This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/e-bWAWxjxQJbnJGblL9z-udKDeg.roa File: e-bWAWxjxQJbnJGblL9z-udKDeg.roa (raw, json) Hash identifier: F1tIuwxbtLRrgISklNjmuzhPscky9ofsgkm8xnxx5MU= Subject key identifier: 7B:E6:D6:01:6C:63:C5:02:5B:9C:91:9B:94:BF:73:FA:E7:4A:0D:E8 Certificate issuer: /CN=19b390b62d09950d500cd6bbbd78d0390560ec42 Certificate serial: 019B78A2720D22D67733FF6C3BB6734A90CA Authority key identifier: 19:B3:90:B6:2D:09:95:0D:50:0C:D6:BB:BD:78:D0:39:05:60:EC:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbOQti0JlQ1QDNa7vXjQOQVg7EI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/e-bWAWxjxQJbnJGblL9z-udKDeg.roa Signing time: Thu 01 Jan 2026 08:17:50 +0000 ROA not before: Thu 01 Jan 2026 08:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3320 IP address blocks: 185.133.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.crl rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.mft rsync://rpki.ripe.net/repository/DEFAULT/GbOQti0JlQ1QDNa7vXjQOQVg7EI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:72:0d:22:d6:77:33:ff:6c:3b:b6:73:4a:90:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19b390b62d09950d500cd6bbbd78d0390560ec42 Validity Not Before: Jan 1 08:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7be6d6016c63c5025b9c919b94bf73fae74a0de8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:14:fc:37:58:c5:46:4a:ae:6e:79:b4:3a:dc: e4:c6:3b:62:e6:e2:93:c7:54:e9:6a:ce:44:22:29: 3a:e8:cf:c3:f3:63:9f:b6:5a:ab:06:83:46:c1:d5: 36:45:6e:d9:7e:47:b1:5f:de:53:ab:61:c0:45:7b: 1c:2c:c7:4f:be:28:5c:58:35:ea:e2:17:c3:4b:36: 40:95:2c:a2:05:43:53:64:a9:62:3b:25:40:a6:a5: c2:92:82:c3:28:06:49:5b:30:84:db:43:9e:18:76: aa:77:21:e9:77:f5:99:e0:fc:81:a3:94:ca:73:90: 82:4e:48:6d:7d:51:61:a9:19:e3:7e:02:81:f4:75: 5e:69:ce:15:cd:20:51:52:da:c3:a1:e9:c6:43:20: 91:4e:a2:a5:e5:97:db:f1:67:db:d9:b8:77:26:1f: 7a:7e:f9:bb:0c:dc:3c:7b:a2:b8:69:c0:94:db:1d: 84:b7:8e:d9:43:5a:ce:e2:23:7d:0a:17:d6:b3:31: 33:d4:22:93:b3:f1:7f:a2:8e:c8:52:2b:15:3e:02: 79:75:2d:8d:02:f4:cf:7e:84:4c:bc:e4:95:fe:ce: 46:f0:e4:5d:e1:3f:f5:5e:1f:e5:0b:4c:59:c5:b9: 9e:a2:b2:c6:29:d6:f8:bc:80:da:e8:33:ba:d9:cc: e4:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:E6:D6:01:6C:63:C5:02:5B:9C:91:9B:94:BF:73:FA:E7:4A:0D:E8 X509v3 Authority Key Identifier: keyid:19:B3:90:B6:2D:09:95:0D:50:0C:D6:BB:BD:78:D0:39:05:60:EC:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbOQti0JlQ1QDNa7vXjQOQVg7EI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/e-bWAWxjxQJbnJGblL9z-udKDeg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b31586-3566-47b0-95cc-144d7473ea59/1/GbOQti0JlQ1QDNa7vXjQOQVg7EI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.133.243.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:01:1e:56:73:04:fb:70:80:14:8a:83:4a:38:14:96:f1:7e: 4a:bf:51:27:d8:f4:93:5e:81:76:dd:02:a8:24:d5:1a:d3:a0: 79:34:2a:0d:80:3d:85:d5:fd:b0:8a:71:95:02:f2:c1:f2:7a: 4b:a4:9c:d7:46:9c:17:9d:d1:a0:f2:4b:47:1d:2a:a6:2e:62: 5d:73:a2:86:84:8e:c0:dd:ce:e1:5b:c4:3b:53:cb:26:12:34: cd:5d:1f:5f:b8:cf:33:99:aa:7c:91:2b:7d:21:9f:37:18:51: 5e:85:8a:dc:9e:5b:fc:c3:ad:c1:ed:38:ef:2b:07:f3:2e:98: 64:75:89:b2:ac:52:f8:1c:2b:2f:8e:aa:30:36:ae:13:34:2d: 4c:f6:d4:9e:cb:5d:4f:65:50:d1:5e:b9:9e:ea:d8:ab:70:f7: ef:df:cc:c5:61:2b:75:ac:7a:97:4e:55:95:b3:07:75:06:58: c9:de:6e:82:71:d4:99:6a:15:2e:ce:03:a7:b9:63:16:17:4e: f3:0d:61:ff:17:6d:db:62:47:34:c6:82:74:a4:e1:75:06:3d: c0:d5:81:c6:26:12:8b:74:dd:aa:5b:4b:79:f4:02:b3:a8:50: 36:1a:88:9d:0a:e7:6b:ee:0f:b0:a9:98:bc:6d:d5:57:ba:75: f0:6d:96:06 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4onINItZ3M/9sO7ZzSpDKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5YjM5MGI2MmQwOTk1MGQ1MDBjZDZiYmJkNzhkMDM5MDU2 MGVjNDIwHhcNMjYwMTAxMDgxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YmU2ZDYwMTZjNjNjNTAyNWI5YzkxOWI5NGJmNzNmYWU3NGEwZGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBT8N1jFRkqubnm0Otzkxjti5uKT x1Tpas5EIik66M/D82OftlqrBoNGwdU2RW7ZfkexX95Tq2HARXscLMdPvihcWDXq 4hfDSzZAlSyiBUNTZKliOyVApqXCkoLDKAZJWzCE20OeGHaqdyHpd/WZ4PyBo5TK c5CCTkhtfVFhqRnjfgKB9HVeac4VzSBRUtrDoenGQyCRTqKl5Zfb8Wfb2bh3Jh96 fvm7DNw8e6K4acCU2x2Et47ZQ1rO4iN9ChfWszEz1CKTs/F/oo7IUisVPgJ5dS2N AvTPfoRMvOSV/s5G8ORd4T/1Xh/lC0xZxbmeorLGKdb4vIDa6DO62czkjwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHvm1gFsY8UCW5yRm5S/c/rnSg3oMB8GA1UdIwQY MBaAFBmzkLYtCZUNUAzWu7140DkFYOxCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2JPUXRpMEpsUTFRRE5hN3ZYalFPUVZnN0VJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9iMzE1ODYtMzU2Ni00N2IwLTk1Y2Mt MTQ0ZDc0NzNlYTU5LzEvZS1iV0FXeGp4UUpibkpHYmxMOXotdWRLRGVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy9iMzE1ODYtMzU2Ni00N2IwLTk1Y2MtMTQ0ZDc0NzNlYTU5 LzEvR2JPUXRpMEpsUTFRRE5hN3ZYalFPUVZnN0VJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYXzMA0G CSqGSIb3DQEBCwUAA4IBAQAaAR5WcwT7cIAUioNKOBSW8X5Kv1En2PSTXoF23QKo JNUa06B5NCoNgD2F1f2winGVAvLB8npLpJzXRpwXndGg8ktHHSqmLmJdc6KGhI7A 3c7hW8Q7U8smEjTNXR9fuM8zmap8kSt9IZ83GFFehYrcnlv8w63B7TjvKwfzLphk dYmyrFL4HCsvjqowNq4TNC1M9tSey11PZVDRXrme6tircPfv38zFYSt1rHqXTlWV swd1BljJ3m6CcdSZahUuzgOnuWMWF07zDWH/F23bYkc0xoJ0pOF1Bj3A1YHGJhKL dN2qW0t59AKzqFA2GoidCudr7g+wqZi8bdVXunXwbZYG -----END CERTIFICATE-----Generated at Fri Jan 2 09:50:10 2026 by rpki-client