This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/EqeB8tqHFp5nwKidq-l-rJcDnGA.roa File: EqeB8tqHFp5nwKidq-l-rJcDnGA.roa (raw, json) Hash identifier: LkoQtN+QmOCni6JN0Z5FUtSBkw3mqkVOTFE6VSZr0m8= Subject key identifier: 12:A7:81:F2:DA:87:16:9E:67:C0:A8:9D:AB:E9:7E:AC:97:03:9C:60 Certificate issuer: /CN=a0e381b6e76cb9520e8d8f56776eca0fe176cc40 Certificate serial: 019B78A2F548C92D3BF1C7353A1E1AE63E46 Authority key identifier: A0:E3:81:B6:E7:6C:B9:52:0E:8D:8F:56:77:6E:CA:0F:E1:76:CC:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/EqeB8tqHFp5nwKidq-l-rJcDnGA.roa Signing time: Thu 01 Jan 2026 08:18:23 +0000 ROA not before: Thu 01 Jan 2026 08:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60631 IP address blocks: 185.164.72.0/24 maxlen: 24 185.164.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.crl rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:f5:48:c9:2d:3b:f1:c7:35:3a:1e:1a:e6:3e:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0e381b6e76cb9520e8d8f56776eca0fe176cc40 Validity Not Before: Jan 1 08:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=12a781f2da87169e67c0a89dabe97eac97039c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8d:1b:45:4c:19:87:ee:23:c8:1e:74:d6:0d: 98:7f:02:6b:36:85:a5:b8:e4:98:aa:e7:df:f2:fd: 85:00:00:04:75:4f:cf:26:c3:c6:b8:5f:87:21:b9: c5:46:ad:d9:d8:f3:0e:77:67:44:3c:f1:ff:c2:c0: 47:75:14:19:99:0c:24:9f:e9:d3:57:d5:88:b1:4e: bb:7b:df:90:c8:83:0a:44:e0:b7:8e:8f:06:9e:44: 1b:81:45:0e:75:77:c7:97:06:ec:de:7d:12:d8:1d: f9:c7:2c:a4:22:2c:5b:eb:27:65:20:8d:50:80:74: 93:c9:4b:db:b0:77:d1:a6:ec:c8:71:6b:40:d6:50: 10:69:19:6c:91:a6:d4:72:da:11:ba:e9:98:4f:cd: b8:cf:db:2c:68:01:c7:f3:e2:91:0c:78:e5:03:29: 35:9e:1f:80:f7:29:95:5d:b2:62:7f:03:fc:a4:73: 0b:3b:d6:14:b1:24:48:c0:21:84:95:0c:47:bd:d1: ce:5c:e5:08:79:4c:28:4b:ae:1d:14:5c:2f:54:32: 11:63:d6:cc:40:a2:a1:b0:e3:9c:76:be:13:82:db: d4:49:e9:a8:dd:93:0b:e8:70:b4:a8:9d:28:8e:a7: 5e:96:30:24:9d:59:ed:36:6e:65:15:02:d7:d8:41: 25:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:A7:81:F2:DA:87:16:9E:67:C0:A8:9D:AB:E9:7E:AC:97:03:9C:60 X509v3 Authority Key Identifier: keyid:A0:E3:81:B6:E7:6C:B9:52:0E:8D:8F:56:77:6E:CA:0F:E1:76:CC:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/EqeB8tqHFp5nwKidq-l-rJcDnGA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.164.72.0/23 Signature Algorithm: sha256WithRSAEncryption 1a:c7:25:20:5a:c3:fd:09:50:db:1d:7e:43:b6:41:7a:96:37: 90:83:ee:5a:ca:dd:f8:59:d4:89:91:5f:2e:36:56:fa:6b:ec: 08:98:7d:4e:f1:ce:2b:d7:18:84:c4:56:18:8b:5c:20:06:54: 84:b9:67:33:79:3a:c6:92:7c:90:43:ae:12:29:1f:80:68:d3: 64:af:92:e0:97:45:58:86:4f:4b:52:7c:ce:88:13:64:66:06: 29:b7:55:89:f9:8a:3b:95:3e:e1:1b:55:39:e4:f5:ae:7f:52: 24:68:99:d5:d7:9b:7d:ff:41:97:68:d0:d7:0a:2e:31:b4:17: af:51:84:ac:ee:27:02:d9:0d:57:74:ea:8e:ef:4c:66:5c:e4: fa:bb:e2:35:a0:50:3d:f4:e7:97:90:5c:fc:6e:9f:49:f9:d0: a2:e3:c1:19:0b:f3:ab:ac:f5:98:58:86:27:46:22:cd:80:01: cc:64:2f:db:b1:25:bc:fa:ee:33:9f:56:0e:66:fa:89:f8:d5: 7c:b3:0a:d4:7b:c4:b0:8e:20:14:01:87:11:cd:31:99:af:0e: bd:af:6a:7e:e5:bb:e2:f4:5d:71:ee:41:2d:fd:ed:41:68:c2: 40:f6:20:21:b0:fb:c8:af:21:9f:8e:a9:77:9a:04:c1:08:d6: f2:af:09:31 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ovVIyS078cc1Oh4a5j5GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwZTM4MWI2ZTc2Y2I5NTIwZThkOGY1Njc3NmVjYTBmZTE3 NmNjNDAwHhcNMjYwMTAxMDgxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMmE3ODFmMmRhODcxNjllNjdjMGE4OWRhYmU5N2VhYzk3MDM5YzYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzY0bRUwZh+4jyB501g2YfwJrNoWl uOSYquff8v2FAAAEdU/PJsPGuF+HIbnFRq3Z2PMOd2dEPPH/wsBHdRQZmQwkn+nT V9WIsU67e9+QyIMKROC3jo8GnkQbgUUOdXfHlwbs3n0S2B35xyykIixb6ydlII1Q gHSTyUvbsHfRpuzIcWtA1lAQaRlskabUctoRuumYT824z9ssaAHH8+KRDHjlAyk1 nh+A9ymVXbJifwP8pHMLO9YUsSRIwCGElQxHvdHOXOUIeUwoS64dFFwvVDIRY9bM QKKhsOOcdr4TgtvUSemo3ZML6HC0qJ0ojqdeljAknVntNm5lFQLX2EEloQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBKngfLahxaeZ8ConavpfqyXA5xgMB8GA1UdIwQY MBaAFKDjgbbnbLlSDo2PVnduyg/hdsxAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb09PQnR1ZHN1VklPalk5V2QyN0tELUYyekVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS84ZTZmMDgtMzBmMC00NmRkLWE3YTEt YTljMzg0MTI4ZDQyLzEvRXFlQjh0cUhGcDVud0tpZHEtbC1ySmNEbkdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS84ZTZmMDgtMzBmMC00NmRkLWE3YTEtYTljMzg0MTI4ZDQy LzEvb09PQnR1ZHN1VklPalk5V2QyN0tELUYyekVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuaRIMA0G CSqGSIb3DQEBCwUAA4IBAQAaxyUgWsP9CVDbHX5DtkF6ljeQg+5ayt34WdSJkV8u Nlb6a+wImH1O8c4r1xiExFYYi1wgBlSEuWczeTrGknyQQ64SKR+AaNNkr5Lgl0VY hk9LUnzOiBNkZgYpt1WJ+Yo7lT7hG1U55PWuf1IkaJnV15t9/0GXaNDXCi4xtBev UYSs7icC2Q1XdOqO70xmXOT6u+I1oFA99OeXkFz8bp9J+dCi48EZC/OrrPWYWIYn RiLNgAHMZC/bsSW8+u4zn1YOZvqJ+NV8swrUe8SwjiAUAYcRzTGZrw69r2p+5bvi 9F1x7kEt/e1BaMJA9iAhsPvIryGfjql3mgTBCNbyrwkx -----END CERTIFICATE-----Generated at Mon Jan 26 22:59:40 2026 by rpki-client