This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/EwZq0Wt1O9SveXRnrufcdCq3340.roa File: EwZq0Wt1O9SveXRnrufcdCq3340.roa (raw, json) Hash identifier: zBk7sAJtzOLS7Fsio/tcoHCXbNOE2x6tTTfHvwTzYdI= Subject key identifier: 13:06:6A:D1:6B:75:3B:D4:AF:79:74:67:AE:E7:DC:74:2A:B7:DF:8D Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a Certificate serial: 019B7EA52F80D50CD7CDF1CF1C638D24EB06 Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/EwZq0Wt1O9SveXRnrufcdCq3340.roa Signing time: Fri 02 Jan 2026 12:18:33 +0000 ROA not before: Fri 02 Jan 2026 12:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44247 IP address blocks: 109.160.63.0/24 maxlen: 24 109.160.64.0/22 maxlen: 22 109.160.69.0/24 maxlen: 24 109.160.70.0/24 maxlen: 24 109.160.82.0/23 maxlen: 23 109.160.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:2f:80:d5:0c:d7:cd:f1:cf:1c:63:8d:24:eb:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a Validity Not Before: Jan 2 12:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=13066ad16b753bd4af797467aee7dc742ab7df8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0e:13:9c:69:b9:d6:1a:be:5b:dc:df:14:f7: 24:44:32:24:d2:51:5b:dc:14:35:d4:22:69:13:e0: 20:9b:99:57:24:9d:f2:c9:85:c4:cc:f4:54:76:be: 84:fb:c6:d4:b6:21:be:d4:ac:0e:62:e9:c2:0e:3c: 41:83:0b:8d:45:64:73:1c:83:b8:3d:71:a9:75:c4: 22:fb:36:9e:d6:6a:ac:ee:b3:1a:7b:a6:29:b8:68: 74:79:01:93:d8:ce:49:b3:bd:f8:40:c7:f7:c9:e8: 18:eb:0f:38:c9:3d:67:ad:b3:38:bb:55:b8:d0:10: f1:77:6c:1a:d4:05:e3:de:38:5f:5a:11:66:9c:e8: 80:b0:39:b9:c8:41:1e:bb:31:15:2a:ca:b2:8a:df: c8:8e:61:62:d0:45:20:c2:98:8c:d1:6f:8f:b0:81: ce:65:4e:43:68:38:6b:e6:55:61:45:fd:c2:de:7f: e3:c3:cf:60:6a:6a:04:4b:c7:f3:9a:10:3b:03:9a: 4c:70:87:f4:af:00:bd:fa:86:b4:d1:fe:a2:12:54: 3f:57:e5:57:a3:9a:4e:fa:10:d8:0e:d4:c9:c7:2e: 15:42:7f:43:72:a6:56:30:8c:4b:2e:51:fc:9b:77: 6a:3d:4a:d7:90:fb:de:1b:50:a1:82:02:9b:c7:2b: ab:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:06:6A:D1:6B:75:3B:D4:AF:79:74:67:AE:E7:DC:74:2A:B7:DF:8D X509v3 Authority Key Identifier: keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/EwZq0Wt1O9SveXRnrufcdCq3340.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.160.63.0-109.160.67.255 109.160.69.0-109.160.70.255 109.160.82.0-109.160.84.255 Signature Algorithm: sha256WithRSAEncryption 74:46:05:ae:80:17:e5:8e:83:63:a9:10:9f:02:20:e5:d7:18: df:77:e6:66:33:35:fc:f3:5c:fe:05:3f:2f:d7:91:a8:85:7d: 6c:cc:67:cb:e4:61:21:1c:b9:d4:3b:85:3b:6a:41:27:72:d3: 5e:c0:4d:77:a4:37:4e:64:e2:e1:31:88:12:3b:c2:8c:68:eb: 50:8c:9b:2b:6f:a3:23:df:02:85:07:3e:0c:f8:b4:21:4e:92: f3:1b:d7:ca:bd:fc:1c:9e:3a:68:b3:94:1b:d5:07:39:04:e5: f3:58:fb:1c:7d:18:72:55:de:0a:0d:a2:ec:6e:a0:f3:bd:cf: 41:95:68:62:9c:9a:0d:8f:a9:92:80:8d:d0:1c:d0:81:b1:41: 90:05:d1:d2:52:fb:85:68:1d:a2:ad:24:2b:89:1d:2a:a1:06: 45:be:17:38:ab:d3:0a:7c:f4:a2:6d:44:c7:48:01:0e:de:0d: a1:b2:81:6a:a8:54:8d:df:e8:4d:bc:65:8b:43:0d:40:08:fb: 30:23:0a:72:3e:ec:57:f5:5f:d4:d6:c1:c6:6c:a9:d5:dc:a5: d4:90:de:29:10:cc:dc:09:78:c1:ac:55:50:02:79:d4:f5:47: 3f:52:36:70:2a:70:de:24:26:52:68:5f:49:06:b9:35:59:ea: 5a:e4:1c:19 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt+pS+A1QzXzfHPHGONJOsGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMmE4YzFkMzExODk1MDE2MTA4ZmZiZDE0NTc1Yzc3Y2My ODc3M2EwHhcNMjYwMTAyMTIxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzA2NmFkMTZiNzUzYmQ0YWY3OTc0NjdhZWU3ZGM3NDJhYjdkZjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvA4TnGm51hq+W9zfFPckRDIk0lFb 3BQ11CJpE+Agm5lXJJ3yyYXEzPRUdr6E+8bUtiG+1KwOYunCDjxBgwuNRWRzHIO4 PXGpdcQi+zae1mqs7rMae6YpuGh0eQGT2M5Js734QMf3yegY6w84yT1nrbM4u1W4 0BDxd2wa1AXj3jhfWhFmnOiAsDm5yEEeuzEVKsqyit/IjmFi0EUgwpiM0W+PsIHO ZU5DaDhr5lVhRf3C3n/jw89gamoES8fzmhA7A5pMcIf0rwC9+oa00f6iElQ/V+VX o5pO+hDYDtTJxy4VQn9DcqZWMIxLLlH8m3dqPUrXkPveG1ChggKbxyurLwIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFBMGatFrdTvUr3l0Z67n3HQqt9+NMB8GA1UdIwQY MBaAFHIqjB0xGJUBYQj/vRRXXHfMKHc6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYt YTU1OGVlNjU0MzFmLzEvRXdacTBXdDFPOVN2ZVhSbnJ1ZmNkQ3EzMzQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYtYTU1OGVlNjU0MzFm LzEvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqMAwDBABtoD8D BAJtoEAwDAMEAG2gRQMEAG2gRjAMAwQBbaBSAwQAbaBUMA0GCSqGSIb3DQEBCwUA A4IBAQB0RgWugBfljoNjqRCfAiDl1xjfd+ZmMzX881z+BT8v15GohX1szGfL5GEh HLnUO4U7akEnctNewE13pDdOZOLhMYgSO8KMaOtQjJsrb6Mj3wKFBz4M+LQhTpLz G9fKvfwcnjpos5Qb1Qc5BOXzWPscfRhyVd4KDaLsbqDzvc9BlWhinJoNj6mSgI3Q HNCBsUGQBdHSUvuFaB2irSQriR0qoQZFvhc4q9MKfPSibUTHSAEO3g2hsoFqqFSN 3+hNvGWLQw1ACPswIwpyPuxX9V/U1sHGbKnV3KXUkN4pEMzcCXjBrFVQAnnU9Uc/ UjZwKnDeJCZSaF9JBrk1Wepa5BwZ -----END CERTIFICATE-----Generated at Tue Jan 20 00:10:20 2026 by rpki-client