This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/EZN6eSTHNq6YlDW9vR5S8yHa6z4.roa File: EZN6eSTHNq6YlDW9vR5S8yHa6z4.roa (raw, json) Hash identifier: PphogVMUEL4OlBwVhraxAAhyGlhiT8gvlTRah6rK8+U= Subject key identifier: 11:93:7A:79:24:C7:36:AE:98:94:35:BD:BD:1E:52:F3:21:DA:EB:3E Certificate issuer: /CN=9770bf2375d59ba81a9955c07a2f0a23264b61a8 Certificate serial: 019B7DCB5713882CF034A72DDDD490314DA1 Authority key identifier: 97:70:BF:23:75:D5:9B:A8:1A:99:55:C0:7A:2F:0A:23:26:4B:61:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l3C_I3XVm6gamVXAei8KIyZLYag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/EZN6eSTHNq6YlDW9vR5S8yHa6z4.roa Signing time: Fri 02 Jan 2026 08:20:36 +0000 ROA not before: Fri 02 Jan 2026 08:20:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50964 IP address blocks: 91.205.76.0/22 maxlen: 22 194.0.92.0/22 maxlen: 22 194.0.92.0/24 maxlen: 24 194.0.93.0/24 maxlen: 24 194.0.94.0/24 maxlen: 24 194.0.95.0/24 maxlen: 24 194.59.36.0/22 maxlen: 22 194.59.36.0/24 maxlen: 24 194.59.37.0/24 maxlen: 24 194.59.38.0/24 maxlen: 24 194.59.39.0/24 maxlen: 24 194.76.38.0/23 maxlen: 23 194.76.38.0/24 maxlen: 24 194.76.39.0/24 maxlen: 24 194.127.180.0/24 maxlen: 24 195.189.92.0/22 maxlen: 22 195.189.92.0/24 maxlen: 24 195.189.93.0/24 maxlen: 24 195.189.94.0/24 maxlen: 24 195.189.95.0/24 maxlen: 24 2001:67c:2da8::/48 maxlen: 48 2001:67c:2dac::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.mft rsync://rpki.ripe.net/repository/DEFAULT/l3C_I3XVm6gamVXAei8KIyZLYag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:57:13:88:2c:f0:34:a7:2d:dd:d4:90:31:4d:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9770bf2375d59ba81a9955c07a2f0a23264b61a8 Validity Not Before: Jan 2 08:20:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=11937a7924c736ae989435bdbd1e52f321daeb3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7f:0d:f7:16:6f:ca:be:12:be:7d:03:f2:a1: b4:63:7c:ac:81:27:1b:fc:05:41:19:ff:cb:36:22: 19:f0:f0:b2:00:9a:e0:9b:03:ea:9b:65:13:dc:fc: 66:2f:ad:67:8e:61:84:1e:5c:94:54:4f:17:e4:c4: 24:48:11:bf:a8:22:62:62:3b:39:bb:00:88:b5:7e: f7:2e:8a:78:c0:a2:70:a6:6f:63:c4:a4:f3:54:ea: ef:80:1f:b5:aa:42:e4:4c:53:fb:03:7c:b0:f9:18: 8f:57:da:6e:dd:a3:3b:eb:02:59:6c:5f:cf:2f:4a: 8d:01:de:14:47:35:1c:f4:68:5d:95:7b:1a:95:97: ac:2a:83:30:1a:3d:f5:01:36:19:cb:97:7c:8a:a8: 4f:0b:ad:b7:8f:2b:ff:47:58:af:07:c3:31:a9:0d: 57:c6:5f:5a:9e:3f:34:5d:51:ea:f4:e1:1e:f8:d2: 88:5a:4d:c8:c9:8c:c1:8c:bc:e5:0a:50:16:43:da: fc:8b:9b:9f:1f:b7:05:c0:40:1d:c1:2f:60:08:09: 05:cb:2f:ba:1e:b5:7b:1f:c2:c1:e1:99:05:3a:d1: 53:22:fb:d0:f2:30:bb:7b:81:78:a0:a5:56:b7:34: 41:c7:85:31:15:22:4a:28:de:07:e0:2e:03:58:da: 31:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:93:7A:79:24:C7:36:AE:98:94:35:BD:BD:1E:52:F3:21:DA:EB:3E X509v3 Authority Key Identifier: keyid:97:70:BF:23:75:D5:9B:A8:1A:99:55:C0:7A:2F:0A:23:26:4B:61:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l3C_I3XVm6gamVXAei8KIyZLYag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/EZN6eSTHNq6YlDW9vR5S8yHa6z4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/beef2f-ec5a-49ff-975b-8d34f557822a/1/l3C_I3XVm6gamVXAei8KIyZLYag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.205.76.0/22 194.0.92.0/22 194.59.36.0/22 194.76.38.0/23 194.127.180.0/24 195.189.92.0/22 IPv6: 2001:67c:2da8::/48 2001:67c:2dac::/48 Signature Algorithm: sha256WithRSAEncryption 88:26:ab:2a:25:66:39:58:33:87:3f:f7:a8:65:af:bc:f8:91: af:04:44:80:e4:f8:b7:73:ff:61:52:1e:37:1b:b2:8c:de:de: fb:0d:58:7e:1f:f7:d7:71:ab:76:ad:40:c6:ff:a8:ed:b2:ed: a3:17:5b:ce:50:80:c2:47:d6:a3:f6:87:79:e5:79:21:ec:7c: da:92:f8:34:48:79:c0:bb:8f:5e:c2:33:cf:5e:5e:04:3a:8e: 8d:da:ec:b4:de:01:08:d6:d7:fe:8b:89:c5:67:1a:c9:d5:ba: 8b:29:fb:57:55:0c:13:ef:e4:90:5f:17:b1:9e:6f:ab:24:c1: 77:93:1a:ea:96:4c:cb:6a:21:f6:a2:51:bf:72:da:f1:bb:41: 77:97:4a:cc:71:14:c1:14:f7:71:25:49:af:ac:1e:ca:c3:34: 15:73:b7:09:2c:07:fd:8d:9b:42:50:5d:03:ae:69:a4:70:b4: a6:bd:b1:00:33:5b:b1:7a:ab:3c:26:70:85:ce:e8:4c:05:0e: c7:5c:6f:76:ba:60:ed:20:db:c4:ab:7a:3d:43:3e:d3:05:2d: ae:e6:3e:a6:a3:8d:b1:b0:31:fd:e5:d8:f6:2a:e4:d9:55:ad: b2:9e:8b:34:05:7f:64:e1:07:35:65:b5:95:8a:0e:2f:35:b7: 91:d9:1f:6b -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgISAZt9y1cTiCzwNKct3dSQMU2hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3NzBiZjIzNzVkNTliYTgxYTk5NTVjMDdhMmYwYTIzMjY0 YjYxYTgwHhcNMjYwMTAyMDgyMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMTkzN2E3OTI0YzczNmFlOTg5NDM1YmRiZDFlNTJmMzIxZGFlYjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxH8N9xZvyr4Svn0D8qG0Y3ysgScb /AVBGf/LNiIZ8PCyAJrgmwPqm2UT3PxmL61njmGEHlyUVE8X5MQkSBG/qCJiYjs5 uwCItX73Lop4wKJwpm9jxKTzVOrvgB+1qkLkTFP7A3yw+RiPV9pu3aM76wJZbF/P L0qNAd4URzUc9GhdlXsalZesKoMwGj31ATYZy5d8iqhPC623jyv/R1ivB8MxqQ1X xl9anj80XVHq9OEe+NKIWk3IyYzBjLzlClAWQ9r8i5ufH7cFwEAdwS9gCAkFyy+6 HrV7H8LB4ZkFOtFTIvvQ8jC7e4F4oKVWtzRBx4UxFSJKKN4H4C4DWNoxnQIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFBGTenkkxzaumJQ1vb0eUvMh2us+MB8GA1UdIwQY MBaAFJdwvyN11ZuoGplVwHovCiMmS2GoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDNDX0kzWFZtNmdhbVZYQWVpOEtJeVpMWWFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9iZWVmMmYtZWM1YS00OWZmLTk3NWIt OGQzNGY1NTc4MjJhLzEvRVpONmVTVEhOcTZZbERXOXZSNVM4eUhhNno0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9iZWVmMmYtZWM1YS00OWZmLTk3NWItOGQzNGY1NTc4MjJh LzEvbDNDX0kzWFZtNmdhbVZYQWVpOEtJeVpMWWFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjAqBAIAATAkAwQCW81MAwQC wgBcAwQCwjskAwQBwkwmAwQAwn+0AwQCw71cMBgEAgACMBIDBwAgAQZ8LagDBwAg AQZ8LawwDQYJKoZIhvcNAQELBQADggEBAIgmqyolZjlYM4c/96hlr7z4ka8ERIDk +Ldz/2FSHjcbsoze3vsNWH4f99dxq3atQMb/qO2y7aMXW85QgMJH1qP2h3nleSHs fNqS+DRIecC7j17CM89eXgQ6jo3a7LTeAQjW1/6LicVnGsnVuosp+1dVDBPv5JBf F7Geb6skwXeTGuqWTMtqIfaiUb9y2vG7QXeXSsxxFMEU93ElSa+sHsrDNBVztwks B/2Nm0JQXQOuaaRwtKa9sQAzW7F6qzwmcIXO6EwFDsdcb3a6YO0g28Srej1DPtMF La7mPqajjbGwMf3l2PYq5NlVrbKeizQFf2ThBzVltZWKDi81t5HZH2s= -----END CERTIFICATE-----Generated at Tue Feb 10 04:32:02 2026 by rpki-client