This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/EYMrlefUd_XSaWfylZCHkmVeXK4.roa File: EYMrlefUd_XSaWfylZCHkmVeXK4.roa (raw, json) Hash identifier: 8jOCsUwGr5s+6E9DbnoIutjLx2+bBNXxqyvTsEuVuEY= Subject key identifier: 11:83:2B:95:E7:D4:77:F5:D2:69:67:F2:95:90:87:92:65:5E:5C:AE Certificate issuer: /CN=790d1ca78761310ac39a714ff62f3b92b2e77d8a Certificate serial: 019B7CEDDD119EB6C9402004F42F3F8F7170 Authority key identifier: 79:0D:1C:A7:87:61:31:0A:C3:9A:71:4F:F6:2F:3B:92:B2:E7:7D:8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/EYMrlefUd_XSaWfylZCHkmVeXK4.roa Signing time: Fri 02 Jan 2026 04:18:42 +0000 ROA not before: Fri 02 Jan 2026 04:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15830 IP address blocks: 85.119.0.0/21 maxlen: 21 178.250.56.0/21 maxlen: 21 185.172.92.0/22 maxlen: 22 2a03:bd80::/32 maxlen: 48 2a03:bd81::/32 maxlen: 32 2a03:bd82::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.crl rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.mft rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:dd:11:9e:b6:c9:40:20:04:f4:2f:3f:8f:71:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=790d1ca78761310ac39a714ff62f3b92b2e77d8a Validity Not Before: Jan 2 04:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=11832b95e7d477f5d26967f295908792655e5cae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:bb:a0:55:33:44:a3:56:c8:fb:71:46:5d:c2: ce:82:d1:1c:29:44:35:aa:df:ad:1b:97:b2:f0:4a: 6a:97:19:d6:26:76:d4:fc:cd:1c:93:73:4d:3f:6f: 4b:84:dd:5f:65:6b:95:49:96:df:6c:29:8c:11:b4: 41:d9:00:f6:96:c7:c1:1d:9c:12:a1:b2:da:a3:11: 5c:81:5f:47:a4:54:8d:a9:5d:66:5f:8f:a4:1e:d5: 8b:fc:94:e8:ef:7e:1a:1e:59:a2:63:82:7f:fd:47: ea:62:93:73:15:ea:18:13:13:3e:e5:1e:24:0f:55: 18:9d:fc:50:4c:de:aa:d8:fb:17:cc:43:21:dc:8b: 10:44:db:e1:20:08:23:e4:dc:88:a3:d0:16:08:81: aa:27:04:ee:c1:69:d8:b8:87:f4:97:43:2c:5a:9b: b0:87:6e:f7:86:39:05:92:58:6e:75:3e:4a:af:8a: 6c:40:c9:e3:d4:4c:d9:0c:d2:d3:b1:93:1e:70:d5: f7:04:fb:24:89:46:44:fa:1b:0c:9b:b4:12:46:a8: 23:e8:e0:8b:9c:f6:d1:7f:16:23:66:97:69:30:ba: 62:ca:12:f8:c6:35:89:0e:56:71:b0:a5:4a:5d:ee: 22:f9:f5:e6:55:da:9d:e3:01:da:32:97:3c:72:4d: 99:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:83:2B:95:E7:D4:77:F5:D2:69:67:F2:95:90:87:92:65:5E:5C:AE X509v3 Authority Key Identifier: keyid:79:0D:1C:A7:87:61:31:0A:C3:9A:71:4F:F6:2F:3B:92:B2:E7:7D:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/EYMrlefUd_XSaWfylZCHkmVeXK4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.119.0.0/21 178.250.56.0/21 185.172.92.0/22 IPv6: 2a03:bd80::-2a03:bd82:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 89:d5:ea:29:c7:ca:f8:f3:b0:07:25:e6:28:8b:c2:f7:c3:55: bc:58:ff:40:f4:37:66:33:b6:53:cf:bc:6c:da:1c:47:89:98: 3f:e3:33:b5:61:05:e6:9c:d7:53:f9:73:78:2a:7a:3d:a4:2b: f0:82:2c:d0:bb:cf:6e:9d:bb:41:a1:51:32:aa:cd:70:c0:c6: 19:24:27:9e:5c:ed:ff:bb:fa:c7:f6:da:30:c7:94:7e:4c:52: d4:6f:0f:65:0b:96:31:4c:d9:fe:fd:1a:93:e5:ca:9d:ce:e0: 85:5b:aa:2d:15:d5:04:fc:d4:bf:8f:89:16:63:35:96:2f:2b: b1:c4:3f:89:83:ae:5e:84:48:b8:e9:bd:c5:97:b3:ba:c3:22: dd:7c:e7:94:9d:f9:f4:54:75:59:12:c6:ae:88:d3:28:4d:a4: 3e:f2:27:2c:8e:74:21:81:cb:7d:f7:8a:d4:99:3e:c0:a2:b1: aa:38:8c:73:87:7a:c0:53:d9:3d:95:c7:48:73:ce:ff:1e:19: 04:8e:d0:df:aa:63:79:e0:f6:bb:58:99:8d:dc:fc:96:12:ec: a4:95:8c:12:50:d0:98:7a:55:33:54:b8:91:b5:ae:af:7c:f7: 7c:75:e0:df:42:ce:49:81:21:c1:96:b0:7d:ef:87:59:6f:50: 05:02:1d:91 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt87d0RnrbJQCAE9C8/j3FwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5MGQxY2E3ODc2MTMxMGFjMzlhNzE0ZmY2MmYzYjkyYjJl NzdkOGEwHhcNMjYwMTAyMDQxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMTgzMmI5NWU3ZDQ3N2Y1ZDI2OTY3ZjI5NTkwODc5MjY1NWU1Y2FlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rugVTNEo1bI+3FGXcLOgtEcKUQ1 qt+tG5ey8EpqlxnWJnbU/M0ck3NNP29LhN1fZWuVSZbfbCmMEbRB2QD2lsfBHZwS obLaoxFcgV9HpFSNqV1mX4+kHtWL/JTo734aHlmiY4J//UfqYpNzFeoYExM+5R4k D1UYnfxQTN6q2PsXzEMh3IsQRNvhIAgj5NyIo9AWCIGqJwTuwWnYuIf0l0MsWpuw h273hjkFklhudT5Kr4psQMnj1EzZDNLTsZMecNX3BPskiUZE+hsMm7QSRqgj6OCL nPbRfxYjZpdpMLpiyhL4xjWJDlZxsKVKXe4i+fXmVdqd4wHaMpc8ck2Z2wIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFBGDK5Xn1Hf10mln8pWQh5JlXlyuMB8GA1UdIwQY MBaAFHkNHKeHYTEKw5pxT/YvO5Ky532KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVEwY3A0ZGhNUXJEbW5GUDlpODdrckxuZllvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9hM2NjY2UtYzBkNi00OWE4LWJiYjgt YjhhZTE2YjM1YzMxLzEvRVlNcmxlZlVkX1hTYVdmeWxaQ0hrbVZlWEs0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9hM2NjY2UtYzBkNi00OWE4LWJiYjgtYjhhZTE2YjM1YzMx LzEvZVEwY3A0ZGhNUXJEbW5GUDlpODdrckxuZllvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAYBAIAATASAwQDVXcAAwQD svo4AwQCuaxcMBYEAgACMBAwDgMFByoDvYADBQAqA72CMA0GCSqGSIb3DQEBCwUA A4IBAQCJ1eopx8r487AHJeYoi8L3w1W8WP9A9DdmM7ZTz7xs2hxHiZg/4zO1YQXm nNdT+XN4Kno9pCvwgizQu89unbtBoVEyqs1wwMYZJCeeXO3/u/rH9towx5R+TFLU bw9lC5YxTNn+/RqT5cqdzuCFW6otFdUE/NS/j4kWYzWWLyuxxD+Jg65ehEi46b3F l7O6wyLdfOeUnfn0VHVZEsauiNMoTaQ+8icsjnQhgct994rUmT7AorGqOIxzh3rA U9k9lcdIc87/HhkEjtDfqmN54Pa7WJmN3PyWEuyklYwSUNCYelUzVLiRta6vfPd8 deDfQs5JgSHBlrB974dZb1AFAh2R -----END CERTIFICATE-----Generated at Sat Jan 3 04:53:28 2026 by rpki-client