This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/EQDYZSB-4iaJyQwjSjIIBQzlhys.roa File: EQDYZSB-4iaJyQwjSjIIBQzlhys.roa (raw, json) Hash identifier: TgbIpBd4+tQ0V9vZqIWgoPeSE6DQXvJ+wX5nCs7obXI= Subject key identifier: 11:00:D8:65:20:7E:E2:26:89:C9:0C:23:4A:32:08:05:0C:E5:87:2B Certificate issuer: /CN=b4d73a6ad77a8f859b403db2ce715e82d1cf32fe Certificate serial: 019B7A5B17525750B6975C72D5218CE17803 Authority key identifier: B4:D7:3A:6A:D7:7A:8F:85:9B:40:3D:B2:CE:71:5E:82:D1:CF:32:FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/EQDYZSB-4iaJyQwjSjIIBQzlhys.roa Signing time: Thu 01 Jan 2026 16:19:08 +0000 ROA not before: Thu 01 Jan 2026 16:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12586 IP address blocks: 45.146.136.0/22 maxlen: 24 2a0f:3000::/29 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:02:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:17:52:57:50:b6:97:5c:72:d5:21:8c:e1:78:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4d73a6ad77a8f859b403db2ce715e82d1cf32fe Validity Not Before: Jan 1 16:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1100d865207ee22689c90c234a3208050ce5872b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:95:41:53:3e:ab:94:f8:6e:c1:e6:8c:72:e3: 50:9e:e6:e1:a8:0d:cc:a8:47:f8:f6:92:88:28:81: aa:47:10:a6:ce:e5:1d:69:5e:c0:ff:df:b2:2e:84: 95:13:54:37:73:b5:f0:63:77:c9:22:14:c2:6e:26: 5f:1c:51:ff:eb:db:d8:45:0a:00:94:ab:e1:6a:24: f8:08:86:c6:aa:43:a3:a6:4a:ab:9f:6c:01:73:27: 0c:ed:35:02:b8:35:f7:01:9b:9e:81:1e:b5:a1:71: 15:52:ca:b1:f3:c9:95:a2:3a:16:c9:97:e8:a8:43: 11:7b:62:d8:3a:52:d8:54:4d:3a:e5:8e:1a:39:85: d1:c0:a6:3f:e9:45:bd:55:f1:4a:a6:d9:04:7b:7b: d2:e1:63:ef:f1:a4:58:36:3f:6b:d7:19:cb:ca:79: f3:8e:6e:1d:60:1d:2d:ad:19:4f:6b:fe:2e:00:c6: c3:07:29:49:bb:6a:8d:0a:b3:0f:a5:a8:01:54:d0: e6:94:35:10:69:01:c1:dc:e9:2c:93:dc:18:76:00: 96:53:9d:10:74:9f:47:5f:1f:c4:0b:fa:09:2e:f1: c5:fd:13:83:c6:83:cb:42:e5:54:4e:b6:02:6d:ce: bc:62:aa:f3:51:31:fd:5d:90:99:1e:f5:da:8c:4a: e4:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:00:D8:65:20:7E:E2:26:89:C9:0C:23:4A:32:08:05:0C:E5:87:2B X509v3 Authority Key Identifier: keyid:B4:D7:3A:6A:D7:7A:8F:85:9B:40:3D:B2:CE:71:5E:82:D1:CF:32:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/EQDYZSB-4iaJyQwjSjIIBQzlhys.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.146.136.0/22 IPv6: 2a0f:3000::/29 Signature Algorithm: sha256WithRSAEncryption 19:5c:1d:6c:e4:1d:de:85:92:a0:32:d6:a7:1b:29:a9:aa:13: 01:ec:3f:38:81:98:16:c0:55:37:59:e2:74:5c:68:2c:ac:7b: 8b:8f:91:12:ba:44:e9:0c:2c:37:29:cf:20:df:9e:bb:f1:96: 91:bc:4b:60:2a:2e:f5:8f:d2:0a:c2:76:2b:76:88:e8:e6:d1: 59:4a:19:02:2c:f5:7c:6b:a8:99:fd:59:49:d8:6d:a4:de:ce: de:e8:af:f3:43:76:7e:ac:5a:36:c0:e7:80:cd:be:68:7a:02: 57:2a:e0:61:2c:f5:20:ac:b2:33:22:83:56:89:80:d0:eb:e9: 6f:e9:1d:4c:4c:a0:28:47:fc:35:86:9e:6a:b6:27:2a:b5:70: 97:70:d3:54:48:60:bd:d8:3a:3c:c0:01:9e:ea:56:41:87:33: 5b:4d:4e:20:46:aa:a5:23:8d:92:b4:a0:19:3d:df:2c:a7:03: 0c:44:2a:a8:72:23:56:0e:6a:61:99:de:ba:e2:ef:2f:80:1a: 11:03:ae:dc:33:45:c3:41:ad:96:bd:71:93:3f:9f:2d:c0:f6: 31:30:62:ea:13:0e:75:56:61:a1:3d:85:56:21:4b:17:40:e3: 52:94:b1:82:89:df:70:77:69:f4:5e:27:ae:07:97:bf:5a:73: 8b:25:30:1a -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6WxdSV1C2l1xy1SGM4XgDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ZDczYTZhZDc3YThmODU5YjQwM2RiMmNlNzE1ZTgyZDFj ZjMyZmUwHhcNMjYwMTAxMTYxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMTAwZDg2NTIwN2VlMjI2ODljOTBjMjM0YTMyMDgwNTBjZTU4NzJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipVBUz6rlPhuweaMcuNQnubhqA3M qEf49pKIKIGqRxCmzuUdaV7A/9+yLoSVE1Q3c7XwY3fJIhTCbiZfHFH/69vYRQoA lKvhaiT4CIbGqkOjpkqrn2wBcycM7TUCuDX3AZuegR61oXEVUsqx88mVojoWyZfo qEMRe2LYOlLYVE065Y4aOYXRwKY/6UW9VfFKptkEe3vS4WPv8aRYNj9r1xnLynnz jm4dYB0trRlPa/4uAMbDBylJu2qNCrMPpagBVNDmlDUQaQHB3Oksk9wYdgCWU50Q dJ9HXx/EC/oJLvHF/RODxoPLQuVUTrYCbc68YqrzUTH9XZCZHvXajErkLQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBEA2GUgfuImickMI0oyCAUM5YcrMB8GA1UdIwQY MBaAFLTXOmrXeo+Fm0A9ss5xXoLRzzL+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdE5jNmF0ZDZqNFdiUUQyeXpuRmVndEhQTXY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS83ZTdlZTctMWJkNC00NDM1LTg3MWYt NmNmOGU1NjdmZjFjLzEvRVFEWVpTQi00aWFKeVF3alNqSUlCUXpsaHlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS83ZTdlZTctMWJkNC00NDM1LTg3MWYtNmNmOGU1NjdmZjFj LzEvdE5jNmF0ZDZqNFdiUUQyeXpuRmVndEhQTXY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLZKIMA0E AgACMAcDBQMqDzAAMA0GCSqGSIb3DQEBCwUAA4IBAQAZXB1s5B3ehZKgMtanGymp qhMB7D84gZgWwFU3WeJ0XGgsrHuLj5ESukTpDCw3Kc8g35678ZaRvEtgKi71j9IK wnYrdojo5tFZShkCLPV8a6iZ/VlJ2G2k3s7e6K/zQ3Z+rFo2wOeAzb5oegJXKuBh LPUgrLIzIoNWiYDQ6+lv6R1MTKAoR/w1hp5qticqtXCXcNNUSGC92Do8wAGe6lZB hzNbTU4gRqqlI42StKAZPd8spwMMRCqociNWDmphmd664u8vgBoRA67cM0XDQa2W vXGTP58twPYxMGLqEw51VmGhPYVWIUsXQONSlLGCid9wd2n0XieuB5e/WnOLJTAa -----END CERTIFICATE-----Generated at Mon Jan 19 23:22:16 2026 by rpki-client