This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/eqL5EXvfQ7EICu83EH660AiMFl4.roa File: eqL5EXvfQ7EICu83EH660AiMFl4.roa (raw, json) Hash identifier: F0k10NSzssrmyfr0nDX6XARqOSITY97kFX655pXrJ+4= Subject key identifier: 7A:A2:F9:11:7B:DF:43:B1:08:0A:EF:37:10:7E:BA:D0:08:8C:16:5E Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Certificate serial: 019B7C80B5960F6C09A87FB4C04297763F41 Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/eqL5EXvfQ7EICu83EH660AiMFl4.roa Signing time: Fri 02 Jan 2026 02:19:28 +0000 ROA not before: Fri 02 Jan 2026 02:19:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 84.32.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:b5:96:0f:6c:09:a8:7f:b4:c0:42:97:76:3f:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5 Validity Not Before: Jan 2 02:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7aa2f9117bdf43b1080aef37107ebad0088c165e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9f:b7:23:84:be:e7:7f:6e:58:3c:53:f9:0a: 4b:f9:73:45:7e:0b:fb:dd:b9:fa:29:fd:f8:a9:43: 8e:30:83:ca:d6:a2:d0:93:76:04:81:23:3e:c5:82: 58:b6:b5:01:1f:80:a5:dc:05:67:c5:98:60:5f:9a: 19:34:6c:98:f0:a1:0f:88:33:9e:0c:15:73:3b:59: f5:7c:82:31:4a:42:fb:24:c3:55:9c:09:9a:e3:71: 8a:bb:11:69:8a:32:d5:a5:6d:ad:ce:99:e8:4e:91: c2:10:1d:19:1c:84:d6:74:35:40:6d:05:d6:3f:97: 56:8f:64:b8:81:5c:bd:77:a9:3d:a5:2b:d9:dd:92: 9d:00:a4:17:00:42:89:77:f3:46:fe:6d:7d:56:ee: 85:63:d4:b3:d6:f8:af:3d:46:51:63:d2:94:1b:46: af:3e:82:a0:b9:01:b5:e8:ab:ec:25:a5:4a:08:a1: b7:b9:00:cf:55:da:dc:14:68:13:8e:25:84:01:82: d9:81:a6:ec:f3:d0:7f:38:72:a8:d1:57:c3:ff:a4: 62:df:89:1e:98:ae:bf:ca:ff:6d:92:ee:cc:da:2f: 33:b2:a0:f0:7e:09:77:8c:7d:34:8b:43:da:1f:81: ae:6e:f1:78:46:08:3a:ea:ba:2e:3d:31:49:c8:28: d2:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:A2:F9:11:7B:DF:43:B1:08:0A:EF:37:10:7E:BA:D0:08:8C:16:5E X509v3 Authority Key Identifier: keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/eqL5EXvfQ7EICu83EH660AiMFl4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.32.236.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:fb:2c:f9:f4:6a:c7:af:ff:03:a1:d4:b2:ff:48:bc:bd:a2: 3a:e9:ed:3f:43:e5:a5:a9:f0:91:17:c1:4f:89:bc:b2:f7:c9: fb:44:c8:45:3c:c1:69:f9:97:35:de:88:41:81:56:0a:3b:bd: 3f:db:44:69:52:24:3a:8e:03:63:42:62:d9:f5:81:04:a5:c0: 2e:cd:b2:36:82:35:5c:40:67:21:9c:e9:3f:d5:32:76:47:bf: e6:71:2b:fb:ab:c8:8c:b9:62:bd:94:78:d2:5f:0e:03:f7:98: ff:dc:de:61:eb:96:78:6e:e7:dc:15:ff:3c:e9:46:2f:6b:a8: 39:69:0c:da:8f:e3:bf:cf:9b:5b:40:fc:ab:55:6d:7b:31:64: d6:24:ef:74:a1:43:2f:21:92:39:44:99:03:38:1b:61:5e:77: 51:89:f9:e4:85:ba:08:0d:5e:16:35:db:a8:22:4e:b3:03:1c: f7:47:02:ae:c5:7e:30:98:60:88:8b:0c:5f:8b:b0:62:ed:2f: 03:63:cf:a2:a8:fb:cc:71:b5:8f:bd:5c:f8:0f:3c:74:27:fb: b6:c1:8a:d3:70:a8:7d:1b:92:be:3e:6e:f9:98:75:7f:a9:60: 1d:05:03:aa:b1:6a:0f:5e:4e:f6:e1:2d:28:27:a1:4e:c0:93: fb:20:c8:e3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gLWWD2wJqH+0wEKXdj9BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi ZGEzYzUwHhcNMjYwMTAyMDIxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YWEyZjkxMTdiZGY0M2IxMDgwYWVmMzcxMDdlYmFkMDA4OGMxNjVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxp+3I4S+539uWDxT+QpL+XNFfgv7 3bn6Kf34qUOOMIPK1qLQk3YEgSM+xYJYtrUBH4Cl3AVnxZhgX5oZNGyY8KEPiDOe DBVzO1n1fIIxSkL7JMNVnAma43GKuxFpijLVpW2tzpnoTpHCEB0ZHITWdDVAbQXW P5dWj2S4gVy9d6k9pSvZ3ZKdAKQXAEKJd/NG/m19Vu6FY9Sz1vivPUZRY9KUG0av PoKguQG16KvsJaVKCKG3uQDPVdrcFGgTjiWEAYLZgabs89B/OHKo0VfD/6Ri34ke mK6/yv9tku7M2i8zsqDwfgl3jH00i0PaH4GubvF4Rgg66rouPTFJyCjScQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHqi+RF730OxCArvNxB+utAIjBZeMB8GA1UdIwQY MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt MjM0ODFiZjA5MWMzLzEvZXFMNUVYdmZRN0VJQ3U4M0VINjYwQWlNRmw0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVCDsMA0G CSqGSIb3DQEBCwUAA4IBAQBq+yz59GrHr/8DodSy/0i8vaI66e0/Q+WlqfCRF8FP ibyy98n7RMhFPMFp+Zc13ohBgVYKO70/20RpUiQ6jgNjQmLZ9YEEpcAuzbI2gjVc QGchnOk/1TJ2R7/mcSv7q8iMuWK9lHjSXw4D95j/3N5h65Z4bufcFf886UYva6g5 aQzaj+O/z5tbQPyrVW17MWTWJO90oUMvIZI5RJkDOBthXndRifnkhboIDV4WNduo Ik6zAxz3RwKuxX4wmGCIiwxfi7Bi7S8DY8+iqPvMcbWPvVz4Dzx0J/u2wYrTcKh9 G5K+Pm75mHV/qWAdBQOqsWoPXk724S0oJ6FOwJP7IMjj -----END CERTIFICATE-----Generated at Mon Jan 19 15:28:02 2026 by rpki-client