This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/Ea_6BYNPNVYXpJIw6V8w4iHsn34.roa File: Ea_6BYNPNVYXpJIw6V8w4iHsn34.roa (raw, json) Hash identifier: MmpGqyxYpKQIYnf6OI/K/GvwLTjCCsiguVNJ0TpVI8A= Subject key identifier: 11:AF:FA:05:83:4F:35:56:17:A4:92:30:E9:5F:30:E2:21:EC:9F:7E Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Certificate serial: 019B783441B71B5484885401098AF9FA654B Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/Ea_6BYNPNVYXpJIw6V8w4iHsn34.roa Signing time: Thu 01 Jan 2026 06:17:29 +0000 ROA not before: Thu 01 Jan 2026 06:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203510 IP address blocks: 185.9.185.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:41:b7:1b:54:84:88:54:01:09:8a:f9:fa:65:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Validity Not Before: Jan 1 06:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=11affa05834f355617a49230e95f30e221ec9f7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:69:6a:9e:e1:97:4b:8d:f0:62:be:d3:19:bc: 80:f1:cf:89:65:37:f0:6c:17:46:73:c3:7e:1c:7c: 84:55:5f:f1:16:54:42:14:1c:26:21:1f:02:39:1a: 10:e1:70:48:fb:e3:a2:40:bb:cf:05:7d:0c:3a:c4: 1d:cd:c7:f0:b6:75:ac:41:34:f8:ee:55:ef:46:6a: 72:c6:1f:01:d4:c2:da:68:76:9d:a3:1a:14:e6:67: aa:39:55:dc:d0:0a:5f:fd:d8:b8:0b:82:a0:ee:ec: 72:ed:86:46:2c:b5:7f:6b:d7:f5:4f:6e:34:47:37: 66:66:13:c2:fd:37:4d:16:9a:18:bf:91:bf:37:2f: 7a:71:c2:3b:7f:60:df:c4:3a:65:3b:7e:52:c5:0c: 7c:8a:37:92:9c:33:8f:12:93:a9:b2:c6:38:07:93: b4:36:99:c7:ed:cb:20:7d:d5:dd:d0:34:c1:f0:a5: 48:c3:9c:93:fa:6a:99:98:c2:e1:7d:bc:54:3d:aa: b2:2c:34:db:10:03:9a:1b:ff:b0:3e:9b:ce:1c:a7: 79:59:41:08:1d:17:13:e4:00:34:4d:d1:3b:3f:6a: 1f:4f:15:56:5d:8a:80:48:7d:f3:05:e2:2f:65:13: d1:43:3e:65:ac:61:f8:c4:cd:8c:71:7d:e3:79:ea: 8d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:AF:FA:05:83:4F:35:56:17:A4:92:30:E9:5F:30:E2:21:EC:9F:7E X509v3 Authority Key Identifier: keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/Ea_6BYNPNVYXpJIw6V8w4iHsn34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.9.185.0/24 Signature Algorithm: sha256WithRSAEncryption 92:70:2c:61:30:c2:89:ea:3f:ec:cc:35:f4:33:fe:60:2b:f0: a0:16:60:ea:f2:04:c7:94:98:06:9f:45:ad:f9:54:db:83:10: aa:80:6b:81:eb:89:41:95:ac:1f:5f:ac:43:cc:96:5f:9c:55: 7c:b2:45:bc:5b:94:95:bf:bb:5e:7b:78:33:49:3c:82:9f:f0: eb:77:3c:4c:a4:b5:22:03:22:cd:07:7c:0f:0c:42:5b:fd:fe: a0:2d:91:ba:3b:aa:f0:a4:96:2f:2d:3c:02:c3:54:e4:8e:cb: b9:87:f1:46:3b:17:8d:4f:e0:d8:36:dc:58:0f:62:7f:6e:df: 4b:a1:87:c6:6e:df:f8:67:e6:8a:1b:21:52:c0:d7:6c:17:70: 16:4b:ef:ef:7d:52:8f:65:1a:05:a2:74:85:21:74:1a:bf:0c: b0:60:ef:55:39:99:38:41:99:a9:61:48:10:3b:2e:2d:f0:52: da:f7:92:04:f5:72:64:af:4b:5c:b7:40:89:e8:d5:86:2a:b7: b2:1c:db:55:90:ce:d8:1e:4c:0b:68:57:8c:65:8b:22:c8:83: 24:1f:85:97:79:22:20:d2:85:e2:37:eb:a4:50:5f:ab:ee:2a: 14:bc:dc:b3:c0:68:de:6b:35:be:c5:d0:9c:ce:ff:3f:45:72: d9:68:44:5d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NEG3G1SEiFQBCYr5+mVLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZTk3MDMzYTM2YWE5YmNjMGMyZjE2N2U2MjBkN2NhMTQ5 M2NiZWEwHhcNMjYwMTAxMDYxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMWFmZmEwNTgzNGYzNTU2MTdhNDkyMzBlOTVmMzBlMjIxZWM5ZjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmlqnuGXS43wYr7TGbyA8c+JZTfw bBdGc8N+HHyEVV/xFlRCFBwmIR8CORoQ4XBI++OiQLvPBX0MOsQdzcfwtnWsQTT4 7lXvRmpyxh8B1MLaaHadoxoU5meqOVXc0Apf/di4C4Kg7uxy7YZGLLV/a9f1T240 RzdmZhPC/TdNFpoYv5G/Ny96ccI7f2DfxDplO35SxQx8ijeSnDOPEpOpssY4B5O0 NpnH7csgfdXd0DTB8KVIw5yT+mqZmMLhfbxUPaqyLDTbEAOaG/+wPpvOHKd5WUEI HRcT5AA0TdE7P2ofTxVWXYqASH3zBeIvZRPRQz5lrGH4xM2McX3jeeqNIwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBGv+gWDTzVWF6SSMOlfMOIh7J9+MB8GA1UdIwQY MBaAFNPpcDOjaqm8wMLxZ+Yg18oUk8vqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMt ZGJmOWQ0MWYxNzk4LzEvRWFfNkJZTlBOVllYcEpJdzZWOHc0aUhzbjM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMtZGJmOWQ0MWYxNzk4 LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQm5MA0G CSqGSIb3DQEBCwUAA4IBAQCScCxhMMKJ6j/szDX0M/5gK/CgFmDq8gTHlJgGn0Wt +VTbgxCqgGuB64lBlawfX6xDzJZfnFV8skW8W5SVv7tee3gzSTyCn/DrdzxMpLUi AyLNB3wPDEJb/f6gLZG6O6rwpJYvLTwCw1Tkjsu5h/FGOxeNT+DYNtxYD2J/bt9L oYfGbt/4Z+aKGyFSwNdsF3AWS+/vfVKPZRoFonSFIXQavwywYO9VOZk4QZmpYUgQ Oy4t8FLa95IE9XJkr0tct0CJ6NWGKreyHNtVkM7YHkwLaFeMZYsiyIMkH4WXeSIg 0oXiN+ukUF+r7ioUvNyzwGjeazW+xdCczv8/RXLZaERd -----END CERTIFICATE-----Generated at Sun Jan 25 22:50:50 2026 by rpki-client