This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/EGpVIrdRnG9CRa6NrIGgUaf4RK0.roa File: EGpVIrdRnG9CRa6NrIGgUaf4RK0.roa (raw, json) Hash identifier: qlEpn4VlX/rteCsE8wb4JuutsTGuUOTJhd52p/j8504= Subject key identifier: 10:6A:55:22:B7:51:9C:6F:42:45:AE:8D:AC:81:A0:51:A7:F8:44:AD Certificate issuer: /CN=2f3eaf4ec754f4a0e3d84ca253ad406ee9c7de15 Certificate serial: 019B7758C8E7AB7D06CD849D2A63E64CDDB9 Authority key identifier: 2F:3E:AF:4E:C7:54:F4:A0:E3:D8:4C:A2:53:AD:40:6E:E9:C7:DE:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lz6vTsdU9KDj2EyiU61AbunH3hU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/EGpVIrdRnG9CRa6NrIGgUaf4RK0.roa Signing time: Thu 01 Jan 2026 02:17:45 +0000 ROA not before: Thu 01 Jan 2026 02:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202651 IP address blocks: 176.105.236.0/24 maxlen: 24 193.219.112.0/24 maxlen: 24 195.7.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.mft rsync://rpki.ripe.net/repository/DEFAULT/Lz6vTsdU9KDj2EyiU61AbunH3hU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:c8:e7:ab:7d:06:cd:84:9d:2a:63:e6:4c:dd:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f3eaf4ec754f4a0e3d84ca253ad406ee9c7de15 Validity Not Before: Jan 1 02:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=106a5522b7519c6f4245ae8dac81a051a7f844ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:12:75:e8:2e:c7:be:0b:e8:9b:64:9d:8e:41: 02:c2:c7:3b:11:b6:86:30:ae:5f:60:2b:3a:d6:e7: cb:3b:9a:21:41:bc:93:bf:b1:4f:be:28:52:c8:b7: b6:7d:e6:9b:c1:ab:cd:5c:6a:c1:18:df:93:8d:7a: 49:24:6d:d1:ee:23:59:95:b5:91:c8:a8:0d:11:ea: de:ce:c9:77:f6:7c:79:34:e6:2a:c1:b0:4c:51:a4: ce:3b:6c:24:20:b0:56:da:d7:9d:6e:a5:82:d6:ca: 0b:a0:2c:27:80:5f:71:fb:6a:1a:29:b5:73:5a:54: dd:3b:ee:5b:65:8f:1f:82:49:8b:fa:f4:0c:cd:0d: 27:4c:60:4d:a3:40:d1:06:94:ea:e9:c4:22:c6:39: b5:3b:55:ca:54:37:3d:69:99:f4:0c:c8:4a:4b:c5: 95:ec:e3:56:d4:53:b6:70:97:12:ff:14:f1:10:f8: b2:80:1d:e4:45:9f:73:b2:2b:17:56:e0:83:8a:97: f4:ab:06:aa:e3:85:68:2b:f8:08:4c:7b:78:9a:67: b4:0a:c1:36:cd:d8:90:35:d3:ba:c0:71:0d:1c:ff: f2:fd:6f:5f:87:44:8d:8c:c3:00:cf:c3:45:46:d5: 9b:05:36:c3:db:19:eb:72:03:a7:4f:9d:67:26:e7: a2:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:6A:55:22:B7:51:9C:6F:42:45:AE:8D:AC:81:A0:51:A7:F8:44:AD X509v3 Authority Key Identifier: keyid:2F:3E:AF:4E:C7:54:F4:A0:E3:D8:4C:A2:53:AD:40:6E:E9:C7:DE:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lz6vTsdU9KDj2EyiU61AbunH3hU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/EGpVIrdRnG9CRa6NrIGgUaf4RK0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/130a65-1b7a-4575-b280-90c3cce569f0/1/Lz6vTsdU9KDj2EyiU61AbunH3hU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.105.236.0/24 193.219.112.0/24 195.7.8.0/24 Signature Algorithm: sha256WithRSAEncryption 73:8d:46:39:93:64:95:ce:78:fd:68:a7:8f:9e:94:ff:3d:be: af:0f:b4:c0:b0:94:ea:16:07:38:72:d3:f9:a4:c4:57:cf:91: f7:4f:e5:f7:81:20:ed:33:b4:eb:45:7b:26:16:a8:7b:e6:bb: 3f:8a:a6:c0:4a:fd:5e:50:bc:30:c1:90:97:5e:67:44:df:76: fb:f5:d0:bc:57:92:f0:fb:09:1d:91:2e:9a:52:e5:04:03:9a: 1e:1a:2c:a0:31:02:81:17:e2:b6:59:93:c8:f6:c1:81:27:b3: 63:f0:62:3a:70:7e:93:37:12:d3:9c:04:a9:c2:a9:0f:ed:7f: fa:f6:9c:e2:b7:43:ee:81:74:cd:b8:71:2d:a5:9a:4b:99:ce: 31:02:af:78:2c:b4:c5:8f:83:ac:c3:55:af:05:bd:01:ae:36: e1:d3:6a:da:24:9a:04:85:58:4e:9e:d9:40:a8:7d:ac:29:06: d3:5d:34:c2:af:fc:ac:53:c4:52:b9:e7:0d:a9:88:64:84:3d: 6a:46:75:37:e5:78:23:0c:97:36:f2:7c:6c:cd:4f:a2:f8:09: ea:90:ba:4f:70:8e:5d:d8:b1:6b:db:7f:3b:75:aa:4e:50:e6: fe:ad:4f:38:7d:1c:07:62:cc:bf:f5:93:83:15:82:bd:b3:00: 62:ed:ab:ac -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3WMjnq30GzYSdKmPmTN25MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmM2VhZjRlYzc1NGY0YTBlM2Q4NGNhMjUzYWQ0MDZlZTlj N2RlMTUwHhcNMjYwMTAxMDIxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDZhNTUyMmI3NTE5YzZmNDI0NWFlOGRhYzgxYTA1MWE3Zjg0NGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hJ16C7Hvgvom2SdjkECwsc7EbaG MK5fYCs61ufLO5ohQbyTv7FPvihSyLe2feabwavNXGrBGN+TjXpJJG3R7iNZlbWR yKgNEerezsl39nx5NOYqwbBMUaTOO2wkILBW2tedbqWC1soLoCwngF9x+2oaKbVz WlTdO+5bZY8fgkmL+vQMzQ0nTGBNo0DRBpTq6cQixjm1O1XKVDc9aZn0DMhKS8WV 7ONW1FO2cJcS/xTxEPiygB3kRZ9zsisXVuCDipf0qwaq44VoK/gITHt4mme0CsE2 zdiQNdO6wHENHP/y/W9fh0SNjMMAz8NFRtWbBTbD2xnrcgOnT51nJuei3wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFBBqVSK3UZxvQkWujayBoFGn+EStMB8GA1UdIwQY MBaAFC8+r07HVPSg49hMolOtQG7px94VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHo2dlRzZFU5S0RqMkV5aVU2MUFidW5IM2hVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8xMzBhNjUtMWI3YS00NTc1LWIyODAt OTBjM2NjZTU2OWYwLzEvRUdwVklyZFJuRzlDUmE2TnJJR2dVYWY0UkswLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS8xMzBhNjUtMWI3YS00NTc1LWIyODAtOTBjM2NjZTU2OWYw LzEvTHo2dlRzZFU5S0RqMkV5aVU2MUFidW5IM2hVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAsGnsAwQA wdtwAwQAwwcIMA0GCSqGSIb3DQEBCwUAA4IBAQBzjUY5k2SVznj9aKePnpT/Pb6v D7TAsJTqFgc4ctP5pMRXz5H3T+X3gSDtM7TrRXsmFqh75rs/iqbASv1eULwwwZCX XmdE33b79dC8V5Lw+wkdkS6aUuUEA5oeGiygMQKBF+K2WZPI9sGBJ7Nj8GI6cH6T NxLTnASpwqkP7X/69pzit0PugXTNuHEtpZpLmc4xAq94LLTFj4Osw1WvBb0Brjbh 02raJJoEhVhOntlAqH2sKQbTXTTCr/ysU8RSuecNqYhkhD1qRnU35XgjDJc28nxs zU+i+AnqkLpPcI5d2LFr2387dapOUOb+rU84fRwHYsy/9ZODFYK9swBi7aus -----END CERTIFICATE-----Generated at Tue Jan 20 04:46:51 2026 by rpki-client