This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/IZEphWg69cSETII6yv_zCGuLAdo.roa File: IZEphWg69cSETII6yv_zCGuLAdo.roa (raw, json) Hash identifier: KJY/8Q52tgDHO65sY7/mwgDgyHvwck3lR6gtDYReLqg= Subject key identifier: 21:91:29:85:68:3A:F5:C4:84:4C:82:3A:CA:FF:F3:08:6B:8B:01:DA Certificate issuer: /CN=08b3fb401967b06f841bc6a1e9d492a9a75f9268 Certificate serial: 019B7758D434557819F90AAE83609DB2E144 Authority key identifier: 08:B3:FB:40:19:67:B0:6F:84:1B:C6:A1:E9:D4:92:A9:A7:5F:92:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLP7QBlnsG-EG8ah6dSSqadfkmg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/IZEphWg69cSETII6yv_zCGuLAdo.roa Signing time: Thu 01 Jan 2026 02:17:48 +0000 ROA not before: Thu 01 Jan 2026 02:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34907 IP address blocks: 185.62.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.mft rsync://rpki.ripe.net/repository/DEFAULT/CLP7QBlnsG-EG8ah6dSSqadfkmg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:d4:34:55:78:19:f9:0a:ae:83:60:9d:b2:e1:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08b3fb401967b06f841bc6a1e9d492a9a75f9268 Validity Not Before: Jan 1 02:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=21912985683af5c4844c823acafff3086b8b01da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:14:c1:03:59:4c:22:55:11:cf:e7:38:25:08: 48:b5:9a:b8:fc:97:a3:fc:2b:5e:35:39:19:dd:8e: f9:59:e8:75:60:84:87:5a:ab:4b:e8:d9:ca:9c:24: c0:a8:28:90:01:c2:f4:32:78:af:6e:5d:a8:bd:92: f3:96:22:2e:57:e9:d0:80:d4:d9:6f:30:1a:fe:85: ca:2f:69:2a:96:2b:f2:2b:19:10:7c:87:55:8a:5f: 1c:e3:66:44:b2:65:65:d0:56:ba:47:fe:9d:a1:2f: 4f:a9:5e:a0:3f:b6:a9:aa:02:a6:66:d3:88:46:71: 9a:cb:2b:75:3f:41:ed:53:87:9f:b2:59:4a:05:64: d7:fd:f7:64:a4:03:ff:ed:7a:4e:d6:ce:e3:72:af: 71:51:49:b4:1e:6f:fa:c3:c2:d3:63:f6:4f:fc:57: fe:c5:6c:58:b3:8b:4a:d5:b3:a7:96:28:ba:a0:96: eb:41:fb:ca:1f:61:c7:39:87:ea:6b:79:29:20:d7: 53:52:81:25:bf:76:af:57:a2:d9:de:20:4d:cc:ac: 69:a7:55:bd:dd:04:47:98:6d:5d:1b:23:e0:a8:c3: 28:ce:31:22:54:3a:c5:cf:37:f8:1e:21:55:11:b0: bb:1b:c6:eb:33:d1:dc:37:8c:59:c2:f2:f5:21:76: ac:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:91:29:85:68:3A:F5:C4:84:4C:82:3A:CA:FF:F3:08:6B:8B:01:DA X509v3 Authority Key Identifier: keyid:08:B3:FB:40:19:67:B0:6F:84:1B:C6:A1:E9:D4:92:A9:A7:5F:92:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLP7QBlnsG-EG8ah6dSSqadfkmg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/IZEphWg69cSETII6yv_zCGuLAdo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/42ff05-4ac6-4cec-b5d4-f6c16aca175e/1/CLP7QBlnsG-EG8ah6dSSqadfkmg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.62.1.0/24 Signature Algorithm: sha256WithRSAEncryption 30:fb:11:95:6b:52:c0:01:f9:69:9f:55:9b:8c:8e:89:43:80: 07:30:94:64:62:be:8a:bb:71:f2:73:53:02:2f:2f:ef:87:af: e0:e6:52:d6:9b:40:f3:66:01:f8:ff:29:12:d0:10:a0:da:22: dc:94:71:4a:fd:c0:fe:98:c1:a0:03:f4:27:fe:c4:f6:46:dd: 58:8b:70:b0:78:2d:02:ba:16:96:69:47:88:16:5d:36:99:16: 3b:cf:b6:58:9e:43:67:7c:32:07:00:01:18:05:08:c2:c1:3c: 51:e7:29:24:d7:4d:d8:c0:5e:02:1a:07:7f:58:82:e0:36:a0: f7:2f:3a:61:59:a2:a7:c5:48:2b:3a:ac:49:0c:a2:a6:21:41: 94:37:47:86:1f:86:cd:9f:43:05:a3:75:02:a6:b3:6d:4e:1c: 5e:34:c4:bb:11:16:52:c6:2a:fa:07:41:8a:bd:06:8e:48:57: 47:8e:41:20:d1:47:28:62:91:f4:80:f3:5d:45:2a:fc:d8:6f: ef:2b:97:14:82:9f:32:66:34:29:bc:89:32:20:4f:32:0c:9e: 69:01:40:b5:1c:12:91:b6:a5:d6:09:4a:a5:2d:9f:9d:9d:cd: a2:98:bd:1c:15:70:0f:05:33:92:40:a5:77:0b:38:89:fa:b5: 4e:9c:de:95 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WNQ0VXgZ+Qqug2CdsuFEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4YjNmYjQwMTk2N2IwNmY4NDFiYzZhMWU5ZDQ5MmE5YTc1 ZjkyNjgwHhcNMjYwMTAxMDIxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTkxMjk4NTY4M2FmNWM0ODQ0YzgyM2FjYWZmZjMwODZiOGIwMWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRTBA1lMIlURz+c4JQhItZq4/Jej /CteNTkZ3Y75Weh1YISHWqtL6NnKnCTAqCiQAcL0Mnivbl2ovZLzliIuV+nQgNTZ bzAa/oXKL2kqlivyKxkQfIdVil8c42ZEsmVl0Fa6R/6doS9PqV6gP7apqgKmZtOI RnGayyt1P0HtU4efsllKBWTX/fdkpAP/7XpO1s7jcq9xUUm0Hm/6w8LTY/ZP/Ff+ xWxYs4tK1bOnlii6oJbrQfvKH2HHOYfqa3kpINdTUoElv3avV6LZ3iBNzKxpp1W9 3QRHmG1dGyPgqMMozjEiVDrFzzf4HiFVEbC7G8brM9HcN4xZwvL1IXaswwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCGRKYVoOvXEhEyCOsr/8whriwHaMB8GA1UdIwQY MBaAFAiz+0AZZ7BvhBvGoenUkqmnX5JoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0xQN1FCbG5zRy1FRzhhaDZkU1NxYWRma21nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS80MmZmMDUtNGFjNi00Y2VjLWI1ZDQt ZjZjMTZhY2ExNzVlLzEvSVpFcGhXZzY5Y1NFVElJNnl2X3pDR3VMQWRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS80MmZmMDUtNGFjNi00Y2VjLWI1ZDQtZjZjMTZhY2ExNzVl LzEvQ0xQN1FCbG5zRy1FRzhhaDZkU1NxYWRma21nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuT4BMA0G CSqGSIb3DQEBCwUAA4IBAQAw+xGVa1LAAflpn1WbjI6JQ4AHMJRkYr6Ku3Hyc1MC Ly/vh6/g5lLWm0DzZgH4/ykS0BCg2iLclHFK/cD+mMGgA/Qn/sT2Rt1Yi3CweC0C uhaWaUeIFl02mRY7z7ZYnkNnfDIHAAEYBQjCwTxR5ykk103YwF4CGgd/WILgNqD3 LzphWaKnxUgrOqxJDKKmIUGUN0eGH4bNn0MFo3UCprNtThxeNMS7ERZSxir6B0GK vQaOSFdHjkEg0UcoYpH0gPNdRSr82G/vK5cUgp8yZjQpvIkyIE8yDJ5pAUC1HBKR tqXWCUqlLZ+dnc2imL0cFXAPBTOSQKV3CziJ+rVOnN6V -----END CERTIFICATE-----Generated at Mon Jan 26 15:35:04 2026 by rpki-client