This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/EU0I3QnoCAXFVY2YnHa5pt1MRtg.roa File: EU0I3QnoCAXFVY2YnHa5pt1MRtg.roa (raw, json) Hash identifier: KZLLvvp27GcbrvLH6ITu2gaasm7oI7TbJiyGjo0GMBg= Subject key identifier: 11:4D:08:DD:09:E8:08:05:C5:55:8D:98:9C:76:B9:A6:DD:4C:46:D8 Certificate issuer: /CN=c6c7867591200c1f5f9fd0cc3de9954dc139862e Certificate serial: 019B7C7FE7F7B837A84721EE6E3AA2C8D149 Authority key identifier: C6:C7:86:75:91:20:0C:1F:5F:9F:D0:CC:3D:E9:95:4D:C1:39:86:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xseGdZEgDB9fn9DMPemVTcE5hi4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/EU0I3QnoCAXFVY2YnHa5pt1MRtg.roa Signing time: Fri 02 Jan 2026 02:18:35 +0000 ROA not before: Fri 02 Jan 2026 02:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42798 IP address blocks: 91.193.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.crl rsync://rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.mft rsync://rpki.ripe.net/repository/DEFAULT/xseGdZEgDB9fn9DMPemVTcE5hi4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:e7:f7:b8:37:a8:47:21:ee:6e:3a:a2:c8:d1:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6c7867591200c1f5f9fd0cc3de9954dc139862e Validity Not Before: Jan 2 02:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=114d08dd09e80805c5558d989c76b9a6dd4c46d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a4:80:1f:d6:1a:9d:91:be:97:2e:1c:00:5d: ac:e3:00:8a:aa:44:9f:bf:5b:d7:0f:4d:b0:1a:67: 6b:d2:c5:53:64:97:a6:07:f2:fa:05:61:76:c6:0b: 7f:60:c9:06:8e:6e:82:27:36:40:03:a0:f8:a5:ef: a0:75:a6:e7:86:6e:4b:19:e9:64:77:1d:8a:56:3c: c8:29:6b:87:d5:08:15:5b:b6:28:38:0f:a4:d7:55: 55:3e:ab:f8:d4:5d:11:0e:d9:5c:fa:9c:36:d7:79: 35:5c:fb:b2:27:73:cd:5b:69:10:d8:d8:6a:90:17: 19:c2:32:68:1d:5f:65:af:be:7a:68:ec:42:97:ce: 9e:b6:cf:24:65:0a:c5:96:4a:f0:b3:ad:3b:a9:50: 82:3b:ec:d7:8f:8c:4d:42:02:b5:32:90:c3:6a:88: b4:73:9b:2a:0e:06:bc:96:66:bc:b2:b6:86:5d:5b: c9:31:b5:c6:8b:99:d1:c6:43:1c:09:f8:2a:d9:2b: 7c:ef:28:14:38:83:ab:d7:6f:bb:4b:b1:c1:fb:0f: b5:6b:ac:66:4b:f5:08:11:65:84:a5:1c:7e:bf:39: e5:f1:f5:44:50:23:8f:94:4f:33:12:6e:95:69:2b: 4a:7d:44:9c:76:20:fd:f2:0e:66:65:dd:c2:44:f0: db:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:4D:08:DD:09:E8:08:05:C5:55:8D:98:9C:76:B9:A6:DD:4C:46:D8 X509v3 Authority Key Identifier: keyid:C6:C7:86:75:91:20:0C:1F:5F:9F:D0:CC:3D:E9:95:4D:C1:39:86:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xseGdZEgDB9fn9DMPemVTcE5hi4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/EU0I3QnoCAXFVY2YnHa5pt1MRtg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/a5ad50-71fd-418f-a435-803c9b41b8e9/1/xseGdZEgDB9fn9DMPemVTcE5hi4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.193.124.0/22 Signature Algorithm: sha256WithRSAEncryption 42:21:ee:61:ab:43:2d:12:66:b1:e1:5c:ad:90:70:90:9a:47: 9a:ec:a9:5a:1c:04:a2:e4:dc:08:ce:ee:8d:24:1e:4f:f3:9e: ae:47:c3:fa:c9:ae:7f:cf:a9:35:f0:d2:cf:d1:5b:7c:77:ea: 86:da:2d:e9:00:82:94:5d:68:b2:02:ff:b6:60:d0:d7:50:96: d4:da:00:9c:d0:07:75:76:93:85:38:87:93:b3:fd:bc:b1:13: dd:2d:25:9d:6d:e9:8c:0a:34:e1:06:62:30:e3:84:3d:bf:db: 0b:00:f7:a2:c9:f0:93:66:e1:3a:6f:c9:54:c4:95:07:08:eb: bb:ee:c2:3e:91:f4:ab:2f:92:a0:c9:b0:ff:3a:2f:b3:da:da: e1:20:3c:7d:00:23:0b:c4:ac:c9:b6:7d:90:a1:78:8c:a2:f8: ff:63:cc:c3:79:77:53:f3:9a:3f:17:1d:99:23:51:32:0a:1b: 55:53:86:59:ad:c1:83:55:06:9b:c2:40:be:18:51:9b:0d:79: 29:e1:ff:5e:8a:95:7c:d7:8c:29:ef:b0:ef:cd:f8:95:03:38: 58:b0:54:7a:92:7c:f7:8f:d6:24:c2:91:a8:ec:2e:f6:d7:50: c1:4a:4d:f8:22:95:d9:f4:57:d5:80:77:cd:a0:dd:d5:5b:7b: 58:af:cf:74 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f+f3uDeoRyHubjqiyNFJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2Yzc4Njc1OTEyMDBjMWY1ZjlmZDBjYzNkZTk5NTRkYzEz OTg2MmUwHhcNMjYwMTAyMDIxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMTRkMDhkZDA5ZTgwODA1YzU1NThkOTg5Yzc2YjlhNmRkNGM0NmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqSAH9YanZG+ly4cAF2s4wCKqkSf v1vXD02wGmdr0sVTZJemB/L6BWF2xgt/YMkGjm6CJzZAA6D4pe+gdabnhm5LGelk dx2KVjzIKWuH1QgVW7YoOA+k11VVPqv41F0RDtlc+pw213k1XPuyJ3PNW2kQ2Nhq kBcZwjJoHV9lr756aOxCl86ets8kZQrFlkrws607qVCCO+zXj4xNQgK1MpDDaoi0 c5sqDga8lma8sraGXVvJMbXGi5nRxkMcCfgq2St87ygUOIOr12+7S7HB+w+1a6xm S/UIEWWEpRx+vznl8fVEUCOPlE8zEm6VaStKfUScdiD98g5mZd3CRPDbgwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBFNCN0J6AgFxVWNmJx2uabdTEbYMB8GA1UdIwQY MBaAFMbHhnWRIAwfX5/QzD3plU3BOYYuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHNlR2RaRWdEQjlmbjlETVBlbVZUY0U1aGk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9hNWFkNTAtNzFmZC00MThmLWE0MzUt ODAzYzliNDFiOGU5LzEvRVUwSTNRbm9DQVhGVlkyWW5IYTVwdDFNUnRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9hNWFkNTAtNzFmZC00MThmLWE0MzUtODAzYzliNDFiOGU5 LzEveHNlR2RaRWdEQjlmbjlETVBlbVZUY0U1aGk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW8F8MA0G CSqGSIb3DQEBCwUAA4IBAQBCIe5hq0MtEmax4VytkHCQmkea7KlaHASi5NwIzu6N JB5P856uR8P6ya5/z6k18NLP0Vt8d+qG2i3pAIKUXWiyAv+2YNDXUJbU2gCc0Ad1 dpOFOIeTs/28sRPdLSWdbemMCjThBmIw44Q9v9sLAPeiyfCTZuE6b8lUxJUHCOu7 7sI+kfSrL5KgybD/Oi+z2trhIDx9ACMLxKzJtn2QoXiMovj/Y8zDeXdT85o/Fx2Z I1EyChtVU4ZZrcGDVQabwkC+GFGbDXkp4f9eipV814wp77DvzfiVAzhYsFR6knz3 j9YkwpGo7C7211DBSk34IpXZ9FfVgHfNoN3VW3tYr890 -----END CERTIFICATE-----Generated at Tue Feb 10 04:49:34 2026 by rpki-client