This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/EUwfZnTgmTUn4QtAFdLnAe6QBxM.roa File: EUwfZnTgmTUn4QtAFdLnAe6QBxM.roa (raw, json) Hash identifier: 4b2ykqXoTUYqZCfEtXihVGEUx4Y2lUrciWgYbHCZrP0= Subject key identifier: 11:4C:1F:66:74:E0:99:35:27:E1:0B:40:15:D2:E7:01:EE:90:07:13 Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664 Certificate serial: 019B7A5B2F33E3AB3D702BE136CC629B6AEA Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/EUwfZnTgmTUn4QtAFdLnAe6QBxM.roa Signing time: Thu 01 Jan 2026 16:19:14 +0000 ROA not before: Thu 01 Jan 2026 16:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39855 IP address blocks: 45.85.247.0/24 maxlen: 24 62.68.64.0/24 maxlen: 24 62.68.72.0/24 maxlen: 24 91.212.122.0/24 maxlen: 24 91.229.5.0/24 maxlen: 24 193.110.161.0/24 maxlen: 24 193.201.202.0/24 maxlen: 24 194.55.128.0/24 maxlen: 24 195.60.170.0/24 maxlen: 24 217.8.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:2f:33:e3:ab:3d:70:2b:e1:36:cc:62:9b:6a:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664 Validity Not Before: Jan 1 16:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=114c1f6674e0993527e10b4015d2e701ee900713 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:76:e2:c4:36:27:bf:67:92:a5:2e:a8:6a:0e: 2b:a4:63:13:86:fa:98:bd:ad:f0:a1:30:4f:26:1d: f7:2e:f5:41:45:68:ad:3c:4b:12:29:1c:f3:a1:f5: 1c:81:25:df:54:f3:c1:6e:c3:bc:49:81:ef:35:15: 6a:d2:2f:5f:f5:24:45:64:68:16:52:46:c4:d5:a6: f4:ec:26:9a:fc:a7:ed:3b:74:16:19:a9:50:5f:77: ae:fd:1b:ca:9a:6f:74:40:81:20:62:98:e2:4d:1b: 24:ef:89:a4:8f:94:41:49:61:84:bc:45:76:c9:9e: cf:91:b3:f5:f9:0f:59:62:80:a9:29:27:6b:d6:a7: 49:46:92:6d:30:ae:27:a2:20:6d:89:07:d6:12:66: 4b:d6:e9:6c:7f:e0:81:48:8d:2e:15:5e:1e:52:a8: a0:35:f1:a4:f9:5e:8c:18:0a:ef:61:5b:0f:ff:76: 8c:9c:bf:60:87:2c:ff:79:79:18:3b:cf:6b:71:4f: 65:10:e8:39:77:01:5d:f3:7c:e5:53:04:57:74:7f: b8:16:bc:16:b0:a1:5c:b2:62:10:a9:68:e2:ef:3a: 11:f6:6f:05:e4:8e:11:c0:d7:8e:db:51:4f:f8:0e: 89:2b:80:1d:2a:24:73:83:bb:80:b6:6d:20:a8:4b: c3:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:4C:1F:66:74:E0:99:35:27:E1:0B:40:15:D2:E7:01:EE:90:07:13 X509v3 Authority Key Identifier: keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/EUwfZnTgmTUn4QtAFdLnAe6QBxM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.85.247.0/24 62.68.64.0/24 62.68.72.0/24 91.212.122.0/24 91.229.5.0/24 193.110.161.0/24 193.201.202.0/24 194.55.128.0/24 195.60.170.0/24 217.8.116.0/24 Signature Algorithm: sha256WithRSAEncryption a5:26:ba:0b:39:c3:f3:f3:a2:7e:61:d3:a0:c7:86:96:b7:f9: bd:61:76:72:6f:cb:b5:3f:6f:fd:e6:77:b0:e7:cc:14:b0:88: 3f:c6:0a:2c:cd:5a:09:65:07:d5:0f:a6:f5:3d:2d:53:f1:e2: c0:46:96:41:81:a9:a9:b1:c1:f0:3e:9b:87:12:17:b0:b2:c3: 80:07:0e:12:ae:69:9d:4e:97:6d:be:f8:0a:57:8b:30:b9:10: 83:8f:50:b6:e8:f1:13:a6:4f:17:06:97:f6:21:bc:21:50:cf: 90:b0:ec:86:6e:7a:35:75:03:f4:0e:c7:a4:1d:11:f9:5b:68: bf:07:b1:98:ac:be:74:a9:5e:31:c8:bb:2f:f8:38:8e:93:f7: 68:9d:bf:2a:40:7e:2c:6a:26:eb:16:c1:10:72:48:b2:69:35: 45:5b:79:0f:ee:55:9e:5f:29:b5:71:6f:69:71:9d:13:26:3f: 53:f4:7d:bc:f4:e7:93:16:72:13:37:1d:db:71:da:e8:a1:af: cf:22:1d:eb:12:5a:82:67:d1:1f:81:57:70:7c:d0:23:97:c3: 49:d5:3e:3b:8e:f0:17:c2:80:d4:f5:c4:83:1e:7b:06:d7:98: 87:a0:67:75:de:4e:de:d3:b8:ea:cf:ce:7c:6c:91:fe:db:38: 67:84:8f:b8 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgISAZt6Wy8z46s9cCvhNsxim2rqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMjk5OTA0MmM1ZTIwMDZiZDVhZWI3YTA1ZGUxZTk2YTVl NzM2NjQwHhcNMjYwMTAxMTYxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMTRjMWY2Njc0ZTA5OTM1MjdlMTBiNDAxNWQyZTcwMWVlOTAwNzEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnbixDYnv2eSpS6oag4rpGMThvqY va3woTBPJh33LvVBRWitPEsSKRzzofUcgSXfVPPBbsO8SYHvNRVq0i9f9SRFZGgW UkbE1ab07Caa/KftO3QWGalQX3eu/RvKmm90QIEgYpjiTRsk74mkj5RBSWGEvEV2 yZ7PkbP1+Q9ZYoCpKSdr1qdJRpJtMK4noiBtiQfWEmZL1ulsf+CBSI0uFV4eUqig NfGk+V6MGArvYVsP/3aMnL9ghyz/eXkYO89rcU9lEOg5dwFd83zlUwRXdH+4FrwW sKFcsmIQqWji7zoR9m8F5I4RwNeO21FP+A6JK4AdKiRzg7uAtm0gqEvDGwIDAQAB o4ICPzCCAjswHQYDVR0OBBYEFBFMH2Z04Jk1J+ELQBXS5wHukAcTMB8GA1UdIwQY MBaAFA0pmQQsXiAGvVrregXeHpal5zZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUt OGMxNTM5NjViYWM5LzEvRVV3ZlpuVGdtVFVuNFF0QUZkTG5BZTZRQnhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUtOGMxNTM5NjViYWM5 LzEvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQALVX3AwQA PkRAAwQAPkRIAwQAW9R6AwQAW+UFAwQAwW6hAwQAwcnKAwQAwjeAAwQAwzyqAwQA 2Qh0MA0GCSqGSIb3DQEBCwUAA4IBAQClJroLOcPz86J+YdOgx4aWt/m9YXZyb8u1 P2/95new58wUsIg/xgoszVoJZQfVD6b1PS1T8eLARpZBgampscHwPpuHEhewssOA Bw4SrmmdTpdtvvgKV4swuRCDj1C26PETpk8XBpf2IbwhUM+QsOyGbno1dQP0Dsek HRH5W2i/B7GYrL50qV4xyLsv+DiOk/donb8qQH4saibrFsEQckiyaTVFW3kP7lWe Xym1cW9pcZ0TJj9T9H289OeTFnITNx3bcdrooa/PIh3rElqCZ9EfgVdwfNAjl8NJ 1T47jvAXwoDU9cSDHnsG15iHoGd13k7e07jqz858bJH+2zhnhI+4 -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:23 2026 by rpki-client