This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/eqDlx1dCrwgrxlQ0ydAQFa9N1j8.roa File: eqDlx1dCrwgrxlQ0ydAQFa9N1j8.roa (raw, json) Hash identifier: AcOLiKex+34XfbpE/I3e+xkSlJ3+mpg+qWqvKQ2QsM4= Subject key identifier: 7A:A0:E5:C7:57:42:AF:08:2B:C6:54:34:C9:D0:10:15:AF:4D:D6:3F Certificate issuer: /CN=283648aff886185ffce3626f090f119a3e4ede35 Certificate serial: 019B7C123FBB518C4612DC6A0F0852F718ED Authority key identifier: 28:36:48:AF:F8:86:18:5F:FC:E3:62:6F:09:0F:11:9A:3E:4E:DE:35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KDZIr_iGGF_842JvCQ8Rmj5O3jU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/eqDlx1dCrwgrxlQ0ydAQFa9N1j8.roa Signing time: Fri 02 Jan 2026 00:18:49 +0000 ROA not before: Fri 02 Jan 2026 00:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25365 IP address blocks: 195.190.136.0/24 maxlen: 24 2001:67c:2f24::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.crl rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.mft rsync://rpki.ripe.net/repository/DEFAULT/KDZIr_iGGF_842JvCQ8Rmj5O3jU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:3f:bb:51:8c:46:12:dc:6a:0f:08:52:f7:18:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=283648aff886185ffce3626f090f119a3e4ede35 Validity Not Before: Jan 2 00:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7aa0e5c75742af082bc65434c9d01015af4dd63f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c0:0b:f7:1b:2c:03:72:73:0d:1c:5d:5d:8e: 0c:02:2d:3b:43:99:16:16:1a:05:c9:a6:b0:e2:fa: f2:3e:47:82:59:1f:fa:4b:99:51:02:3f:90:74:48: c4:06:f9:d3:33:2a:14:50:15:40:61:89:c9:a6:17: 62:92:b0:f0:68:11:07:e1:1d:fc:67:d8:0e:7c:88: 9e:b9:f9:92:7f:21:04:ae:34:e4:0e:38:2d:b4:1f: 88:76:37:e9:91:e6:7c:35:39:76:87:c5:63:a3:54: df:33:aa:c8:06:c0:82:af:1a:06:27:ce:d6:62:3e: 03:fe:bb:ee:55:1a:91:4c:ca:46:56:d0:09:1c:ed: c6:99:a5:95:3a:54:50:a2:c8:f3:90:ce:3b:f9:ed: 17:be:4a:af:b9:f9:13:b5:b3:f7:86:5b:5c:2d:1a: 79:36:2f:56:31:6b:06:37:6b:3a:e9:f3:b1:7f:94: 06:9b:db:64:dc:c2:ea:1c:27:d5:39:cb:b0:4d:dd: 34:18:4b:5e:ef:7a:f2:25:c9:c7:34:8d:52:c6:94: 26:2f:4f:c7:93:83:18:d4:b1:2f:4d:0c:cb:2c:ec: 3e:6f:7b:7b:f5:07:cc:03:11:72:36:3f:2b:f6:0b: 5b:62:e1:f9:58:90:92:de:8a:43:39:c7:b0:86:e3: 95:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:A0:E5:C7:57:42:AF:08:2B:C6:54:34:C9:D0:10:15:AF:4D:D6:3F X509v3 Authority Key Identifier: keyid:28:36:48:AF:F8:86:18:5F:FC:E3:62:6F:09:0F:11:9A:3E:4E:DE:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KDZIr_iGGF_842JvCQ8Rmj5O3jU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/eqDlx1dCrwgrxlQ0ydAQFa9N1j8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b8bd3b-0026-4d56-bb25-6a5c9c0d91e9/1/KDZIr_iGGF_842JvCQ8Rmj5O3jU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.190.136.0/24 IPv6: 2001:67c:2f24::/48 Signature Algorithm: sha256WithRSAEncryption db:75:ae:82:a6:8b:fc:21:50:d4:bc:21:16:3d:98:35:e3:b7: d2:1a:a3:ac:15:66:b5:b9:21:7c:28:89:e0:08:33:98:ae:1b: 7d:5e:bf:64:3d:d6:4c:ab:10:17:19:65:d1:f4:b9:c0:16:fd: f8:ab:70:e5:68:7a:9d:27:92:5e:53:cf:10:0c:ee:1a:63:e9: 9a:ee:86:18:a6:9c:cb:ed:b3:b8:01:a4:fc:b8:2a:2c:f6:1a: 6b:6e:6e:f4:4c:04:55:df:8b:5d:dd:5a:94:e4:78:01:c7:2c: 44:cf:8a:cf:63:6d:7f:22:67:c1:9b:69:69:3c:94:7e:8e:8d: 70:9c:2e:2b:4d:7e:f6:1c:f7:f7:9d:f4:bb:7f:a8:49:89:86: 28:b4:17:1c:78:bb:ef:13:a8:5f:25:36:59:eb:4c:82:1d:73: ce:80:cf:bf:e6:d2:24:30:15:2e:52:1e:6b:c0:f8:0a:e6:8c: e8:23:ce:17:64:46:54:d2:10:85:30:e3:0b:0c:61:eb:0f:6e: 48:60:52:9b:e8:31:61:35:f3:e9:fb:82:1d:0c:33:7e:56:3d: b4:30:21:6f:0e:f3:02:d8:75:f7:b7:f3:b3:3b:32:ac:db:6f: 4d:5b:be:14:fb:86:75:0f:54:c9:37:79:fc:a0:ea:5d:97:b1: 01:bc:94:a4 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt8Ej+7UYxGEtxqDwhS9xjtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4MzY0OGFmZjg4NjE4NWZmY2UzNjI2ZjA5MGYxMTlhM2U0 ZWRlMzUwHhcNMjYwMTAyMDAxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YWEwZTVjNzU3NDJhZjA4MmJjNjU0MzRjOWQwMTAxNWFmNGRkNjNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cAL9xssA3JzDRxdXY4MAi07Q5kW FhoFyaaw4vryPkeCWR/6S5lRAj+QdEjEBvnTMyoUUBVAYYnJphdikrDwaBEH4R38 Z9gOfIieufmSfyEErjTkDjgttB+IdjfpkeZ8NTl2h8Vjo1TfM6rIBsCCrxoGJ87W Yj4D/rvuVRqRTMpGVtAJHO3GmaWVOlRQosjzkM47+e0XvkqvufkTtbP3hltcLRp5 Ni9WMWsGN2s66fOxf5QGm9tk3MLqHCfVOcuwTd00GEte73ryJcnHNI1SxpQmL0/H k4MY1LEvTQzLLOw+b3t79QfMAxFyNj8r9gtbYuH5WJCS3opDOcewhuOVbwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFHqg5cdXQq8IK8ZUNMnQEBWvTdY/MB8GA1UdIwQY MBaAFCg2SK/4hhhf/ONibwkPEZo+Tt41MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0RaSXJfaUdHRl84NDJKdkNROFJtajVPM2pVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9iOGJkM2ItMDAyNi00ZDU2LWJiMjUt NmE1YzljMGQ5MWU5LzEvZXFEbHgxZENyd2dyeGxRMHlkQVFGYTlOMWo4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9iOGJkM2ItMDAyNi00ZDU2LWJiMjUtNmE1YzljMGQ5MWU5 LzEvS0RaSXJfaUdHRl84NDJKdkNROFJtajVPM2pVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAw76IMA8E AgACMAkDBwAgAQZ8LyQwDQYJKoZIhvcNAQELBQADggEBANt1roKmi/whUNS8IRY9 mDXjt9Iao6wVZrW5IXwoieAIM5iuG31ev2Q91kyrEBcZZdH0ucAW/fircOVoep0n kl5TzxAM7hpj6ZruhhimnMvts7gBpPy4Kiz2GmtubvRMBFXfi13dWpTkeAHHLETP is9jbX8iZ8GbaWk8lH6OjXCcLitNfvYc9/ed9Lt/qEmJhii0Fxx4u+8TqF8lNlnr TIIdc86Az7/m0iQwFS5SHmvA+ArmjOgjzhdkRlTSEIUw4wsMYesPbkhgUpvoMWE1 8+n7gh0MM35WPbQwIW8O8wLYdfe387M7Mqzbb01bvhT7hnUPVMk3efyg6l2XsQG8 lKQ= -----END CERTIFICATE-----Generated at Tue Jan 27 02:08:51 2026 by rpki-client