This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/EQaCUZIVsXpGeGJub7JeUMDjQ5M.roa File: EQaCUZIVsXpGeGJub7JeUMDjQ5M.roa (raw, json) Hash identifier: 0qDR8fqSNz6JKdvLNgWWpIOcGmvV7VtLTyHMuKF/8x0= Subject key identifier: 11:06:82:51:92:15:B1:7A:46:78:62:6E:6F:B2:5E:50:C0:E3:43:93 Certificate issuer: /CN=0d4ee193b301665b56f6780f225fd44d144093af Certificate serial: 019B7F82EC31E7E3CB0B367061B3E6524157 Authority key identifier: 0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/EQaCUZIVsXpGeGJub7JeUMDjQ5M.roa Signing time: Fri 02 Jan 2026 16:20:45 +0000 ROA not before: Fri 02 Jan 2026 16:20:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35038 IP address blocks: 194.117.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:ec:31:e7:e3:cb:0b:36:70:61:b3:e6:52:41:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d4ee193b301665b56f6780f225fd44d144093af Validity Not Before: Jan 2 16:20:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=110682519215b17a4678626e6fb25e50c0e34393 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c4:73:52:a6:27:a0:55:4c:b8:81:53:f9:64: 73:8d:f2:f7:b6:dc:3f:fd:b3:c9:e8:e1:e7:75:15: e5:04:bd:44:7b:42:6a:60:9a:45:d6:60:33:85:b0: 1b:26:42:a5:eb:85:42:bd:a3:d2:46:4c:59:25:ad: d7:1e:2a:8a:e2:d8:67:75:3d:fe:68:22:f3:bb:e3: ab:bc:8a:94:e4:5b:44:0b:a3:37:f9:a3:b1:6d:44: 99:e9:a6:40:98:ea:fe:c7:76:c6:4a:a7:c8:0a:f6: e4:d5:14:31:9b:42:ad:53:d2:76:7e:4a:06:cf:c4: a1:49:10:13:0e:03:60:2f:9d:13:47:4f:46:e0:75: 83:04:45:7b:8c:ce:21:39:ca:e2:8b:4b:44:f6:86: b6:1f:e7:80:2b:d2:3a:01:b6:70:e3:18:d3:7b:4a: 44:bf:88:ca:98:15:ee:c9:97:17:1f:6d:e6:d9:5b: d3:47:03:04:af:73:a2:08:1d:8e:40:31:da:4f:91: ff:1b:42:34:75:cf:01:e4:25:d0:7a:95:4f:83:5c: d2:5c:ec:6b:28:e2:8b:b0:77:6a:89:3a:12:df:74: 05:6e:d7:3b:c0:86:35:f4:2f:e2:bb:d1:ae:3f:46: 19:53:41:44:7a:aa:00:64:2d:72:08:08:9a:20:d7: 4f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:06:82:51:92:15:B1:7A:46:78:62:6E:6F:B2:5E:50:C0:E3:43:93 X509v3 Authority Key Identifier: keyid:0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/EQaCUZIVsXpGeGJub7JeUMDjQ5M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.117.24.0/21 Signature Algorithm: sha256WithRSAEncryption 3b:f8:9d:6e:0e:f7:6c:a9:78:b3:8d:2d:ce:d3:08:2e:76:b6: e7:bc:e7:ce:83:09:85:61:27:0e:cd:c9:b0:00:1d:0b:1e:ea: 46:83:77:62:25:c4:d4:e7:a1:be:85:86:ab:5d:93:ff:99:2d: ed:48:d5:5b:ba:bb:c8:08:31:62:b9:bd:cd:70:a3:7e:11:ad: 4f:62:27:b2:0d:d4:fb:34:b4:e8:a9:9e:e5:83:20:26:52:ea: c6:89:75:6e:a8:74:04:a7:0d:03:f7:13:0d:70:e4:e5:df:e4: d6:aa:68:c2:54:f7:5f:a5:3e:3e:75:72:28:e3:af:55:e2:9d: c3:61:c3:e4:18:b3:33:bc:fe:28:8c:1e:bf:d3:4f:3e:7f:9a: 3a:6c:a6:ef:77:a4:94:05:ac:c5:78:1a:e0:95:67:42:35:64: f9:9c:36:d6:24:7c:8e:5b:e6:7f:58:a0:04:11:e7:b6:11:96: f6:9c:7d:93:33:61:e8:37:39:16:4e:e1:7d:cb:ad:43:ad:a3: 05:dc:0b:85:30:9b:30:58:71:76:91:6e:2a:9e:cd:14:30:a1: 2a:f6:ab:18:21:fc:8e:72:b9:94:a3:39:b8:06:49:7d:c4:a5: c0:01:74:fa:ed:0e:ce:e5:c2:76:44:71:9a:33:35:48:49:53: cb:da:ab:32 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/guwx5+PLCzZwYbPmUkFXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNGVlMTkzYjMwMTY2NWI1NmY2NzgwZjIyNWZkNDRkMTQ0 MDkzYWYwHhcNMjYwMTAyMTYyMDQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMTA2ODI1MTkyMTViMTdhNDY3ODYyNmU2ZmIyNWU1MGMwZTM0MzkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMRzUqYnoFVMuIFT+WRzjfL3ttw/ /bPJ6OHndRXlBL1Ee0JqYJpF1mAzhbAbJkKl64VCvaPSRkxZJa3XHiqK4thndT3+ aCLzu+OrvIqU5FtEC6M3+aOxbUSZ6aZAmOr+x3bGSqfICvbk1RQxm0KtU9J2fkoG z8ShSRATDgNgL50TR09G4HWDBEV7jM4hOcrii0tE9oa2H+eAK9I6AbZw4xjTe0pE v4jKmBXuyZcXH23m2VvTRwMEr3OiCB2OQDHaT5H/G0I0dc8B5CXQepVPg1zSXOxr KOKLsHdqiToS33QFbtc7wIY19C/iu9GuP0YZU0FEeqoAZC1yCAiaINdP1QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBEGglGSFbF6Rnhibm+yXlDA40OTMB8GA1UdIwQY MBaAFA1O4ZOzAWZbVvZ4DyJf1E0UQJOvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFU3aGs3TUJabHRXOW5nUElsX1VUUlJBazY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wOTcxMTEtMzA5OC00Y2Y3LWFjMGYt OWY3ZTBmODYyZjFlLzEvRVFhQ1VaSVZzWHBHZUdKdWI3SmVVTURqUTVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8wOTcxMTEtMzA5OC00Y2Y3LWFjMGYtOWY3ZTBmODYyZjFl LzEvRFU3aGs3TUJabHRXOW5nUElsX1VUUlJBazY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwnUYMA0G CSqGSIb3DQEBCwUAA4IBAQA7+J1uDvdsqXizjS3O0wgudrbnvOfOgwmFYScOzcmw AB0LHupGg3diJcTU56G+hYarXZP/mS3tSNVburvICDFiub3NcKN+Ea1PYieyDdT7 NLToqZ7lgyAmUurGiXVuqHQEpw0D9xMNcOTl3+TWqmjCVPdfpT4+dXIo469V4p3D YcPkGLMzvP4ojB6/008+f5o6bKbvd6SUBazFeBrglWdCNWT5nDbWJHyOW+Z/WKAE Eee2EZb2nH2TM2HoNzkWTuF9y61DraMF3AuFMJswWHF2kW4qns0UMKEq9qsYIfyO crmUozm4Bkl9xKXAAXT67Q7O5cJ2RHGaMzVISVPL2qsy -----END CERTIFICATE-----Generated at Tue Jan 27 01:51:31 2026 by rpki-client