This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/DEqgDw1OjuvCUcoY_GFoXdYUL-g.roa File: DEqgDw1OjuvCUcoY_GFoXdYUL-g.roa (raw, json) Hash identifier: uaVIfBigKYn9jPBacBnYHFMS2xbXYfQ5wT7j6FjYz1s= Subject key identifier: 0C:4A:A0:0F:0D:4E:8E:EB:C2:51:CA:18:FC:61:68:5D:D6:14:2F:E8 Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722 Certificate serial: 019B7B36D9AFFEF8D5FEC9F6E7747C216BAE Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/DEqgDw1OjuvCUcoY_GFoXdYUL-g.roa Signing time: Thu 01 Jan 2026 20:19:10 +0000 ROA not before: Thu 01 Jan 2026 20:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13115 IP address blocks: 213.145.64.0/23 maxlen: 23 213.145.80.0/23 maxlen: 23 2001:41f8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 11:02:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:d9:af:fe:f8:d5:fe:c9:f6:e7:74:7c:21:6b:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722 Validity Not Before: Jan 1 20:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c4aa00f0d4e8eebc251ca18fc61685dd6142fe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f9:92:92:ed:cd:b6:19:f2:f2:9c:85:3a:50: ed:51:a0:af:c5:ba:01:be:05:f0:18:34:25:8b:91: 97:6b:e0:56:2e:25:16:c2:98:60:0a:5e:0b:b3:47: 76:23:65:69:30:a8:7b:d0:1d:08:7d:03:3d:ac:83: 23:92:7f:9a:37:45:7e:c5:bc:48:29:2e:f9:ca:38: c6:b1:db:9b:84:48:17:3c:5b:7f:3d:8a:3d:b0:c8: de:fa:e5:38:9e:22:b6:28:87:fa:d8:20:41:9f:20: 35:d8:75:11:b4:41:18:16:e1:9b:e4:92:fa:3d:0f: 64:0e:70:44:a2:f1:bb:55:f9:08:fa:d5:bc:d5:94: ba:1a:4f:99:19:41:64:3f:d9:9c:0c:9a:f0:7f:c9: f2:3a:be:44:a4:98:43:d3:6a:37:ad:1a:28:d9:c8: af:2f:ee:1a:05:14:87:a6:65:bd:4e:a6:91:f1:33: 4b:ae:38:8d:ac:7f:cb:92:e0:32:af:0a:86:4d:06: f8:ae:66:f0:a0:bd:44:a4:a6:9e:41:c0:1f:59:de: 8f:6e:d1:65:07:50:61:d7:62:34:8a:66:98:8e:79: 16:37:6e:5c:7c:47:1d:dc:92:30:40:6a:1a:13:bf: 4f:ff:17:0c:89:2a:0c:6e:f7:1e:d8:75:88:63:5a: 5f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:4A:A0:0F:0D:4E:8E:EB:C2:51:CA:18:FC:61:68:5D:D6:14:2F:E8 X509v3 Authority Key Identifier: keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/DEqgDw1OjuvCUcoY_GFoXdYUL-g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.145.64.0/23 213.145.80.0/23 IPv6: 2001:41f8::/32 Signature Algorithm: sha256WithRSAEncryption 20:e4:53:6b:2e:da:5b:44:d1:c9:be:d9:18:7f:61:c6:f6:3b: cb:18:1e:e3:cd:d0:f5:74:62:aa:16:f8:aa:03:36:a1:98:78: f4:c7:ba:20:8e:04:71:31:50:fc:29:92:3f:ca:80:21:fe:c1: e8:b9:0b:62:c5:29:b5:c3:2b:77:6d:c6:2c:ff:31:83:e9:e1: 45:7e:2c:29:f4:ac:64:3e:58:cd:22:d8:d1:8e:38:d6:6e:66: 78:da:95:f0:24:1e:f3:1d:c8:96:a8:63:e6:94:65:06:eb:4d: 9c:af:34:4d:f4:34:3e:e7:5d:34:45:92:0e:64:52:8a:10:db: 11:d2:5a:d0:e5:02:8b:aa:06:9a:3c:f7:4c:99:0a:4a:7d:ca: eb:3f:4b:18:1a:e4:b8:89:f2:cd:39:da:ee:c7:e2:fc:79:be: 83:77:44:2e:17:44:83:29:e7:f4:f2:7f:03:71:4f:f1:11:9b: 47:65:c8:c4:c9:03:9f:40:97:0a:34:a5:8d:3e:e3:d2:e0:63: 06:a2:6f:f7:02:5e:0d:86:f4:f8:69:e6:4f:12:13:82:0c:4b: 92:97:61:25:7c:d4:4b:1a:f9:b8:60:12:a7:27:c2:fc:a9:8e: f1:61:5f:8a:9e:6c:4b:e9:6b:2f:22:dd:b8:bd:b4:94:22:c9: 29:6d:76:ed -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt7Ntmv/vjV/sn253R8IWuuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmYTE2YWIwNjAyMDA2Nzc0MGE0YzFmYjQ3YTkxMjYyMmYx ZDA3MjIwHhcNMjYwMTAxMjAxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzRhYTAwZjBkNGU4ZWViYzI1MWNhMThmYzYxNjg1ZGQ2MTQyZmU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPmSku3Nthny8pyFOlDtUaCvxboB vgXwGDQli5GXa+BWLiUWwphgCl4Ls0d2I2VpMKh70B0IfQM9rIMjkn+aN0V+xbxI KS75yjjGsdubhEgXPFt/PYo9sMje+uU4niK2KIf62CBBnyA12HURtEEYFuGb5JL6 PQ9kDnBEovG7VfkI+tW81ZS6Gk+ZGUFkP9mcDJrwf8nyOr5EpJhD02o3rRoo2civ L+4aBRSHpmW9TqaR8TNLrjiNrH/LkuAyrwqGTQb4rmbwoL1EpKaeQcAfWd6PbtFl B1Bh12I0imaYjnkWN25cfEcd3JIwQGoaE79P/xcMiSoMbvce2HWIY1pfyQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFAxKoA8NTo7rwlHKGPxhaF3WFC/oMB8GA1UdIwQY MBaAFC+harBgIAZ3QKTB+0epEmIvHQciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUt ZDI0MmI2ZjNhOGExLzEvREVxZ0R3MU9qdXZDVWNvWV9HRm9YZFlVTC1nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUtZDI0MmI2ZjNhOGEx LzEvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQB1ZFAAwQB 1ZFQMA0EAgACMAcDBQAgAUH4MA0GCSqGSIb3DQEBCwUAA4IBAQAg5FNrLtpbRNHJ vtkYf2HG9jvLGB7jzdD1dGKqFviqAzahmHj0x7ogjgRxMVD8KZI/yoAh/sHouQti xSm1wyt3bcYs/zGD6eFFfiwp9KxkPljNItjRjjjWbmZ42pXwJB7zHciWqGPmlGUG 602crzRN9DQ+5100RZIOZFKKENsR0lrQ5QKLqgaaPPdMmQpKfcrrP0sYGuS4ifLN Odrux+L8eb6Dd0QuF0SDKef08n8DcU/xEZtHZcjEyQOfQJcKNKWNPuPS4GMGom/3 Al4NhvT4aeZPEhOCDEuSl2ElfNRLGvm4YBKnJ8L8qY7xYV+KnmxL6WsvIt24vbSU IskpbXbt -----END CERTIFICATE-----Generated at Mon Jan 19 20:20:48 2026 by rpki-client