This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/1-EjMX3YRkacpuKYO2FH7s4TaoIk.roa File: 1-EjMX3YRkacpuKYO2FH7s4TaoIk.roa (raw, json) Hash identifier: 5s0riiJVWdi9HHDl4S6viqfJpzTBR9zdtDH9C+DcLJc= Subject key identifier: F8:48:CC:5F:76:11:91:A7:29:B8:A6:0E:D8:51:FB:B3:84:DA:A0:89 Certificate issuer: /CN=e22d7eae21d8baee9de6940d8ce6b29d92a9031e Certificate serial: 019B7EA73A995C115634C018900C7730E9CE Authority key identifier: E2:2D:7E:AE:21:D8:BA:EE:9D:E6:94:0D:8C:E6:B2:9D:92:A9:03:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/1-EjMX3YRkacpuKYO2FH7s4TaoIk.roa Signing time: Fri 02 Jan 2026 12:20:47 +0000 ROA not before: Fri 02 Jan 2026 12:20:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203327 IP address blocks: 185.138.144.0/22 maxlen: 24 2a07:ec0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:3a:99:5c:11:56:34:c0:18:90:0c:77:30:e9:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e22d7eae21d8baee9de6940d8ce6b29d92a9031e Validity Not Before: Jan 2 12:20:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f848cc5f761191a729b8a60ed851fbb384daa089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9f:42:b1:7f:6e:24:29:e5:16:c8:8b:03:d6: 60:f1:8b:44:6e:3b:a3:8c:42:74:da:02:c0:1b:b1: 7c:48:31:d0:d9:79:d0:a4:ac:0a:7b:40:32:5b:07: bd:d8:41:6f:62:7e:84:c5:7c:22:64:c8:55:be:8a: 8c:c9:b8:03:91:cf:8b:56:06:17:8a:ff:56:7d:cd: e9:2c:be:a8:ac:20:f1:cd:80:f2:3d:90:0d:be:2f: 95:0a:89:0d:ef:76:bd:6e:92:b4:60:5b:f4:56:42: 55:e3:2d:28:06:8e:41:d0:53:54:08:99:30:36:45: cd:c6:0a:99:57:a8:c2:2c:4d:6e:8c:16:de:9a:08: 99:84:a2:32:58:be:cf:55:67:81:77:17:6c:9e:6c: e3:72:6d:87:bf:bb:20:5e:f1:29:f1:91:ce:f6:77: eb:43:f5:fd:a2:6d:8c:fa:d1:4b:09:00:0f:1c:82: 89:02:ea:89:8e:70:8d:4c:62:82:e3:fb:97:52:18: a5:00:e0:8e:38:08:1d:f2:5f:e0:37:3d:a1:a7:d4: ae:4c:ca:ac:e1:3b:12:a8:e8:8f:71:32:a0:fa:36: 17:23:17:c1:e1:11:72:26:d2:3e:40:e6:b5:dc:e5: 11:35:ad:07:04:cd:05:fb:79:1b:d3:49:47:52:e2: c5:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:48:CC:5F:76:11:91:A7:29:B8:A6:0E:D8:51:FB:B3:84:DA:A0:89 X509v3 Authority Key Identifier: keyid:E2:2D:7E:AE:21:D8:BA:EE:9D:E6:94:0D:8C:E6:B2:9D:92:A9:03:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/1-EjMX3YRkacpuKYO2FH7s4TaoIk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.138.144.0/22 IPv6: 2a07:ec0::/29 Signature Algorithm: sha256WithRSAEncryption 21:1d:8a:1e:2e:4d:e1:cd:0c:a6:0b:95:6b:a8:7c:01:11:56: 13:be:d5:ad:a1:bc:58:f5:8b:84:0b:47:e3:d3:aa:47:78:76: b0:55:13:fe:da:3c:ba:9e:06:c3:c0:d8:63:96:c6:ea:a4:b7: a9:2a:aa:12:3b:7c:9c:e6:d3:69:ae:fd:5c:1e:f3:14:0f:ca: d4:e3:81:aa:71:74:67:91:5b:7d:1b:7f:1f:9d:5b:10:a5:16: 69:4e:2c:9b:23:3e:fe:d3:4d:f0:3c:2a:44:fa:ae:08:74:76: a6:9c:17:0b:e2:0e:a0:e6:c2:79:ed:6f:88:d9:af:44:40:63: e6:69:b8:67:fe:82:aa:29:93:5f:00:1d:4c:33:e1:8a:10:32: 4b:d6:99:9e:33:b6:c0:3f:d2:93:63:0d:dc:c4:d4:31:ee:fb: 8d:76:4e:5e:50:03:73:20:4f:26:b5:d2:95:30:81:61:d3:ff: 2e:a8:a4:f3:65:7b:4c:6e:af:71:bf:26:57:89:7e:14:67:b1: 3d:57:d8:d6:d9:56:1a:52:c3:2b:41:17:05:32:5b:3b:c2:00: 19:2f:05:74:b5:89:0a:24:70:7f:03:8c:62:ba:47:3a:65:6f: 8e:c9:00:15:c3:8d:c1:b4:93:59:80:7d:66:21:b4:e6:56:b6: 16:e9:ef:0e -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt+pzqZXBFWNMAYkAx3MOnOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyMmQ3ZWFlMjFkOGJhZWU5ZGU2OTQwZDhjZTZiMjlkOTJh OTAzMWUwHhcNMjYwMTAyMTIyMDQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODQ4Y2M1Zjc2MTE5MWE3MjliOGE2MGVkODUxZmJiMzg0ZGFhMDg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJ9CsX9uJCnlFsiLA9Zg8YtEbjuj jEJ02gLAG7F8SDHQ2XnQpKwKe0AyWwe92EFvYn6ExXwiZMhVvoqMybgDkc+LVgYX iv9Wfc3pLL6orCDxzYDyPZANvi+VCokN73a9bpK0YFv0VkJV4y0oBo5B0FNUCJkw NkXNxgqZV6jCLE1ujBbemgiZhKIyWL7PVWeBdxdsnmzjcm2Hv7sgXvEp8ZHO9nfr Q/X9om2M+tFLCQAPHIKJAuqJjnCNTGKC4/uXUhilAOCOOAgd8l/gNz2hp9SuTMqs 4TsSqOiPcTKg+jYXIxfB4RFyJtI+QOa13OURNa0HBM0F+3kb00lHUuLFWQIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFPhIzF92EZGnKbimDthR+7OE2qCJMB8GA1UdIwQY MBaAFOItfq4h2LruneaUDYzmsp2SqQMeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGkxLXJpSFl1dTZkNXBRTmpPYXluWktwQXg0LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9hYjgwNzAtNGY1OC00NjM0LTlhNDQt Mzg3NTM2ZDAzYTcxLzEvMS1Fak1YM1lSa2FjcHVLWU8yRkg3czRUYW9Jay5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZWYvYWI4MDcwLTRmNTgtNDYzNC05YTQ0LTM4NzUzNmQwM2E3 MS8xLzRpMS1yaUhZdXU2ZDVwUU5qT2F5blpLcEF4NC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArmKkDAN BAIAAjAHAwUDKgcOwDANBgkqhkiG9w0BAQsFAAOCAQEAIR2KHi5N4c0MpguVa6h8 ARFWE77VraG8WPWLhAtH49OqR3h2sFUT/to8up4Gw8DYY5bG6qS3qSqqEjt8nObT aa79XB7zFA/K1OOBqnF0Z5FbfRt/H51bEKUWaU4smyM+/tNN8DwqRPquCHR2ppwX C+IOoObCee1viNmvREBj5mm4Z/6CqimTXwAdTDPhihAyS9aZnjO2wD/Sk2MN3MTU Me77jXZOXlADcyBPJrXSlTCBYdP/Lqik82V7TG6vcb8mV4l+FGexPVfY1tlWGlLD K0EXBTJbO8IAGS8FdLWJCiRwfwOMYrpHOmVvjskAFcONwbSTWYB9ZiG05la2Funv Dg== -----END CERTIFICATE-----Generated at Sun Jan 25 10:29:33 2026 by rpki-client