This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/eqsWyJFEsvStqLo1bU8i7eCMwFw.roa File: eqsWyJFEsvStqLo1bU8i7eCMwFw.roa (raw, json) Hash identifier: zmtzvarisMWw7K3nc8GOK4S12IOlTsS27z2DfKOnV9g= Subject key identifier: 7A:AB:16:C8:91:44:B2:F4:AD:A8:BA:35:6D:4F:22:ED:E0:8C:C0:5C Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde Certificate serial: 019B7C8029D57261B21A403AAAD2FBE5ACC4 Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/eqsWyJFEsvStqLo1bU8i7eCMwFw.roa Signing time: Fri 02 Jan 2026 02:18:52 +0000 ROA not before: Fri 02 Jan 2026 02:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213122 IP address blocks: 2.58.201.0/24 maxlen: 24 2.58.202.0/24 maxlen: 24 45.134.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:29:d5:72:61:b2:1a:40:3a:aa:d2:fb:e5:ac:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde Validity Not Before: Jan 2 02:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7aab16c89144b2f4ada8ba356d4f22ede08cc05c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:7e:49:8b:9f:42:bf:ac:52:1e:d2:7e:c4:c5: 92:82:6c:f7:fe:67:e8:94:7f:a4:2d:15:51:f0:d1: be:1b:46:59:ad:21:1b:5f:04:35:4c:15:bc:31:d0: 1b:83:5a:60:09:80:56:fa:ee:ed:bc:8a:72:3f:d5: e2:3f:4c:7e:9e:6b:e7:ca:d8:51:2c:8f:d3:38:21: 07:89:4d:c8:31:ce:97:41:d2:04:4e:ce:e1:67:42: 98:7a:d8:38:66:20:a6:0a:cc:e8:ea:47:e9:1f:79: 6e:1f:42:75:e9:8b:cc:57:38:13:21:7c:48:c3:8a: 84:86:e8:66:30:7f:44:bc:86:b8:7c:3a:a5:f0:ae: ff:d3:e0:57:1e:37:84:44:d1:21:37:5f:ba:8c:8d: 2d:12:92:67:08:aa:68:f5:8f:aa:a8:e4:7a:01:dc: 62:06:38:b4:e7:3a:03:04:73:59:44:69:ca:b2:29: 72:ea:9d:cf:82:d6:2d:64:5a:97:89:23:2f:1e:bc: 73:5d:41:6f:b4:86:1a:b8:4d:7d:24:16:8c:96:aa: 39:62:d3:2c:18:9e:a1:49:e5:54:b4:c2:b4:12:fd: 60:cf:fc:3d:eb:d8:89:5d:e9:4f:4f:5c:89:0c:38: b3:1b:d5:36:26:af:8a:c8:f6:f0:12:99:25:4e:b9: ba:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:AB:16:C8:91:44:B2:F4:AD:A8:BA:35:6D:4F:22:ED:E0:8C:C0:5C X509v3 Authority Key Identifier: keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/eqsWyJFEsvStqLo1bU8i7eCMwFw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.58.201.0-2.58.202.255 45.134.111.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:17:39:c5:f5:1e:ea:4d:19:4f:55:a2:2d:4d:02:4b:e2:7c: 68:0b:29:62:61:3c:24:5f:bc:39:4b:ea:8c:a3:e2:2d:10:c1: bb:af:a7:36:b0:85:20:1b:c0:32:ca:88:60:1e:d0:9f:e6:23: 3b:ec:9b:5d:87:21:55:b7:4f:ac:f1:ce:ed:95:92:59:dd:cf: 26:f2:79:e8:3b:8e:f0:20:75:ea:30:66:da:10:88:b6:69:59: d6:18:39:40:fb:9e:70:76:61:cf:04:b9:90:f1:df:41:d5:b0: 98:7c:02:58:4f:61:32:33:dc:ff:73:c7:90:78:4e:0a:ef:d9: b6:6f:02:e3:76:e9:01:4a:d6:1f:cc:10:5f:71:88:24:64:57: 48:d8:91:73:88:f3:c4:37:d1:7b:19:52:87:d0:5b:1c:90:a5: 76:4a:b9:68:19:eb:cb:98:e0:f1:f1:5a:b2:02:74:8c:74:a9: 61:e2:ce:b7:14:2c:ad:37:9c:59:7c:1f:81:d5:89:b7:83:4f: 13:4f:5a:74:0c:c0:8c:a6:d0:d1:59:6e:68:35:c7:0b:fd:51: 17:f2:31:2b:5d:a5:85:2e:84:c0:13:1b:a7:c1:0f:07:2a:76: 9f:57:75:36:a3:02:78:28:f0:36:08:2f:43:ba:6f:9a:b3:d9: 31:79:15:77 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt8gCnVcmGyGkA6qtL75azEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3 NTJmZGUwHhcNMjYwMTAyMDIxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YWFiMTZjODkxNDRiMmY0YWRhOGJhMzU2ZDRmMjJlZGUwOGNjMDVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6H5Ji59Cv6xSHtJ+xMWSgmz3/mfo lH+kLRVR8NG+G0ZZrSEbXwQ1TBW8MdAbg1pgCYBW+u7tvIpyP9XiP0x+nmvnythR LI/TOCEHiU3IMc6XQdIETs7hZ0KYetg4ZiCmCszo6kfpH3luH0J16YvMVzgTIXxI w4qEhuhmMH9EvIa4fDql8K7/0+BXHjeERNEhN1+6jI0tEpJnCKpo9Y+qqOR6Adxi Bji05zoDBHNZRGnKsily6p3PgtYtZFqXiSMvHrxzXUFvtIYauE19JBaMlqo5YtMs GJ6hSeVUtMK0Ev1gz/w969iJXelPT1yJDDizG9U2Jq+KyPbwEpklTrm6dQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFHqrFsiRRLL0rai6NW1PIu3gjMBcMB8GA1UdIwQY MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt YTNjYTBkYjgzMjU0LzEvZXFzV3lKRkVzdlN0cUxvMWJVOGk3ZUNNd0Z3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0 LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAACOskD BAACOsoDBAAthm8wDQYJKoZIhvcNAQELBQADggEBABwXOcX1HupNGU9Voi1NAkvi fGgLKWJhPCRfvDlL6oyj4i0QwbuvpzawhSAbwDLKiGAe0J/mIzvsm12HIVW3T6zx zu2Vklndzybyeeg7jvAgdeowZtoQiLZpWdYYOUD7nnB2Yc8EuZDx30HVsJh8AlhP YTIz3P9zx5B4Tgrv2bZvAuN26QFK1h/MEF9xiCRkV0jYkXOI88Q30XsZUofQWxyQ pXZKuWgZ68uY4PHxWrICdIx0qWHizrcULK03nFl8H4HVibeDTxNPWnQMwIym0NFZ bmg1xwv9URfyMStdpYUuhMATG6fBDwcqdp9XdTajAngo8DYIL0O6b5qz2TF5FXc= -----END CERTIFICATE-----Generated at Mon Jan 19 17:47:28 2026 by rpki-client