This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/eqq6nM-gAQOF21nTNZ_FJI041fY.roa File: eqq6nM-gAQOF21nTNZ_FJI041fY.roa (raw, json) Hash identifier: yriPMfIsnw3NNBGChv8TwuqQ+3OFssnNxB1PL6DgPI8= Subject key identifier: 7A:AA:BA:9C:CF:A0:01:03:85:DB:59:D3:35:9F:C5:24:8D:38:D5:F6 Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Certificate serial: 019C04ED5CE3AD6695A20B76733C968BD701 Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/eqq6nM-gAQOF21nTNZ_FJI041fY.roa Signing time: Wed 28 Jan 2026 14:06:30 +0000 ROA not before: Wed 28 Jan 2026 14:06:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58232 IP address blocks: 91.217.166.0/24 maxlen: 24 185.113.10.0/24 maxlen: 24 195.254.165.0/24 maxlen: 24 2a05:9080:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:04:ed:5c:e3:ad:66:95:a2:0b:76:73:3c:96:8b:d7:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Validity Not Before: Jan 28 14:06:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7aaaba9ccfa0010385db59d3359fc5248d38d5f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3c:4d:b7:5b:5b:97:2b:06:82:12:27:4c:83: de:ec:3d:1f:6b:9a:5f:c6:03:6a:e3:d0:d3:0c:04: fd:44:ba:ca:a2:e3:91:39:94:13:b7:f9:19:2e:cf: f3:27:8b:23:9c:37:c4:cf:31:1d:6b:56:2c:e2:b6: c3:5b:1f:80:bf:dc:24:8d:c6:3e:ba:21:8b:a4:8c: d5:10:22:ce:0c:fe:e1:c4:f9:64:e2:7a:45:59:c5: 5e:52:f3:e1:58:75:4c:ba:11:b4:fb:57:20:9b:1e: 76:9c:64:09:f0:9f:89:9f:dd:28:eb:70:7f:16:5d: e7:fb:5c:96:dc:4c:74:20:be:4a:61:d4:dd:79:d8: 5f:a2:d3:16:6b:f8:d1:fa:80:e3:a8:3c:b3:c9:d2: 72:3a:f2:e3:a2:3a:2f:66:e0:e5:8d:e3:53:e0:6a: df:3d:0d:50:42:d7:5b:d3:4e:53:68:71:f7:2a:23: f5:8a:cc:7e:7b:6c:1b:bb:47:de:0e:d1:eb:c3:cf: d1:39:20:08:a0:dc:31:54:70:6d:36:3d:e5:90:37: fe:3a:ee:30:46:13:78:81:25:b8:7a:48:11:c5:5d: ee:75:f0:2e:fb:93:ac:f7:d8:10:74:f0:aa:85:1f: 36:5c:39:8b:44:13:70:f2:ef:6d:b8:b4:9c:af:66: 4f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:AA:BA:9C:CF:A0:01:03:85:DB:59:D3:35:9F:C5:24:8D:38:D5:F6 X509v3 Authority Key Identifier: keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/eqq6nM-gAQOF21nTNZ_FJI041fY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.217.166.0/24 185.113.10.0/24 195.254.165.0/24 IPv6: 2a05:9080:5::/48 Signature Algorithm: sha256WithRSAEncryption 2d:53:75:30:35:eb:b8:5d:49:ed:f1:aa:ad:8a:33:3b:74:0f: 90:43:0a:3e:46:3f:0f:c4:57:8e:0f:36:11:db:83:db:65:c2: 2d:44:84:bd:e7:0f:48:e9:16:81:28:5f:5d:d9:08:1b:95:aa: ed:e7:38:0d:b2:70:9c:1f:c7:e4:7d:35:7b:ba:63:af:68:f5: 5e:95:91:49:bb:1a:de:92:88:77:2c:4c:68:96:86:ba:79:07: 74:6e:a4:b0:17:2f:ae:c2:61:7c:34:07:ff:d1:56:8e:a6:80: 63:30:ad:bc:44:9b:d8:22:62:6e:be:7e:2b:10:f7:84:0f:0e: 14:62:63:cc:10:ea:18:cc:a2:fe:69:bb:9f:a8:59:4f:b3:8e: ce:46:7b:0e:b8:0e:c7:4a:80:c6:5a:57:be:cb:a5:66:15:57: bb:82:2b:61:b1:d5:3a:dc:0f:6c:af:a8:2d:1b:f1:25:c4:20: e3:3d:ea:60:69:46:c7:99:8d:5e:58:33:3f:58:aa:b7:3a:aa: 49:c5:66:5c:33:63:96:4e:40:d6:61:40:3b:c1:87:5e:84:ce: 2e:36:a4:49:ea:c5:af:6a:a0:20:9b:f3:36:5d:3c:7a:89:19: a4:3e:bf:cf:17:71:9b:02:1b:a7:26:61:53:99:79:71:a0:58: a1:8d:fe:a2 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZwE7VzjrWaVogt2czyWi9cBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw Y2MzNGIwHhcNMjYwMTI4MTQwNjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YWFhYmE5Y2NmYTAwMTAzODVkYjU5ZDMzNTlmYzUyNDhkMzhkNWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDxNt1tblysGghInTIPe7D0fa5pf xgNq49DTDAT9RLrKouOROZQTt/kZLs/zJ4sjnDfEzzEda1Ys4rbDWx+Av9wkjcY+ uiGLpIzVECLODP7hxPlk4npFWcVeUvPhWHVMuhG0+1cgmx52nGQJ8J+Jn90o63B/ Fl3n+1yW3Ex0IL5KYdTdedhfotMWa/jR+oDjqDyzydJyOvLjojovZuDljeNT4Grf PQ1QQtdb005TaHH3KiP1isx+e2wbu0feDtHrw8/ROSAIoNwxVHBtNj3lkDf+Ou4w RhN4gSW4ekgRxV3udfAu+5Os99gQdPCqhR82XDmLRBNw8u9tuLScr2ZPwwIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFHqqupzPoAEDhdtZ0zWfxSSNONX2MB8GA1UdIwQY MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt MDk0ODk4OWU2ZDU1LzEvZXFxNm5NLWdBUU9GMjFuVE5aX0ZKSTA0MWZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1 LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQAW9mmAwQA uXEKAwQAw/6lMA8EAgACMAkDBwAqBZCAAAUwDQYJKoZIhvcNAQELBQADggEBAC1T dTA167hdSe3xqq2KMzt0D5BDCj5GPw/EV44PNhHbg9tlwi1EhL3nD0jpFoEoX13Z CBuVqu3nOA2ycJwfx+R9NXu6Y69o9V6VkUm7Gt6SiHcsTGiWhrp5B3RupLAXL67C YXw0B//RVo6mgGMwrbxEm9giYm6+fisQ94QPDhRiY8wQ6hjMov5pu5+oWU+zjs5G ew64DsdKgMZaV77LpWYVV7uCK2Gx1TrcD2yvqC0b8SXEIOM96mBpRseZjV5YMz9Y qrc6qknFZlwzY5ZOQNZhQDvBh16Ezi42pEnqxa9qoCCb8zZdPHqJGaQ+v88XcZsC G6cmYVOZeXGgWKGN/qI= -----END CERTIFICATE-----Generated at Fri Jan 30 10:21:51 2026 by rpki-client