This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/EI9A2AyNvhqsjtdIZXCBKx0-R44.roa File: EI9A2AyNvhqsjtdIZXCBKx0-R44.roa (raw, json) Hash identifier: BGKtnNaX0E+SFgznZfCZ/STVwC7jGswEDW+a+1omdrU= Subject key identifier: 10:8F:40:D8:0C:8D:BE:1A:AC:8E:D7:48:65:70:81:2B:1D:3E:47:8E Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019B8DAD704121902881D522F7F0A25E9814 Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/EI9A2AyNvhqsjtdIZXCBKx0-R44.roa Signing time: Mon 05 Jan 2026 10:21:52 +0000 ROA not before: Mon 05 Jan 2026 10:21:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5650 IP address blocks: 62.105.200.0/22 maxlen: 24 62.105.204.0/23 maxlen: 24 194.231.192.0/23 maxlen: 24 213.169.208.0/22 maxlen: 24 213.169.212.0/22 maxlen: 24 213.169.224.0/23 maxlen: 24 213.169.226.0/23 maxlen: 24 213.169.228.0/23 maxlen: 24 213.169.230.0/23 maxlen: 24 217.117.160.0/24 maxlen: 24 217.117.164.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8d:ad:70:41:21:90:28:81:d5:22:f7:f0:a2:5e:98:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Jan 5 10:21:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=108f40d80c8dbe1aac8ed7486570812b1d3e478e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:90:db:4d:92:8b:d7:47:75:21:c6:48:7c:f6: e3:b1:ba:62:77:e0:cd:f9:2c:bb:3a:5f:85:05:7c: e7:3b:c6:b7:2b:ea:e1:69:95:91:44:99:47:9e:78: 7f:f2:72:5b:80:8e:5f:00:6f:fb:c6:3e:be:74:52: 38:e0:bf:b2:a7:cc:ec:12:27:49:a3:17:3d:b8:6d: 0f:f2:22:90:84:e3:6f:bf:92:8e:ca:9d:20:ed:9e: 27:43:ab:06:77:ef:18:3a:85:04:eb:87:4d:64:0c: 9b:49:08:05:17:63:9b:91:a3:ba:21:4b:ff:b0:68: 6f:14:fa:9b:8b:34:17:78:ca:ee:72:e5:d4:58:a4: 0e:37:c6:c6:e2:8f:8b:36:c4:a7:48:2f:e5:6c:56: e1:d1:ac:38:3d:ae:91:1c:f4:78:ff:65:61:d1:d2: cd:e9:02:4a:41:bc:52:41:80:51:70:72:32:13:f0: 3a:b9:8c:15:69:65:e8:a5:9a:1d:d6:ec:a4:53:22: 76:71:5c:0c:ea:83:94:f4:bc:12:b2:09:56:17:3f: 11:44:3b:0e:e9:9a:69:e3:90:c0:05:d6:36:41:f0: f0:17:37:c5:9e:5d:e6:23:f2:28:97:5b:5a:69:0b: 2e:2a:5c:c4:5c:f7:2b:52:95:4d:c9:c3:db:bd:b1: 55:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:8F:40:D8:0C:8D:BE:1A:AC:8E:D7:48:65:70:81:2B:1D:3E:47:8E X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/EI9A2AyNvhqsjtdIZXCBKx0-R44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.105.200.0-62.105.205.255 194.231.192.0/23 213.169.208.0/21 213.169.224.0/21 217.117.160.0/24 217.117.164.0/22 Signature Algorithm: sha256WithRSAEncryption 06:39:2a:e2:3d:ff:c1:a7:d3:33:68:c4:c3:ba:d6:2b:8e:41: ef:c0:7a:eb:43:ba:59:42:5f:4e:35:77:4a:4a:84:49:bb:f9: 1c:d3:f0:ae:09:23:c7:c7:dd:97:4c:7e:43:75:b3:74:47:27: 31:92:29:ed:ef:b5:4a:39:04:b3:a4:08:89:78:7f:c1:8c:cd: 48:5c:a1:e1:a0:cd:af:76:83:e4:0f:66:5c:14:5e:23:f3:f3: 00:10:19:03:46:e2:20:69:9d:b9:93:ec:3c:19:90:d2:10:e3: 3c:43:5a:60:8c:5c:b0:f6:8b:f5:d5:48:95:fa:8a:94:a9:c9: 01:01:49:6e:6b:16:c2:51:8d:e1:b8:8a:9e:d5:4b:af:37:73: 9f:b3:e2:8a:3f:0b:aa:e0:af:d3:90:ae:f9:9d:60:bf:09:0f: 8f:9e:55:aa:dc:e3:6f:32:c7:54:4e:50:a1:41:6f:5f:25:3c: 81:5f:58:4b:f3:d3:7b:53:3a:a3:69:b1:b7:c7:fb:cc:75:fa: 31:27:09:91:0d:c5:b7:42:39:60:63:9c:db:dc:97:7e:7f:98: f3:53:8e:63:90:03:aa:65:84:ce:61:2e:03:48:15:84:46:ac: b9:1e:01:55:f9:a2:41:d0:b2:c5:6a:c6:b8:5e:d5:e6:69:18: a0:06:26:9b -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZuNrXBBIZAogdUi9/CiXpgUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjYwMTA1MTAyMTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDhmNDBkODBjOGRiZTFhYWM4ZWQ3NDg2NTcwODEyYjFkM2U0NzhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pDbTZKL10d1IcZIfPbjsbpid+DN +Sy7Ol+FBXznO8a3K+rhaZWRRJlHnnh/8nJbgI5fAG/7xj6+dFI44L+yp8zsEidJ oxc9uG0P8iKQhONvv5KOyp0g7Z4nQ6sGd+8YOoUE64dNZAybSQgFF2ObkaO6IUv/ sGhvFPqbizQXeMrucuXUWKQON8bG4o+LNsSnSC/lbFbh0aw4Pa6RHPR4/2Vh0dLN 6QJKQbxSQYBRcHIyE/A6uYwVaWXopZod1uykUyJ2cVwM6oOU9LwSsglWFz8RRDsO 6Zpp45DABdY2QfDwFzfFnl3mI/Iol1taaQsuKlzEXPcrUpVNycPbvbFV5wIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFBCPQNgMjb4arI7XSGVwgSsdPkeOMB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvRUk5QTJBeU52aHFzanRkSVpYQ0JLeDAtUjQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsMAwDBAM+acgD BAE+acwDBAHC58ADBAPVqdADBAPVqeADBADZdaADBALZdaQwDQYJKoZIhvcNAQEL BQADggEBAAY5KuI9/8Gn0zNoxMO61iuOQe/AeutDullCX041d0pKhEm7+RzT8K4J I8fH3ZdMfkN1s3RHJzGSKe3vtUo5BLOkCIl4f8GMzUhcoeGgza92g+QPZlwUXiPz 8wAQGQNG4iBpnbmT7DwZkNIQ4zxDWmCMXLD2i/XVSJX6ipSpyQEBSW5rFsJRjeG4 ip7VS683c5+z4oo/C6rgr9OQrvmdYL8JD4+eVarc428yx1ROUKFBb18lPIFfWEvz 03tTOqNpsbfH+8x1+jEnCZENxbdCOWBjnNvcl35/mPNTjmOQA6plhM5hLgNIFYRG rLkeAVX5okHQssVqxrhe1eZpGKAGJps= -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:05 2026 by rpki-client