This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EZyVvJ5bgJq-P7qECfwi4jRgjOI.roa File: EZyVvJ5bgJq-P7qECfwi4jRgjOI.roa (raw, json) Hash identifier: aArOh7D2m0R/tR8bRjsgJKmh1qSOBK7Sx7lK9wOrfn8= Subject key identifier: 11:9C:95:BC:9E:5B:80:9A:BE:3F:BA:84:09:FC:22:E2:34:60:8C:E2 Certificate issuer: /CN=11836ccc1935aeb97d67cb46bdd0c6107f8610e4 Certificate serial: 019B79EC331F4FE0A3FE4AEBD75E0FD43365 Authority key identifier: 11:83:6C:CC:19:35:AE:B9:7D:67:CB:46:BD:D0:C6:10:7F:86:10:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EZyVvJ5bgJq-P7qECfwi4jRgjOI.roa Signing time: Thu 01 Jan 2026 14:18:01 +0000 ROA not before: Thu 01 Jan 2026 14:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13127 IP address blocks: 193.176.208.0/24 maxlen: 24 194.53.33.0/24 maxlen: 24 194.53.35.0/24 maxlen: 24 194.53.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.mft rsync://rpki.ripe.net/repository/DEFAULT/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 23:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:33:1f:4f:e0:a3:fe:4a:eb:d7:5e:0f:d4:33:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11836ccc1935aeb97d67cb46bdd0c6107f8610e4 Validity Not Before: Jan 1 14:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=119c95bc9e5b809abe3fba8409fc22e234608ce2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:97:f3:0c:ee:6a:65:73:41:16:4a:9b:73:15: 17:e7:91:38:03:7d:ce:c7:ce:a6:88:ef:8b:e7:00: 02:0c:e8:ed:38:d2:7c:bd:d3:fb:74:56:84:62:b3: 74:00:2b:f4:82:fc:3e:d7:75:8b:46:03:0f:d2:15: d1:0d:e1:75:30:33:3e:a4:72:17:6f:ee:be:39:2a: 22:d5:5c:83:20:15:cb:18:cd:58:52:b5:96:a5:eb: 05:e5:a0:e8:b6:65:77:20:03:86:18:d6:65:6a:61: 3f:5c:f2:52:2f:21:70:3d:d4:b9:25:1d:0b:d0:35: a4:d3:df:d2:8b:0f:a6:d6:b3:6a:ec:31:de:c2:2c: 8d:c4:d5:48:06:f2:e6:f5:9d:4d:1c:e0:9e:e2:13: 18:d6:7e:fa:50:67:88:ee:28:0c:4c:cf:71:5d:a4: 32:5d:f4:31:ed:2c:f0:34:58:07:0d:56:40:b4:f4: 29:82:13:1d:39:d8:43:1e:0a:60:c8:53:fe:16:ad: 7c:1f:c7:e5:f7:13:55:3d:dd:6d:7f:b2:ef:27:8e: 6d:4c:28:cd:72:5f:7f:3f:04:06:c6:dd:1f:7d:18: 29:b1:89:c2:ca:58:c5:f5:5a:82:7d:8b:b7:48:b6: 67:37:7e:62:f9:f8:65:f8:02:15:48:58:90:6d:5f: 4d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:9C:95:BC:9E:5B:80:9A:BE:3F:BA:84:09:FC:22:E2:34:60:8C:E2 X509v3 Authority Key Identifier: keyid:11:83:6C:CC:19:35:AE:B9:7D:67:CB:46:BD:D0:C6:10:7F:86:10:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EZyVvJ5bgJq-P7qECfwi4jRgjOI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.176.208.0/24 194.53.33.0/24 194.53.35.0-194.53.36.255 Signature Algorithm: sha256WithRSAEncryption b4:d5:b5:0c:06:a2:a4:be:b3:a7:0c:ce:83:01:d2:73:d1:6c: 68:93:4e:a5:2f:d1:25:cd:a1:51:5c:38:5f:b0:23:9f:08:9d: 3f:c0:16:67:ae:92:30:c4:1e:96:7b:9f:46:1c:73:aa:fc:a2: d3:62:ae:8a:c1:11:f7:77:81:7a:25:5d:e2:f8:a8:44:c8:46: ae:e8:aa:61:21:dc:a7:4c:fa:46:8c:2e:59:16:8f:35:27:ab: cf:4c:08:94:82:b5:57:6a:a3:63:69:cd:e4:5c:4c:63:90:1b: a7:35:2f:01:a3:a6:a0:c4:b0:70:72:02:b9:c3:3d:fb:e0:90: b2:0d:a5:8d:6f:9c:e6:cb:11:d3:3d:7a:4b:97:2d:6d:30:8e: c9:fe:b7:d0:24:f3:b0:22:79:d8:67:0a:1e:a7:1d:6a:60:7a: b8:78:91:e5:06:6a:78:7b:86:d7:6c:50:02:b1:f3:6e:0e:11: 8b:b7:86:2c:0e:be:88:eb:b0:3c:17:75:cd:28:3c:d6:37:03: d6:e3:c8:99:37:a3:1d:67:4b:a9:e8:a2:71:1c:e0:99:e7:f7: 14:85:49:68:cf:f6:91:4e:25:b8:fe:e0:81:8b:6d:2c:bc:89: 53:49:bf:b8:9c:7b:22:fb:55:2f:62:99:c2:a7:e2:4d:df:80: e8:b2:32:82 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt57DMfT+Cj/krr114P1DNlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExODM2Y2NjMTkzNWFlYjk3ZDY3Y2I0NmJkZDBjNjEwN2Y4 NjEwZTQwHhcNMjYwMTAxMTQxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMTljOTViYzllNWI4MDlhYmUzZmJhODQwOWZjMjJlMjM0NjA4Y2UyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpfzDO5qZXNBFkqbcxUX55E4A33O x86miO+L5wACDOjtONJ8vdP7dFaEYrN0ACv0gvw+13WLRgMP0hXRDeF1MDM+pHIX b+6+OSoi1VyDIBXLGM1YUrWWpesF5aDotmV3IAOGGNZlamE/XPJSLyFwPdS5JR0L 0DWk09/Siw+m1rNq7DHewiyNxNVIBvLm9Z1NHOCe4hMY1n76UGeI7igMTM9xXaQy XfQx7SzwNFgHDVZAtPQpghMdOdhDHgpgyFP+Fq18H8fl9xNVPd1tf7LvJ45tTCjN cl9/PwQGxt0ffRgpsYnCyljF9VqCfYu3SLZnN35i+fhl+AIVSFiQbV9NqQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFBGclbyeW4Cavj+6hAn8IuI0YIziMB8GA1UdIwQY MBaAFBGDbMwZNa65fWfLRr3QxhB/hhDkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVlOc3pCazFycmw5Wjh0R3ZkREdFSC1HRU9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy85NDBkODQtYTZiYS00MjE5LWFlMTEt NzQyN2Y1NDFiM2RmLzEvRVp5VnZKNWJnSnEtUDdxRUNmd2k0alJnak9JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy85NDBkODQtYTZiYS00MjE5LWFlMTEtNzQyN2Y1NDFiM2Rm LzEvRVlOc3pCazFycmw5Wjh0R3ZkREdFSC1HRU9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAwbDQAwQA wjUhMAwDBADCNSMDBADCNSQwDQYJKoZIhvcNAQELBQADggEBALTVtQwGoqS+s6cM zoMB0nPRbGiTTqUv0SXNoVFcOF+wI58InT/AFmeukjDEHpZ7n0Ycc6r8otNirorB Efd3gXolXeL4qETIRq7oqmEh3KdM+kaMLlkWjzUnq89MCJSCtVdqo2NpzeRcTGOQ G6c1LwGjpqDEsHByArnDPfvgkLINpY1vnObLEdM9ekuXLW0wjsn+t9Ak87Aiedhn Ch6nHWpgerh4keUGanh7htdsUAKx824OEYu3hiwOvojrsDwXdc0oPNY3A9bjyJk3 ox1nS6noonEc4Jnn9xSFSWjP9pFOJbj+4IGLbSy8iVNJv7iceyL7VS9imcKn4k3f gOiyMoI= -----END CERTIFICATE-----Generated at Tue Jan 20 07:47:59 2026 by rpki-client