This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/EqM2uQDUV3EtJlQIhiZ248LRU80.roa File: EqM2uQDUV3EtJlQIhiZ248LRU80.roa (raw, json) Hash identifier: LrXepb2bBzqPdwODtMI9Sq5W4GGZQAYaJUawmfJC0iE= Subject key identifier: 12:A3:36:B9:00:D4:57:71:2D:26:54:08:86:26:76:E3:C2:D1:53:CD Certificate issuer: /CN=151453f482cda78ebc99625d80b0ffc3660f95f2 Certificate serial: 019B77C69EDFC9FD79E9CB1C11778AFCD832 Authority key identifier: 15:14:53:F4:82:CD:A7:8E:BC:99:62:5D:80:B0:FF:C3:66:0F:95:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FRRT9ILNp468mWJdgLD_w2YPlfI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/EqM2uQDUV3EtJlQIhiZ248LRU80.roa Signing time: Thu 01 Jan 2026 04:17:43 +0000 ROA not before: Thu 01 Jan 2026 04:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215992 IP address blocks: 147.78.88.0/22 maxlen: 22 147.78.88.0/24 maxlen: 24 147.78.89.0/24 maxlen: 24 147.78.90.0/24 maxlen: 24 147.78.91.0/24 maxlen: 24 2a09:2040::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/FRRT9ILNp468mWJdgLD_w2YPlfI.crl rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/FRRT9ILNp468mWJdgLD_w2YPlfI.mft rsync://rpki.ripe.net/repository/DEFAULT/FRRT9ILNp468mWJdgLD_w2YPlfI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:9e:df:c9:fd:79:e9:cb:1c:11:77:8a:fc:d8:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=151453f482cda78ebc99625d80b0ffc3660f95f2 Validity Not Before: Jan 1 04:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=12a336b900d457712d265408862676e3c2d153cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:42:b9:2f:1b:1b:56:85:8e:5d:d9:74:70:6a: 37:80:f9:7a:1e:ba:bb:3a:3d:f8:51:08:ac:fa:b0: 1f:1b:a0:02:8b:a4:f5:3e:4a:b5:89:fc:3e:53:05: 13:3c:65:d4:3b:31:f9:7e:10:17:a6:5d:4a:98:02: 75:f7:a6:81:66:1c:c6:d5:dd:0d:d9:a2:13:0c:63: 0d:13:7f:ad:ae:46:e5:e9:d2:2e:96:ff:49:27:21: df:2e:d8:15:b7:c3:f5:a3:fc:37:23:19:7b:2d:98: b7:fd:ca:a4:43:fe:b5:33:3f:67:d5:5d:bb:dc:6c: 0c:fc:13:81:8f:2f:ea:8f:00:15:46:a2:50:08:aa: 17:26:2b:51:91:2d:a0:24:ce:77:4e:6b:ff:40:de: 3c:c5:e8:9f:61:00:33:c3:08:50:9d:2d:4b:bf:2e: 0c:44:28:36:54:96:83:f0:f1:48:2a:52:f2:08:2a: ec:05:87:de:cb:69:6c:f6:50:78:a2:65:23:64:aa: 8b:f3:0f:f7:a4:2d:b0:74:78:62:92:60:75:d1:97: d8:80:d9:4f:d9:6a:3b:45:d5:8d:8e:59:35:0d:32: b1:e4:f7:ef:9e:14:46:37:73:09:97:a6:0b:4f:a0: b2:c1:fe:08:0c:f4:8e:4b:9e:39:ed:e5:e3:60:51: 0a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:A3:36:B9:00:D4:57:71:2D:26:54:08:86:26:76:E3:C2:D1:53:CD X509v3 Authority Key Identifier: keyid:15:14:53:F4:82:CD:A7:8E:BC:99:62:5D:80:B0:FF:C3:66:0F:95:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FRRT9ILNp468mWJdgLD_w2YPlfI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/EqM2uQDUV3EtJlQIhiZ248LRU80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/FRRT9ILNp468mWJdgLD_w2YPlfI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.78.88.0/22 IPv6: 2a09:2040::/29 Signature Algorithm: sha256WithRSAEncryption 93:16:9f:ec:7a:59:3b:d0:16:3a:7e:95:d4:dd:2e:85:4c:5a: 7a:9c:e3:66:7c:03:c7:5d:af:c7:09:b6:4b:d7:ac:d5:b0:7a: 37:ee:b7:33:b9:07:3f:1d:2d:6f:1f:9f:2e:db:7a:4f:b7:e6: ff:30:d1:8c:5f:98:89:32:e4:04:d4:e2:36:97:ad:ef:7b:56: f1:69:cf:4d:71:53:fa:96:a0:f7:25:91:92:d5:d7:e9:f0:a5: 42:89:d8:26:1d:77:25:ce:31:56:e5:df:49:eb:22:c1:5b:fb: fa:9a:82:6b:1a:a2:e3:31:32:7c:fd:2f:c8:b1:48:47:7c:06: 4a:12:8e:78:69:e3:c6:82:d2:4c:dd:bc:72:26:18:e8:e3:76: b3:c2:1c:10:ae:4e:8b:bc:96:1c:66:9e:33:56:99:45:42:3a: 3c:94:54:60:00:3d:81:6f:c1:9c:88:10:52:c7:17:8b:70:d0: 54:e7:55:6e:23:93:57:7c:bd:21:39:78:97:0c:58:54:29:78: f3:44:14:9e:e8:d5:53:57:96:2a:e3:d1:7d:e4:59:8c:f4:33: 0f:f4:30:16:06:50:3d:d6:32:f3:50:25:aa:dd:bb:1e:56:44: d4:8e:61:d2:5e:e6:69:3c:df:00:73:43:ed:fe:bc:f4:33:49: b2:f7:24:ba -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3xp7fyf156cscEXeK/NgyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1MTQ1M2Y0ODJjZGE3OGViYzk5NjI1ZDgwYjBmZmMzNjYw Zjk1ZjIwHhcNMjYwMTAxMDQxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMmEzMzZiOTAwZDQ1NzcxMmQyNjU0MDg4NjI2NzZlM2MyZDE1M2NkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkK5LxsbVoWOXdl0cGo3gPl6Hrq7 Oj34UQis+rAfG6ACi6T1Pkq1ifw+UwUTPGXUOzH5fhAXpl1KmAJ196aBZhzG1d0N 2aITDGMNE3+trkbl6dIulv9JJyHfLtgVt8P1o/w3Ixl7LZi3/cqkQ/61Mz9n1V27 3GwM/BOBjy/qjwAVRqJQCKoXJitRkS2gJM53Tmv/QN48xeifYQAzwwhQnS1Lvy4M RCg2VJaD8PFIKlLyCCrsBYfey2ls9lB4omUjZKqL8w/3pC2wdHhikmB10ZfYgNlP 2Wo7RdWNjlk1DTKx5PfvnhRGN3MJl6YLT6Cywf4IDPSOS5457eXjYFEKbQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBKjNrkA1FdxLSZUCIYmduPC0VPNMB8GA1UdIwQY MBaAFBUUU/SCzaeOvJliXYCw/8NmD5XyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlJSVDlJTE5wNDY4bVdKZGdMRF93MllQbGZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC81OWZjZjAtMWQ1Yy00ZWNiLWJmODct M2JjYjhiZjhiYmZlLzEvRXFNMnVRRFVWM0V0SmxRSWhpWjI0OExSVTgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC81OWZjZjAtMWQ1Yy00ZWNiLWJmODctM2JjYjhiZjhiYmZl LzEvRlJSVDlJTE5wNDY4bVdKZGdMRF93MllQbGZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCk05YMA0E AgACMAcDBQMqCSBAMA0GCSqGSIb3DQEBCwUAA4IBAQCTFp/selk70BY6fpXU3S6F TFp6nONmfAPHXa/HCbZL16zVsHo37rczuQc/HS1vH58u23pPt+b/MNGMX5iJMuQE 1OI2l63ve1bxac9NcVP6lqD3JZGS1dfp8KVCidgmHXclzjFW5d9J6yLBW/v6moJr GqLjMTJ8/S/IsUhHfAZKEo54aePGgtJM3bxyJhjo43azwhwQrk6LvJYcZp4zVplF Qjo8lFRgAD2Bb8GciBBSxxeLcNBU51VuI5NXfL0hOXiXDFhUKXjzRBSe6NVTV5Yq 49F95FmM9DMP9DAWBlA91jLzUCWq3bseVkTUjmHSXuZpPN8Ac0Pt/rz0M0my9yS6 -----END CERTIFICATE-----Generated at Mon Feb 9 22:32:07 2026 by rpki-client