This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/Ego0nl6qnumbw-BU5_acGm_TtM8.roa File: Ego0nl6qnumbw-BU5_acGm_TtM8.roa (raw, json) Hash identifier: 7c/b4633erpOytsAafi0TuyOCeY/FHIybW7GxJJgywE= Subject key identifier: 12:0A:34:9E:5E:AA:9E:E9:9B:C3:E0:54:E7:F6:9C:1A:6F:D3:B4:CF Certificate issuer: /CN=91362d3c0953e8c933f0092a589b75494904f962 Certificate serial: 019B797E1C4C8EC1603961C84D5CFA386F55 Authority key identifier: 91:36:2D:3C:09:53:E8:C9:33:F0:09:2A:58:9B:75:49:49:04:F9:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/Ego0nl6qnumbw-BU5_acGm_TtM8.roa Signing time: Thu 01 Jan 2026 12:17:46 +0000 ROA not before: Thu 01 Jan 2026 12:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30754 IP address blocks: 217.71.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.crl rsync://rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.mft rsync://rpki.ripe.net/repository/DEFAULT/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:1c:4c:8e:c1:60:39:61:c8:4d:5c:fa:38:6f:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91362d3c0953e8c933f0092a589b75494904f962 Validity Not Before: Jan 1 12:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=120a349e5eaa9ee99bc3e054e7f69c1a6fd3b4cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:89:b5:d8:5a:57:52:25:4d:5f:94:bb:08:80: 1a:d1:9b:fa:ed:d9:04:fe:b6:e5:8f:45:74:4c:b6: 80:91:49:8f:28:b2:85:46:2d:30:4e:d5:4a:9a:d0: 44:d5:f8:64:a5:df:c7:24:1f:63:30:d1:ca:d3:37: 7d:1a:18:5e:44:9e:84:e3:22:20:7f:71:c8:f9:45: 37:b1:34:a8:e6:94:70:c2:0d:e4:a5:6c:c6:8c:d2: 9e:32:0e:da:74:68:12:d1:9e:5a:f0:a5:5b:94:56: 79:27:b6:88:f1:15:f2:5d:6e:b0:a0:fb:3e:5b:5c: 9e:7d:97:ce:29:73:3d:e1:d5:9a:d8:7e:58:3d:72: 5d:17:f5:3e:ad:e1:18:57:3e:5e:29:5a:b8:14:a2: 65:83:a2:7c:72:4f:06:4a:60:28:4f:fc:59:d8:a1: e2:fe:d2:b7:7d:a2:53:86:81:39:3f:22:7c:0c:94: f5:c5:3b:6c:10:50:2c:d4:a8:0f:5e:fe:3a:d2:0b: a9:7d:6a:40:50:e0:6e:75:31:4b:13:07:fc:b9:a1: 05:40:42:6f:29:b0:b3:d9:89:28:c9:b1:db:33:7b: 91:51:20:71:b6:9b:1a:05:f9:9c:63:97:94:99:b2: 38:ad:ad:5a:43:12:ba:7d:56:92:74:b0:8e:dd:25: 28:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:0A:34:9E:5E:AA:9E:E9:9B:C3:E0:54:E7:F6:9C:1A:6F:D3:B4:CF X509v3 Authority Key Identifier: keyid:91:36:2D:3C:09:53:E8:C9:33:F0:09:2A:58:9B:75:49:49:04:F9:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/Ego0nl6qnumbw-BU5_acGm_TtM8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/022ee4-44de-4004-9839-a449ce46a9b1/1/kTYtPAlT6Mkz8AkqWJt1SUkE-WI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.71.144.0/20 Signature Algorithm: sha256WithRSAEncryption 39:22:89:48:14:60:d5:46:6c:77:ab:e8:03:61:7d:5c:36:53: fc:be:78:03:b0:47:aa:f6:3b:4b:aa:42:55:f6:7a:3c:9f:22: ce:b8:b2:99:30:5c:c4:d0:63:2c:ad:0b:f9:13:be:60:35:00: e2:fe:3e:2e:67:68:a1:8c:69:bd:2b:f7:03:9b:ed:65:ad:15: 73:8b:f1:58:20:dc:ac:cf:85:0a:9c:00:ed:0a:5a:3f:a5:c7: 0a:99:50:ea:51:9d:6c:96:d0:3a:ae:e8:f8:80:0e:2b:c8:14: b8:9c:db:53:75:37:51:97:42:3b:6b:ee:46:71:d8:43:66:b5: da:bc:f1:f5:9b:25:e2:bf:92:4d:3f:e7:46:56:f5:20:80:a8: 02:9b:15:30:00:4a:25:94:47:f6:7a:4d:b9:da:e4:10:cd:f4: 83:e4:b9:03:00:01:f2:30:76:5d:cf:f5:c3:58:fc:11:89:f9: 58:7d:0e:d6:1a:e3:5c:37:f0:6a:d3:f2:82:3a:f5:fa:96:c0: f0:20:4d:b1:bf:9b:e5:c0:ad:d6:18:b3:a5:a0:b1:e8:13:cb: 5a:02:f6:5f:a5:d6:eb:98:d5:49:dc:92:5a:38:a5:9a:a9:94: c2:e2:f4:5e:0e:ee:b2:f9:92:29:78:cc:0e:7b:36:43:ec:3d: fc:b8:2e:7c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fhxMjsFgOWHITVz6OG9VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxMzYyZDNjMDk1M2U4YzkzM2YwMDkyYTU4OWI3NTQ5NDkw NGY5NjIwHhcNMjYwMTAxMTIxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjBhMzQ5ZTVlYWE5ZWU5OWJjM2UwNTRlN2Y2OWMxYTZmZDNiNGNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4m12FpXUiVNX5S7CIAa0Zv67dkE /rblj0V0TLaAkUmPKLKFRi0wTtVKmtBE1fhkpd/HJB9jMNHK0zd9GhheRJ6E4yIg f3HI+UU3sTSo5pRwwg3kpWzGjNKeMg7adGgS0Z5a8KVblFZ5J7aI8RXyXW6woPs+ W1yefZfOKXM94dWa2H5YPXJdF/U+reEYVz5eKVq4FKJlg6J8ck8GSmAoT/xZ2KHi /tK3faJThoE5PyJ8DJT1xTtsEFAs1KgPXv460gupfWpAUOBudTFLEwf8uaEFQEJv KbCz2YkoybHbM3uRUSBxtpsaBfmcY5eUmbI4ra1aQxK6fVaSdLCO3SUoOwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBIKNJ5eqp7pm8PgVOf2nBpv07TPMB8GA1UdIwQY MBaAFJE2LTwJU+jJM/AJKlibdUlJBPliMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1RZdFBBbFQ2TWt6OEFrcVdKdDFTVWtFLVdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8wMjJlZTQtNDRkZS00MDA0LTk4Mzkt YTQ0OWNlNDZhOWIxLzEvRWdvMG5sNnFudW1idy1CVTVfYWNHbV9UdE04LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8wMjJlZTQtNDRkZS00MDA0LTk4MzktYTQ0OWNlNDZhOWIx LzEva1RZdFBBbFQ2TWt6OEFrcVdKdDFTVWtFLVdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2UeQMA0G CSqGSIb3DQEBCwUAA4IBAQA5IolIFGDVRmx3q+gDYX1cNlP8vngDsEeq9jtLqkJV 9no8nyLOuLKZMFzE0GMsrQv5E75gNQDi/j4uZ2ihjGm9K/cDm+1lrRVzi/FYINys z4UKnADtClo/pccKmVDqUZ1sltA6ruj4gA4ryBS4nNtTdTdRl0I7a+5GcdhDZrXa vPH1myXiv5JNP+dGVvUggKgCmxUwAEollEf2ek252uQQzfSD5LkDAAHyMHZdz/XD WPwRiflYfQ7WGuNcN/Bq0/KCOvX6lsDwIE2xv5vlwK3WGLOloLHoE8taAvZfpdbr mNVJ3JJaOKWaqZTC4vReDu6y+ZIpeMwOezZD7D38uC58 -----END CERTIFICATE-----Generated at Mon Feb 9 19:55:41 2026 by rpki-client