This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/eqTX003eyxyptc_5akwZQ-er_vM.roa File: eqTX003eyxyptc_5akwZQ-er_vM.roa (raw, json) Hash identifier: K3SbRlftewHG9cfG5hVXUNxxbzFwfkxJoPCLzQ3dz+c= Subject key identifier: 7A:A4:D7:D3:4D:DE:CB:1C:A9:B5:CF:F9:6A:4C:19:43:E7:AB:FE:F3 Certificate issuer: /CN=c5de32bb9cc99e115ddbaf6b7fa23051789f2f61 Certificate serial: 019B7EA69CC6311CD393A37691C04F69EFAF Authority key identifier: C5:DE:32:BB:9C:C9:9E:11:5D:DB:AF:6B:7F:A2:30:51:78:9F:2F:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/eqTX003eyxyptc_5akwZQ-er_vM.roa Signing time: Fri 02 Jan 2026 12:20:06 +0000 ROA not before: Fri 02 Jan 2026 12:20:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 194.29.56.0/24 maxlen: 24 194.29.57.0/24 maxlen: 24 194.29.58.0/24 maxlen: 24 194.29.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.crl rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 06:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:9c:c6:31:1c:d3:93:a3:76:91:c0:4f:69:ef:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5de32bb9cc99e115ddbaf6b7fa23051789f2f61 Validity Not Before: Jan 2 12:20:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7aa4d7d34ddecb1ca9b5cff96a4c1943e7abfef3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f0:14:20:22:d1:42:07:79:44:4d:4f:16:8c: e8:4e:bd:3b:fc:0e:73:93:ca:be:8c:d5:5e:d3:2e: 5b:22:aa:83:a8:2b:44:7b:8c:a6:e9:10:91:81:6c: 33:69:47:dc:cd:71:a6:1c:61:d2:af:8c:f9:65:d7: 69:d0:52:b6:06:31:b2:c5:20:2f:b7:5c:6c:b6:3b: c1:12:3d:c0:62:ae:c7:38:1d:36:a0:e0:e0:8e:ea: 15:fc:ca:8d:aa:9a:e2:96:53:84:29:ab:7a:56:2a: 64:73:05:39:b7:6b:76:d4:bb:db:37:5a:69:f6:73: da:b8:39:cd:40:6c:28:91:2c:4a:d3:4f:12:c3:e4: ab:88:54:97:1f:49:e5:59:c7:dc:4c:7b:d3:84:d3: 46:60:b7:82:c5:4a:13:96:8c:dd:f6:50:ac:68:41: 53:c3:8e:52:f3:c5:05:d0:4b:84:a6:98:d8:e3:f0: 5c:ab:f6:b5:b5:fb:94:2b:5b:6c:31:57:d1:3e:45: d6:f0:60:57:36:3c:f1:f0:df:57:ae:07:2f:31:18: 7f:82:24:ce:ef:56:fe:f1:bf:13:ae:79:03:93:c8: 33:8f:11:2f:03:ab:18:63:ae:80:b3:e5:de:3b:01: d5:8d:96:fd:af:03:8b:89:af:47:36:43:e2:2e:0c: ad:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:A4:D7:D3:4D:DE:CB:1C:A9:B5:CF:F9:6A:4C:19:43:E7:AB:FE:F3 X509v3 Authority Key Identifier: keyid:C5:DE:32:BB:9C:C9:9E:11:5D:DB:AF:6B:7F:A2:30:51:78:9F:2F:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/eqTX003eyxyptc_5akwZQ-er_vM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.29.56.0/22 Signature Algorithm: sha256WithRSAEncryption 2d:e8:b8:52:a5:45:ed:dd:c7:43:b9:99:2c:5b:f4:96:42:fc: d4:a5:41:3a:cb:83:53:ea:36:25:13:d6:3d:78:84:69:6f:ae: 0e:0f:1d:a7:d2:3b:66:6b:54:00:ff:b2:38:a3:04:d9:21:62: cc:b7:78:81:ba:45:58:b3:31:39:46:3c:3e:f7:93:d7:ef:02: 68:e2:08:e3:bf:5d:56:69:e2:59:5e:ec:c8:ef:65:dc:02:9a: 9a:63:d3:2c:dd:40:1f:a4:4f:41:66:ac:b0:2a:d4:db:c1:da: 2f:55:c8:f3:af:c1:9f:96:6f:37:72:96:be:24:66:ac:10:31: 8b:92:49:88:1d:32:ce:e4:07:fb:11:15:33:0d:5f:47:3d:02: 8d:98:14:de:cb:12:a9:ee:e1:e2:80:ba:aa:79:6a:7a:cf:57: d3:c3:ab:38:57:3e:9d:cf:a3:e5:69:b3:72:fb:0c:f0:e2:44: b1:ba:74:92:99:e1:1e:5e:2f:bd:d3:c7:2e:17:8a:ee:d9:66: c1:6f:18:96:b2:5f:de:e6:15:0d:c2:23:3f:0f:d8:30:88:12: ad:17:4f:7a:31:3e:04:a8:16:53:26:2b:28:c9:c7:c8:fb:a4: 37:d0:0d:e9:46:cd:91:07:4b:2b:76:41:fa:98:91:5c:b4:bb: a6:e1:59:1e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ppzGMRzTk6N2kcBPae+vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1ZGUzMmJiOWNjOTllMTE1ZGRiYWY2YjdmYTIzMDUxNzg5 ZjJmNjEwHhcNMjYwMTAyMTIyMDA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YWE0ZDdkMzRkZGVjYjFjYTliNWNmZjk2YTRjMTk0M2U3YWJmZWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/AUICLRQgd5RE1PFozoTr07/A5z k8q+jNVe0y5bIqqDqCtEe4ym6RCRgWwzaUfczXGmHGHSr4z5Zddp0FK2BjGyxSAv t1xstjvBEj3AYq7HOB02oODgjuoV/MqNqprillOEKat6VipkcwU5t2t21LvbN1pp 9nPauDnNQGwokSxK008Sw+SriFSXH0nlWcfcTHvThNNGYLeCxUoTlozd9lCsaEFT w45S88UF0EuEppjY4/Bcq/a1tfuUK1tsMVfRPkXW8GBXNjzx8N9XrgcvMRh/giTO 71b+8b8TrnkDk8gzjxEvA6sYY66As+XeOwHVjZb9rwOLia9HNkPiLgytiwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHqk19NN3sscqbXP+WpMGUPnq/7zMB8GA1UdIwQY MBaAFMXeMrucyZ4RXduva3+iMFF4ny9hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGQ0eXU1ekpuaEZkMjY5cmY2SXdVWGlmTDJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9iZDA5ZTctYzQwYi00N2E2LThhMmUt MDYzNjc1MzY3OWI2LzEvZXFUWDAwM2V5eHlwdGNfNWFrd1pRLWVyX3ZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9iZDA5ZTctYzQwYi00N2E2LThhMmUtMDYzNjc1MzY3OWI2 LzEveGQ0eXU1ekpuaEZkMjY5cmY2SXdVWGlmTDJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwh04MA0G CSqGSIb3DQEBCwUAA4IBAQAt6LhSpUXt3cdDuZksW/SWQvzUpUE6y4NT6jYlE9Y9 eIRpb64ODx2n0jtma1QA/7I4owTZIWLMt3iBukVYszE5Rjw+95PX7wJo4gjjv11W aeJZXuzI72XcApqaY9Ms3UAfpE9BZqywKtTbwdovVcjzr8Gflm83cpa+JGasEDGL kkmIHTLO5Af7ERUzDV9HPQKNmBTeyxKp7uHigLqqeWp6z1fTw6s4Vz6dz6PlabNy +wzw4kSxunSSmeEeXi+908cuF4ru2WbBbxiWsl/e5hUNwiM/D9gwiBKtF096MT4E qBZTJisoycfI+6Q30A3pRs2RB0srdkH6mJFctLum4Vke -----END CERTIFICATE-----Generated at Fri Jan 9 17:07:00 2026 by rpki-client