This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/EG_Id09DvFvq6OjCzlCxHI8GXVg.roa File: EG_Id09DvFvq6OjCzlCxHI8GXVg.roa (raw, json) Hash identifier: SEYIizAUZ8Gr2yBztTyZlf2jtywb5D92XRV6mbkv9uw= Subject key identifier: 10:6F:C8:77:4F:43:BC:5B:EA:E8:E8:C2:CE:50:B1:1C:8F:06:5D:58 Certificate issuer: /CN=230aa160a6e886c103dadbe44b23c27776057391 Certificate serial: 019B7F159F025F12D0A2A5D48D9CBAD95341 Authority key identifier: 23:0A:A1:60:A6:E8:86:C1:03:DA:DB:E4:4B:23:C2:77:76:05:73:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwqhYKbohsED2tvkSyPCd3YFc5E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/EG_Id09DvFvq6OjCzlCxHI8GXVg.roa Signing time: Fri 02 Jan 2026 14:21:21 +0000 ROA not before: Fri 02 Jan 2026 14:21:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56662 IP address blocks: 2001:67c:21ec::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.crl rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.mft rsync://rpki.ripe.net/repository/DEFAULT/IwqhYKbohsED2tvkSyPCd3YFc5E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:9f:02:5f:12:d0:a2:a5:d4:8d:9c:ba:d9:53:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=230aa160a6e886c103dadbe44b23c27776057391 Validity Not Before: Jan 2 14:21:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=106fc8774f43bc5beae8e8c2ce50b11c8f065d58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d4:45:68:6a:49:5d:e2:f1:46:9d:34:0a:74: 60:b0:1c:c7:59:83:05:f4:b7:47:b5:2e:06:c6:8c: a7:37:e5:fb:19:2e:17:84:9f:2c:6b:2f:6f:b5:14: 42:f9:96:0a:6d:14:d3:fd:80:f1:57:7b:3f:2a:4c: 08:4d:29:69:f7:5f:b7:f9:5b:cb:f7:ea:24:8e:d5: 5c:5d:48:6a:87:a3:87:fa:a5:cd:1d:fa:b3:6a:f0: 66:fe:9c:aa:7a:22:96:32:f6:23:63:7f:f3:e1:42: 3b:78:90:d7:c0:f6:e7:2e:21:db:7a:68:b8:cc:c0: 62:2a:da:c8:20:f4:b4:3f:9e:c5:a3:34:5a:2e:a6: 96:25:8a:62:f0:3e:dc:a6:c3:5e:7d:81:61:0d:fe: 5a:d8:1f:ca:3c:46:fe:ea:fd:f5:5a:95:b0:c3:36: 8c:2c:6b:ba:b3:25:c6:1b:bb:4d:5c:c1:d2:07:65: 9f:eb:f3:48:bb:b5:d9:94:58:eb:a2:95:84:d7:97: 10:58:66:2f:99:61:0a:a6:cc:b2:d5:1f:10:5c:d6: b0:f6:f8:e6:5a:ad:d3:5d:02:d2:ce:73:e8:26:b9: a5:f0:2b:cf:02:8b:88:a7:a1:66:6c:52:8b:04:5d: b6:88:74:db:42:6c:29:d7:43:2b:39:bc:93:a8:63: 6f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:6F:C8:77:4F:43:BC:5B:EA:E8:E8:C2:CE:50:B1:1C:8F:06:5D:58 X509v3 Authority Key Identifier: keyid:23:0A:A1:60:A6:E8:86:C1:03:DA:DB:E4:4B:23:C2:77:76:05:73:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwqhYKbohsED2tvkSyPCd3YFc5E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/EG_Id09DvFvq6OjCzlCxHI8GXVg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:21ec::/48 Signature Algorithm: sha256WithRSAEncryption 8a:11:e0:14:4d:21:4d:d8:36:0b:9f:a5:90:71:95:7c:95:7e: 13:fe:f8:52:c9:03:09:95:9d:52:2f:98:3a:a9:6e:87:1e:b1: c6:84:ff:1e:e0:98:2a:a6:e6:e8:dc:89:de:eb:1c:b1:d3:95: b7:b7:b3:af:33:b1:82:de:47:ba:78:73:b2:05:e1:0c:14:17: 04:f8:a4:76:73:1d:06:5a:69:14:73:80:e1:16:f1:c3:5a:57: db:89:1b:95:ce:0b:24:22:b3:38:c2:f9:db:21:6f:d2:63:a1: b8:16:e1:ea:10:61:00:a4:60:94:af:58:af:e2:0f:25:86:66: f3:fd:19:81:a2:d8:90:5f:66:ca:0b:06:ce:30:9f:0b:f5:2b: c8:69:ae:3f:3f:ee:91:ed:fe:0c:1f:3e:be:75:ac:81:6c:44: 04:8b:56:23:18:36:00:7e:53:ea:83:b4:cc:af:bf:4d:0f:90: ff:2b:ae:38:b2:e6:39:c5:67:0d:de:04:54:e5:58:4e:6d:12: dc:99:59:60:99:10:e5:ae:ae:e8:d4:25:2b:6c:74:13:61:21: ce:0b:94:9f:aa:67:ac:c1:45:bc:58:d5:84:81:06:67:25:a1: 5c:7a:a6:e2:c1:5d:7f:5b:80:92:01:78:75:a0:9e:ab:f3:3e: 08:b5:50:a3 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/FZ8CXxLQoqXUjZy62VNBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMGFhMTYwYTZlODg2YzEwM2RhZGJlNDRiMjNjMjc3NzYw NTczOTEwHhcNMjYwMTAyMTQyMTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDZmYzg3NzRmNDNiYzViZWFlOGU4YzJjZTUwYjExYzhmMDY1ZDU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NRFaGpJXeLxRp00CnRgsBzHWYMF 9LdHtS4GxoynN+X7GS4XhJ8say9vtRRC+ZYKbRTT/YDxV3s/KkwITSlp91+3+VvL 9+okjtVcXUhqh6OH+qXNHfqzavBm/pyqeiKWMvYjY3/z4UI7eJDXwPbnLiHbemi4 zMBiKtrIIPS0P57FozRaLqaWJYpi8D7cpsNefYFhDf5a2B/KPEb+6v31WpWwwzaM LGu6syXGG7tNXMHSB2Wf6/NIu7XZlFjropWE15cQWGYvmWEKpsyy1R8QXNaw9vjm Wq3TXQLSznPoJrml8CvPAouIp6FmbFKLBF22iHTbQmwp10MrObyTqGNvEwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBBvyHdPQ7xb6ujows5QsRyPBl1YMB8GA1UdIwQY MBaAFCMKoWCm6IbBA9rb5Esjwnd2BXORMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXdxaFlLYm9oc0VEMnR2a1N5UENkM1lGYzVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS82ZWI1NGUtZTcwOS00YjdhLWFkZTkt YTlhZWI0ODVkNTkyLzEvRUdfSWQwOUR2RnZxNk9qQ3psQ3hISThHWFZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS82ZWI1NGUtZTcwOS00YjdhLWFkZTktYTlhZWI0ODVkNTky LzEvSXdxaFlLYm9oc0VEMnR2a1N5UENkM1lGYzVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCHs MA0GCSqGSIb3DQEBCwUAA4IBAQCKEeAUTSFN2DYLn6WQcZV8lX4T/vhSyQMJlZ1S L5g6qW6HHrHGhP8e4Jgqpubo3Ine6xyx05W3t7OvM7GC3ke6eHOyBeEMFBcE+KR2 cx0GWmkUc4DhFvHDWlfbiRuVzgskIrM4wvnbIW/SY6G4FuHqEGEApGCUr1iv4g8l hmbz/RmBotiQX2bKCwbOMJ8L9SvIaa4/P+6R7f4MHz6+dayBbEQEi1YjGDYAflPq g7TMr79ND5D/K644suY5xWcN3gRU5VhObRLcmVlgmRDlrq7o1CUrbHQTYSHOC5Sf qmeswUW8WNWEgQZnJaFceqbiwV1/W4CSAXh1oJ6r8z4ItVCj -----END CERTIFICATE-----Generated at Mon Jan 26 15:01:28 2026 by rpki-client