This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/enc-EOyNk3A37jIhVYc1pfkJfTk.roa File: enc-EOyNk3A37jIhVYc1pfkJfTk.roa (raw, json) Hash identifier: iZlr9BOdIh4Jt6AMacPHbOkYOfH8n/lnpi7AVUE1odM= Subject key identifier: 7A:77:3E:10:EC:8D:93:70:37:EE:32:21:55:87:35:A5:F9:09:7D:39 Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346 Certificate serial: 019B7E38B31B84E74D4EE453EC2E064F0E15 Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/enc-EOyNk3A37jIhVYc1pfkJfTk.roa Signing time: Fri 02 Jan 2026 10:20:03 +0000 ROA not before: Fri 02 Jan 2026 10:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 398465 IP address blocks: 212.111.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:b3:1b:84:e7:4d:4e:e4:53:ec:2e:06:4f:0e:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19426325acb8ce609a686fa655b058968809b346 Validity Not Before: Jan 2 10:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a773e10ec8d937037ee3221558735a5f9097d39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cd:8e:3f:0e:74:31:1d:1d:59:c9:c3:e4:78: eb:5b:04:03:39:e9:ba:7f:a2:ee:47:3b:18:a8:38: 39:3b:42:d5:12:4c:b7:49:3b:3f:03:77:76:ce:0a: c6:0a:83:b0:3d:a3:72:cf:87:fe:ce:cd:2c:d6:2e: c0:21:2a:44:e5:24:53:4f:ee:02:3c:11:7d:cf:29: 3a:24:6b:92:5a:74:49:16:3f:e4:98:e8:a9:a6:f5: e9:4b:68:05:18:03:a3:56:3f:76:ff:5c:88:fb:45: 1b:f3:cb:4e:39:cc:1a:ea:20:ea:25:22:5e:98:70: 23:ed:c0:68:a3:5c:8c:47:ca:5c:5b:72:5e:f8:dc: 77:61:46:ac:62:d2:b0:92:c5:a0:89:e7:38:79:58: 1f:2f:51:bd:86:d0:c8:b3:b6:fa:a4:d8:55:6b:01: fa:14:6f:cd:9c:a1:ad:f7:f0:6a:9c:1a:77:b6:d8: bb:e2:c0:95:49:69:57:4b:69:c8:b2:82:46:eb:b2: 3d:6f:49:e1:8f:ec:dc:cf:b1:3b:02:c9:8b:f2:36: fb:0c:f5:81:1e:29:fe:ec:e6:85:6a:ce:66:8b:f4: c0:d8:80:e0:5b:67:46:9d:49:33:0c:e8:c0:65:39: 5a:c4:8c:3c:fe:a2:08:99:02:26:e0:83:46:76:72: 8f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:77:3E:10:EC:8D:93:70:37:EE:32:21:55:87:35:A5:F9:09:7D:39 X509v3 Authority Key Identifier: keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/enc-EOyNk3A37jIhVYc1pfkJfTk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.111.220.0/22 Signature Algorithm: sha256WithRSAEncryption 6b:11:1e:26:34:cb:8e:a2:de:a3:f5:81:a0:71:b9:d1:ce:a3: ef:f1:a1:1b:d1:0c:4a:bb:53:81:70:d4:4a:67:f9:cd:a5:20: bd:14:ce:02:2b:20:31:54:90:79:eb:83:2d:7d:b4:7b:2c:3b: 39:a4:97:ff:c9:b3:57:d4:be:e9:42:d3:04:87:97:d5:a5:88: b5:90:b1:95:6b:b3:cf:50:b1:4b:d8:b5:28:dd:2d:b3:bd:a6: de:d7:36:43:e6:f4:3c:22:ca:55:78:be:c3:f3:12:7c:b8:9e: 38:6f:87:d1:91:b1:a0:b3:64:cc:3c:38:31:01:89:81:08:7f: 79:e6:47:95:0d:98:f6:5d:ca:66:cb:37:ff:26:b1:22:32:17: 2e:2a:ff:1c:82:49:5b:c9:08:86:d5:78:90:32:b6:dd:9a:46: 8a:b1:ce:c1:2b:92:17:1d:9f:4c:5c:93:41:e6:2b:a7:1d:40: 81:52:73:6e:95:43:2d:fa:bb:38:d3:a7:c9:9a:60:9c:ca:36: 21:d1:01:53:61:0d:0a:c0:46:a5:05:99:86:d8:48:a3:94:7e: 1d:23:79:b7:ae:6c:1d:6a:d9:98:ba:4a:07:1a:80:e3:e5:d7: f5:4f:83:60:b7:8e:e3:68:d6:35:12:9c:c7:8d:0b:c8:6a:f1: ea:4a:79:a7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OLMbhOdNTuRT7C4GTw4VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw OWIzNDYwHhcNMjYwMTAyMTAyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTc3M2UxMGVjOGQ5MzcwMzdlZTMyMjE1NTg3MzVhNWY5MDk3ZDM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtc2OPw50MR0dWcnD5HjrWwQDOem6 f6LuRzsYqDg5O0LVEky3STs/A3d2zgrGCoOwPaNyz4f+zs0s1i7AISpE5SRTT+4C PBF9zyk6JGuSWnRJFj/kmOippvXpS2gFGAOjVj92/1yI+0Ub88tOOcwa6iDqJSJe mHAj7cBoo1yMR8pcW3Je+Nx3YUasYtKwksWgiec4eVgfL1G9htDIs7b6pNhVawH6 FG/NnKGt9/BqnBp3tti74sCVSWlXS2nIsoJG67I9b0nhj+zcz7E7AsmL8jb7DPWB Hin+7OaFas5mi/TA2IDgW2dGnUkzDOjAZTlaxIw8/qIImQIm4INGdnKP5wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHp3PhDsjZNwN+4yIVWHNaX5CX05MB8GA1UdIwQY MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt MDNmNGM3MTEzYzM0LzEvZW5jLUVPeU5rM0EzN2pJaFZZYzFwZmtKZlRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0 LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1G/cMA0G CSqGSIb3DQEBCwUAA4IBAQBrER4mNMuOot6j9YGgcbnRzqPv8aEb0QxKu1OBcNRK Z/nNpSC9FM4CKyAxVJB564MtfbR7LDs5pJf/ybNX1L7pQtMEh5fVpYi1kLGVa7PP ULFL2LUo3S2zvabe1zZD5vQ8IspVeL7D8xJ8uJ44b4fRkbGgs2TMPDgxAYmBCH95 5keVDZj2Xcpmyzf/JrEiMhcuKv8cgklbyQiG1XiQMrbdmkaKsc7BK5IXHZ9MXJNB 5iunHUCBUnNulUMt+rs406fJmmCcyjYh0QFTYQ0KwEalBZmG2EijlH4dI3m3rmwd atmYukoHGoDj5df1T4Ngt47jaNY1EpzHjQvIavHqSnmn -----END CERTIFICATE-----Generated at Thu Jan 8 09:24:15 2026 by rpki-client