This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/EQIS8hUY1cmRXKR2EV3HGZu3pAA.roa File: EQIS8hUY1cmRXKR2EV3HGZu3pAA.roa (raw, json) Hash identifier: Wp9jKVUnjH19KZBMjioHvcWYEkt9n8/MKYDMHRVjrW8= Subject key identifier: 11:02:12:F2:15:18:D5:C9:91:5C:A4:76:11:5D:C7:19:9B:B7:A4:00 Certificate issuer: /CN=6638515f32944969ae0031bde02d1f4cbd0d2b98 Certificate serial: 019B7BA40FF7E97B07E27ADD2D6F92F0374A Authority key identifier: 66:38:51:5F:32:94:49:69:AE:00:31:BD:E0:2D:1F:4C:BD:0D:2B:98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/EQIS8hUY1cmRXKR2EV3HGZu3pAA.roa Signing time: Thu 01 Jan 2026 22:18:28 +0000 ROA not before: Thu 01 Jan 2026 22:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8966 IP address blocks: 83.170.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.crl rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.mft rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:0f:f7:e9:7b:07:e2:7a:dd:2d:6f:92:f0:37:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6638515f32944969ae0031bde02d1f4cbd0d2b98 Validity Not Before: Jan 1 22:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=110212f21518d5c9915ca476115dc7199bb7a400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c2:fa:ef:8e:13:6f:85:e8:b5:a0:74:c5:c9: e8:cf:56:28:01:8c:13:b2:6e:d2:27:1f:d6:36:99: 84:b2:fc:30:6c:a2:12:79:3f:db:81:b6:61:90:79: ba:57:63:fe:8b:6f:ff:1d:1d:46:a2:40:69:a4:4c: db:c0:66:bd:b7:ce:0b:54:81:1b:62:5d:50:80:fe: 9e:d4:80:12:02:0c:c6:3a:f2:33:b2:67:64:1d:23: 95:bf:d5:23:76:9f:31:86:5e:12:6c:3b:6b:03:f5: 4e:d6:60:3d:fd:7d:72:6f:a4:ac:43:1a:a4:f6:36: 9a:d2:28:34:7d:c3:41:9d:9b:51:fd:31:dd:63:12: b5:a2:8c:86:14:6f:b4:35:2c:7d:55:72:62:4d:b8: d1:a7:bd:a3:8c:34:97:6e:6a:69:60:a9:c9:1c:57: ed:fd:df:78:97:51:a0:e4:55:ba:0b:94:a2:86:87: 3e:8a:af:5d:90:f2:a7:c4:ff:e0:07:4e:9d:7e:8d: 11:88:c1:ec:d6:bc:2b:b7:fb:48:61:08:c5:4f:47: e1:2e:a7:bd:d7:f5:17:7b:4d:22:e8:54:89:a2:ca: 0e:90:2c:66:8e:e3:92:6d:c2:69:ab:31:b6:03:7f: 52:63:20:b8:d3:bb:a5:3e:ef:18:13:47:29:9b:22: 8d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:02:12:F2:15:18:D5:C9:91:5C:A4:76:11:5D:C7:19:9B:B7:A4:00 X509v3 Authority Key Identifier: keyid:66:38:51:5F:32:94:49:69:AE:00:31:BD:E0:2D:1F:4C:BD:0D:2B:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZjhRXzKUSWmuADG94C0fTL0NK5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/EQIS8hUY1cmRXKR2EV3HGZu3pAA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c509de-4a06-4f44-b137-c994fd174e6e/1/ZjhRXzKUSWmuADG94C0fTL0NK5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.170.148.0/24 Signature Algorithm: sha256WithRSAEncryption b1:6f:fa:f0:d7:02:0d:81:15:6c:27:2f:da:bf:04:f2:af:6e: ae:af:ed:07:ad:fd:c2:7a:5e:7c:32:05:e2:6e:ce:55:ec:44: 84:7f:b8:a5:1c:95:14:5d:68:60:07:db:39:2e:ed:1c:21:61: c4:2c:0c:dd:45:87:c6:3a:93:60:de:71:4b:2d:4c:6b:4e:04: e9:da:c3:27:47:8a:7e:2b:fb:95:f0:45:f0:ba:2a:f7:c3:c6: 21:27:84:09:2b:28:8a:82:a5:fe:97:05:d3:84:1f:71:45:5a: c3:3b:ea:8f:ba:cd:2e:d1:6d:bc:d8:d2:51:6b:f9:58:a6:ef: 11:ef:f1:d0:06:0f:80:4d:22:92:ad:a1:cc:5b:63:e4:5f:48: 1e:70:82:fa:ed:66:8e:65:df:07:77:b7:c7:5f:f2:61:0d:58: 1d:84:4b:4d:c7:27:5e:35:e3:ed:21:2f:12:3d:a2:50:58:09: 15:2c:83:7d:91:ed:52:07:cf:2d:0b:de:be:2e:68:ec:58:f5: c5:57:c8:62:eb:cf:dd:5b:bc:18:ec:7a:75:05:2b:3c:93:fc: da:e2:df:cc:f1:60:b1:cc:df:e7:6d:b4:1c:02:db:f3:8a:08: 44:b5:03:38:17:e3:54:8a:98:59:f7:76:15:92:17:12:b6:85: 05:e5:5b:f3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pA/36XsH4nrdLW+S8DdKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2Mzg1MTVmMzI5NDQ5NjlhZTAwMzFiZGUwMmQxZjRjYmQw ZDJiOTgwHhcNMjYwMTAxMjIxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMTAyMTJmMjE1MThkNWM5OTE1Y2E0NzYxMTVkYzcxOTliYjdhNDAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38L6744Tb4XotaB0xcnoz1YoAYwT sm7SJx/WNpmEsvwwbKISeT/bgbZhkHm6V2P+i2//HR1GokBppEzbwGa9t84LVIEb Yl1QgP6e1IASAgzGOvIzsmdkHSOVv9Ujdp8xhl4SbDtrA/VO1mA9/X1yb6SsQxqk 9jaa0ig0fcNBnZtR/THdYxK1ooyGFG+0NSx9VXJiTbjRp72jjDSXbmppYKnJHFft /d94l1Gg5FW6C5Sihoc+iq9dkPKnxP/gB06dfo0RiMHs1rwrt/tIYQjFT0fhLqe9 1/UXe00i6FSJosoOkCxmjuOSbcJpqzG2A39SYyC407ulPu8YE0cpmyKNgwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBECEvIVGNXJkVykdhFdxxmbt6QAMB8GA1UdIwQY MBaAFGY4UV8ylElprgAxveAtH0y9DSuYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmpoUlh6S1VTV211QURHOTRDMGZUTDBOSzVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9jNTA5ZGUtNGEwNi00ZjQ0LWIxMzct Yzk5NGZkMTc0ZTZlLzEvRVFJUzhoVVkxY21SWEtSMkVWM0hHWnUzcEFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9jNTA5ZGUtNGEwNi00ZjQ0LWIxMzctYzk5NGZkMTc0ZTZl LzEvWmpoUlh6S1VTV211QURHOTRDMGZUTDBOSzVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU6qUMA0G CSqGSIb3DQEBCwUAA4IBAQCxb/rw1wINgRVsJy/avwTyr26ur+0Hrf3Cel58MgXi bs5V7ESEf7ilHJUUXWhgB9s5Lu0cIWHELAzdRYfGOpNg3nFLLUxrTgTp2sMnR4p+ K/uV8EXwuir3w8YhJ4QJKyiKgqX+lwXThB9xRVrDO+qPus0u0W282NJRa/lYpu8R 7/HQBg+ATSKSraHMW2PkX0gecIL67WaOZd8Hd7fHX/JhDVgdhEtNxydeNePtIS8S PaJQWAkVLIN9ke1SB88tC96+LmjsWPXFV8hi68/dW7wY7Hp1BSs8k/za4t/M8WCx zN/nbbQcAtvzighEtQM4F+NUiphZ93YVkhcStoUF5Vvz -----END CERTIFICATE-----Generated at Wed Jan 21 13:18:01 2026 by rpki-client