This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/EK-BO9njT8D0PUd03822T1Wcn_Y.roa File: EK-BO9njT8D0PUd03822T1Wcn_Y.roa (raw, json) Hash identifier: IVt2nvgD6bQiKsQebz3stonbNyplhQ3WbabmnplyKUM= Subject key identifier: 10:AF:81:3B:D9:E3:4F:C0:F4:3D:47:74:DF:CD:B6:4F:55:9C:9F:F6 Certificate issuer: /CN=1ab70e3488dc831d45a75744e2f8bba267fd31d6 Certificate serial: 019B79ED63ECD5177F2668B4A87C92B707CB Authority key identifier: 1A:B7:0E:34:88:DC:83:1D:45:A7:57:44:E2:F8:BB:A2:67:FD:31:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/EK-BO9njT8D0PUd03822T1Wcn_Y.roa Signing time: Thu 01 Jan 2026 14:19:19 +0000 ROA not before: Thu 01 Jan 2026 14:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198463 IP address blocks: 185.117.104.0/22 maxlen: 24 2a06:8400::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 08:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:63:ec:d5:17:7f:26:68:b4:a8:7c:92:b7:07:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ab70e3488dc831d45a75744e2f8bba267fd31d6 Validity Not Before: Jan 1 14:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=10af813bd9e34fc0f43d4774dfcdb64f559c9ff6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:49:45:63:4d:71:b7:17:61:e8:09:c9:bf:14: f2:b0:e7:ca:a2:95:7b:11:8a:14:ce:37:76:f4:b8: 9a:8d:9c:10:84:45:a3:df:c4:2e:7c:2f:b2:28:04: 45:1a:1f:9d:a7:b7:e8:5f:e9:3a:c5:b6:a3:d5:06: 3a:ac:d3:cc:2f:ec:e4:1f:38:43:19:3f:d7:8d:28: e5:43:ac:3c:d5:25:9d:d7:e4:45:5b:1c:77:67:72: 99:43:d5:a0:60:01:36:92:11:c7:37:3b:26:1f:39: e9:b2:7f:d7:23:f7:1a:f7:0d:c2:0b:ff:dd:fc:35: 40:39:fe:12:48:c4:d4:b5:88:8a:4f:b4:e3:98:c1: 37:31:55:18:ee:99:3b:29:1c:db:19:7d:24:82:51: 37:ad:a7:d2:8b:f5:c9:59:d6:ae:15:3e:9e:68:0a: 4f:1d:68:d4:ec:f0:ea:eb:38:8a:48:35:0c:33:fd: ae:f5:4e:9b:68:95:90:78:9f:e6:d5:f2:d8:fb:07: 8b:bf:6c:82:83:54:ab:94:4a:62:f0:f8:c0:b7:c2: 19:a1:2e:47:2a:54:21:cd:0c:41:37:d1:5e:4d:5a: c8:e1:1d:21:30:fa:59:65:88:96:7c:9a:47:b2:f0: c1:99:92:99:8d:0d:c9:a3:29:c1:49:b5:5c:5a:28: 01:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:AF:81:3B:D9:E3:4F:C0:F4:3D:47:74:DF:CD:B6:4F:55:9C:9F:F6 X509v3 Authority Key Identifier: keyid:1A:B7:0E:34:88:DC:83:1D:45:A7:57:44:E2:F8:BB:A2:67:FD:31:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/EK-BO9njT8D0PUd03822T1Wcn_Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.117.104.0/22 IPv6: 2a06:8400::/29 Signature Algorithm: sha256WithRSAEncryption 4d:7d:00:9a:50:b9:f7:02:45:f3:1e:df:2c:bd:37:51:fa:f9: bf:8f:7d:27:2b:d8:14:ad:df:48:c6:10:5d:19:7b:23:e9:2c: 3a:b8:8d:18:ef:b5:f7:64:04:61:f2:3c:20:f7:40:cd:01:0e: 4d:18:d2:73:cb:7c:8e:d5:9e:fe:d0:95:68:65:37:74:91:42: 14:a4:c1:95:47:d4:d8:dd:7b:9c:2d:ad:f7:2c:05:92:06:aa: a8:23:07:de:70:a4:c2:1e:ab:64:8d:f6:63:42:c0:d4:98:81: 11:ce:61:a6:94:b8:67:63:f4:9f:32:dc:28:3a:e3:2f:9f:f5: 6c:96:75:ff:38:44:8c:c0:f6:d9:7e:aa:0b:1f:91:df:b0:ae: 6e:0c:06:7a:08:28:8a:c2:d2:14:41:40:6f:27:36:84:0c:72: bc:15:c5:8f:dc:3e:a3:ab:bf:92:64:a8:37:6a:b8:0f:4f:a7: 24:16:ea:29:dc:5f:d4:8c:d9:ad:27:7a:f9:17:cb:dc:00:bd: 34:cf:2e:e3:aa:00:b2:de:1d:40:39:23:9b:27:d4:19:00:c8: da:ee:a1:28:9f:2e:db:21:5f:3b:e1:d5:b7:c0:87:69:23:81: e5:ff:35:e1:08:b0:81:97:b0:84:0d:b1:a6:f4:20:ff:fe:ce: af:90:92:45 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt57WPs1Rd/Jmi0qHyStwfLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhYjcwZTM0ODhkYzgzMWQ0NWE3NTc0NGUyZjhiYmEyNjdm ZDMxZDYwHhcNMjYwMTAxMTQxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMGFmODEzYmQ5ZTM0ZmMwZjQzZDQ3NzRkZmNkYjY0ZjU1OWM5ZmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmklFY01xtxdh6AnJvxTysOfKopV7 EYoUzjd29LiajZwQhEWj38QufC+yKARFGh+dp7foX+k6xbaj1QY6rNPML+zkHzhD GT/XjSjlQ6w81SWd1+RFWxx3Z3KZQ9WgYAE2khHHNzsmHznpsn/XI/ca9w3CC//d /DVAOf4SSMTUtYiKT7TjmME3MVUY7pk7KRzbGX0kglE3rafSi/XJWdauFT6eaApP HWjU7PDq6ziKSDUMM/2u9U6baJWQeJ/m1fLY+weLv2yCg1SrlEpi8PjAt8IZoS5H KlQhzQxBN9FeTVrI4R0hMPpZZYiWfJpHsvDBmZKZjQ3JoynBSbVcWigBGwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBCvgTvZ40/A9D1HdN/Ntk9VnJ/2MB8GA1UdIwQY MBaAFBq3DjSI3IMdRadXROL4u6Jn/THWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3JjT05JamNneDFGcDFkRTR2aTdvbWY5TWRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9hYjkwMTItYmZhZS00NzI5LWI5OTMt MDk3MzNjYjAyNjllLzEvRUstQk85bmpUOEQwUFVkMDM4MjJUMVdjbl9ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9hYjkwMTItYmZhZS00NzI5LWI5OTMtMDk3MzNjYjAyNjll LzEvR3JjT05JamNneDFGcDFkRTR2aTdvbWY5TWRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuXVoMA0E AgACMAcDBQMqBoQAMA0GCSqGSIb3DQEBCwUAA4IBAQBNfQCaULn3AkXzHt8svTdR +vm/j30nK9gUrd9IxhBdGXsj6Sw6uI0Y77X3ZARh8jwg90DNAQ5NGNJzy3yO1Z7+ 0JVoZTd0kUIUpMGVR9TY3XucLa33LAWSBqqoIwfecKTCHqtkjfZjQsDUmIERzmGm lLhnY/SfMtwoOuMvn/VslnX/OESMwPbZfqoLH5HfsK5uDAZ6CCiKwtIUQUBvJzaE DHK8FcWP3D6jq7+SZKg3argPT6ckFuop3F/UjNmtJ3r5F8vcAL00zy7jqgCy3h1A OSObJ9QZAMja7qEony7bIV874dW3wIdpI4Hl/zXhCLCBl7CEDbGm9CD//s6vkJJF -----END CERTIFICATE-----Generated at Thu Jan 8 11:03:23 2026 by rpki-client