This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/EAy4SNOanXhaxXxJSyGzCor_nI0.roa File: EAy4SNOanXhaxXxJSyGzCor_nI0.roa (raw, json) Hash identifier: Ea+Uw6sz9cAh7cFY1x39RiJi5kY9NftCtSPZo+he5xo= Subject key identifier: 10:0C:B8:48:D3:9A:9D:78:5A:C5:7C:49:4B:21:B3:0A:8A:FF:9C:8D Certificate issuer: /CN=d3277a239664d245becf4214dde15923042a142f Certificate serial: 019B797F3D245F66C8DDCE6710644BFAC059 Authority key identifier: D3:27:7A:23:96:64:D2:45:BE:CF:42:14:DD:E1:59:23:04:2A:14:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/EAy4SNOanXhaxXxJSyGzCor_nI0.roa Signing time: Thu 01 Jan 2026 12:19:00 +0000 ROA not before: Thu 01 Jan 2026 12:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61418 IP address blocks: 91.216.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.crl rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.mft rsync://rpki.ripe.net/repository/DEFAULT/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:3d:24:5f:66:c8:dd:ce:67:10:64:4b:fa:c0:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3277a239664d245becf4214dde15923042a142f Validity Not Before: Jan 1 12:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=100cb848d39a9d785ac57c494b21b30a8aff9c8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0d:fb:95:dd:56:bb:9c:3a:b2:1f:a0:bb:94: 47:15:d2:06:16:77:fb:65:54:ba:f8:7a:15:a0:0c: 96:e3:40:42:3e:c8:8b:95:9c:46:b7:fb:d5:25:f0: 83:92:22:d6:7b:cb:91:2a:16:1b:31:ab:d2:84:4b: 24:29:15:6d:a5:e7:64:24:66:39:63:e6:33:7f:a6: b6:6d:bf:2e:ce:84:af:c4:2c:f6:65:73:e2:7b:11: 96:55:dc:e5:b6:95:d7:69:cf:af:c9:a6:6c:9c:e2: 1f:01:3a:4e:28:b8:9f:8e:d5:82:76:59:98:7d:1f: 81:9f:3e:2f:fb:a7:c0:63:17:08:e2:39:1e:45:09: e6:72:1a:fc:7d:52:6d:5b:e7:7a:c6:c5:04:9e:5d: fd:61:b6:cb:3a:dd:86:11:85:f9:16:62:a5:85:2e: 0a:fc:09:15:11:75:7f:20:43:e7:ce:1b:da:8e:3d: 9b:00:4d:b4:aa:02:dc:57:16:23:d9:f7:60:b7:b9: 40:49:b8:6f:38:86:8b:3a:c3:18:78:f4:18:fd:c5: e8:05:ba:0e:ed:c9:7f:6e:2a:2e:f6:29:6e:89:e7: bd:a5:dc:c2:5a:ce:fc:9b:44:2f:f8:ed:4d:6b:89: 3e:db:ce:07:fb:7f:b2:7c:ac:5b:7c:39:e6:74:a7: c8:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:0C:B8:48:D3:9A:9D:78:5A:C5:7C:49:4B:21:B3:0A:8A:FF:9C:8D X509v3 Authority Key Identifier: keyid:D3:27:7A:23:96:64:D2:45:BE:CF:42:14:DD:E1:59:23:04:2A:14:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/EAy4SNOanXhaxXxJSyGzCor_nI0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6b4386-df3d-4f9c-af1c-c373f453a245/1/0yd6I5Zk0kW-z0IU3eFZIwQqFC8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.201.0/24 Signature Algorithm: sha256WithRSAEncryption 72:29:cb:8f:43:34:01:32:d5:29:7c:a9:46:9b:92:e9:08:a8: c0:fa:2b:ce:29:e5:65:cc:13:f3:14:e0:1e:ab:05:06:64:97: 83:be:0a:2b:58:b0:04:de:4f:07:59:0f:c5:e8:70:2e:66:f9: 48:e7:96:9b:0d:e9:88:5d:82:d0:6b:cd:ff:fa:ce:ec:35:da: e6:9c:1a:68:da:3b:d8:8c:cf:ca:c8:f5:ee:47:24:01:d7:2d: 77:f7:f8:b5:3a:b4:60:3d:36:5a:7f:4e:e0:2d:13:27:d9:18: 8f:2d:44:2f:66:19:3d:92:ca:82:21:fa:98:24:49:67:67:d7: b0:3e:42:be:6b:bd:6a:ee:11:0a:81:b5:e5:82:58:db:11:96: 91:7d:59:b9:c7:47:77:ba:67:f4:fa:ef:6c:00:74:34:80:88: 5f:6d:dc:68:1a:23:a9:69:0d:55:dd:ac:8e:9b:2d:d6:26:8d: 57:22:20:b4:b4:32:36:52:ad:a7:bb:98:6a:b8:70:b8:94:83: 06:65:9c:6b:84:5c:44:40:7d:cf:12:2a:50:b3:62:b9:8f:51: c2:b4:30:e8:a6:11:52:d9:c9:3c:c3:99:98:b6:2d:81:6b:6d: 95:5b:c5:4b:88:02:55:52:0d:4a:15:e5:1f:6f:32:9a:3a:b9: a3:3b:f0:c2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fz0kX2bI3c5nEGRL+sBZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzMjc3YTIzOTY2NGQyNDViZWNmNDIxNGRkZTE1OTIzMDQy YTE0MmYwHhcNMjYwMTAxMTIxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDBjYjg0OGQzOWE5ZDc4NWFjNTdjNDk0YjIxYjMwYThhZmY5YzhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtA37ld1Wu5w6sh+gu5RHFdIGFnf7 ZVS6+HoVoAyW40BCPsiLlZxGt/vVJfCDkiLWe8uRKhYbMavShEskKRVtpedkJGY5 Y+Yzf6a2bb8uzoSvxCz2ZXPiexGWVdzltpXXac+vyaZsnOIfATpOKLifjtWCdlmY fR+Bnz4v+6fAYxcI4jkeRQnmchr8fVJtW+d6xsUEnl39YbbLOt2GEYX5FmKlhS4K /AkVEXV/IEPnzhvajj2bAE20qgLcVxYj2fdgt7lASbhvOIaLOsMYePQY/cXoBboO 7cl/biou9iluiee9pdzCWs78m0Qv+O1Na4k+284H+3+yfKxbfDnmdKfIyQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBAMuEjTmp14WsV8SUshswqK/5yNMB8GA1UdIwQY MBaAFNMneiOWZNJFvs9CFN3hWSMEKhQvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHlkNkk1Wmswa1ctejBJVTNlRlpJd1FxRkM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS82YjQzODYtZGYzZC00ZjljLWFmMWMt YzM3M2Y0NTNhMjQ1LzEvRUF5NFNOT2FuWGhheFh4SlN5R3pDb3JfbkkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS82YjQzODYtZGYzZC00ZjljLWFmMWMtYzM3M2Y0NTNhMjQ1 LzEvMHlkNkk1Wmswa1ctejBJVTNlRlpJd1FxRkM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9jJMA0G CSqGSIb3DQEBCwUAA4IBAQByKcuPQzQBMtUpfKlGm5LpCKjA+ivOKeVlzBPzFOAe qwUGZJeDvgorWLAE3k8HWQ/F6HAuZvlI55abDemIXYLQa83/+s7sNdrmnBpo2jvY jM/KyPXuRyQB1y139/i1OrRgPTZaf07gLRMn2RiPLUQvZhk9ksqCIfqYJElnZ9ew PkK+a71q7hEKgbXlgljbEZaRfVm5x0d3umf0+u9sAHQ0gIhfbdxoGiOpaQ1V3ayO my3WJo1XIiC0tDI2Uq2nu5hquHC4lIMGZZxrhFxEQH3PEipQs2K5j1HCtDDophFS 2ck8w5mYti2Ba22VW8VLiAJVUg1KFeUfbzKaOrmjO/DC -----END CERTIFICATE-----Generated at Mon Jan 26 14:05:23 2026 by rpki-client