This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/EZQ3_1xtXNCMXaBpEjh3EEeHdRc.roa File: EZQ3_1xtXNCMXaBpEjh3EEeHdRc.roa (raw, json) Hash identifier: 2NqTeKgydYUb/eDxmxXBdOU0et+RFyYo7oibb0+harQ= Subject key identifier: 11:94:37:FF:5C:6D:5C:D0:8C:5D:A0:69:12:38:77:10:47:87:75:17 Certificate issuer: /CN=8b9f258283517df19859388e13bad1ae0268a5fb Certificate serial: 019B8DAD6F302A226F4D46FD61BF67FB30AC Authority key identifier: 8B:9F:25:82:83:51:7D:F1:98:59:38:8E:13:BA:D1:AE:02:68:A5:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i58lgoNRffGYWTiOE7rRrgJopfs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/EZQ3_1xtXNCMXaBpEjh3EEeHdRc.roa Signing time: Mon 05 Jan 2026 10:21:52 +0000 ROA not before: Mon 05 Jan 2026 10:21:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48181 IP address blocks: 2.56.52.0/22 maxlen: 24 45.154.76.0/22 maxlen: 22 87.120.245.0/24 maxlen: 24 91.92.27.0/24 maxlen: 24 151.237.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.mft rsync://rpki.ripe.net/repository/DEFAULT/i58lgoNRffGYWTiOE7rRrgJopfs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8d:ad:6f:30:2a:22:6f:4d:46:fd:61:bf:67:fb:30:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b9f258283517df19859388e13bad1ae0268a5fb Validity Not Before: Jan 5 10:21:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=119437ff5c6d5cd08c5da0691238771047877517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:00:40:e6:c2:a0:91:e9:d8:fe:5c:b5:f0:49: e5:98:78:9e:04:7b:64:f2:85:6b:69:fd:0b:47:25: 65:9f:28:a9:28:90:b7:79:de:3b:71:97:11:42:fb: c7:ea:23:2a:96:ad:a9:da:2b:12:7f:20:5a:f0:0e: e0:08:0c:95:f0:79:87:7a:07:63:dc:8c:b2:37:49: b0:8c:12:8a:85:f0:fc:57:67:fa:24:79:7c:3b:dd: f2:d5:66:52:ef:15:2f:ee:68:7c:47:67:f6:ee:9c: 12:7d:57:bd:b8:23:e0:d5:a9:0c:4b:89:b7:38:49: 30:04:83:ae:88:44:fd:b5:5d:35:24:a9:12:00:b1: d6:67:99:0f:89:88:4b:38:78:88:cf:1c:c6:4b:64: 3e:83:83:3a:04:56:51:d9:9c:a9:d2:ef:40:1a:30: f2:42:29:a4:1d:c4:5f:f4:68:ee:aa:e4:aa:33:72: d2:33:25:82:a4:bb:7c:f1:b4:ed:1b:7c:84:04:c0: 76:37:f6:87:2e:5c:57:90:4e:2d:c6:fb:03:41:3e: b9:71:48:ad:12:79:e0:80:82:12:c7:f0:8c:75:56: 02:5f:62:42:94:f9:cc:d2:ed:fd:d3:f7:48:9c:2b: 92:e0:4b:21:bd:6d:de:7e:b8:64:c4:e8:02:30:80: 47:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:94:37:FF:5C:6D:5C:D0:8C:5D:A0:69:12:38:77:10:47:87:75:17 X509v3 Authority Key Identifier: keyid:8B:9F:25:82:83:51:7D:F1:98:59:38:8E:13:BA:D1:AE:02:68:A5:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i58lgoNRffGYWTiOE7rRrgJopfs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/EZQ3_1xtXNCMXaBpEjh3EEeHdRc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/528e21-23b2-4436-bc8b-8f5e997ab1b5/1/i58lgoNRffGYWTiOE7rRrgJopfs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.52.0/22 45.154.76.0/22 87.120.245.0/24 91.92.27.0/24 151.237.48.0/21 Signature Algorithm: sha256WithRSAEncryption 5a:27:fc:b2:b7:cb:b8:1a:8a:b3:f2:a8:ee:ee:be:9f:6a:d6: 18:5e:21:d4:a2:8d:38:f8:35:ef:62:d3:18:e2:b0:a6:9d:f7: 50:3e:53:85:e0:ee:7d:fb:d7:5d:aa:84:d5:bd:fc:a8:b1:99: 71:89:3d:59:cd:45:44:ed:93:95:d1:fc:a6:63:10:a1:cf:95: 69:2c:a7:7a:65:36:8e:1a:39:4f:3f:2a:f7:3e:12:96:3e:de: 99:17:ff:d9:fb:6a:15:26:bf:ef:73:20:a0:46:fe:30:67:05: a4:ef:2f:3b:ed:d7:82:31:6d:73:7f:00:09:14:54:23:b7:ae: 30:16:a4:86:50:0f:75:cc:9d:48:fb:8d:40:28:6e:30:e1:d8: 2a:6c:46:80:bb:9d:d1:41:5f:64:e0:f4:f2:9b:71:c7:4f:f2: f3:bb:71:6b:86:0f:61:2e:2f:88:c9:87:79:9f:93:44:11:fa: d7:cf:bc:32:f0:f3:74:14:d5:06:2b:73:df:b1:d0:00:e0:4a: 24:d7:94:1d:cb:6a:08:1f:74:f9:77:07:31:81:14:6c:b2:ef: 60:c4:a1:13:39:78:df:6a:f4:11:66:93:79:57:b5:56:93:4e: 0e:60:d9:00:4c:aa:36:fd:bb:f0:43:a6:ed:25:de:66:6f:33: 49:1c:49:c6 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZuNrW8wKiJvTUb9Yb9n+zCsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiOWYyNTgyODM1MTdkZjE5ODU5Mzg4ZTEzYmFkMWFlMDI2 OGE1ZmIwHhcNMjYwMTA1MTAyMTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMTk0MzdmZjVjNmQ1Y2QwOGM1ZGEwNjkxMjM4NzcxMDQ3ODc3NTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3QBA5sKgkenY/ly18EnlmHieBHtk 8oVraf0LRyVlnyipKJC3ed47cZcRQvvH6iMqlq2p2isSfyBa8A7gCAyV8HmHegdj 3IyyN0mwjBKKhfD8V2f6JHl8O93y1WZS7xUv7mh8R2f27pwSfVe9uCPg1akMS4m3 OEkwBIOuiET9tV01JKkSALHWZ5kPiYhLOHiIzxzGS2Q+g4M6BFZR2Zyp0u9AGjDy QimkHcRf9GjuquSqM3LSMyWCpLt88bTtG3yEBMB2N/aHLlxXkE4txvsDQT65cUit EnnggIISx/CMdVYCX2JClPnM0u390/dInCuS4EshvW3efrhkxOgCMIBHWwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFBGUN/9cbVzQjF2gaRI4dxBHh3UXMB8GA1UdIwQY MBaAFIufJYKDUX3xmFk4jhO60a4CaKX7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTU4bGdvTlJmZkdZV1RpT0U3clJyZ0pvcGZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy81MjhlMjEtMjNiMi00NDM2LWJjOGIt OGY1ZTk5N2FiMWI1LzEvRVpRM18xeHRYTkNNWGFCcEVqaDNFRWVIZFJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy81MjhlMjEtMjNiMi00NDM2LWJjOGItOGY1ZTk5N2FiMWI1 LzEvaTU4bGdvTlJmZkdZV1RpT0U3clJyZ0pvcGZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCAjg0AwQC LZpMAwQAV3j1AwQAW1wbAwQDl+0wMA0GCSqGSIb3DQEBCwUAA4IBAQBaJ/yyt8u4 Goqz8qju7r6fatYYXiHUoo04+DXvYtMY4rCmnfdQPlOF4O59+9ddqoTVvfyosZlx iT1ZzUVE7ZOV0fymYxChz5VpLKd6ZTaOGjlPPyr3PhKWPt6ZF//Z+2oVJr/vcyCg Rv4wZwWk7y877deCMW1zfwAJFFQjt64wFqSGUA91zJ1I+41AKG4w4dgqbEaAu53R QV9k4PTym3HHT/Lzu3Frhg9hLi+IyYd5n5NEEfrXz7wy8PN0FNUGK3PfsdAA4Eok 15Qdy2oIH3T5dwcxgRRssu9gxKETOXjfavQRZpN5V7VWk04OYNkATKo2/bvwQ6bt Jd5mbzNJHEnG -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:58 2026 by rpki-client