This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/EKuLwMJDazSSbggWLeeqY64f0qk.roa File: EKuLwMJDazSSbggWLeeqY64f0qk.roa (raw, json) Hash identifier: OfYUgwGcfk/wwvQIpRfbrU+7ZSV91GDPgDRf/++1XoE= Subject key identifier: 10:AB:8B:C0:C2:43:6B:34:92:6E:08:16:2D:E7:AA:63:AE:1F:D2:A9 Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9 Certificate serial: 019B7C809B1DDD95F363FC3B895F346F884D Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/EKuLwMJDazSSbggWLeeqY64f0qk.roa Signing time: Fri 02 Jan 2026 02:19:21 +0000 ROA not before: Fri 02 Jan 2026 02:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47734 IP address blocks: 185.86.66.0/24 maxlen: 24 2a05:b680:13::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:9b:1d:dd:95:f3:63:fc:3b:89:5f:34:6f:88:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9 Validity Not Before: Jan 2 02:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=10ab8bc0c2436b34926e08162de7aa63ae1fd2a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b1:6d:e5:2d:50:e9:3b:a8:2a:79:fd:30:7f: dc:ab:ce:99:3a:cc:13:00:87:a1:b5:cc:94:ae:a2: c6:95:b1:e8:7c:ad:d1:a8:b7:a7:21:0b:6d:3f:34: 35:3c:0c:e5:18:5b:65:62:73:37:42:a1:33:6b:3e: aa:94:df:1f:4c:36:1d:06:c6:81:04:e3:96:91:ee: 26:68:09:2d:38:64:0e:f1:a7:f9:a4:65:3c:d3:f4: 5a:f6:17:5a:6a:2a:8e:b3:ab:0f:75:a2:8b:cf:10: cf:35:06:b3:6f:69:e7:28:93:56:3f:aa:af:e0:59: 12:21:94:84:5b:46:b5:51:db:36:7e:dc:d7:99:fd: bd:09:b4:39:01:da:15:c4:d6:5a:52:08:69:ad:b3: cb:4f:84:c4:81:f7:4b:74:cd:8a:dc:c1:28:9b:c9: 8f:4a:dc:6d:29:47:56:21:77:15:68:ba:8b:de:9d: ed:33:4b:5f:6d:e1:fa:be:ca:1a:52:03:1a:b9:6a: 9b:9c:ae:95:ac:c5:f0:fd:a2:50:42:98:57:c1:7f: 8c:76:17:a9:12:9a:92:d4:72:2c:64:d3:1a:16:41: 00:29:5c:2d:e3:95:6f:88:2e:9b:f6:d8:3e:21:ce: c3:10:ff:c2:cc:3b:82:ab:a5:e6:b9:45:31:60:94: 6c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:AB:8B:C0:C2:43:6B:34:92:6E:08:16:2D:E7:AA:63:AE:1F:D2:A9 X509v3 Authority Key Identifier: keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/EKuLwMJDazSSbggWLeeqY64f0qk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.86.66.0/24 IPv6: 2a05:b680:13::/48 Signature Algorithm: sha256WithRSAEncryption 4b:1f:fb:70:c7:60:0a:d9:08:6c:2e:16:c8:18:d6:33:e7:4d: 91:61:fd:e0:9a:09:83:4c:b8:e0:64:b3:ae:e7:2e:97:ed:cd: a9:3a:ed:be:08:9a:10:53:03:c4:31:49:50:68:19:2a:f2:97: fb:1e:77:e4:96:b5:19:9e:cd:42:48:9c:23:de:a7:c3:4a:3c: 46:68:e0:45:46:76:27:1c:74:d9:ad:15:c6:6d:24:bb:6a:ac: 99:06:8e:d4:b5:32:87:c1:ee:f5:b0:ca:79:07:4d:a0:e3:00: 3f:81:d9:91:06:98:81:3c:fd:97:63:23:77:d4:31:85:c7:5b: 76:d8:d8:52:7c:bf:f5:e6:d8:21:a8:58:04:a4:ac:6f:b2:2b: a9:49:26:97:a6:63:8f:c8:0d:28:1f:25:5c:67:0d:23:73:2a: df:a7:ac:a2:51:dc:cd:ba:eb:5d:40:da:bd:20:84:6c:bd:51: d2:7e:b7:01:74:26:f5:d1:50:4e:10:ed:c7:aa:9d:e8:6f:fb: ef:40:91:22:5f:7d:a0:07:ef:23:42:e7:bf:50:7d:00:32:48: 81:cd:8e:a3:08:d6:4f:d2:99:af:95:0e:61:61:e7:f3:6d:59: d9:e1:30:8b:d5:b6:bb:52:16:cb:b2:77:51:c8:06:48:ec:45: e0:87:54:15 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt8gJsd3ZXzY/w7iV80b4hNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlNTg5NTJkMzkzOTM1ZjBkM2JjZTgxNGZkOTE3OGQwNDY5 M2FlYjkwHhcNMjYwMTAyMDIxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMGFiOGJjMGMyNDM2YjM0OTI2ZTA4MTYyZGU3YWE2M2FlMWZkMmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbFt5S1Q6TuoKnn9MH/cq86ZOswT AIehtcyUrqLGlbHofK3RqLenIQttPzQ1PAzlGFtlYnM3QqEzaz6qlN8fTDYdBsaB BOOWke4maAktOGQO8af5pGU80/Ra9hdaaiqOs6sPdaKLzxDPNQazb2nnKJNWP6qv 4FkSIZSEW0a1Uds2ftzXmf29CbQ5AdoVxNZaUghprbPLT4TEgfdLdM2K3MEom8mP StxtKUdWIXcVaLqL3p3tM0tfbeH6vsoaUgMauWqbnK6VrMXw/aJQQphXwX+Mdhep EpqS1HIsZNMaFkEAKVwt45VviC6b9tg+Ic7DEP/CzDuCq6XmuUUxYJRsoQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFBCri8DCQ2s0km4IFi3nqmOuH9KpMB8GA1UdIwQY MBaAFP5YlS05OTXw07zoFP2ReNBGk665MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUt NWQ0OGI2NWNlNTczLzEvRUt1THdNSkRhelNTYmdnV0xlZXFZNjRmMHFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUtNWQ0OGI2NWNlNTcz LzEvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuVZCMA8E AgACMAkDBwAqBbaAABMwDQYJKoZIhvcNAQELBQADggEBAEsf+3DHYArZCGwuFsgY 1jPnTZFh/eCaCYNMuOBks67nLpftzak67b4ImhBTA8QxSVBoGSryl/sed+SWtRme zUJInCPep8NKPEZo4EVGdiccdNmtFcZtJLtqrJkGjtS1MofB7vWwynkHTaDjAD+B 2ZEGmIE8/ZdjI3fUMYXHW3bY2FJ8v/Xm2CGoWASkrG+yK6lJJpemY4/IDSgfJVxn DSNzKt+nrKJR3M26611A2r0ghGy9UdJ+twF0JvXRUE4Q7ceqnehv++9AkSJffaAH 7yNC579QfQAySIHNjqMI1k/Sma+VDmFh5/NtWdnhMIvVtrtSFsuyd1HIBkjsReCH VBU= -----END CERTIFICATE-----Generated at Wed Jan 21 10:48:14 2026 by rpki-client