This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/ezywn8EPx5ODLOytvX7dXsPm7gc.roa File: ezywn8EPx5ODLOytvX7dXsPm7gc.roa (raw, json) Hash identifier: geqaFC8LHCTX2LcxH4kfFFCGPOyVbzF9N0haayABzHg= Subject key identifier: 7B:3C:B0:9F:C1:0F:C7:93:83:2C:EC:AD:BD:7E:DD:5E:C3:E6:EE:07 Certificate issuer: /CN=2acd8d1682e6622c1c09237bc41aa516669672b7 Certificate serial: 019B7EA750F54B457090470FC73C03FD759A Authority key identifier: 2A:CD:8D:16:82:E6:62:2C:1C:09:23:7B:C4:1A:A5:16:66:96:72:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/ezywn8EPx5ODLOytvX7dXsPm7gc.roa Signing time: Fri 02 Jan 2026 12:20:53 +0000 ROA not before: Fri 02 Jan 2026 12:20:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 40627 IP address blocks: 80.81.128.0/20 maxlen: 32 185.23.248.0/22 maxlen: 32 2a04:28c0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.crl rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft rsync://rpki.ripe.net/repository/DEFAULT/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:50:f5:4b:45:70:90:47:0f:c7:3c:03:fd:75:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2acd8d1682e6622c1c09237bc41aa516669672b7 Validity Not Before: Jan 2 12:20:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7b3cb09fc10fc793832cecadbd7edd5ec3e6ee07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:6e:d4:4f:e3:26:0d:02:c7:6a:44:c9:f4:b2: ac:bf:bf:ae:92:37:8c:71:b3:fe:9e:ab:ad:fa:8a: 42:f6:0e:6d:a0:39:d7:36:cb:e4:40:f2:77:d0:8c: 9d:1a:5e:3c:4e:3b:ad:6d:a0:b9:ab:b9:ea:2b:d1: 14:01:41:ca:81:ae:6a:76:d6:9f:bc:c0:e8:46:12: fe:10:a1:f9:e1:4d:90:f0:06:88:1a:45:ab:e4:89: 81:8a:38:ee:43:47:1b:a2:0f:90:97:1f:a7:4b:aa: 8a:a3:81:50:03:be:82:c4:bb:ad:c9:c1:78:48:78: 64:3c:40:0f:10:bf:30:93:53:7d:02:6f:8f:0f:e7: ac:28:88:ce:e2:27:bc:3f:b5:17:53:30:d7:1f:e2: 31:73:e9:63:29:95:4b:7f:52:87:df:64:a8:14:27: dd:ae:49:8b:a2:5c:70:a0:87:20:a4:25:21:4a:9c: 70:b6:60:d0:04:b3:09:17:c0:fc:b5:65:b0:ad:30: 64:5f:1c:e1:05:20:f6:85:26:6d:9a:fe:00:54:68: 3f:c9:03:22:25:e1:fb:af:2b:24:29:15:6f:15:03: 07:ae:ed:0e:2d:b2:a4:9f:b0:96:a2:7b:fb:e4:3d: e0:06:4a:dd:56:4d:b1:f3:d2:82:20:ee:28:86:48: 04:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:3C:B0:9F:C1:0F:C7:93:83:2C:EC:AD:BD:7E:DD:5E:C3:E6:EE:07 X509v3 Authority Key Identifier: keyid:2A:CD:8D:16:82:E6:62:2C:1C:09:23:7B:C4:1A:A5:16:66:96:72:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/ezywn8EPx5ODLOytvX7dXsPm7gc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.81.128.0/20 185.23.248.0/22 IPv6: 2a04:28c0::/29 Signature Algorithm: sha256WithRSAEncryption 68:79:ec:86:7e:ae:7c:ae:22:d3:e2:2b:68:e3:a6:16:b5:82: 12:c2:4c:e9:50:c5:e4:92:71:d4:9b:71:5b:4f:43:e8:c6:b8: f8:9b:24:32:02:63:ab:2f:12:b9:7b:11:63:08:15:37:8e:2b: 5b:7a:02:a9:7c:fb:eb:29:e2:d9:67:b8:6b:1b:0e:ed:c1:f1: 95:7c:9e:8f:a5:8b:d1:a4:85:b7:75:0d:e5:9c:aa:4e:d2:2b: 79:59:c4:c5:90:6c:b7:bf:94:84:69:5f:78:13:4c:e1:8a:41: ee:43:2a:9e:1c:cc:f1:31:2f:e6:82:af:bb:f1:ce:36:dc:d5: a7:53:0e:59:39:99:95:f5:81:b1:fe:4e:c0:60:3c:eb:f3:2f: 87:e7:41:0f:61:21:c1:c1:14:1c:68:7e:b4:c5:84:fa:29:13: 05:b8:14:b3:fc:46:db:a6:76:7d:cc:c6:3c:13:d4:49:b1:af: cd:82:6e:56:9b:a1:25:72:8c:7e:eb:c2:be:41:d5:b6:4a:7e: 14:ab:f3:ee:87:5b:ea:e9:e7:7a:d4:05:e7:c6:f5:67:3c:ca: 01:91:0e:3a:cb:c8:70:f1:03:87:11:82:8d:72:40:e3:48:a8: a8:91:89:d6:3a:48:8e:c2:04:ae:0b:ce:0e:ea:6e:6d:66:6d: d0:a3:33:ac -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt+p1D1S0VwkEcPxzwD/XWaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhY2Q4ZDE2ODJlNjYyMmMxYzA5MjM3YmM0MWFhNTE2NjY5 NjcyYjcwHhcNMjYwMTAyMTIyMDUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YjNjYjA5ZmMxMGZjNzkzODMyY2VjYWRiZDdlZGQ1ZWMzZTZlZTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzW7UT+MmDQLHakTJ9LKsv7+ukjeM cbP+nqut+opC9g5toDnXNsvkQPJ30IydGl48TjutbaC5q7nqK9EUAUHKga5qdtaf vMDoRhL+EKH54U2Q8AaIGkWr5ImBijjuQ0cbog+Qlx+nS6qKo4FQA76CxLutycF4 SHhkPEAPEL8wk1N9Am+PD+esKIjO4ie8P7UXUzDXH+Ixc+ljKZVLf1KH32SoFCfd rkmLolxwoIcgpCUhSpxwtmDQBLMJF8D8tWWwrTBkXxzhBSD2hSZtmv4AVGg/yQMi JeH7ryskKRVvFQMHru0OLbKkn7CWonv75D3gBkrdVk2x89KCIO4ohkgEQwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFHs8sJ/BD8eTgyzsrb1+3V7D5u4HMB8GA1UdIwQY MBaAFCrNjRaC5mIsHAkje8QapRZmlnK3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3MyTkZvTG1ZaXdjQ1NON3hCcWxGbWFXY3JjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85NWRiY2UtZDRlOS00MWYxLTgyZGMt ZTg0Y2IxZGEyMWJkLzEvZXp5d244RVB4NU9ETE95dHZYN2RYc1BtN2djLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS85NWRiY2UtZDRlOS00MWYxLTgyZGMtZTg0Y2IxZGEyMWJk LzEvS3MyTkZvTG1ZaXdjQ1NON3hCcWxGbWFXY3JjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEUFGAAwQC uRf4MA0EAgACMAcDBQMqBCjAMA0GCSqGSIb3DQEBCwUAA4IBAQBoeeyGfq58riLT 4ito46YWtYISwkzpUMXkknHUm3FbT0Poxrj4myQyAmOrLxK5exFjCBU3jitbegKp fPvrKeLZZ7hrGw7twfGVfJ6PpYvRpIW3dQ3lnKpO0it5WcTFkGy3v5SEaV94E0zh ikHuQyqeHMzxMS/mgq+78c423NWnUw5ZOZmV9YGx/k7AYDzr8y+H50EPYSHBwRQc aH60xYT6KRMFuBSz/EbbpnZ9zMY8E9RJsa/Ngm5Wm6Elcox+68K+QdW2Sn4Uq/Pu h1vq6ed61AXnxvVnPMoBkQ46y8hw8QOHEYKNckDjSKiokYnWOkiOwgSuC84O6m5t Zm3QozOs -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:34 2026 by rpki-client