This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/Eam5U8wmkEaQD_GZphi0bsWc3ms.roa File: Eam5U8wmkEaQD_GZphi0bsWc3ms.roa (raw, json) Hash identifier: aXUcbL8LEvpF2UJ9Y4ffmnfXihjfbhHkf/I/6hXBl8k= Subject key identifier: 11:A9:B9:53:CC:26:90:46:90:0F:F1:99:A6:18:B4:6E:C5:9C:DE:6B Certificate issuer: /CN=f1f930e23b08a15ccd4dc9ab1829c607fedde8a5 Certificate serial: 019B783439743A371A1AD2CDDB0EE3C5F35A Authority key identifier: F1:F9:30:E2:3B:08:A1:5C:CD:4D:C9:AB:18:29:C6:07:FE:DD:E8:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/Eam5U8wmkEaQD_GZphi0bsWc3ms.roa Signing time: Thu 01 Jan 2026 06:17:27 +0000 ROA not before: Thu 01 Jan 2026 06:17:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25145 IP address blocks: 185.22.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:39:74:3a:37:1a:1a:d2:cd:db:0e:e3:c5:f3:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1f930e23b08a15ccd4dc9ab1829c607fedde8a5 Validity Not Before: Jan 1 06:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=11a9b953cc269046900ff199a618b46ec59cde6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:31:d1:7d:c8:9c:e1:ca:90:77:b3:e4:1a:de: 5b:6d:f8:86:84:3a:8d:9f:66:0b:9f:72:41:19:18: c1:fb:e4:06:f8:7a:79:67:95:ad:4c:fa:3d:8f:e7: 8d:c7:26:7c:da:5d:d9:b9:4c:1b:1f:2a:30:b5:af: 3f:ee:37:ed:8d:a4:8a:5a:6c:31:30:7d:57:0e:92: 55:2e:7a:9f:e3:e4:4f:bd:c1:f5:20:a3:33:da:a0: f1:a3:ad:82:6c:c8:08:6d:af:ed:17:c8:5d:6a:e2: 1a:2e:28:d7:a7:57:16:2a:3b:49:df:52:01:5b:76: bd:55:8b:8a:71:f4:c9:26:98:62:d6:28:0a:06:c3: 5e:fb:3d:d0:3e:3c:98:df:ec:5e:08:ad:75:8d:b5: dd:8c:07:5e:57:72:12:ac:ec:39:db:0e:03:74:09: 7b:e0:f6:9a:5d:3e:9f:c0:c6:bf:39:a0:a8:87:3e: 9d:eb:3e:ee:fb:15:57:52:63:9d:9c:4c:6d:30:e5: 09:c4:1a:d4:22:ec:0a:ac:30:38:50:84:88:6f:f1: d1:42:00:b1:6e:27:85:84:cc:9d:d2:62:f7:a8:81: 85:e8:49:04:8d:bc:56:40:f8:0b:2a:c6:d8:ab:d9: 58:0d:f1:b0:96:83:3e:c8:9e:7b:19:79:54:42:2f: c1:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:A9:B9:53:CC:26:90:46:90:0F:F1:99:A6:18:B4:6E:C5:9C:DE:6B X509v3 Authority Key Identifier: keyid:F1:F9:30:E2:3B:08:A1:5C:CD:4D:C9:AB:18:29:C6:07:FE:DD:E8:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/Eam5U8wmkEaQD_GZphi0bsWc3ms.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.22.230.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:29:ba:c8:2a:3f:46:06:59:bc:71:c7:78:9e:ab:c0:41:ff: 6d:97:49:36:90:33:cd:60:08:86:b3:62:30:92:3d:08:6c:05: b8:b9:18:7b:a9:e1:4c:3b:c1:3b:82:75:88:50:88:56:bd:14: 58:be:cd:10:c7:7a:cc:3d:1e:12:7c:89:c4:5e:df:e6:c3:03: 93:03:21:64:3f:3b:dd:95:98:8c:4c:40:9f:a4:2e:98:21:1c: d7:5a:5b:84:1f:3d:09:15:db:e2:47:4f:a4:f3:0b:01:ef:d1: c0:6e:25:76:2a:76:41:1c:46:64:59:ff:ab:ff:70:75:4f:b4: 6d:ad:ea:7f:24:52:92:59:f0:14:1d:bf:16:4e:55:61:86:1b: 84:23:69:20:36:9c:3b:c6:93:16:d5:80:f6:25:f6:55:cd:b0: a9:8f:60:a8:3d:7b:1c:71:4e:23:36:c3:64:a5:d2:df:cc:f0: cf:0a:cc:2b:95:08:5a:8c:9e:ef:16:a8:2d:b0:8f:87:8d:ba: 98:74:e2:6f:0f:36:89:b7:25:ed:69:b3:7b:d6:a7:4e:77:7d: e8:fc:84:f4:d4:99:e2:27:56:77:82:20:17:84:a9:d8:43:4a: 23:da:f9:ec:13:30:87:0d:5a:1e:db:69:8f:d7:3f:7d:e8:c8: 1f:7c:b7:dd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NDl0OjcaGtLN2w7jxfNaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZjkzMGUyM2IwOGExNWNjZDRkYzlhYjE4MjljNjA3ZmVk ZGU4YTUwHhcNMjYwMTAxMDYxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMWE5Yjk1M2NjMjY5MDQ2OTAwZmYxOTlhNjE4YjQ2ZWM1OWNkZTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jHRfcic4cqQd7PkGt5bbfiGhDqN n2YLn3JBGRjB++QG+Hp5Z5WtTPo9j+eNxyZ82l3ZuUwbHyowta8/7jftjaSKWmwx MH1XDpJVLnqf4+RPvcH1IKMz2qDxo62CbMgIba/tF8hdauIaLijXp1cWKjtJ31IB W3a9VYuKcfTJJphi1igKBsNe+z3QPjyY3+xeCK11jbXdjAdeV3ISrOw52w4DdAl7 4PaaXT6fwMa/OaCohz6d6z7u+xVXUmOdnExtMOUJxBrUIuwKrDA4UISIb/HRQgCx bieFhMyd0mL3qIGF6EkEjbxWQPgLKsbYq9lYDfGwloM+yJ57GXlUQi/BswIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBGpuVPMJpBGkA/xmaYYtG7FnN5rMB8GA1UdIwQY MBaAFPH5MOI7CKFczU3Jqxgpxgf+3eilMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGZrdzRqc0lvVnpOVGNtckdDbkdCXzdkNktVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9lYTEyOGMtYTA5ZC00MGU4LWJiMTEt YWVhNzE0ZWM1MTEzLzEvRWFtNVU4d21rRWFRRF9HWnBoaTBic1djM21zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9lYTEyOGMtYTA5ZC00MGU4LWJiMTEtYWVhNzE0ZWM1MTEz LzEvOGZrdzRqc0lvVnpOVGNtckdDbkdCXzdkNktVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRbmMA0G CSqGSIb3DQEBCwUAA4IBAQCPKbrIKj9GBlm8ccd4nqvAQf9tl0k2kDPNYAiGs2Iw kj0IbAW4uRh7qeFMO8E7gnWIUIhWvRRYvs0Qx3rMPR4SfInEXt/mwwOTAyFkPzvd lZiMTECfpC6YIRzXWluEHz0JFdviR0+k8wsB79HAbiV2KnZBHEZkWf+r/3B1T7Rt rep/JFKSWfAUHb8WTlVhhhuEI2kgNpw7xpMW1YD2JfZVzbCpj2CoPXsccU4jNsNk pdLfzPDPCswrlQhajJ7vFqgtsI+HjbqYdOJvDzaJtyXtabN71qdOd33o/IT01Jni J1Z3giAXhKnYQ0oj2vnsEzCHDVoe22mP1z996MgffLfd -----END CERTIFICATE-----Generated at Fri Jan 2 20:00:14 2026 by rpki-client