This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/EonA8_RNJ6LqCj_omp7aM4gU8dk.roa File: EonA8_RNJ6LqCj_omp7aM4gU8dk.roa (raw, json) Hash identifier: 0NvIaagciDq456TKO7vUv4BPbSLNnJnravga7S2+3YQ= Subject key identifier: 12:89:C0:F3:F4:4D:27:A2:EA:0A:3F:E8:9A:9E:DA:33:88:14:F1:D9 Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Certificate serial: 019B7B35F8057C172FED4B9A3437C8657766 Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/EonA8_RNJ6LqCj_omp7aM4gU8dk.roa Signing time: Thu 01 Jan 2026 20:18:13 +0000 ROA not before: Thu 01 Jan 2026 20:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35278 IP address blocks: 213.109.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 04:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:f8:05:7c:17:2f:ed:4b:9a:34:37:c8:65:77:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Validity Not Before: Jan 1 20:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1289c0f3f44d27a2ea0a3fe89a9eda338814f1d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a5:89:21:b4:8e:42:6e:7e:1b:da:62:c6:d6: 7b:ba:a0:6d:bb:19:24:dc:af:6b:23:3e:be:8b:67: c9:e7:76:67:b4:8e:0d:92:f6:f1:d2:22:e2:46:93: 10:36:fe:9b:b9:e4:a5:36:55:65:20:11:ae:8c:a1: c4:26:8e:82:44:01:90:39:43:c8:3d:fa:18:05:2e: 5e:7e:dd:dc:03:9c:b1:9c:70:30:f1:a9:7a:f7:20: d3:a7:68:c9:89:57:fa:17:7f:82:0e:2a:44:29:d7: 0f:b8:fa:8f:fd:4a:fb:0f:db:ce:7a:e2:78:1a:7a: bb:d4:83:87:81:65:39:ed:eb:fb:70:93:3a:e8:4a: 56:06:e8:1e:d2:4f:f9:49:dd:34:c7:53:28:c1:87: 57:b5:f2:4b:63:d4:6e:12:78:3e:91:d1:dc:45:65: 74:80:47:7e:10:99:64:24:1e:9e:6c:6a:f4:73:cd: e2:67:be:00:72:04:87:f1:fc:1a:e4:01:c6:99:0e: ae:8d:bc:8d:3f:11:9b:90:05:c0:e1:b0:1e:08:c3: d0:a1:c6:be:40:4c:36:6e:8d:f7:9d:d8:fd:0f:17: 03:58:d4:c1:5f:86:31:0f:1e:7c:01:ee:43:92:cc: 2e:3b:29:b4:8b:19:e5:fb:6d:bf:1d:69:2a:37:39: 04:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:89:C0:F3:F4:4D:27:A2:EA:0A:3F:E8:9A:9E:DA:33:88:14:F1:D9 X509v3 Authority Key Identifier: keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/EonA8_RNJ6LqCj_omp7aM4gU8dk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.109.202.0/24 Signature Algorithm: sha256WithRSAEncryption 07:26:00:14:a1:72:70:ac:bd:d3:40:c6:f1:94:7b:2f:83:87: 75:e7:90:bf:17:01:64:ac:28:f1:c2:17:8d:98:a3:fa:a6:f2: 9e:02:70:84:2f:2e:b7:61:ee:0a:16:e4:39:3c:5a:64:fc:af: b4:0a:10:82:58:c3:3f:4c:06:b8:90:95:a2:5e:01:7d:80:4e: 3f:34:80:b6:52:8c:f6:eb:c0:4f:34:1e:e0:f9:50:06:f4:dd: 08:5e:b3:92:ba:53:9a:dc:e5:35:04:70:ec:bb:1d:02:de:ea: c1:fb:29:30:3d:89:61:ca:fb:1a:d4:67:32:06:16:0c:cf:31: 8b:18:3c:56:80:f2:07:8c:8b:b1:48:73:2e:37:21:90:21:72: d8:7f:1c:24:e1:4a:f5:87:22:81:d8:11:36:12:b9:ca:7f:c1: 1d:8a:86:f0:f3:65:23:6c:1c:10:1a:00:1e:64:8f:a6:04:4e: 32:9c:4c:b0:74:c1:fd:d9:fb:d7:25:81:90:d7:4b:6f:20:59: 8b:d9:ec:9c:18:6e:14:b5:5a:a6:03:93:95:8e:cc:ac:c3:43: b2:c9:55:cc:bf:13:1a:94:d3:1c:c1:db:3a:83:54:88:2a:62: d3:1d:ee:c5:51:51:04:35:6c:2a:24:17:93:39:29:28:b3:0a: 7d:c1:85:19 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NfgFfBcv7UuaNDfIZXdmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw N2VlNTYwHhcNMjYwMTAxMjAxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjg5YzBmM2Y0NGQyN2EyZWEwYTNmZTg5YTllZGEzMzg4MTRmMWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6WJIbSOQm5+G9pixtZ7uqBtuxkk 3K9rIz6+i2fJ53ZntI4Nkvbx0iLiRpMQNv6bueSlNlVlIBGujKHEJo6CRAGQOUPI PfoYBS5eft3cA5yxnHAw8al69yDTp2jJiVf6F3+CDipEKdcPuPqP/Ur7D9vOeuJ4 Gnq71IOHgWU57ev7cJM66EpWBuge0k/5Sd00x1MowYdXtfJLY9RuEng+kdHcRWV0 gEd+EJlkJB6ebGr0c83iZ74AcgSH8fwa5AHGmQ6ujbyNPxGbkAXA4bAeCMPQoca+ QEw2bo33ndj9DxcDWNTBX4YxDx58Ae5DkswuOym0ixnl+22/HWkqNzkEJQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBKJwPP0TSei6go/6Jqe2jOIFPHZMB8GA1UdIwQY MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt OGJmYmRkNDVjYjYyLzEvRW9uQThfUk5KNkxxQ2pfb21wN2FNNGdVOGRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1W3KMA0G CSqGSIb3DQEBCwUAA4IBAQAHJgAUoXJwrL3TQMbxlHsvg4d155C/FwFkrCjxwheN mKP6pvKeAnCELy63Ye4KFuQ5PFpk/K+0ChCCWMM/TAa4kJWiXgF9gE4/NIC2Uoz2 68BPNB7g+VAG9N0IXrOSulOa3OU1BHDsux0C3urB+ykwPYlhyvsa1GcyBhYMzzGL GDxWgPIHjIuxSHMuNyGQIXLYfxwk4Ur1hyKB2BE2ErnKf8Ediobw82UjbBwQGgAe ZI+mBE4ynEywdMH92fvXJYGQ10tvIFmL2eycGG4UtVqmA5OVjsysw0OyyVXMvxMa lNMcwds6g1SIKmLTHe7FUVEENWwqJBeTOSkoswp9wYUZ -----END CERTIFICATE-----Generated at Thu Jan 15 13:19:17 2026 by rpki-client