This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/EqP-OwutSropMKZDpJsJICxaOQA.roa File: EqP-OwutSropMKZDpJsJICxaOQA.roa (raw, json) Hash identifier: 3uR+4TzhakfaPgMhOyS6vVGKMQMDAuuvPFvZm5rpWtA= Subject key identifier: 12:A3:FE:3B:0B:AD:4A:BA:29:30:A6:43:A4:9B:09:20:2C:5A:39:00 Certificate issuer: /CN=9cc60ed881418a217e8dd3c1fa523e2565caeb9b Certificate serial: 019B7A5B69815F1147FE7370F2D49E09B245 Authority key identifier: 9C:C6:0E:D8:81:41:8A:21:7E:8D:D3:C1:FA:52:3E:25:65:CA:EB:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMYO2IFBiiF-jdPB-lI-JWXK65s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/EqP-OwutSropMKZDpJsJICxaOQA.roa Signing time: Thu 01 Jan 2026 16:19:29 +0000 ROA not before: Thu 01 Jan 2026 16:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201702 IP address blocks: 185.66.200.0/23 maxlen: 24 2a05:980::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.crl rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.mft rsync://rpki.ripe.net/repository/DEFAULT/nMYO2IFBiiF-jdPB-lI-JWXK65s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:69:81:5f:11:47:fe:73:70:f2:d4:9e:09:b2:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cc60ed881418a217e8dd3c1fa523e2565caeb9b Validity Not Before: Jan 1 16:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=12a3fe3b0bad4aba2930a643a49b09202c5a3900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9d:01:dc:1e:6e:67:99:26:60:59:ba:3c:77: 80:d2:b5:f9:37:7f:eb:a7:3e:89:3e:48:73:a5:8d: 95:1b:44:84:0f:0f:07:0f:ea:b8:21:8b:87:62:3e: 08:04:ca:fc:e0:75:b3:be:e6:97:92:bd:02:5d:35: 81:b4:ba:87:87:1e:1c:9c:29:15:8a:cd:4c:aa:ba: 90:26:c2:50:2a:dc:8f:d7:96:f7:a0:ba:61:24:44: 20:ac:1a:f7:f4:cd:26:fb:02:ba:e3:d8:20:1a:3d: b1:e3:61:71:b2:38:a2:0c:96:e8:87:4a:05:6c:d8: 4c:cb:2d:a3:20:d9:2f:6f:a5:62:df:43:8a:16:a3: 6e:22:fa:e3:20:c7:40:e7:3e:51:a0:74:4a:41:44: f0:54:6a:5b:94:20:53:11:e5:f4:39:76:b0:09:05: ec:56:52:57:31:30:a5:c6:00:b4:6c:6f:47:5a:ab: d9:05:71:9b:65:ee:b4:b5:46:1b:e3:31:8a:02:1f: 64:4d:0d:c0:b6:af:b0:2d:a2:8c:c0:5d:bb:2d:50: 68:5c:d1:b8:21:95:4c:a1:49:ee:29:33:76:78:45: e9:45:43:a3:f8:60:90:6e:71:9f:e0:a6:3c:69:fe: 8d:31:03:b8:17:3f:ea:37:02:9d:ed:57:57:31:7d: 14:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:A3:FE:3B:0B:AD:4A:BA:29:30:A6:43:A4:9B:09:20:2C:5A:39:00 X509v3 Authority Key Identifier: keyid:9C:C6:0E:D8:81:41:8A:21:7E:8D:D3:C1:FA:52:3E:25:65:CA:EB:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMYO2IFBiiF-jdPB-lI-JWXK65s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/EqP-OwutSropMKZDpJsJICxaOQA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/72ee02-13d9-4396-9f7e-4ca842bacda5/1/nMYO2IFBiiF-jdPB-lI-JWXK65s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.66.200.0/23 IPv6: 2a05:980::/29 Signature Algorithm: sha256WithRSAEncryption 2e:d6:1c:8a:65:34:dd:c1:63:49:a7:b7:00:56:ab:79:6c:33: 9b:a9:ce:24:f1:f5:c7:d9:4d:f6:ce:85:3f:73:1a:78:05:59: 8d:b1:6f:71:e4:8d:42:75:ab:97:90:c2:f1:46:0b:ed:56:d9: 4f:f2:5a:56:72:52:18:50:7d:b1:2d:39:bd:a9:4f:20:c9:69: 38:4a:90:3f:08:f8:fd:96:ca:d6:84:22:ff:3c:62:f9:37:8e: 88:2c:97:1c:0d:b6:fa:72:ec:07:0c:5d:d2:1c:18:e7:2c:1f: 7a:8a:26:46:1a:76:83:1a:39:43:b1:66:2f:c4:01:58:62:4a: 55:4d:a1:81:be:58:00:4a:7f:66:a0:15:30:33:cb:b7:2d:73: e4:21:21:03:af:ec:b2:48:cd:e3:d2:5f:c9:2b:38:42:d8:33: 08:70:6a:b0:99:cd:aa:a1:e5:f8:6a:ea:82:f4:e0:f1:3b:2b: 15:3e:ae:16:0d:bd:f1:89:e1:f6:3a:71:0f:09:36:88:ce:14: 29:34:99:82:11:60:1a:81:96:a8:ec:6f:73:ce:bc:54:ad:e8: 88:b5:8f:ef:16:67:ad:d4:c7:e7:57:55:5d:bc:d2:c2:6f:93: df:2e:17:42:16:92:87:3a:e1:00:98:d6:66:5c:ad:1a:ca:e8: 2b:ec:d2:f3 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6W2mBXxFH/nNw8tSeCbJFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYzYwZWQ4ODE0MThhMjE3ZThkZDNjMWZhNTIzZTI1NjVj YWViOWIwHhcNMjYwMTAxMTYxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMmEzZmUzYjBiYWQ0YWJhMjkzMGE2NDNhNDliMDkyMDJjNWEzOTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJ0B3B5uZ5kmYFm6PHeA0rX5N3/r pz6JPkhzpY2VG0SEDw8HD+q4IYuHYj4IBMr84HWzvuaXkr0CXTWBtLqHhx4cnCkV is1MqrqQJsJQKtyP15b3oLphJEQgrBr39M0m+wK649ggGj2x42FxsjiiDJboh0oF bNhMyy2jINkvb6Vi30OKFqNuIvrjIMdA5z5RoHRKQUTwVGpblCBTEeX0OXawCQXs VlJXMTClxgC0bG9HWqvZBXGbZe60tUYb4zGKAh9kTQ3Atq+wLaKMwF27LVBoXNG4 IZVMoUnuKTN2eEXpRUOj+GCQbnGf4KY8af6NMQO4Fz/qNwKd7VdXMX0UVwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBKj/jsLrUq6KTCmQ6SbCSAsWjkAMB8GA1UdIwQY MBaAFJzGDtiBQYohfo3TwfpSPiVlyuubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbk1ZTzJJRkJpaUYtamRQQi1sSS1KV1hLNjVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni83MmVlMDItMTNkOS00Mzk2LTlmN2Ut NGNhODQyYmFjZGE1LzEvRXFQLU93dXRTcm9wTUtaRHBKc0pJQ3hhT1FBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni83MmVlMDItMTNkOS00Mzk2LTlmN2UtNGNhODQyYmFjZGE1 LzEvbk1ZTzJJRkJpaUYtamRQQi1sSS1KV1hLNjVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBuULIMA0E AgACMAcDBQMqBQmAMA0GCSqGSIb3DQEBCwUAA4IBAQAu1hyKZTTdwWNJp7cAVqt5 bDObqc4k8fXH2U32zoU/cxp4BVmNsW9x5I1CdauXkMLxRgvtVtlP8lpWclIYUH2x LTm9qU8gyWk4SpA/CPj9lsrWhCL/PGL5N46ILJccDbb6cuwHDF3SHBjnLB96iiZG GnaDGjlDsWYvxAFYYkpVTaGBvlgASn9moBUwM8u3LXPkISEDr+yySM3j0l/JKzhC 2DMIcGqwmc2qoeX4auqC9ODxOysVPq4WDb3xieH2OnEPCTaIzhQpNJmCEWAagZao 7G9zzrxUreiItY/vFmet1MfnV1VdvNLCb5PfLhdCFpKHOuEAmNZmXK0ayugr7NLz -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:40 2026 by rpki-client