This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/EWYJbFjQX31oYWlD58OJv_l9B30.roa File: EWYJbFjQX31oYWlD58OJv_l9B30.roa (raw, json) Hash identifier: 2Mav6QQLVSCd9edMOwHxUMX2MqYRij3v85DASHfIvYU= Subject key identifier: 11:66:09:6C:58:D0:5F:7D:68:61:69:43:E7:C3:89:BF:F9:7D:07:7D Certificate issuer: /CN=ab6f6a36ec2960d4d05f3d9dcb187b9b904ea59b Certificate serial: 019B77C6C28653B867E559512CE21FBFCAB8 Authority key identifier: AB:6F:6A:36:EC:29:60:D4:D0:5F:3D:9D:CB:18:7B:9B:90:4E:A5:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/EWYJbFjQX31oYWlD58OJv_l9B30.roa Signing time: Thu 01 Jan 2026 04:17:53 +0000 ROA not before: Thu 01 Jan 2026 04:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21277 IP address blocks: 31.25.142.0/23 maxlen: 23 159.255.165.0/24 maxlen: 24 159.255.166.0/23 maxlen: 23 185.14.251.0/24 maxlen: 24 185.184.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 16:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:c2:86:53:b8:67:e5:59:51:2c:e2:1f:bf:ca:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab6f6a36ec2960d4d05f3d9dcb187b9b904ea59b Validity Not Before: Jan 1 04:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1166096c58d05f7d68616943e7c389bff97d077d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:06:9b:78:75:de:2e:51:e9:a6:8f:af:7f:65: 31:3b:90:0b:ca:54:e0:30:2c:51:40:fe:6b:42:56: ac:76:c0:75:5d:27:d0:7d:5c:1e:f9:8f:dc:6d:25: 42:a6:6b:31:84:e1:82:c4:88:35:56:05:cb:ec:4c: 71:61:18:6c:56:78:2a:12:c1:e9:9f:9d:04:2e:03: f9:c7:33:12:7e:26:73:ee:df:b5:d6:46:8e:ac:b4: 06:82:b0:d7:54:84:c1:b7:db:d1:f4:e1:d2:53:25: f3:7b:2f:8d:fc:0e:08:4b:a4:f2:75:06:9a:b0:39: 91:eb:29:75:aa:9f:e4:75:76:dc:5c:44:da:2f:48: af:90:94:d5:13:45:92:c3:24:5c:0f:3a:1c:93:cf: 64:cc:c5:08:cc:2a:34:0a:6c:79:83:1d:db:63:5d: ec:81:e8:1b:bf:f9:13:e3:38:ed:2b:dd:2e:1f:76: 74:b5:39:3a:7b:71:d4:f1:1c:95:18:16:e2:f6:6c: ab:62:52:93:6c:f2:0f:96:34:5a:af:b6:d0:e8:ca: 90:b3:b5:ab:2d:9b:f4:c0:09:7f:a5:fa:83:aa:56: 1a:e3:8f:c9:4a:25:72:9a:01:b9:22:87:26:59:d2: 0b:cc:ff:43:fc:a2:40:c8:1b:68:e8:ef:ad:28:1a: 29:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:66:09:6C:58:D0:5F:7D:68:61:69:43:E7:C3:89:BF:F9:7D:07:7D X509v3 Authority Key Identifier: keyid:AB:6F:6A:36:EC:29:60:D4:D0:5F:3D:9D:CB:18:7B:9B:90:4E:A5:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/EWYJbFjQX31oYWlD58OJv_l9B30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.25.142.0/23 159.255.165.0-159.255.167.255 185.14.251.0/24 185.184.197.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:15:75:08:21:ca:68:7e:b1:f5:38:57:36:74:12:36:8a:ab: 10:29:28:62:0c:25:eb:76:b3:67:54:3e:26:3c:ab:b0:a3:08: e2:5e:6b:96:fb:6e:66:e2:e0:4b:96:71:4d:bc:02:3a:23:52: 6c:f4:5b:d1:f5:86:6a:29:9e:3b:38:17:d1:63:ea:b2:ad:3c: 25:44:c5:91:0a:de:fa:8a:04:11:35:64:a5:33:e9:8b:d0:88: f0:16:f3:89:34:5e:c7:0f:b7:6d:25:99:96:6b:47:5e:65:39: 75:6a:a0:27:ab:30:f0:1c:92:b3:90:75:63:ba:5e:96:39:84: 0e:53:bf:12:59:ba:11:a5:25:cf:6d:f2:1c:93:11:ba:0a:1f: 11:8c:6f:cc:2e:84:ea:78:4f:14:ce:91:01:d1:6a:ce:3d:37: 25:04:35:ab:79:be:60:bf:4e:55:9b:ed:23:4f:c0:a1:3e:9e: 6d:a6:2e:1c:29:99:94:65:bc:13:c2:86:4c:ba:1f:ec:0a:a8: 71:d0:da:28:40:d4:84:73:11:5b:ad:46:a3:70:30:a7:a8:eb: 40:1f:4c:b5:41:aa:d2:2d:51:89:ff:bd:ee:b1:6b:ff:38:f7: 5c:42:9d:1d:d9:b4:b6:cf:b4:ec:cd:17:40:90:d8:63:a3:70: 06:3b:36:75 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt3xsKGU7hn5VlRLOIfv8q4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiNmY2YTM2ZWMyOTYwZDRkMDVmM2Q5ZGNiMTg3YjliOTA0 ZWE1OWIwHhcNMjYwMTAxMDQxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMTY2MDk2YzU4ZDA1ZjdkNjg2MTY5NDNlN2MzODliZmY5N2QwNzdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwabeHXeLlHppo+vf2UxO5ALylTg MCxRQP5rQlasdsB1XSfQfVwe+Y/cbSVCpmsxhOGCxIg1VgXL7ExxYRhsVngqEsHp n50ELgP5xzMSfiZz7t+11kaOrLQGgrDXVITBt9vR9OHSUyXzey+N/A4IS6TydQaa sDmR6yl1qp/kdXbcXETaL0ivkJTVE0WSwyRcDzock89kzMUIzCo0Cmx5gx3bY13s gegbv/kT4zjtK90uH3Z0tTk6e3HU8RyVGBbi9myrYlKTbPIPljRar7bQ6MqQs7Wr LZv0wAl/pfqDqlYa44/JSiVymgG5IocmWdILzP9D/KJAyBto6O+tKBop5wIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFBFmCWxY0F99aGFpQ+fDib/5fQd9MB8GA1UdIwQY MBaAFKtvajbsKWDU0F89ncsYe5uQTqWbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTI5cU51d3BZTlRRWHoyZHl4aDdtNUJPcFpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy80ZDliYWQtZDJhYy00MTc5LTg5NDUt OTRiYjgzYTIwMDI5LzEvRVdZSmJGalFYMzFvWVdsRDU4T0p2X2w5QjMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy80ZDliYWQtZDJhYy00MTc5LTg5NDUtOTRiYjgzYTIwMDI5 LzEvcTI5cU51d3BZTlRRWHoyZHl4aDdtNUJPcFpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQBHxmOMAwD BACf/6UDBAOf/6ADBAC5DvsDBAC5uMUwDQYJKoZIhvcNAQELBQADggEBAH4VdQgh ymh+sfU4VzZ0EjaKqxApKGIMJet2s2dUPiY8q7CjCOJea5b7bmbi4EuWcU28Ajoj Umz0W9H1hmopnjs4F9Fj6rKtPCVExZEK3vqKBBE1ZKUz6YvQiPAW84k0XscPt20l mZZrR15lOXVqoCerMPAckrOQdWO6XpY5hA5TvxJZuhGlJc9t8hyTEboKHxGMb8wu hOp4TxTOkQHRas49NyUENat5vmC/TlWb7SNPwKE+nm2mLhwpmZRlvBPChky6H+wK qHHQ2ihA1IRzEVutRqNwMKeo60AfTLVBqtItUYn/ve6xa/8491xCnR3ZtLbPtOzN F0CQ2GOjcAY7NnU= -----END CERTIFICATE-----Generated at Fri Jan 9 00:00:42 2026 by rpki-client