This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/eqCaauL__rhdQZW0YvZCBOthP9U.roa File: eqCaauL__rhdQZW0YvZCBOthP9U.roa (raw, json) Hash identifier: 4jNhYaFSmf7CksXUOADGZslA+eQSAkKqvK4SR/wr1mc= Subject key identifier: 7A:A0:9A:6A:E2:FF:FE:B8:5D:41:95:B4:62:F6:42:04:EB:61:3F:D5 Certificate issuer: /CN=fa307821230e7ba81a4d471a591e78ea759c6934 Certificate serial: 019B7AC93D0B7EAC51B2B092E1A21AD9032E Authority key identifier: FA:30:78:21:23:0E:7B:A8:1A:4D:47:1A:59:1E:78:EA:75:9C:69:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/eqCaauL__rhdQZW0YvZCBOthP9U.roa Signing time: Thu 01 Jan 2026 18:19:27 +0000 ROA not before: Thu 01 Jan 2026 18:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203034 IP address blocks: 185.147.20.0/22 maxlen: 22 2a07:5480::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:3d:0b:7e:ac:51:b2:b0:92:e1:a2:1a:d9:03:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa307821230e7ba81a4d471a591e78ea759c6934 Validity Not Before: Jan 1 18:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7aa09a6ae2fffeb85d4195b462f64204eb613fd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:e2:be:3e:79:cb:81:1f:6d:81:b1:bc:bc:da: 70:96:07:ce:ea:03:ac:76:78:15:01:16:91:2c:9d: 22:74:7f:6f:30:99:1e:86:18:62:cd:32:49:79:32: 83:d8:cf:5c:46:08:fa:d5:7c:76:b4:1c:0c:b3:63: d5:b5:f4:cd:29:7a:30:d1:92:d6:da:a2:ab:09:81: d3:39:c0:82:ff:2a:b5:26:37:2f:b0:2b:f3:79:48: ca:6b:c0:88:5d:a5:df:d0:7f:a2:42:20:a1:9d:d3: 55:99:29:0d:d7:73:0e:7f:74:a1:87:4d:bf:82:fe: 5f:2b:93:51:b5:9d:25:ea:37:9f:f3:94:ba:7d:c9: 1a:4e:eb:b5:4a:28:e4:31:ef:24:05:64:d0:a5:42: 95:4f:68:fb:5f:29:15:da:d3:01:ff:b1:3a:91:49: 77:c4:22:90:44:f7:28:6d:5e:a8:61:ec:cc:6e:dd: 54:a7:36:ed:15:97:81:b1:8c:58:63:2f:ec:3c:14: e6:0b:02:ad:88:a5:65:a2:00:6f:89:e1:68:fc:5e: aa:c1:e4:70:95:5d:85:40:18:93:02:fe:3e:bf:f0: ff:a5:fc:ff:d7:ba:63:47:54:7d:df:4f:f9:be:c9: 2b:75:e5:eb:87:ac:cf:9c:14:2e:ff:67:3e:48:03: cb:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:A0:9A:6A:E2:FF:FE:B8:5D:41:95:B4:62:F6:42:04:EB:61:3F:D5 X509v3 Authority Key Identifier: keyid:FA:30:78:21:23:0E:7B:A8:1A:4D:47:1A:59:1E:78:EA:75:9C:69:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/eqCaauL__rhdQZW0YvZCBOthP9U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.147.20.0/22 IPv6: 2a07:5480::/29 Signature Algorithm: sha256WithRSAEncryption b8:34:c9:c5:4e:ef:99:b6:ac:e7:7e:65:38:78:63:af:bf:28: 9b:fd:02:56:e6:ae:ec:f6:a7:dc:68:27:22:95:69:b7:00:52: ff:d9:c5:8f:2a:ce:81:a9:05:6b:5d:f5:04:6e:39:2d:35:fe: fe:3e:65:71:ff:50:83:99:41:7a:98:91:8c:ea:8a:93:71:eb: 99:7c:51:70:e5:86:03:0b:64:5a:06:31:e5:53:b8:02:48:e8: cd:83:a3:95:23:69:b3:e2:d7:91:bf:f2:62:44:61:62:92:6a: ff:7c:ca:20:de:8f:e3:7c:19:8c:6c:36:5a:28:91:39:7a:59: 8d:2a:8b:41:7c:4e:58:a7:40:1b:87:32:2f:19:64:cd:61:92: 9d:7c:69:14:14:f1:f8:45:39:58:42:46:2c:48:6e:3f:6a:42: d2:d4:10:cc:cf:8c:e4:dd:07:af:b3:ec:37:39:e6:33:a1:32: a3:21:57:8c:cf:87:6b:57:01:cc:a2:4f:75:68:3e:0b:15:60: a8:5f:30:77:7b:c5:66:63:b7:d5:e9:35:d8:a4:35:8a:45:ee: 66:e0:36:f9:35:60:c3:28:3e:9d:31:82:e1:87:f9:03:7a:6c: 0f:b0:19:8f:78:38:70:98:8b:c3:ce:74:7c:50:15:3a:01:a4: 97:c6:36:66 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt6yT0LfqxRsrCS4aIa2QMuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhMzA3ODIxMjMwZTdiYTgxYTRkNDcxYTU5MWU3OGVhNzU5 YzY5MzQwHhcNMjYwMTAxMTgxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YWEwOWE2YWUyZmZmZWI4NWQ0MTk1YjQ2MmY2NDIwNGViNjEzZmQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+K+PnnLgR9tgbG8vNpwlgfO6gOs dngVARaRLJ0idH9vMJkehhhizTJJeTKD2M9cRgj61Xx2tBwMs2PVtfTNKXow0ZLW 2qKrCYHTOcCC/yq1JjcvsCvzeUjKa8CIXaXf0H+iQiChndNVmSkN13MOf3Shh02/ gv5fK5NRtZ0l6jef85S6fckaTuu1SijkMe8kBWTQpUKVT2j7XykV2tMB/7E6kUl3 xCKQRPcobV6oYezMbt1UpzbtFZeBsYxYYy/sPBTmCwKtiKVlogBvieFo/F6qweRw lV2FQBiTAv4+v/D/pfz/17pjR1R930/5vskrdeXrh6zPnBQu/2c+SAPLqwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFHqgmmri//64XUGVtGL2QgTrYT/VMB8GA1UdIwQY MBaAFPoweCEjDnuoGk1HGlkeeOp1nGk0MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1qQjRJU01PZTZnYVRVY2FXUjU0Nm5XY2FUUS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2UvOTEwZjY3LTFmZmMtNDFjNC1hMmVh LWYxZTY1Zjk3Yzg5YS8xL2VxQ2FhdUxfX3JoZFFaVzBZdlpDQk90aFA5VS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvY2UvOTEwZjY3LTFmZmMtNDFjNC1hMmVhLWYxZTY1Zjk3Yzg5 YS8xLzEtakI0SVNNT2U2Z2FUVWNhV1I1NDZuV2NhVFEuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAK5kxQw DQQCAAIwBwMFAyoHVIAwDQYJKoZIhvcNAQELBQADggEBALg0ycVO75m2rOd+ZTh4 Y6+/KJv9Albmruz2p9xoJyKVabcAUv/ZxY8qzoGpBWtd9QRuOS01/v4+ZXH/UIOZ QXqYkYzqipNx65l8UXDlhgMLZFoGMeVTuAJI6M2Do5UjabPi15G/8mJEYWKSav98 yiDej+N8GYxsNlookTl6WY0qi0F8TlinQBuHMi8ZZM1hkp18aRQU8fhFOVhCRixI bj9qQtLUEMzPjOTdB6+z7Dc55jOhMqMhV4zPh2tXAcyiT3VoPgsVYKhfMHd7xWZj t9XpNdikNYpF7mbgNvk1YMMoPp0xguGH+QN6bA+wGY94OHCYi8POdHxQFToBpJfG NmY= -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:54 2026 by rpki-client