This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/EAaF92d1woQzsy8VU5JNPGG08e4.roa File: EAaF92d1woQzsy8VU5JNPGG08e4.roa (raw, json) Hash identifier: yp7GW+4ysZ0E3UGH2wQkfGf/UKQQDDnXTfR2I0ZupNk= Subject key identifier: 10:06:85:F7:67:75:C2:84:33:B3:2F:15:53:92:4D:3C:61:B4:F1:EE Certificate issuer: /CN=c8acf59abd4abbfbf830a060225a96a2179a2694 Certificate serial: 019B7FF14C3834C87D0D669C29F885E2986C Authority key identifier: C8:AC:F5:9A:BD:4A:BB:FB:F8:30:A0:60:22:5A:96:A2:17:9A:26:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/EAaF92d1woQzsy8VU5JNPGG08e4.roa Signing time: Fri 02 Jan 2026 18:21:18 +0000 ROA not before: Fri 02 Jan 2026 18:21:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24935 IP address blocks: 37.235.92.0/24 maxlen: 24 37.235.93.0/24 maxlen: 24 46.29.122.0/24 maxlen: 24 46.29.123.0/24 maxlen: 24 94.158.182.0/24 maxlen: 24 185.161.45.0/24 maxlen: 24 185.161.47.0/24 maxlen: 24 185.252.156.0/24 maxlen: 24 185.252.158.0/24 maxlen: 24 185.252.159.0/24 maxlen: 24 194.213.30.0/24 maxlen: 24 195.74.80.0/24 maxlen: 24 2a10:5140::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 12:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:4c:38:34:c8:7d:0d:66:9c:29:f8:85:e2:98:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8acf59abd4abbfbf830a060225a96a2179a2694 Validity Not Before: Jan 2 18:21:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=100685f76775c28433b32f1553924d3c61b4f1ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:83:b6:c6:1f:ac:eb:e1:b2:90:fd:66:c6:63: 80:35:5b:a6:a4:48:9d:2b:09:1d:fd:4b:d9:7a:60: 21:52:17:12:b4:8a:b9:ab:ec:07:e3:01:5f:48:69: cd:c4:e6:65:f6:ab:41:54:e2:5f:1d:62:fd:33:db: b0:be:51:12:66:25:b2:29:6e:14:0f:f3:d8:c9:1b: 00:1c:b4:ae:95:4f:69:5f:e5:a7:89:ab:be:40:15: 8c:ed:f2:58:c2:f2:ee:b6:3b:32:a5:04:31:3e:28: bf:d0:94:71:e6:fd:c2:52:02:ec:d3:b8:96:66:c9: 1b:38:b4:c3:43:c5:a5:51:b0:42:96:a6:17:01:78: e5:3d:04:9d:f6:ec:e2:0a:e6:17:c4:a8:df:b3:b9: eb:96:e1:bb:85:cc:71:fb:52:6b:23:be:1b:33:34: 11:13:9c:8f:b1:1d:56:63:d5:cf:a7:9b:32:cf:23: 68:03:0f:6d:7a:fe:53:58:39:a5:f9:44:ab:66:e4: 22:fa:a4:20:57:f6:24:dd:85:18:8f:f2:b6:d4:fa: d0:9f:af:b5:81:cc:34:21:e1:c5:99:5c:30:4d:d1: e9:bc:8b:69:b3:0e:09:37:89:18:f2:40:81:02:50: 78:9b:5b:b4:c8:7b:c0:84:88:93:36:d7:12:23:67: d3:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:06:85:F7:67:75:C2:84:33:B3:2F:15:53:92:4D:3C:61:B4:F1:EE X509v3 Authority Key Identifier: keyid:C8:AC:F5:9A:BD:4A:BB:FB:F8:30:A0:60:22:5A:96:A2:17:9A:26:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/EAaF92d1woQzsy8VU5JNPGG08e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.235.92.0/23 46.29.122.0/23 94.158.182.0/24 185.161.45.0/24 185.161.47.0/24 185.252.156.0/24 185.252.158.0/23 194.213.30.0/24 195.74.80.0/24 IPv6: 2a10:5140::/29 Signature Algorithm: sha256WithRSAEncryption 6b:63:b0:13:0b:49:00:ac:b2:e6:00:f6:35:33:0b:54:9e:81: b8:ab:65:d9:63:fe:07:25:e0:46:02:ce:ec:f4:6f:d0:f0:f6: a5:64:9c:d1:0d:62:ef:82:cc:41:d8:bc:66:1c:d4:ba:26:5c: 39:14:10:07:03:f2:63:52:e5:80:6e:f9:d8:22:e7:59:02:be: 8f:6d:d6:cc:36:83:a7:de:10:61:6f:48:58:9d:81:60:f1:73: 3c:71:99:bf:07:1f:f0:8b:46:b9:a0:fe:74:88:1b:09:d3:b2: ec:75:66:ad:52:bc:4b:a7:a5:3f:28:40:d9:56:03:1a:47:fc: 83:b9:8f:6e:7b:68:d8:27:7b:04:a6:7a:6c:ee:ed:1d:eb:80: cf:28:d2:7c:b5:41:ba:32:39:47:a4:ec:b4:da:ab:1b:79:cc: 61:ef:41:e6:9f:99:29:ee:93:a5:64:52:94:08:48:ed:4e:56: 73:96:6b:43:2f:dc:d4:45:7e:86:ae:94:c8:53:e4:89:40:90: 48:49:4a:41:0e:e8:52:76:38:cf:7a:09:85:3d:83:74:77:dd: 00:10:68:92:cc:cf:29:e5:2a:ac:9f:e5:ce:2e:8d:66:a9:1a: 4f:36:f4:2a:66:98:1d:f7:c4:c0:2b:5b:98:aa:7b:0f:6d:0b: db:b5:9d:27 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgISAZt/8Uw4NMh9DWacKfiF4phsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4YWNmNTlhYmQ0YWJiZmJmODMwYTA2MDIyNWE5NmEyMTc5 YTI2OTQwHhcNMjYwMTAyMTgyMTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDA2ODVmNzY3NzVjMjg0MzNiMzJmMTU1MzkyNGQzYzYxYjRmMWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIO2xh+s6+GykP1mxmOANVumpEid Kwkd/UvZemAhUhcStIq5q+wH4wFfSGnNxOZl9qtBVOJfHWL9M9uwvlESZiWyKW4U D/PYyRsAHLSulU9pX+Wniau+QBWM7fJYwvLutjsypQQxPii/0JRx5v3CUgLs07iW ZskbOLTDQ8WlUbBClqYXAXjlPQSd9uziCuYXxKjfs7nrluG7hcxx+1JrI74bMzQR E5yPsR1WY9XPp5syzyNoAw9tev5TWDml+USrZuQi+qQgV/Yk3YUYj/K21PrQn6+1 gcw0IeHFmVwwTdHpvItpsw4JN4kY8kCBAlB4m1u0yHvAhIiTNtcSI2fT5QIDAQAB o4ICSDCCAkQwHQYDVR0OBBYEFBAGhfdndcKEM7MvFVOSTTxhtPHuMB8GA1UdIwQY MBaAFMis9Zq9Srv7+DCgYCJalqIXmiaUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUt6MW1yMUt1X3Y0TUtCZ0lscVdvaGVhSnBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9jZjdmNmQtYjIyNS00YmRmLTk1MDQt ODM4ZWJmNDEyYTYxLzEvRUFhRjkyZDF3b1F6c3k4VlU1Sk5QR0cwOGU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9jZjdmNmQtYjIyNS00YmRmLTk1MDQtODM4ZWJmNDEyYTYx LzEveUt6MW1yMUt1X3Y0TUtCZ0lscVdvaGVhSnBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF4GCCsGAQUFBwEHAQH/BE8wTTA8BAIAATA2AwQBJetcAwQB Lh16AwQAXp62AwQAuaEtAwQAuaEvAwQAufycAwQBufyeAwQAwtUeAwQAw0pQMA0E AgACMAcDBQMqEFFAMA0GCSqGSIb3DQEBCwUAA4IBAQBrY7ATC0kArLLmAPY1MwtU noG4q2XZY/4HJeBGAs7s9G/Q8PalZJzRDWLvgsxB2LxmHNS6Jlw5FBAHA/JjUuWA bvnYIudZAr6PbdbMNoOn3hBhb0hYnYFg8XM8cZm/Bx/wi0a5oP50iBsJ07LsdWat UrxLp6U/KEDZVgMaR/yDuY9ue2jYJ3sEpnps7u0d64DPKNJ8tUG6MjlHpOy02qsb ecxh70Hmn5kp7pOlZFKUCEjtTlZzlmtDL9zURX6GrpTIU+SJQJBISUpBDuhSdjjP egmFPYN0d90AEGiSzM8p5Sqsn+XOLo1mqRpPNvQqZpgd98TAK1uYqnsPbQvbtZ0n -----END CERTIFICATE-----Generated at Thu Jan 29 19:59:54 2026 by rpki-client