This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/EGTr11Cn33WgsBkSO-DW_brv2pQ.roa File: EGTr11Cn33WgsBkSO-DW_brv2pQ.roa (raw, json) Hash identifier: WbBfhfc/J57F6babpd8iRrGBrz8Jx8j1fD8g8nHbBpM= Subject key identifier: 10:64:EB:D7:50:A7:DF:75:A0:B0:19:12:3B:E0:D6:FD:BA:EF:DA:94 Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309 Certificate serial: 019B98AD6491AC757A1941ECB66325F81B64 Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/EGTr11Cn33WgsBkSO-DW_brv2pQ.roa Signing time: Wed 07 Jan 2026 13:37:38 +0000 ROA not before: Wed 07 Jan 2026 13:37:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48314 IP address blocks: 212.81.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:98:ad:64:91:ac:75:7a:19:41:ec:b6:63:25:f8:1b:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309 Validity Not Before: Jan 7 13:37:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1064ebd750a7df75a0b019123be0d6fdbaefda94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:85:30:35:7f:c2:69:b7:53:da:b0:12:bd:dc: fc:85:46:bf:42:7a:7e:7b:97:ec:e4:91:57:02:4a: bb:93:06:cc:30:a6:e9:bd:7f:45:67:76:92:3c:56: c2:9b:21:eb:6a:9c:1b:76:8e:b9:a1:cc:3d:51:97: 21:06:7e:c2:5c:8b:81:83:79:b7:d0:b0:08:cd:e6: 82:46:50:e8:cf:62:0b:0d:91:23:a8:4e:a3:b9:96: 54:47:59:1e:73:2e:94:c7:12:29:97:5f:3f:26:0c: 75:8a:65:d0:8b:26:95:da:35:de:4c:c2:c4:5c:f5: 55:40:3d:2c:f5:c3:33:36:db:ed:ab:45:1e:94:5e: db:ff:c2:80:d3:51:1d:e0:a9:e8:1d:a0:3b:b7:e7: 2e:00:e7:1b:2a:69:d4:69:cf:9b:cb:6c:a9:27:ac: 9b:27:69:ad:91:fc:de:4b:c9:5a:19:1e:d4:32:fe: 2c:fb:70:52:6d:20:a9:45:3e:e2:12:97:44:aa:83: 5d:8c:e9:ec:15:7f:95:5a:2d:68:94:82:f8:15:7b: 77:d1:50:df:19:d7:57:2c:1e:aa:7e:e5:95:bf:03: af:64:33:d5:fa:d3:ba:54:7f:15:93:63:02:7a:4f: 71:c8:00:7c:c0:07:53:9f:98:30:08:2a:1b:38:a0: 17:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:64:EB:D7:50:A7:DF:75:A0:B0:19:12:3B:E0:D6:FD:BA:EF:DA:94 X509v3 Authority Key Identifier: keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/EGTr11Cn33WgsBkSO-DW_brv2pQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.81.44.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:e3:ee:4d:c6:3f:1e:41:7c:0d:ba:e8:f3:09:68:45:3b:b3: a0:7b:44:f7:6b:d8:02:5a:a5:cf:31:2e:51:76:96:e4:ef:ec: b6:a0:5d:af:56:3d:ea:88:41:7b:9b:de:64:13:65:d5:cd:0d: 42:85:ee:db:fd:40:d2:cd:0e:e4:9e:ab:8b:ce:9b:3f:39:0a: 28:07:6f:c9:62:a7:95:72:37:7d:3d:89:d3:88:db:02:53:a6: 3d:d1:ab:f2:b2:b3:04:68:d9:41:3e:8d:8c:e8:f4:1c:46:93: 17:c9:ce:aa:15:c1:7b:ba:35:f7:f6:05:19:ba:73:e7:84:3d: df:f9:05:42:e1:3c:41:2a:0b:91:0c:70:ac:64:ad:a9:37:4d: 2b:c1:53:c2:31:8e:f2:39:35:e5:70:00:1d:77:09:22:65:26: 9e:8b:c8:33:ff:67:d6:67:5a:f1:9c:8f:1c:cc:54:9b:c7:0e: 32:8f:25:59:b9:c8:06:1b:ed:17:07:ef:2a:80:bc:92:55:18: 48:71:37:ba:3c:ff:ea:38:1e:e6:a7:43:ae:fd:d9:3e:fc:f0: 50:6b:e1:1d:ff:0a:b2:48:97:50:d9:3d:fa:06:dd:e2:3d:54: 3e:c2:3c:3d:fa:94:95:8a:84:5a:0b:4a:e2:f8:1a:9a:ee:38: b8:ad:9e:e2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuYrWSRrHV6GUHstmMl+BtkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkMzY2ODYyOGYwZGY3OWQwNDdlY2EwZDlhZGNmYzBiNjY5 M2UzMDkwHhcNMjYwMTA3MTMzNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDY0ZWJkNzUwYTdkZjc1YTBiMDE5MTIzYmUwZDZmZGJhZWZkYTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIUwNX/CabdT2rASvdz8hUa/Qnp+ e5fs5JFXAkq7kwbMMKbpvX9FZ3aSPFbCmyHrapwbdo65ocw9UZchBn7CXIuBg3m3 0LAIzeaCRlDoz2ILDZEjqE6juZZUR1kecy6UxxIpl18/Jgx1imXQiyaV2jXeTMLE XPVVQD0s9cMzNtvtq0UelF7b/8KA01Ed4KnoHaA7t+cuAOcbKmnUac+by2ypJ6yb J2mtkfzeS8laGR7UMv4s+3BSbSCpRT7iEpdEqoNdjOnsFX+VWi1olIL4FXt30VDf GddXLB6qfuWVvwOvZDPV+tO6VH8Vk2MCek9xyAB8wAdTn5gwCCobOKAXEQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBBk69dQp991oLAZEjvg1v2679qUMB8GA1UdIwQY MBaAFL02aGKPDfedBH7KDZrc/Atmk+MJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8xYjU3MjItMWRkYS00ZGYzLWE0NWMt ZTZiZjMxNmM5NGExLzEvRUdUcjExQ24zM1dnc0JrU08tRFdfYnJ2MnBRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi8xYjU3MjItMWRkYS00ZGYzLWE0NWMtZTZiZjMxNmM5NGEx LzEvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1FEsMA0G CSqGSIb3DQEBCwUAA4IBAQAb4+5Nxj8eQXwNuujzCWhFO7Oge0T3a9gCWqXPMS5R dpbk7+y2oF2vVj3qiEF7m95kE2XVzQ1Che7b/UDSzQ7knquLzps/OQooB2/JYqeV cjd9PYnTiNsCU6Y90avysrMEaNlBPo2M6PQcRpMXyc6qFcF7ujX39gUZunPnhD3f +QVC4TxBKguRDHCsZK2pN00rwVPCMY7yOTXlcAAddwkiZSaei8gz/2fWZ1rxnI8c zFSbxw4yjyVZucgGG+0XB+8qgLySVRhIcTe6PP/qOB7mp0Ou/dk+/PBQa+Ed/wqy SJdQ2T36Bt3iPVQ+wjw9+pSVioRaC0ri+Bqa7ji4rZ7i -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:17 2026 by rpki-client