This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/EYiC8rZDROngapMz8xaIOJD1dHU.roa File: EYiC8rZDROngapMz8xaIOJD1dHU.roa (raw, json) Hash identifier: ul7B9oyKE2fD0KSaQvWlrbwdtA9ZauZfUIroMtS1L6M= Subject key identifier: 11:88:82:F2:B6:43:44:E9:E0:6A:93:33:F3:16:88:38:90:F5:74:75 Certificate issuer: /CN=706745ad92353da8a80cb2e0d229d68c2ef53db2 Certificate serial: 019AA596FC9A8EB1DDBA331B205A5190682A Authority key identifier: 70:67:45:AD:92:35:3D:A8:A8:0C:B2:E0:D2:29:D6:8C:2E:F5:3D:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/EYiC8rZDROngapMz8xaIOJD1dHU.roa Signing time: Fri 21 Nov 2025 08:45:26 +0000 ROA not before: Fri 21 Nov 2025 08:45:26 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 15731 IP address blocks: 185.133.174.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a5:96:fc:9a:8e:b1:dd:ba:33:1b:20:5a:51:90:68:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=706745ad92353da8a80cb2e0d229d68c2ef53db2 Validity Not Before: Nov 21 08:45:26 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=118882f2b64344e9e06a9333f316883890f57475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:11:f5:e7:4f:58:a2:b8:5b:1c:24:2f:e9:b6: 34:92:33:75:71:5f:24:67:c7:ce:9b:ca:fd:fc:6a: 61:30:8f:9c:6e:66:4f:10:91:18:9a:a3:76:d2:78: dc:60:27:5c:4d:06:c1:32:e0:9b:1c:ab:30:a9:78: f2:bd:3c:c6:ea:c0:d3:a9:8b:49:f9:93:f6:32:78: 45:ad:45:74:43:74:18:d7:1b:58:10:bd:9f:65:3e: 70:a8:64:01:63:f4:5b:4c:9b:15:82:24:d9:de:09: 95:49:a1:82:4b:da:86:10:02:3c:c4:97:3b:25:c3: be:60:67:2a:27:4f:c2:4d:b0:3c:5f:5b:e9:5d:5f: 92:a2:b0:db:af:d2:66:7f:87:45:f7:46:9a:a0:97: 85:6f:1f:9b:1e:01:ce:d2:f4:0c:e8:56:0d:91:29: 2f:b0:14:37:fd:75:3b:8c:f6:7c:74:96:2d:5f:39: 3f:9a:57:17:ad:78:a2:fa:ac:81:3a:4b:39:df:1a: a4:d8:15:a6:f2:cc:8e:b2:c6:26:10:2e:f2:46:0e: c8:25:0c:ec:cc:00:3d:87:42:77:c3:9c:a2:8c:15: be:e7:ba:42:c0:aa:96:d2:bd:c5:9b:9f:13:15:21: ae:46:cf:2f:90:9e:43:30:f3:21:aa:bf:6a:f4:3b: d2:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:88:82:F2:B6:43:44:E9:E0:6A:93:33:F3:16:88:38:90:F5:74:75 X509v3 Authority Key Identifier: keyid:70:67:45:AD:92:35:3D:A8:A8:0C:B2:E0:D2:29:D6:8C:2E:F5:3D:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/EYiC8rZDROngapMz8xaIOJD1dHU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.133.174.0/23 Signature Algorithm: sha256WithRSAEncryption 00:0e:70:78:39:af:01:e7:2e:98:51:73:61:73:07:ae:6f:50: d8:0a:e9:29:a1:5a:7c:33:dc:f0:01:94:5a:88:b3:60:a4:9d: af:fe:97:34:b7:b6:28:5b:95:b8:c9:91:30:4c:7a:05:c4:19: f8:d1:d5:13:7b:05:8d:ea:3d:2e:c0:56:1d:9e:9c:7e:60:be: bb:05:12:03:f7:f1:2c:54:d2:52:99:a5:42:0d:76:2d:5a:5a: 4f:6e:de:8f:93:74:e7:6a:01:5c:b8:3c:c8:8d:c1:3e:9e:79: f2:22:fa:89:b1:7b:33:1f:03:f4:2e:69:3c:f4:d4:f1:cd:b9: ec:dc:bb:1c:50:5f:e6:93:e2:55:a2:97:a0:1d:87:38:7b:0f: 5b:ff:9f:4b:a5:b9:8a:54:53:be:68:42:02:54:96:64:1b:62: 79:f7:40:8e:76:97:26:02:4f:aa:6e:8d:dc:ab:d3:ca:f2:de: 10:8c:72:de:ff:d7:08:62:67:63:fa:d1:75:05:66:06:94:57: df:83:4e:2c:23:d1:76:4d:16:ef:20:2a:76:df:22:74:1c:9d: be:cf:cf:a1:32:4f:07:c2:1d:cb:00:ea:4a:4b:09:1f:57:be: be:11:09:f1:64:37:2b:a5:83:54:89:06:17:b0:76:7e:9b:df: 7e:0e:38:60 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqllvyajrHdujMbIFpRkGgqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNjc0NWFkOTIzNTNkYThhODBjYjJlMGQyMjlkNjhjMmVm NTNkYjIwHhcNMjUxMTIxMDg0NTI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMTg4ODJmMmI2NDM0NGU5ZTA2YTkzMzNmMzE2ODgzODkwZjU3NDc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohH1509YorhbHCQv6bY0kjN1cV8k Z8fOm8r9/GphMI+cbmZPEJEYmqN20njcYCdcTQbBMuCbHKswqXjyvTzG6sDTqYtJ +ZP2MnhFrUV0Q3QY1xtYEL2fZT5wqGQBY/RbTJsVgiTZ3gmVSaGCS9qGEAI8xJc7 JcO+YGcqJ0/CTbA8X1vpXV+SorDbr9Jmf4dF90aaoJeFbx+bHgHO0vQM6FYNkSkv sBQ3/XU7jPZ8dJYtXzk/mlcXrXii+qyBOks53xqk2BWm8syOssYmEC7yRg7IJQzs zAA9h0J3w5yijBW+57pCwKqW0r3Fm58TFSGuRs8vkJ5DMPMhqr9q9DvSqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBGIgvK2Q0Tp4GqTM/MWiDiQ9XR1MB8GA1UdIwQY MBaAFHBnRa2SNT2oqAyy4NIp1owu9T2yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0dkRnJaSTFQYWlvRExMZzBpbldqQzcxUGJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kMGFiZDAtYjExNC00ZTNhLWFlNTkt ZTIxNzYzYzY3MmZhLzEvRVlpQzhyWkRST25nYXBNejh4YUlPSkQxZEhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9kMGFiZDAtYjExNC00ZTNhLWFlNTktZTIxNzYzYzY3MmZh LzEvY0dkRnJaSTFQYWlvRExMZzBpbldqQzcxUGJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuYWuMA0G CSqGSIb3DQEBCwUAA4IBAQAADnB4Oa8B5y6YUXNhcweub1DYCukpoVp8M9zwAZRa iLNgpJ2v/pc0t7YoW5W4yZEwTHoFxBn40dUTewWN6j0uwFYdnpx+YL67BRID9/Es VNJSmaVCDXYtWlpPbt6Pk3TnagFcuDzIjcE+nnnyIvqJsXszHwP0Lmk89NTxzbns 3LscUF/mk+JVopegHYc4ew9b/59LpbmKVFO+aEICVJZkG2J590COdpcmAk+qbo3c q9PK8t4QjHLe/9cIYmdj+tF1BWYGlFffg04sI9F2TRbvICp23yJ0HJ2+z8+hMk8H wh3LAOpKSwkfV76+EQnxZDcrpYNUiQYXsHZ+m99+Djhg -----END CERTIFICATE-----Generated at Sat Dec 6 12:03:04 2025 by rpki-client