This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b667aa-c415-4bbc-ad4c-c3377c1e3a2d/1/EykCnR69Z2FCA4Ya_yadUJioFWg.roa File: EykCnR69Z2FCA4Ya_yadUJioFWg.roa (raw, json) Hash identifier: pgJbZrv9GUjC+Qwk/eM7sGIHn68DSmx8Yyl/K3tmpv8= Subject key identifier: 13:29:02:9D:1E:BD:67:61:42:03:86:1A:FF:26:9D:50:98:A8:15:68 Certificate issuer: /CN=e9318a5198dcd3fcac2498055385d9af2110a6b4 Certificate serial: 019B797ED21D2910D762CA228B6A5F726E05 Authority key identifier: E9:31:8A:51:98:DC:D3:FC:AC:24:98:05:53:85:D9:AF:21:10:A6:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6TGKUZjc0_ysJJgFU4XZryEQprQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/b667aa-c415-4bbc-ad4c-c3377c1e3a2d/1/EykCnR69Z2FCA4Ya_yadUJioFWg.roa Signing time: Thu 01 Jan 2026 12:18:32 +0000 ROA not before: Thu 01 Jan 2026 12:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8368 IP address blocks: 85.119.240.0/21 maxlen: 21 2a00:e760::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/b667aa-c415-4bbc-ad4c-c3377c1e3a2d/1/6TGKUZjc0_ysJJgFU4XZryEQprQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/b667aa-c415-4bbc-ad4c-c3377c1e3a2d/1/6TGKUZjc0_ysJJgFU4XZryEQprQ.mft rsync://rpki.ripe.net/repository/DEFAULT/6TGKUZjc0_ysJJgFU4XZryEQprQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:d2:1d:29:10:d7:62:ca:22:8b:6a:5f:72:6e:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9318a5198dcd3fcac2498055385d9af2110a6b4 Validity Not Before: Jan 1 12:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1329029d1ebd67614203861aff269d5098a81568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:db:21:00:6b:39:bf:c9:c4:d5:01:9a:18:e9: 17:1a:e4:48:dc:f6:6f:63:80:66:82:7d:af:9e:a3: 61:85:24:bb:a2:61:63:cf:3d:5a:85:4e:b4:d9:2b: 24:3c:29:59:84:6d:a5:31:62:19:11:78:09:a2:4c: 59:d1:3f:81:63:96:4e:e4:b0:0e:d6:8b:82:2a:b7: a4:e0:ac:8a:fc:55:6f:72:7c:96:b9:6e:53:76:2e: 1d:e5:80:a6:ea:12:32:42:0a:b5:71:df:56:3a:48: d2:24:8e:d8:66:6c:2a:47:2e:f6:8c:3c:28:ab:2e: 2b:a9:22:e7:3d:dc:4e:9c:e5:b8:19:58:5a:59:d9: 88:b3:f8:ba:a4:9d:af:c3:d9:03:c7:dd:41:c5:d1: a3:fe:35:37:38:78:67:09:51:54:5d:13:4a:87:85: 70:3e:cc:f0:5d:68:eb:a7:50:ea:9d:18:16:5b:2c: 0c:2e:78:a8:fd:13:9c:b4:45:ed:4f:17:ea:28:a4: 39:8c:0f:4b:4a:68:6e:eb:dc:13:2c:37:bc:65:92: 09:27:91:45:1f:8f:72:b3:ae:d6:2a:d3:b1:a7:b1: 90:03:e1:c9:99:73:a5:4d:0f:2c:c8:91:bb:a5:bf: ce:d7:53:b2:12:f9:44:a0:9b:6c:bd:bc:b1:ac:54: 33:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:29:02:9D:1E:BD:67:61:42:03:86:1A:FF:26:9D:50:98:A8:15:68 X509v3 Authority Key Identifier: keyid:E9:31:8A:51:98:DC:D3:FC:AC:24:98:05:53:85:D9:AF:21:10:A6:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TGKUZjc0_ysJJgFU4XZryEQprQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b667aa-c415-4bbc-ad4c-c3377c1e3a2d/1/EykCnR69Z2FCA4Ya_yadUJioFWg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b667aa-c415-4bbc-ad4c-c3377c1e3a2d/1/6TGKUZjc0_ysJJgFU4XZryEQprQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.119.240.0/21 IPv6: 2a00:e760::/32 Signature Algorithm: sha256WithRSAEncryption 11:b7:a6:c7:0c:5f:f4:06:ca:66:89:fb:6b:5a:a6:c1:17:5b: ad:4c:70:79:26:4a:eb:5d:90:5d:8f:71:b2:8e:39:a9:d4:2b: 6c:89:0e:5e:4d:ec:ee:8b:1a:25:59:83:5f:1b:67:32:7b:ad: 28:11:48:69:a5:0c:4c:83:86:b2:cb:26:a0:18:5e:e8:1d:99: a0:a9:6c:c5:f5:af:e1:fb:dd:0c:8b:0e:c5:24:1d:4b:87:55: a0:fa:8b:67:a6:26:a0:85:26:5d:cf:04:07:48:3b:a8:32:84: 65:cc:c8:c5:f6:f1:0e:86:57:91:e1:96:e8:85:20:0c:2f:aa: 70:06:c1:d4:ba:ae:1f:d0:e6:c1:fc:c3:02:05:5e:27:e6:8e: 40:cc:c8:aa:fb:32:3f:68:12:e9:d8:76:17:7c:41:97:5c:2b: 67:8b:f6:26:ec:49:76:53:26:75:46:96:45:79:c4:83:d1:1c: 8f:67:b0:54:4f:8a:79:c0:0e:9c:45:6a:29:d5:31:1d:44:d9: 5d:61:92:37:d8:e0:e6:18:75:59:4e:06:8f:3c:62:0d:fc:d2: 7c:55:16:e7:c5:39:bd:fc:8f:4e:b3:17:1c:94:5d:fe:21:41: 0f:9b:4c:46:a9:b6:6d:00:ba:47:e3:b5:42:6d:c3:e8:03:21: 92:2e:89:9c -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5ftIdKRDXYsoii2pfcm4FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5MzE4YTUxOThkY2QzZmNhYzI0OTgwNTUzODVkOWFmMjEx MGE2YjQwHhcNMjYwMTAxMTIxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzI5MDI5ZDFlYmQ2NzYxNDIwMzg2MWFmZjI2OWQ1MDk4YTgxNTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tshAGs5v8nE1QGaGOkXGuRI3PZv Y4Bmgn2vnqNhhSS7omFjzz1ahU602SskPClZhG2lMWIZEXgJokxZ0T+BY5ZO5LAO 1ouCKrek4KyK/FVvcnyWuW5Tdi4d5YCm6hIyQgq1cd9WOkjSJI7YZmwqRy72jDwo qy4rqSLnPdxOnOW4GVhaWdmIs/i6pJ2vw9kDx91BxdGj/jU3OHhnCVFUXRNKh4Vw PszwXWjrp1DqnRgWWywMLnio/ROctEXtTxfqKKQ5jA9LSmhu69wTLDe8ZZIJJ5FF H49ys67WKtOxp7GQA+HJmXOlTQ8syJG7pb/O11OyEvlEoJtsvbyxrFQztQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBMpAp0evWdhQgOGGv8mnVCYqBVoMB8GA1UdIwQY MBaAFOkxilGY3NP8rCSYBVOF2a8hEKa0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlRHS1VaamMwX3lzSkpnRlU0WFpyeUVRcHJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iNjY3YWEtYzQxNS00YmJjLWFkNGMt YzMzNzdjMWUzYTJkLzEvRXlrQ25SNjlaMkZDQTRZYV95YWRVSmlvRldnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9iNjY3YWEtYzQxNS00YmJjLWFkNGMtYzMzNzdjMWUzYTJk LzEvNlRHS1VaamMwX3lzSkpnRlU0WFpyeUVRcHJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDVXfwMA0E AgACMAcDBQAqAOdgMA0GCSqGSIb3DQEBCwUAA4IBAQARt6bHDF/0BspmiftrWqbB F1utTHB5JkrrXZBdj3Gyjjmp1CtsiQ5eTezuixolWYNfG2cye60oEUhppQxMg4ay yyagGF7oHZmgqWzF9a/h+90Miw7FJB1Lh1Wg+otnpiaghSZdzwQHSDuoMoRlzMjF 9vEOhleR4ZbohSAML6pwBsHUuq4f0ObB/MMCBV4n5o5AzMiq+zI/aBLp2HYXfEGX XCtni/Ym7El2UyZ1RpZFecSD0RyPZ7BUT4p5wA6cRWop1TEdRNldYZI32ODmGHVZ TgaPPGIN/NJ8VRbnxTm9/I9OsxcclF3+IUEPm0xGqbZtALpH47VCbcPoAyGSLomc -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:13 2026 by rpki-client