This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/eqRZK_JGFaT4pOqnhAyJvjkUCoA.roa File: eqRZK_JGFaT4pOqnhAyJvjkUCoA.roa (raw, json) Hash identifier: jItvJdxi3E9SOd6i/gjBeEHoNNhvY/8u3V8hrLU5X7c= Subject key identifier: 7A:A4:59:2B:F2:46:15:A4:F8:A4:EA:A7:84:0C:89:BE:39:14:0A:80 Certificate issuer: /CN=d2bb66fbdeaafff43b9650b1f6cbe4f29edaf58c Certificate serial: 019B7EA73794D054BDB2DAC034CA147D8D55 Authority key identifier: D2:BB:66:FB:DE:AA:FF:F4:3B:96:50:B1:F6:CB:E4:F2:9E:DA:F5:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rtm-96q__Q7llCx9svk8p7a9Yw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/eqRZK_JGFaT4pOqnhAyJvjkUCoA.roa Signing time: Fri 02 Jan 2026 12:20:46 +0000 ROA not before: Fri 02 Jan 2026 12:20:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8873 IP address blocks: 2001:678:848::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.mft rsync://rpki.ripe.net/repository/DEFAULT/0rtm-96q__Q7llCx9svk8p7a9Yw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:37:94:d0:54:bd:b2:da:c0:34:ca:14:7d:8d:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2bb66fbdeaafff43b9650b1f6cbe4f29edaf58c Validity Not Before: Jan 2 12:20:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7aa4592bf24615a4f8a4eaa7840c89be39140a80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a6:10:09:f3:c7:02:40:a2:5c:0f:46:c2:a6: 12:e5:35:23:df:0c:ee:26:97:ad:39:c9:40:d1:55: 42:5d:4e:c1:86:dc:42:85:89:9b:e8:2c:ba:76:eb: 17:14:17:e2:7c:47:b1:54:d8:52:06:6b:17:27:b7: b8:5a:aa:c9:5c:8d:f8:5b:59:0c:36:c7:54:db:50: 11:cb:41:d7:74:34:0d:e0:15:62:2d:01:80:24:9b: a9:bd:61:f8:b1:4e:5c:db:fe:62:90:e2:99:80:e1: c1:57:c9:83:81:f2:00:8d:b6:bd:4e:26:5d:84:d8: cd:1a:8c:40:80:f9:2f:a7:08:90:3e:b8:ac:0c:0d: bd:47:76:55:f4:34:ef:64:42:fa:3a:1c:53:0d:4b: 55:e5:09:65:ed:3a:22:b2:ed:bf:5b:d3:73:8f:f7: 8d:a4:6c:9f:55:fb:e9:85:44:7f:71:b4:b3:6d:c5: 77:da:0e:60:47:0d:0b:d1:15:e2:9f:50:45:4a:6a: 9e:c4:7d:49:8e:d6:05:a3:dc:45:9d:c1:30:f0:ea: b3:3b:5c:5b:24:ea:a5:d8:16:a1:e2:78:45:e5:01: 9f:e8:ab:c1:b9:df:16:88:4f:85:f0:70:9f:76:20: e2:da:84:c5:dd:3d:0a:13:65:14:a2:0c:66:a8:da: 0e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:A4:59:2B:F2:46:15:A4:F8:A4:EA:A7:84:0C:89:BE:39:14:0A:80 X509v3 Authority Key Identifier: keyid:D2:BB:66:FB:DE:AA:FF:F4:3B:96:50:B1:F6:CB:E4:F2:9E:DA:F5:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rtm-96q__Q7llCx9svk8p7a9Yw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/eqRZK_JGFaT4pOqnhAyJvjkUCoA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e9cbf3-3a5d-4b74-86d3-cb0f2455cbd6/1/0rtm-96q__Q7llCx9svk8p7a9Yw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:848::/48 Signature Algorithm: sha256WithRSAEncryption 38:1b:69:12:7d:13:9e:83:4f:d0:de:78:0e:29:a7:85:5c:c8: 20:1b:7e:61:65:57:d1:6d:d0:b6:83:2b:07:f7:26:02:f1:c6: d1:99:ab:75:5e:c2:5d:85:2d:c9:4f:f3:5e:63:1f:96:76:d7: c0:79:84:69:b3:27:a5:47:ca:52:e9:2d:6b:0e:21:5c:03:e4: 63:19:6c:66:6b:c5:9e:f5:c4:b4:74:22:89:ea:fb:18:8b:38: 23:24:f2:7e:90:06:96:23:72:a9:30:6f:30:1d:0e:f7:5e:7e: 50:6d:31:44:bd:1c:ad:26:5f:db:ec:44:29:e2:a8:49:ec:2c: 06:78:63:67:14:2f:70:a3:16:dd:9e:21:2a:45:bd:98:23:9a: 01:42:0e:e7:b3:d7:26:64:70:12:9b:1d:2d:43:f7:4b:0c:20: 69:06:2c:24:cf:bc:f4:80:0b:3f:f0:3c:9b:2f:2b:ee:15:8e: dd:d4:40:cd:c7:7a:e7:ae:0c:3f:ec:27:4f:ad:cc:94:23:99: d4:3d:40:5f:83:9b:ba:98:4f:f1:8c:1f:13:e2:a0:2b:d3:f6: 43:40:e6:71:ca:eb:51:0b:02:42:a1:c9:dd:16:f8:0d:2b:91: d1:be:7a:ae:dc:c3:2e:7a:ec:22:01:6d:e2:67:de:28:77:5f: 98:47:62:ca -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pzeU0FS9strANMoUfY1VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyYmI2NmZiZGVhYWZmZjQzYjk2NTBiMWY2Y2JlNGYyOWVk YWY1OGMwHhcNMjYwMTAyMTIyMDQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YWE0NTkyYmYyNDYxNWE0ZjhhNGVhYTc4NDBjODliZTM5MTQwYTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqYQCfPHAkCiXA9GwqYS5TUj3wzu JpetOclA0VVCXU7BhtxChYmb6Cy6dusXFBfifEexVNhSBmsXJ7e4WqrJXI34W1kM NsdU21ARy0HXdDQN4BViLQGAJJupvWH4sU5c2/5ikOKZgOHBV8mDgfIAjba9TiZd hNjNGoxAgPkvpwiQPrisDA29R3ZV9DTvZEL6OhxTDUtV5Qll7Toisu2/W9Nzj/eN pGyfVfvphUR/cbSzbcV32g5gRw0L0RXin1BFSmqexH1JjtYFo9xFncEw8OqzO1xb JOql2Bah4nhF5QGf6KvBud8WiE+F8HCfdiDi2oTF3T0KE2UUogxmqNoOTwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFHqkWSvyRhWk+KTqp4QMib45FAqAMB8GA1UdIwQY MBaAFNK7Zvveqv/0O5ZQsfbL5PKe2vWMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHJ0bS05NnFfX1E3bGxDeDlzdms4cDdhOVl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9lOWNiZjMtM2E1ZC00Yjc0LTg2ZDMt Y2IwZjI0NTVjYmQ2LzEvZXFSWktfSkdGYVQ0cE9xbmhBeUp2amtVQ29BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9lOWNiZjMtM2E1ZC00Yjc0LTg2ZDMtY2IwZjI0NTVjYmQ2 LzEvMHJ0bS05NnFfX1E3bGxDeDlzdms4cDdhOVl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAhI MA0GCSqGSIb3DQEBCwUAA4IBAQA4G2kSfROeg0/Q3ngOKaeFXMggG35hZVfRbdC2 gysH9yYC8cbRmat1XsJdhS3JT/NeYx+WdtfAeYRpsyelR8pS6S1rDiFcA+RjGWxm a8We9cS0dCKJ6vsYizgjJPJ+kAaWI3KpMG8wHQ73Xn5QbTFEvRytJl/b7EQp4qhJ 7CwGeGNnFC9woxbdniEqRb2YI5oBQg7ns9cmZHASmx0tQ/dLDCBpBiwkz7z0gAs/ 8DybLyvuFY7d1EDNx3rnrgw/7CdPrcyUI5nUPUBfg5u6mE/xjB8T4qAr0/ZDQOZx yutRCwJCocndFvgNK5HRvnqu3MMueuwiAW3iZ94od1+YR2LK -----END CERTIFICATE-----Generated at Wed Jan 21 10:28:43 2026 by rpki-client