This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/B033U8I90D9nbSqVDxG_vYMVGDE.roa File: B033U8I90D9nbSqVDxG_vYMVGDE.roa (raw, json) Hash identifier: RVPeY+Z8B+B/KYBUq3T2NRT96vo4mWrRs3gtPw92Sfc= Subject key identifier: 07:4D:F7:53:C2:3D:D0:3F:67:6D:2A:95:0F:11:BF:BD:83:15:18:31 Certificate issuer: /CN=11125404c6dd472f1001ed9ffdf726762ac7701d Certificate serial: 019B7CEDA73D4E38E54BA43EEDAF4E21A9DD Authority key identifier: 11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/B033U8I90D9nbSqVDxG_vYMVGDE.roa Signing time: Fri 02 Jan 2026 04:18:28 +0000 ROA not before: Fri 02 Jan 2026 04:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213537 IP address blocks: 92.242.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:a7:3d:4e:38:e5:4b:a4:3e:ed:af:4e:21:a9:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11125404c6dd472f1001ed9ffdf726762ac7701d Validity Not Before: Jan 2 04:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=074df753c23dd03f676d2a950f11bfbd83151831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:95:0f:2e:c5:97:45:be:be:81:9d:a8:e0:06: c6:ec:93:05:7f:b7:df:d8:81:1e:f1:44:6a:3d:5a: 87:94:03:68:96:1b:f7:74:b9:1f:30:79:77:de:a4: 61:83:ba:d7:f8:8d:3c:b0:5d:5c:42:ac:4a:63:07: ab:f0:1e:c7:08:8f:98:31:8f:86:fd:a3:d7:07:12: da:02:ee:3a:26:8b:6b:57:d8:b7:6c:0f:a2:d6:9a: ac:e5:50:c1:98:8b:31:c1:85:fd:57:bf:da:ae:35: dd:80:68:50:9a:e4:78:07:c6:9e:a2:f0:41:aa:dc: cd:28:8b:46:91:81:5e:8e:60:ed:fe:c7:ba:67:26: 61:fe:d1:bd:c2:00:0c:bd:80:87:75:c3:ce:2b:34: 95:e8:25:ec:fd:5c:67:33:19:2d:36:74:95:dd:4c: 56:c9:59:d2:f0:a4:df:1a:48:2f:9a:23:0d:39:9e: d2:e8:01:8d:6e:6f:3d:47:4a:e6:8c:7c:6c:92:4a: 84:ab:71:a7:43:f0:f5:84:7d:90:b6:26:e4:2a:92: 65:9e:d8:51:1e:dc:e8:d3:7f:8b:8a:52:59:7d:a4: c7:58:dc:00:67:92:b0:10:9a:79:8d:38:d4:4c:82: 9f:4d:5f:67:4c:f5:cf:2a:c3:5e:1b:33:07:7c:79: 08:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:4D:F7:53:C2:3D:D0:3F:67:6D:2A:95:0F:11:BF:BD:83:15:18:31 X509v3 Authority Key Identifier: keyid:11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/B033U8I90D9nbSqVDxG_vYMVGDE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.242.165.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:cb:a8:b4:2b:d5:0b:5d:7b:d3:23:94:4c:ca:9b:5c:f4:c6: ba:54:00:55:70:c4:e0:ea:88:e6:09:dd:3b:b1:3c:69:7c:b2: bf:e8:6f:ba:a5:0c:9d:9c:88:1f:72:95:58:87:37:98:a7:ec: e5:d3:3b:00:00:8b:51:91:45:4a:a9:18:9d:20:8b:98:dd:fa: e9:70:ea:34:b4:7a:fb:fd:d1:e6:a9:4a:d6:a5:b2:b8:80:72: d4:5b:ca:25:56:0d:2c:11:4e:95:9a:18:a5:0a:44:a8:9b:6c: 15:be:a5:7c:ef:c6:61:7a:d2:74:50:52:23:61:60:38:50:7b: d4:bb:e9:a9:cf:d8:d8:e5:f8:5c:f5:bf:82:0b:d1:11:cc:94: 1f:1a:e1:db:b7:b9:05:b5:85:b6:d2:9c:8e:cb:09:3e:72:99: 83:c8:7b:a4:d1:aa:fb:51:c2:fc:1f:64:40:8e:4c:17:86:55: b4:d8:f4:24:90:2c:86:d6:f1:6a:38:19:74:b1:af:53:d6:d9: c7:9a:71:60:de:01:cd:4f:34:e0:7a:c5:58:4c:fe:49:7b:6d: bc:b1:6f:45:ad:50:4b:d0:18:d2:a2:e6:46:ac:41:e1:3e:a6: c1:3a:af:c3:29:10:78:49:0b:77:a6:22:5f:63:97:b3:02:96: 57:11:16:51 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87ac9TjjlS6Q+7a9OIandMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMTI1NDA0YzZkZDQ3MmYxMDAxZWQ5ZmZkZjcyNjc2MmFj NzcwMWQwHhcNMjYwMTAyMDQxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzRkZjc1M2MyM2RkMDNmNjc2ZDJhOTUwZjExYmZiZDgzMTUxODMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA95UPLsWXRb6+gZ2o4AbG7JMFf7ff 2IEe8URqPVqHlANolhv3dLkfMHl33qRhg7rX+I08sF1cQqxKYwer8B7HCI+YMY+G /aPXBxLaAu46JotrV9i3bA+i1pqs5VDBmIsxwYX9V7/arjXdgGhQmuR4B8aeovBB qtzNKItGkYFejmDt/se6ZyZh/tG9wgAMvYCHdcPOKzSV6CXs/VxnMxktNnSV3UxW yVnS8KTfGkgvmiMNOZ7S6AGNbm89R0rmjHxskkqEq3GnQ/D1hH2QtibkKpJlnthR Htzo03+LilJZfaTHWNwAZ5KwEJp5jTjUTIKfTV9nTPXPKsNeGzMHfHkIkQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAdN91PCPdA/Z20qlQ8Rv72DFRgxMB8GA1UdIwQY MBaAFBESVATG3UcvEAHtn/33JnYqx3AdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVJKVUJNYmRSeThRQWUyZl9mY21kaXJIY0IwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jZjljZDYtZTcxNy00ZGRhLTgyZWYt NmRmZTBmN2Q1M2JkLzEvQjAzM1U4STkwRDluYlNxVkR4R192WU1WR0RFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9jZjljZDYtZTcxNy00ZGRhLTgyZWYtNmRmZTBmN2Q1M2Jk LzEvRVJKVUJNYmRSeThRQWUyZl9mY21kaXJIY0IwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXPKlMA0G CSqGSIb3DQEBCwUAA4IBAQBey6i0K9ULXXvTI5RMyptc9Ma6VABVcMTg6ojmCd07 sTxpfLK/6G+6pQydnIgfcpVYhzeYp+zl0zsAAItRkUVKqRidIIuY3frpcOo0tHr7 /dHmqUrWpbK4gHLUW8olVg0sEU6VmhilCkSom2wVvqV878ZhetJ0UFIjYWA4UHvU u+mpz9jY5fhc9b+CC9ERzJQfGuHbt7kFtYW20pyOywk+cpmDyHuk0ar7UcL8H2RA jkwXhlW02PQkkCyG1vFqOBl0sa9T1tnHmnFg3gHNTzTgesVYTP5Je228sW9FrVBL 0BjSouZGrEHhPqbBOq/DKRB4SQt3piJfY5ezApZXERZR -----END CERTIFICATE-----Generated at Mon Jan 26 05:03:00 2026 by rpki-client