This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/EatRVRBBWy_Eiw-BYatitoyprMs.roa File: EatRVRBBWy_Eiw-BYatitoyprMs.roa (raw, json) Hash identifier: iv+Kv1NfcsjQn7ciX3R3V9wqkwDXw2M471v/p/wN2I8= Subject key identifier: 11:AB:51:55:10:41:5B:2F:C4:8B:0F:81:61:AB:62:B6:8C:A9:AC:CB Certificate issuer: /CN=3447a30428254c9970fcfbdffef06b0d6b490f0e Certificate serial: 019B7F1585C4596F37567962576652A8104A Authority key identifier: 34:47:A3:04:28:25:4C:99:70:FC:FB:DF:FE:F0:6B:0D:6B:49:0F:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/EatRVRBBWy_Eiw-BYatitoyprMs.roa Signing time: Fri 02 Jan 2026 14:21:15 +0000 ROA not before: Fri 02 Jan 2026 14:21:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42198 IP address blocks: 31.132.36.0/22 maxlen: 24 193.30.32.0/22 maxlen: 24 2a0c:8540::/43 maxlen: 48 2a0c:8541::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:85:c4:59:6f:37:56:79:62:57:66:52:a8:10:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3447a30428254c9970fcfbdffef06b0d6b490f0e Validity Not Before: Jan 2 14:21:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=11ab515510415b2fc48b0f8161ab62b68ca9accb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:78:f6:62:2a:ec:55:ad:30:79:70:b9:e2:f4: 56:44:de:60:a2:ab:04:71:76:04:0c:bf:af:02:15: ee:c5:ce:49:08:12:17:9e:99:30:c8:a1:1f:6e:34: fd:e6:ad:95:ee:b4:93:cf:08:c4:7a:43:eb:51:1e: 06:0a:c6:d9:4e:fa:a7:3f:70:1d:a1:79:5f:df:30: 76:15:e4:13:15:a0:45:9f:09:2d:97:7c:08:3f:24: 13:20:68:02:c6:ee:ee:35:05:58:12:a3:99:b0:64: 5e:c6:ae:85:71:c3:23:3b:45:6b:c3:30:ad:0b:1b: d8:0b:62:2a:2a:c9:56:0c:fc:75:47:2d:0f:68:d6: cf:a2:8f:15:15:c2:d2:6d:2a:c1:aa:3a:f0:a4:23: 6a:d3:03:ea:38:6a:60:7f:dc:8f:6a:47:46:94:8a: 5a:bd:34:53:55:f9:92:4d:93:51:a6:cb:a5:41:8f: e3:ed:31:5c:20:20:20:da:bc:7d:ba:12:f0:f1:ed: e3:23:c5:b9:b9:bd:db:5e:c2:ca:3d:85:e1:72:48: 7a:e4:9a:9d:e4:2d:5f:76:9b:40:e8:44:7a:02:e5: 21:73:74:4f:2f:02:ec:5f:d8:af:e7:69:f6:14:c0: c0:8f:78:be:fb:56:7f:68:94:f7:4a:e0:39:98:21: 3e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:AB:51:55:10:41:5B:2F:C4:8B:0F:81:61:AB:62:B6:8C:A9:AC:CB X509v3 Authority Key Identifier: keyid:34:47:A3:04:28:25:4C:99:70:FC:FB:DF:FE:F0:6B:0D:6B:49:0F:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/EatRVRBBWy_Eiw-BYatitoyprMs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.132.36.0/22 193.30.32.0/22 IPv6: 2a0c:8540::/43 2a0c:8541::/32 Signature Algorithm: sha256WithRSAEncryption 6b:e8:98:fc:f7:8c:f0:02:78:63:0c:12:6c:db:f4:ed:19:b4: 3c:3f:aa:22:12:9e:2a:d4:c1:a3:6b:8f:c1:d8:8b:35:ad:92: e6:82:96:aa:52:f5:57:e4:c9:34:3a:cd:c5:28:8a:95:a9:a2: 15:e8:4d:5c:1d:a2:df:3c:3c:5d:5c:8b:8e:ec:fc:87:74:b4: 31:2e:35:2c:67:78:f8:63:37:5f:12:09:d5:e3:2d:ab:85:30: a4:54:d2:53:47:68:40:c4:72:a9:f9:e0:9d:f7:4d:ac:10:d1: ee:f9:5c:b2:ba:b6:5f:69:3e:69:cc:a0:1d:9f:75:df:a0:a7: cc:c3:3e:63:de:f3:88:9c:50:0b:2b:cc:a8:e7:81:59:51:42: a8:86:9a:6f:85:df:76:b7:cc:f1:fb:8f:5f:e6:03:49:be:6d: d1:0e:ea:e0:95:24:23:ab:2b:3f:7a:95:24:cd:79:cc:7b:43: f6:2c:5b:92:ec:75:c0:74:82:8a:cf:e1:13:13:db:de:07:dc: 77:c1:3e:63:f1:9f:29:7a:c1:c0:31:fc:00:a1:65:58:c2:bd: 4a:cb:b9:0d:30:34:6e:fd:cb:da:fc:19:90:ef:45:8e:ba:94: 59:fd:26:0c:25:b6:09:c1:07:92:fe:c2:8a:c1:ae:c0:7a:ec: 6a:fc:06:67 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt/FYXEWW83VnliV2ZSqBBKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NDdhMzA0MjgyNTRjOTk3MGZjZmJkZmZlZjA2YjBkNmI0 OTBmMGUwHhcNMjYwMTAyMTQyMTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMWFiNTE1NTEwNDE1YjJmYzQ4YjBmODE2MWFiNjJiNjhjYTlhY2NiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnj2YirsVa0weXC54vRWRN5goqsE cXYEDL+vAhXuxc5JCBIXnpkwyKEfbjT95q2V7rSTzwjEekPrUR4GCsbZTvqnP3Ad oXlf3zB2FeQTFaBFnwktl3wIPyQTIGgCxu7uNQVYEqOZsGRexq6FccMjO0VrwzCt CxvYC2IqKslWDPx1Ry0PaNbPoo8VFcLSbSrBqjrwpCNq0wPqOGpgf9yPakdGlIpa vTRTVfmSTZNRpsulQY/j7TFcICAg2rx9uhLw8e3jI8W5ub3bXsLKPYXhckh65Jqd 5C1fdptA6ER6AuUhc3RPLwLsX9iv52n2FMDAj3i++1Z/aJT3SuA5mCE+uQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFBGrUVUQQVsvxIsPgWGrYraMqazLMB8GA1UdIwQY MBaAFDRHowQoJUyZcPz73/7waw1rSQ8OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkVlakJDZ2xUSmx3X1B2Zl92QnJEV3RKRHc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9mYzQxOWEtNWMyMS00ZDJmLTliODAt YmRlMDI4YWQ1OTMwLzEvRWF0UlZSQkJXeV9FaXctQllhdGl0b3lwck1zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9mYzQxOWEtNWMyMS00ZDJmLTliODAtYmRlMDI4YWQ1OTMw LzEvTkVlakJDZ2xUSmx3X1B2Zl92QnJEV3RKRHc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDASBAIAATAMAwQCH4QkAwQC wR4gMBYEAgACMBADBwUqDIVAAAADBQAqDIVBMA0GCSqGSIb3DQEBCwUAA4IBAQBr 6Jj894zwAnhjDBJs2/TtGbQ8P6oiEp4q1MGja4/B2Is1rZLmgpaqUvVX5Mk0Os3F KIqVqaIV6E1cHaLfPDxdXIuO7PyHdLQxLjUsZ3j4YzdfEgnV4y2rhTCkVNJTR2hA xHKp+eCd902sENHu+VyyurZfaT5pzKAdn3XfoKfMwz5j3vOInFALK8yo54FZUUKo hppvhd92t8zx+49f5gNJvm3RDurglSQjqys/epUkzXnMe0P2LFuS7HXAdIKKz+ET E9veB9x3wT5j8Z8pesHAMfwAoWVYwr1Ky7kNMDRu/cva/BmQ70WOupRZ/SYMJbYJ wQeS/sKKwa7Aeuxq/AZn -----END CERTIFICATE-----Generated at Sun Jan 11 16:13:04 2026 by rpki-client