This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/Ea-uq1265Ynaq0Tvr_bSxKKEoRA.roa File: Ea-uq1265Ynaq0Tvr_bSxKKEoRA.roa (raw, json) Hash identifier: VyyRwVBnaY4P+qhOH2Wi0cAjx6Up4dpdwhLbiAQ3CtY= Subject key identifier: 11:AF:AE:AB:5D:BA:E5:89:DA:AB:44:EF:AF:F6:D2:C4:A2:84:A1:10 Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6 Certificate serial: 019B7F159B9B1EE17ADB05B93A4E7C21BBF0 Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/Ea-uq1265Ynaq0Tvr_bSxKKEoRA.roa Signing time: Fri 02 Jan 2026 14:21:21 +0000 ROA not before: Fri 02 Jan 2026 14:21:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212477 IP address blocks: 185.226.56.0/23 maxlen: 23 185.226.58.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 05:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:9b:9b:1e:e1:7a:db:05:b9:3a:4e:7c:21:bb:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6 Validity Not Before: Jan 2 14:21:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=11afaeab5dbae589daab44efaff6d2c4a284a110 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:ee:ad:85:0b:e7:f8:87:17:70:29:a7:ee:ec: a4:eb:09:80:08:ae:2b:5f:6c:fd:cc:6a:3d:31:e1: 82:f8:5f:7b:74:94:27:57:bb:0c:b4:d2:e0:8f:88: 50:8c:4c:25:20:de:25:f6:e8:56:24:7e:4a:a8:87: 32:02:ed:0e:37:e3:e5:ba:f7:66:25:a6:22:66:7e: e6:b9:05:13:c3:7c:68:3f:d5:63:2f:80:93:e7:0b: c6:38:f2:77:48:c1:80:43:fd:76:15:77:ba:ca:b0: 47:94:23:8a:64:3e:86:14:d5:02:0d:e2:4f:8e:7d: 2c:38:93:bd:d1:7f:5c:ed:e9:a0:6d:f0:0f:3a:52: 1b:26:d0:e8:64:1e:c4:7b:1a:b9:44:0c:69:bf:5b: 66:94:93:f3:d3:73:22:17:8c:ed:46:6b:ea:25:05: c3:1d:40:df:5d:44:86:20:38:56:4c:00:02:11:d6: a9:68:a3:dd:d4:57:ad:7d:f2:dc:d4:a1:b9:29:49: d0:48:b5:25:7a:98:a6:04:9b:e4:0b:36:d6:da:c8: 76:8a:6a:8e:81:4d:5c:2d:04:f8:94:e0:41:6d:e6: 5b:30:b1:8a:11:a4:e4:d4:1f:eb:dc:df:a5:ce:29: 19:5b:2f:aa:f3:d6:d7:63:d6:70:45:f0:eb:d8:8d: 39:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:AF:AE:AB:5D:BA:E5:89:DA:AB:44:EF:AF:F6:D2:C4:A2:84:A1:10 X509v3 Authority Key Identifier: keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/Ea-uq1265Ynaq0Tvr_bSxKKEoRA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.226.56.0/22 Signature Algorithm: sha256WithRSAEncryption 08:51:07:5d:a9:00:75:cd:21:ac:51:57:fc:93:80:63:9d:30: b1:20:ac:03:ba:cb:a5:96:c4:3c:5c:81:9d:da:1a:af:90:96: b6:9a:7c:5b:6a:01:a7:69:7c:6d:03:1f:d8:ab:cc:07:23:24: 02:c1:4e:9d:02:1a:f6:06:bc:32:24:88:26:98:f3:25:ea:aa: c8:c1:ee:71:53:2d:a4:9e:6c:c1:71:f0:d9:db:95:19:d8:68: 47:e2:33:dc:11:1c:cb:f2:05:1c:40:f9:7a:b5:e8:2d:d2:4c: 70:b1:b7:e6:a7:64:de:3a:84:bd:48:c6:f4:18:41:d4:19:f6: 4d:47:a1:54:a4:0b:9d:54:53:28:ba:86:3c:7e:9d:d6:d7:83: d3:1f:cd:34:58:3a:99:13:1f:72:ed:c7:0d:d0:46:27:94:8f: a0:c3:52:8a:39:0b:43:5e:89:85:a3:7f:90:ee:25:09:58:0d: ba:45:bf:9c:cc:1d:25:ce:cb:39:8a:b0:cd:91:7f:39:f2:c9: f6:d7:bf:1c:64:74:00:ad:3d:6f:0e:ec:7e:98:21:b6:9e:3c: 0c:44:94:3a:a0:5d:85:1f:f7:8e:05:5b:f8:8e:b2:d4:5f:3b: a1:95:02:59:d5:61:82:a7:58:12:fc:09:b0:b9:e5:9d:8f:ad: bb:e9:f2:b5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FZubHuF62wW5Ok58IbvwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NTE2MDViNjc1ZWNlNGUwZmNlNzE3NWFlMzFhOTNmYTgy NzJiYTYwHhcNMjYwMTAyMTQyMTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMWFmYWVhYjVkYmFlNTg5ZGFhYjQ0ZWZhZmY2ZDJjNGEyODRhMTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6u6thQvn+IcXcCmn7uyk6wmACK4r X2z9zGo9MeGC+F97dJQnV7sMtNLgj4hQjEwlIN4l9uhWJH5KqIcyAu0ON+Pluvdm JaYiZn7muQUTw3xoP9VjL4CT5wvGOPJ3SMGAQ/12FXe6yrBHlCOKZD6GFNUCDeJP jn0sOJO90X9c7emgbfAPOlIbJtDoZB7Eexq5RAxpv1tmlJPz03MiF4ztRmvqJQXD HUDfXUSGIDhWTAACEdapaKPd1FetffLc1KG5KUnQSLUlepimBJvkCzbW2sh2imqO gU1cLQT4lOBBbeZbMLGKEaTk1B/r3N+lzikZWy+q89bXY9ZwRfDr2I05LwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBGvrqtduuWJ2qtE76/20sSihKEQMB8GA1UdIwQY MBaAFAVRYFtnXs5OD85xda4xqT+oJyumMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEt MDc3OWY0OGVjZWEwLzEvRWEtdXExMjY1WW5hcTBUdnJfYlN4S0tFb1JBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEtMDc3OWY0OGVjZWEw LzEvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCueI4MA0G CSqGSIb3DQEBCwUAA4IBAQAIUQddqQB1zSGsUVf8k4BjnTCxIKwDusullsQ8XIGd 2hqvkJa2mnxbagGnaXxtAx/Yq8wHIyQCwU6dAhr2BrwyJIgmmPMl6qrIwe5xUy2k nmzBcfDZ25UZ2GhH4jPcERzL8gUcQPl6tegt0kxwsbfmp2TeOoS9SMb0GEHUGfZN R6FUpAudVFMouoY8fp3W14PTH800WDqZEx9y7ccN0EYnlI+gw1KKOQtDXomFo3+Q 7iUJWA26Rb+czB0lzss5irDNkX858sn2178cZHQArT1vDux+mCG2njwMRJQ6oF2F H/eOBVv4jrLUXzuhlQJZ1WGCp1gS/AmwueWdj6276fK1 -----END CERTIFICATE-----Generated at Sun Jan 11 15:07:44 2026 by rpki-client