This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/EY3B-toGXUZtNKRbRIT1VD4kBHE.roa File: EY3B-toGXUZtNKRbRIT1VD4kBHE.roa (raw, json) Hash identifier: 3Wh78iI9ibfL8FY/7stYt19m1NshKZMf/srlWVz8NYk= Subject key identifier: 11:8D:C1:FA:DA:06:5D:46:6D:34:A4:5B:44:84:F5:54:3E:24:04:71 Certificate issuer: /CN=66bd82ba1881ad64f524e33ece12ada4b3b5d57f Certificate serial: 019B78351CBDBA6A3FF2E2D3E4926955D5A8 Authority key identifier: 66:BD:82:BA:18:81:AD:64:F5:24:E3:3E:CE:12:AD:A4:B3:B5:D5:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zr2CuhiBrWT1JOM-zhKtpLO11X8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/EY3B-toGXUZtNKRbRIT1VD4kBHE.roa Signing time: Thu 01 Jan 2026 06:18:25 +0000 ROA not before: Thu 01 Jan 2026 06:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 680 IP address blocks: 132.199.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.crl rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft rsync://rpki.ripe.net/repository/DEFAULT/Zr2CuhiBrWT1JOM-zhKtpLO11X8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:1c:bd:ba:6a:3f:f2:e2:d3:e4:92:69:55:d5:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66bd82ba1881ad64f524e33ece12ada4b3b5d57f Validity Not Before: Jan 1 06:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=118dc1fada065d466d34a45b4484f5543e240471 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:9d:2d:5d:27:33:2a:48:d8:11:5d:c5:0f:ed: a3:87:bf:a0:11:e2:dd:87:4b:76:f1:a8:0d:f8:7b: 2c:28:32:a0:90:64:a1:9c:2c:dd:fb:39:90:4e:14: 1a:09:95:9b:1c:61:d2:88:82:d8:8f:e4:66:7a:b2: 2c:a8:c4:56:6e:7e:0f:a3:bc:d9:e7:c8:5b:f4:87: c8:f0:4d:4c:d2:0c:9a:80:d0:e8:51:b5:d9:93:56: 44:7b:61:94:5d:cd:87:d6:57:e7:53:5b:4e:76:1a: 7a:20:00:c1:ef:e9:40:83:fb:67:c1:a2:e5:9d:4c: 31:18:e5:40:35:9e:21:93:48:42:5f:9f:e0:e4:dc: 73:d4:a7:13:2e:ec:ea:de:c7:4c:51:80:d1:ec:8c: c2:82:0c:0b:66:47:08:21:56:17:3b:1b:86:5e:b1: 10:40:9c:95:ca:c2:41:90:ce:19:1a:b9:4a:68:ef: 17:14:c8:e5:8a:28:23:bf:e2:0d:04:c0:e9:be:25: 5d:5b:e7:7e:a9:7b:ab:24:46:f0:58:2b:2d:86:7a: f5:57:9d:e9:40:40:c9:c9:75:29:e0:9f:2d:5f:1d: ec:97:f0:b7:94:bd:f4:37:6c:12:e5:3e:64:c4:bf: ae:91:13:e2:c3:cd:4f:6f:ba:84:35:d8:6f:d3:cc: da:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:8D:C1:FA:DA:06:5D:46:6D:34:A4:5B:44:84:F5:54:3E:24:04:71 X509v3 Authority Key Identifier: keyid:66:BD:82:BA:18:81:AD:64:F5:24:E3:3E:CE:12:AD:A4:B3:B5:D5:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zr2CuhiBrWT1JOM-zhKtpLO11X8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/EY3B-toGXUZtNKRbRIT1VD4kBHE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 132.199.0.0/16 Signature Algorithm: sha256WithRSAEncryption 8e:9d:87:5e:f5:82:3c:8b:de:9b:8a:29:07:d5:5f:b6:21:43: 8f:be:94:f8:f8:df:3f:f4:73:00:be:01:1f:70:44:d7:f8:e2: b0:e0:b8:db:83:16:f3:65:76:24:07:47:8b:4a:ba:38:0d:dd: 63:a8:34:74:65:9d:1c:9a:a4:d2:6a:ac:32:05:14:15:32:3b: 2b:00:73:bc:aa:7c:6c:53:26:7b:f1:21:7e:e8:03:21:87:1b: 61:e3:06:f5:b0:0e:06:34:65:72:7d:ac:a5:b4:be:c7:4b:dc: 48:44:37:ea:e9:a3:79:79:e7:ba:77:9c:f8:96:13:f0:5f:3b: ea:db:91:c3:cc:cf:21:40:43:c2:d9:9e:20:82:24:d9:3f:55: d8:3a:69:a7:0d:f9:51:04:66:f9:ae:4b:a0:59:a6:d1:34:ee: 2c:36:dd:f6:2d:53:44:1c:16:4c:7b:4a:d8:d1:68:a4:1f:a3: 9b:5b:60:d2:e9:12:e3:3d:f2:99:b2:ff:70:ef:7e:95:14:a1: db:35:77:53:d6:9c:cd:c1:0c:44:13:92:18:56:98:8e:e1:fa: c3:58:ff:e0:c6:a6:1e:51:a1:26:d3:32:0e:f4:4f:3b:21:ce: 89:02:ee:80:7c:e6:cb:8c:6e:f9:21:cf:4d:a8:93:02:c1:b0: 3e:e4:3b:44 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt4NRy9umo/8uLT5JJpVdWoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2YmQ4MmJhMTg4MWFkNjRmNTI0ZTMzZWNlMTJhZGE0YjNi NWQ1N2YwHhcNMjYwMTAxMDYxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMThkYzFmYWRhMDY1ZDQ2NmQzNGE0NWI0NDg0ZjU1NDNlMjQwNDcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Z0tXSczKkjYEV3FD+2jh7+gEeLd h0t28agN+HssKDKgkGShnCzd+zmQThQaCZWbHGHSiILYj+RmerIsqMRWbn4Po7zZ 58hb9IfI8E1M0gyagNDoUbXZk1ZEe2GUXc2H1lfnU1tOdhp6IADB7+lAg/tnwaLl nUwxGOVANZ4hk0hCX5/g5Nxz1KcTLuzq3sdMUYDR7IzCggwLZkcIIVYXOxuGXrEQ QJyVysJBkM4ZGrlKaO8XFMjliigjv+INBMDpviVdW+d+qXurJEbwWCsthnr1V53p QEDJyXUp4J8tXx3sl/C3lL30N2wS5T5kxL+ukRPiw81Pb7qENdhv08za8QIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFBGNwfraBl1GbTSkW0SE9VQ+JARxMB8GA1UdIwQY MBaAFGa9groYga1k9STjPs4SraSztdV/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnIyQ3VoaUJyV1QxSk9NLXpoS3RwTE8xMVg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9lMWUyYTctZmQ5Ni00Y2YxLTgyYzMt YmEyYjkwZDQ5NTQ3LzEvRVkzQi10b0dYVVp0TktSYlJJVDFWRDRrQkhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9lMWUyYTctZmQ5Ni00Y2YxLTgyYzMtYmEyYjkwZDQ5NTQ3 LzEvWnIyQ3VoaUJyV1QxSk9NLXpoS3RwTE8xMVg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhMcwDQYJ KoZIhvcNAQELBQADggEBAI6dh171gjyL3puKKQfVX7YhQ4++lPj43z/0cwC+AR9w RNf44rDguNuDFvNldiQHR4tKujgN3WOoNHRlnRyapNJqrDIFFBUyOysAc7yqfGxT JnvxIX7oAyGHG2HjBvWwDgY0ZXJ9rKW0vsdL3EhEN+rpo3l557p3nPiWE/BfO+rb kcPMzyFAQ8LZniCCJNk/Vdg6aacN+VEEZvmuS6BZptE07iw23fYtU0QcFkx7StjR aKQfo5tbYNLpEuM98pmy/3DvfpUUods1d1PWnM3BDEQTkhhWmI7h+sNY/+DGph5R oSbTMg70TzshzokC7oB85suMbvkhz02okwLBsD7kO0Q= -----END CERTIFICATE-----Generated at Tue Jan 27 11:26:45 2026 by rpki-client