This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/EoMrU16bqHoGy2xh9XxsU9osNps.roa File: EoMrU16bqHoGy2xh9XxsU9osNps.roa (raw, json) Hash identifier: /uTZPWaskDiwuTtmaYcl1U/fLPuv+/ZTx4jUSu0Cxmo= Subject key identifier: 12:83:2B:53:5E:9B:A8:7A:06:CB:6C:61:F5:7C:6C:53:DA:2C:36:9B Certificate issuer: /CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e Certificate serial: 019B7A5B3BFA78C49F90E28266BEBF16AE60 Authority key identifier: 5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/EoMrU16bqHoGy2xh9XxsU9osNps.roa Signing time: Thu 01 Jan 2026 16:19:18 +0000 ROA not before: Thu 01 Jan 2026 16:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5065 IP address blocks: 195.35.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 06:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:3b:fa:78:c4:9f:90:e2:82:66:be:bf:16:ae:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e Validity Not Before: Jan 1 16:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=12832b535e9ba87a06cb6c61f57c6c53da2c369b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:5f:5e:b8:ae:41:38:1b:cf:0e:e7:af:a1:b8: aa:31:da:ad:11:d8:ea:1f:f5:2f:75:9a:03:a6:ca: f1:4c:ce:3c:14:40:35:26:51:11:20:20:0f:72:4a: 34:23:03:c2:0e:23:f9:aa:b2:aa:5f:1e:8a:4d:5f: a5:9e:85:eb:a5:d9:d4:ca:1b:e7:09:7a:e3:e0:4b: df:2e:d9:46:c4:70:e3:1f:5d:1e:f6:76:e1:cd:c3: 16:55:18:fa:d2:62:24:be:53:30:2b:9f:3e:23:16: 2d:63:1a:49:8e:07:5a:e3:70:08:9b:e7:1c:39:91: fc:3f:06:bb:dd:c6:c5:93:89:a5:cd:28:b5:c7:f9: 2f:e2:d9:6c:d4:d2:06:db:7b:fb:d6:5c:c2:84:05: ae:75:b8:8c:35:de:b5:1d:0f:db:7a:3b:1c:61:bf: 99:4b:d4:93:f4:72:9b:9b:cf:80:55:48:38:d4:20: 04:96:36:d6:00:c1:74:84:25:15:2a:ae:cd:0b:43: 80:3a:08:87:b4:73:3c:d7:e0:1f:14:42:e2:30:87: 0a:07:89:5d:fd:15:cd:37:f4:77:05:7c:84:01:8f: e7:f7:61:16:1e:a7:b3:e6:2f:36:bd:73:3b:41:14: 0f:49:a0:ca:13:8e:a1:d7:17:f5:07:b0:87:5f:7b: 1b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:83:2B:53:5E:9B:A8:7A:06:CB:6C:61:F5:7C:6C:53:DA:2C:36:9B X509v3 Authority Key Identifier: keyid:5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/EoMrU16bqHoGy2xh9XxsU9osNps.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.35.120.0/24 Signature Algorithm: sha256WithRSAEncryption b3:3a:dc:ff:19:35:2a:b4:6b:06:5a:3b:dc:39:5a:34:29:b4: 45:52:6e:d4:93:3f:00:0b:38:f7:2a:40:ee:83:f0:5a:53:95: 5f:d3:74:ae:e3:ba:0a:e9:6f:75:13:22:11:0e:c8:7d:d1:c5: 1c:dc:5d:2d:2d:55:34:73:71:92:37:83:09:e8:bd:30:f5:06: cd:27:f3:e1:f5:ba:e9:d7:50:7e:69:a2:45:3c:30:3a:24:49: 3f:8f:50:da:75:e0:42:d4:e3:ef:d6:7f:b9:1f:fc:ce:e8:c7: 28:9b:a1:21:66:d8:7e:5e:ee:eb:76:1f:6b:c1:b4:4a:7b:aa: 0d:f9:af:03:05:f0:4f:9e:a9:87:d8:6a:db:8d:fc:9e:a4:07: f8:13:5a:2d:fa:be:04:11:e3:65:cd:69:00:cd:88:be:4b:fd: 49:21:20:1b:0f:03:94:c8:72:61:9a:12:97:ae:a3:32:9a:25: 4b:2e:74:95:54:61:2d:35:21:89:94:32:c5:78:1a:16:e3:d6: 88:75:42:4a:e4:81:7a:74:ae:f6:90:59:86:2c:3d:11:6c:85: 71:4a:cb:08:37:b2:aa:a7:42:c8:37:b6:09:15:df:c2:42:40: ac:01:dd:97:90:de:5a:cb:68:37:24:3a:f9:66:a8:6e:0a:d3: 6f:ea:60:ec -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wzv6eMSfkOKCZr6/Fq5gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlOGQwN2I0NWY3ZDgzMTI0YzlmOGMwZmFjMDNiZWMwMjQ2 OGIzN2UwHhcNMjYwMTAxMTYxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjgzMmI1MzVlOWJhODdhMDZjYjZjNjFmNTdjNmM1M2RhMmMzNjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo19euK5BOBvPDuevobiqMdqtEdjq H/UvdZoDpsrxTM48FEA1JlERICAPcko0IwPCDiP5qrKqXx6KTV+lnoXrpdnUyhvn CXrj4EvfLtlGxHDjH10e9nbhzcMWVRj60mIkvlMwK58+IxYtYxpJjgda43AIm+cc OZH8Pwa73cbFk4mlzSi1x/kv4tls1NIG23v71lzChAWudbiMNd61HQ/bejscYb+Z S9ST9HKbm8+AVUg41CAEljbWAMF0hCUVKq7NC0OAOgiHtHM81+AfFELiMIcKB4ld /RXNN/R3BXyEAY/n92EWHqez5i82vXM7QRQPSaDKE46h1xf1B7CHX3sb7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBKDK1Nem6h6BstsYfV8bFPaLDabMB8GA1UdIwQY MBaAFF6NB7RffYMSTJ+MD6wDvsAkaLN+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWG8wSHRGOTlneEpNbjR3UHJBTy13Q1JvczM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9hMTY4ZTktZDA3MC00NGUwLTk0YTQt NmM4ZmQ4NGJiNWY1LzEvRW9NclUxNmJxSG9HeTJ4aDlYeHNVOW9zTnBzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9hMTY4ZTktZDA3MC00NGUwLTk0YTQtNmM4ZmQ4NGJiNWY1 LzEvWG8wSHRGOTlneEpNbjR3UHJBTy13Q1JvczM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwyN4MA0G CSqGSIb3DQEBCwUAA4IBAQCzOtz/GTUqtGsGWjvcOVo0KbRFUm7Ukz8ACzj3KkDu g/BaU5Vf03Su47oK6W91EyIRDsh90cUc3F0tLVU0c3GSN4MJ6L0w9QbNJ/Ph9brp 11B+aaJFPDA6JEk/j1DadeBC1OPv1n+5H/zO6Mcom6EhZth+Xu7rdh9rwbRKe6oN +a8DBfBPnqmH2GrbjfyepAf4E1ot+r4EEeNlzWkAzYi+S/1JISAbDwOUyHJhmhKX rqMymiVLLnSVVGEtNSGJlDLFeBoW49aIdUJK5IF6dK72kFmGLD0RbIVxSssIN7Kq p0LIN7YJFd/CQkCsAd2XkN5ay2g3JDr5ZqhuCtNv6mDs -----END CERTIFICATE-----Generated at Mon Jan 19 11:25:10 2026 by rpki-client