Certificate serial: 019B7D5B7F4D578E2260A432E7D25582DC7B Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/EJLUutCnpxs2buS5GTPPkrccxLQ.roa Signing time: Fri 02 Jan 2026 06:18:26 +0000 ROA not before: Fri 02 Jan 2026 06:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33371 IP address blocks: 217.79.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:7f:4d:57:8e:22:60:a4:32:e7:d2:55:82:dc:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80 Validity Not Before: Jan 2 06:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1092d4bad0a7a71b366ee4b91933cf92b71cc4b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e3:85:45:b2:3b:0f:68:7d:a1:9e:ad:af:f7: 71:33:74:fe:8b:75:64:fb:96:55:f1:e4:7d:3b:b1: 66:b5:97:9a:58:28:74:77:4f:1b:13:d8:36:5c:72: 2e:cf:a5:cc:5b:89:d9:af:13:0c:9d:bd:86:1d:c5: cb:f1:30:28:0b:39:0c:7a:83:d9:b9:8d:36:22:40: 77:88:f2:a3:b7:69:15:ed:c6:16:89:01:b5:10:87: 67:bb:7b:66:16:ad:ec:5d:c4:7b:4b:d1:d9:63:8f: 7a:1e:0b:7b:7f:e0:49:6f:f1:d9:53:6f:68:8c:8e: 59:e7:e8:26:aa:e8:ab:0f:68:e8:83:18:d7:24:a7: 9c:6b:6f:4f:50:09:2d:98:c7:58:f7:b2:b0:c1:7a: bb:79:b9:3c:ef:eb:e7:41:bf:66:b7:ff:d0:e0:27: e7:c9:db:04:70:e6:7f:c3:6f:46:52:7f:38:bf:84: b0:a0:5f:6a:78:7f:42:8a:58:2d:c9:33:e0:c9:7c: 2c:cc:57:26:54:7b:f8:fb:2a:8d:ff:a2:1d:e4:bc: 5f:3b:1f:6d:55:e3:c6:85:a4:fb:be:42:fd:67:fb: e1:71:ab:4b:6d:22:db:d3:c0:6c:da:f5:59:7d:a8: ca:40:91:05:fd:20:bb:0a:4c:b6:3b:27:02:99:61: c0:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:92:D4:BA:D0:A7:A7:1B:36:6E:E4:B9:19:33:CF:92:B7:1C:C4:B4 X509v3 Authority Key Identifier: keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/EJLUutCnpxs2buS5GTPPkrccxLQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.79.174.0/24 Signature Algorithm: sha256WithRSAEncryption 38:b2:d8:b4:97:55:d1:4d:4a:bf:f8:35:72:0b:41:b8:c9:92: cf:a2:31:39:40:54:41:15:5d:36:00:0e:97:ff:79:e9:52:3c: 8b:71:8a:1d:60:59:98:13:46:47:f7:05:f6:71:8a:83:93:90: 2c:64:c3:6c:08:db:8e:86:4a:89:69:fc:25:4c:e3:f5:60:fe: 4b:e8:e1:64:89:a3:ed:e4:2b:6a:b8:91:b2:3f:c4:01:42:1b: 18:38:fe:05:99:b0:bf:a4:6a:98:51:4a:ae:4b:f1:6a:56:ef: 0f:cc:4d:01:eb:ad:f7:19:79:25:26:10:9c:cc:75:70:93:5c: a2:c0:23:99:26:85:1d:c1:fe:69:5c:26:90:bb:c0:33:b0:8f: 57:2b:d9:1a:1c:94:4b:1d:fa:93:33:c8:8d:e7:2a:f3:84:f3: d2:3f:68:c1:36:98:85:15:b0:32:f3:d8:02:5a:8b:8d:63:89: a7:2f:1f:a4:b6:bf:a7:f1:36:09:7c:f6:f1:f0:5f:7c:f2:48: 8c:7f:af:15:b5:05:0c:ec:7a:99:48:07:b5:d7:28:42:38:00: bd:b6:3b:07:b1:d1:da:e0:e1:1a:03:5f:d6:16:07:23:b9:a7: 3d:81:a2:34:f7:00:bc:12:61:bd:af:59:f6:fd:ba:7b:3d:80: 91:c9:b8:1b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9W39NV44iYKQy59JVgtx7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZjNlMTYwMTcyZWNjNzVjOGNhYjFiYWUyNzFiZTNlYmY0 MDdhODAwHhcNMjYwMTAyMDYxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDkyZDRiYWQwYTdhNzFiMzY2ZWU0YjkxOTMzY2Y5MmI3MWNjNGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleOFRbI7D2h9oZ6tr/dxM3T+i3Vk +5ZV8eR9O7FmtZeaWCh0d08bE9g2XHIuz6XMW4nZrxMMnb2GHcXL8TAoCzkMeoPZ uY02IkB3iPKjt2kV7cYWiQG1EIdnu3tmFq3sXcR7S9HZY496Hgt7f+BJb/HZU29o jI5Z5+gmquirD2jogxjXJKeca29PUAktmMdY97KwwXq7ebk87+vnQb9mt//Q4Cfn ydsEcOZ/w29GUn84v4SwoF9qeH9CilgtyTPgyXwszFcmVHv4+yqN/6Id5LxfOx9t VePGhaT7vkL9Z/vhcatLbSLb08Bs2vVZfajKQJEF/SC7Cky2OycCmWHATQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBCS1LrQp6cbNm7kuRkzz5K3HMS0MB8GA1UdIwQY MBaAFAXz4WAXLsx1yMqxuuJxvj6/QHqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0Nzkt NWQ1NjA5ODljZjdiLzEvRUpMVXV0Q25weHMyYnVTNUdUUFBrcmNjeExRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS9hYThiNDYtOTY0NS00NjIwLTg0NzktNWQ1NjA5ODljZjdi LzEvQmZQaFlCY3V6SFhJeXJHNjRuRy1QcjlBZW9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2U+uMA0G CSqGSIb3DQEBCwUAA4IBAQA4sti0l1XRTUq/+DVyC0G4yZLPojE5QFRBFV02AA6X /3npUjyLcYodYFmYE0ZH9wX2cYqDk5AsZMNsCNuOhkqJafwlTOP1YP5L6OFkiaPt 5CtquJGyP8QBQhsYOP4FmbC/pGqYUUquS/FqVu8PzE0B6633GXklJhCczHVwk1yi wCOZJoUdwf5pXCaQu8AzsI9XK9kaHJRLHfqTM8iN5yrzhPPSP2jBNpiFFbAy89gC WouNY4mnLx+ktr+n8TYJfPbx8F988kiMf68VtQUM7HqZSAe11yhCOAC9tjsHsdHa 4OEaA1/WFgcjuac9gaI09wC8EmG9r1n2/bp7PYCRybgb -----END CERTIFICATE-----Generated at Sun Jan 25 13:33:18 2026 by rpki-client