This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/Eu4BP5a5E95Q7p4k5RfhumyOrvk.roa File: Eu4BP5a5E95Q7p4k5RfhumyOrvk.roa (raw, json) Hash identifier: 1lD5R4cJuPj/nZ60zfBHs9WvrZ5YRD+ZAX1KkvheAUY= Subject key identifier: 12:EE:01:3F:96:B9:13:DE:50:EE:9E:24:E5:17:E1:BA:6C:8E:AE:F9 Certificate issuer: /CN=18a84a8e475f6606e7a12f92b330d63d8f880be0 Certificate serial: 019B7E38BB5F0BB536D7F792C2919ECDB616 Authority key identifier: 18:A8:4A:8E:47:5F:66:06:E7:A1:2F:92:B3:30:D6:3D:8F:88:0B:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/Eu4BP5a5E95Q7p4k5RfhumyOrvk.roa Signing time: Fri 02 Jan 2026 10:20:05 +0000 ROA not before: Fri 02 Jan 2026 10:20:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206092 IP address blocks: 185.208.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:bb:5f:0b:b5:36:d7:f7:92:c2:91:9e:cd:b6:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18a84a8e475f6606e7a12f92b330d63d8f880be0 Validity Not Before: Jan 2 10:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=12ee013f96b913de50ee9e24e517e1ba6c8eaef9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e1:30:65:c4:82:e3:b3:f0:c9:cd:c1:82:86: 87:59:7d:fd:2c:5f:d6:ae:99:a4:a9:30:d0:4b:99: 26:5e:f8:28:58:5a:db:c1:fe:f0:16:37:2c:1c:85: d3:17:40:63:11:05:90:7f:75:eb:a1:09:ce:22:f9: 2f:9c:26:9f:b1:19:a9:a6:fb:8b:c8:15:cc:c5:4c: 37:f9:0c:c5:e7:9e:de:a2:77:a0:18:cd:4b:fd:18: 04:3f:85:92:30:fb:10:b0:1f:08:10:30:5e:83:9b: 15:f1:57:e3:2b:9f:fb:4f:37:af:26:3a:40:8f:10: b9:c0:90:89:32:1b:57:e8:8c:43:9d:3e:7d:34:6b: 23:d5:24:81:3c:76:8d:5c:da:73:b5:cd:57:fa:16: 40:5f:f9:0e:ad:36:cb:33:48:3c:d2:f4:c2:20:6a: 52:4b:fc:85:25:8f:90:1a:62:47:bb:52:18:7e:26: 60:3c:eb:26:da:fc:91:5b:82:b4:dd:af:90:bf:70: 93:e1:1d:46:75:9b:75:0c:73:0f:2b:ac:28:c4:8c: 54:6d:0a:f3:a6:1f:1c:54:b4:43:89:52:13:1f:c3: b1:71:95:10:f9:b1:1e:fc:2b:1b:76:c5:29:3b:6c: 92:ab:fa:d6:84:6b:08:41:19:2d:14:a3:a1:ca:6a: dd:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:EE:01:3F:96:B9:13:DE:50:EE:9E:24:E5:17:E1:BA:6C:8E:AE:F9 X509v3 Authority Key Identifier: keyid:18:A8:4A:8E:47:5F:66:06:E7:A1:2F:92:B3:30:D6:3D:8F:88:0B:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/Eu4BP5a5E95Q7p4k5RfhumyOrvk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.208.11.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:52:51:a5:5c:50:5b:f1:c7:ee:d2:c8:62:f9:e0:69:85:ba: 99:6e:a0:07:7b:3b:b9:99:1d:b5:94:45:d9:e4:e7:8f:91:ed: 17:50:2e:b8:e2:dd:20:e8:c1:80:22:05:7c:4d:e8:82:33:35: f2:6f:a7:9b:92:23:1f:bf:77:52:49:bd:4d:fa:79:49:b6:18: c8:57:0c:16:2e:98:76:c8:7a:20:2f:83:f9:e3:f6:77:17:38: bd:3e:19:b8:0e:02:ae:96:9c:db:1c:bc:a7:59:5e:21:84:ae: c0:f4:70:92:54:ae:2c:72:bd:b3:ed:aa:a7:db:14:57:bf:f6: 15:b2:66:05:0e:51:54:b7:25:19:68:eb:6b:7c:17:e2:48:aa: 71:7d:2f:b0:67:bf:ca:f7:c7:db:fc:9c:34:f4:75:3a:21:04: 82:c0:1f:87:fd:11:44:5e:1f:13:e7:1c:b1:4d:75:13:95:17: 51:ac:23:af:c0:4a:d3:1c:c7:1c:9c:12:58:fd:e0:0a:36:73: 76:b9:0e:ab:11:35:d3:e6:50:b3:c0:30:a6:78:90:7e:ff:6f: 65:a3:f7:3c:51:bf:0e:9a:da:b0:cb:68:a9:5e:33:98:36:a7: ac:36:96:88:f6:81:c5:89:92:2f:be:8a:c3:de:f1:87:2a:b0: 4a:62:2f:8c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OLtfC7U21/eSwpGezbYWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4YTg0YThlNDc1ZjY2MDZlN2ExMmY5MmIzMzBkNjNkOGY4 ODBiZTAwHhcNMjYwMTAyMTAyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMmVlMDEzZjk2YjkxM2RlNTBlZTllMjRlNTE3ZTFiYTZjOGVhZWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuEwZcSC47Pwyc3BgoaHWX39LF/W rpmkqTDQS5kmXvgoWFrbwf7wFjcsHIXTF0BjEQWQf3XroQnOIvkvnCafsRmppvuL yBXMxUw3+QzF557eonegGM1L/RgEP4WSMPsQsB8IEDBeg5sV8VfjK5/7TzevJjpA jxC5wJCJMhtX6IxDnT59NGsj1SSBPHaNXNpztc1X+hZAX/kOrTbLM0g80vTCIGpS S/yFJY+QGmJHu1IYfiZgPOsm2vyRW4K03a+Qv3CT4R1GdZt1DHMPK6woxIxUbQrz ph8cVLRDiVITH8OxcZUQ+bEe/CsbdsUpO2ySq/rWhGsIQRktFKOhymrdMQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBLuAT+WuRPeUO6eJOUX4bpsjq75MB8GA1UdIwQY MBaAFBioSo5HX2YG56EvkrMw1j2PiAvgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0toS2prZGZaZ2Jub1MtU3N6RFdQWS1JQy1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC84OTJhMjctZmRiNi00Mjg1LTgyOWEt ODdmNWI2NDc5ZDFlLzEvRXU0QlA1YTVFOTVRN3A0azVSZmh1bXlPcnZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC84OTJhMjctZmRiNi00Mjg1LTgyOWEtODdmNWI2NDc5ZDFl LzEvR0toS2prZGZaZ2Jub1MtU3N6RFdQWS1JQy1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudALMA0G CSqGSIb3DQEBCwUAA4IBAQBPUlGlXFBb8cfu0shi+eBphbqZbqAHezu5mR21lEXZ 5OePke0XUC644t0g6MGAIgV8TeiCMzXyb6ebkiMfv3dSSb1N+nlJthjIVwwWLph2 yHogL4P54/Z3Fzi9Phm4DgKulpzbHLynWV4hhK7A9HCSVK4scr2z7aqn2xRXv/YV smYFDlFUtyUZaOtrfBfiSKpxfS+wZ7/K98fb/Jw09HU6IQSCwB+H/RFEXh8T5xyx TXUTlRdRrCOvwErTHMccnBJY/eAKNnN2uQ6rETXT5lCzwDCmeJB+/29lo/c8Ub8O mtqwy2ipXjOYNqesNpaI9oHFiZIvvorD3vGHKrBKYi+M -----END CERTIFICATE-----Generated at Sun Jan 25 19:39:27 2026 by rpki-client