This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/EqtclYaSecA2rl4gAR9CuYG1Sqw.roa File: EqtclYaSecA2rl4gAR9CuYG1Sqw.roa (raw, json) Hash identifier: IB5U9cjGN5Re/RMI85fsP39V7hXBzOfts1pGoPCaE58= Subject key identifier: 12:AB:5C:95:86:92:79:C0:36:AE:5E:20:01:1F:42:B9:81:B5:4A:AC Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019B791064B7618FC17AC7494AA57051290D Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/EqtclYaSecA2rl4gAR9CuYG1Sqw.roa Signing time: Thu 01 Jan 2026 10:17:55 +0000 ROA not before: Thu 01 Jan 2026 10:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208745 IP address blocks: 31.210.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:64:b7:61:8f:c1:7a:c7:49:4a:a5:70:51:29:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Jan 1 10:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=12ab5c95869279c036ae5e20011f42b981b54aac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ba:5c:96:be:b7:a4:34:f0:16:7b:10:2d:6c: 79:33:16:0b:75:0e:28:03:4f:e1:6d:65:6a:11:5a: 82:d9:72:db:ff:4a:f3:e2:db:2b:f0:f4:50:6b:45: f4:1b:22:ed:ea:41:6a:0c:0f:db:db:09:4a:b0:d1: a0:21:eb:c7:f1:aa:70:af:56:ec:4a:f6:a7:df:e2: 09:64:89:41:04:a8:7f:33:a1:da:8d:31:3f:60:c3: 3f:45:41:1d:6d:9c:60:85:8d:c7:c7:6f:dc:08:05: 49:6d:ec:4f:8b:1a:90:da:b3:6e:31:ba:84:18:ac: 39:5e:07:a5:ff:dc:59:e7:1d:f0:71:07:0a:3d:c2: e3:b3:aa:09:90:1e:d3:a7:0f:01:68:e5:17:49:d2: e9:16:e4:26:4d:66:23:30:ca:b5:0d:b8:10:14:b3: 0a:16:8b:26:ce:6b:8e:0d:03:b3:79:45:ea:e2:b6: 64:66:5f:bd:42:19:03:9c:26:ca:89:1f:81:04:ae: 50:cd:ad:7e:59:a1:e9:be:d4:38:d5:d9:73:18:b6: 1c:78:65:5d:92:5b:c6:14:d6:0a:65:fb:52:ea:0d: f9:e5:19:72:6d:e0:70:17:5e:e1:09:b4:74:61:98: f9:b2:64:48:9b:68:aa:df:6d:d6:c0:a4:4e:f9:92: 86:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:AB:5C:95:86:92:79:C0:36:AE:5E:20:01:1F:42:B9:81:B5:4A:AC X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/EqtclYaSecA2rl4gAR9CuYG1Sqw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.210.38.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:82:f7:36:3e:39:27:d4:2c:53:2d:bf:a3:44:06:6e:ab:8c: c7:5b:f1:09:4e:eb:1e:d5:f1:59:f9:60:3c:ac:a7:67:0c:d3: d5:54:9e:43:b9:e8:db:11:9b:b8:ba:15:d6:64:85:39:97:6b: 46:24:c4:40:f9:2f:fe:b4:b0:2a:1b:cb:00:f9:0e:e1:4d:bd: 7e:2d:f9:90:9c:c7:08:e7:ba:4e:46:eb:ef:48:e9:3e:4d:8a: a4:98:8d:56:3f:a2:1a:0f:f0:c2:d7:f2:eb:94:28:c6:aa:c4: 23:fa:3b:01:03:d3:72:ad:e3:5e:80:62:95:e0:b3:8d:b7:3b: 64:23:f5:70:75:12:54:6e:a5:bd:9d:c2:83:de:87:17:87:48: 8b:6b:1e:fd:87:bb:fc:a4:40:f3:a0:b4:f0:1c:f6:20:e7:4b: 53:26:2a:30:87:ea:c9:eb:20:ab:8f:eb:36:c3:5a:34:ba:0b: b0:d4:d7:e3:c2:02:19:63:72:3f:a4:3f:2b:54:7c:5f:f6:25: ee:2e:c0:46:1d:52:5e:c9:c7:cc:c1:c4:bd:a0:b6:79:cc:41: 37:52:4d:e9:e8:00:0f:56:68:9b:0a:ca:c4:bd:7b:7b:9e:c7: 9a:27:c0:f6:e2:dd:11:05:ae:69:7c:b3:1e:f9:59:d2:bc:41: 50:9b:17:9e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EGS3YY/BesdJSqVwUSkNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjYwMTAxMTAxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMmFiNWM5NTg2OTI3OWMwMzZhZTVlMjAwMTFmNDJiOTgxYjU0YWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Lpclr63pDTwFnsQLWx5MxYLdQ4o A0/hbWVqEVqC2XLb/0rz4tsr8PRQa0X0GyLt6kFqDA/b2wlKsNGgIevH8apwr1bs Svan3+IJZIlBBKh/M6HajTE/YMM/RUEdbZxghY3Hx2/cCAVJbexPixqQ2rNuMbqE GKw5Xgel/9xZ5x3wcQcKPcLjs6oJkB7Tpw8BaOUXSdLpFuQmTWYjMMq1DbgQFLMK FosmzmuODQOzeUXq4rZkZl+9QhkDnCbKiR+BBK5Qza1+WaHpvtQ41dlzGLYceGVd klvGFNYKZftS6g355RlybeBwF17hCbR0YZj5smRIm2iq323WwKRO+ZKG5QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBKrXJWGknnANq5eIAEfQrmBtUqsMB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvRXF0Y2xZYVNlY0Eycmw0Z0FSOUN1WUcxU3F3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH9ImMA0G CSqGSIb3DQEBCwUAA4IBAQBegvc2Pjkn1CxTLb+jRAZuq4zHW/EJTuse1fFZ+WA8 rKdnDNPVVJ5DuejbEZu4uhXWZIU5l2tGJMRA+S/+tLAqG8sA+Q7hTb1+LfmQnMcI 57pORuvvSOk+TYqkmI1WP6IaD/DC1/LrlCjGqsQj+jsBA9NyreNegGKV4LONtztk I/VwdRJUbqW9ncKD3ocXh0iLax79h7v8pEDzoLTwHPYg50tTJiowh+rJ6yCrj+s2 w1o0uguw1NfjwgIZY3I/pD8rVHxf9iXuLsBGHVJeycfMwcS9oLZ5zEE3Uk3p6AAP VmibCsrEvXt7nseaJ8D24t0RBa5pfLMe+VnSvEFQmxee -----END CERTIFICATE-----Generated at Wed Jan 21 13:32:41 2026 by rpki-client