This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/EINzrIURAAo22BLwl6OL1a5UpOQ.roa File: EINzrIURAAo22BLwl6OL1a5UpOQ.roa (raw, json) Hash identifier: 1AY0ijx+5mYwFZJR82o+YM6Bv37eLoS0OW/kHJNuh9g= Subject key identifier: 10:83:73:AC:85:11:00:0A:36:D8:12:F0:97:A3:8B:D5:AE:54:A4:E4 Certificate issuer: /CN=73d91cdcc0c1b363b49bfc3c2ac58e93002df07d Certificate serial: 019B76EB8D7AFE9EE1B237CE6C0FC47BE963 Authority key identifier: 73:D9:1C:DC:C0:C1:B3:63:B4:9B:FC:3C:2A:C5:8E:93:00:2D:F0:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9kc3MDBs2O0m_w8KsWOkwAt8H0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/EINzrIURAAo22BLwl6OL1a5UpOQ.roa Signing time: Thu 01 Jan 2026 00:18:27 +0000 ROA not before: Thu 01 Jan 2026 00:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15765 IP address blocks: 45.15.108.0/22 maxlen: 22 213.161.224.0/19 maxlen: 19 213.184.192.0/19 maxlen: 19 2a0b:5100::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.mft rsync://rpki.ripe.net/repository/DEFAULT/c9kc3MDBs2O0m_w8KsWOkwAt8H0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:8d:7a:fe:9e:e1:b2:37:ce:6c:0f:c4:7b:e9:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73d91cdcc0c1b363b49bfc3c2ac58e93002df07d Validity Not Before: Jan 1 00:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=108373ac8511000a36d812f097a38bd5ae54a4e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:1c:b9:2b:ef:78:32:a6:25:18:9c:4f:a9:f3: 87:d5:f9:f1:b0:83:25:14:d8:21:84:87:09:04:d6: f3:1d:de:cc:b9:ac:c7:58:f1:83:e9:dc:fd:5c:a7: 10:37:1f:19:50:64:6a:5a:b0:26:d5:11:e5:8d:aa: d6:be:64:82:2c:a5:48:cb:18:b4:2b:0f:98:42:32: cc:5b:ac:0b:ca:de:1b:20:d6:5c:09:c6:a9:38:4e: 70:62:57:b3:85:01:c0:4a:ba:c2:d3:d1:f4:df:a5: 35:25:3f:9d:a2:44:ba:55:91:23:3c:fc:14:bf:fa: c2:65:af:f3:64:a2:b7:9d:99:25:42:dd:20:86:78: c7:39:ac:16:77:4d:16:93:99:0b:ed:39:88:d6:f0: 74:2e:4a:72:f8:ff:be:48:5a:d2:e1:3a:c0:90:63: 88:1e:0c:da:bd:5e:bb:6e:b0:ff:71:b0:d8:b5:62: 21:dc:e7:34:f6:e3:d4:05:66:39:d1:05:23:dd:15: 90:d1:3c:1d:f9:ef:a1:93:16:1f:87:0e:79:10:fc: e0:79:e0:aa:aa:b7:04:d6:a4:80:67:6e:1f:fe:b8: 78:4c:9f:5f:33:25:42:c4:23:5d:8f:ff:eb:38:8f: 67:30:18:53:6a:b1:94:8d:59:29:b1:59:10:23:84: 6d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:83:73:AC:85:11:00:0A:36:D8:12:F0:97:A3:8B:D5:AE:54:A4:E4 X509v3 Authority Key Identifier: keyid:73:D9:1C:DC:C0:C1:B3:63:B4:9B:FC:3C:2A:C5:8E:93:00:2D:F0:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9kc3MDBs2O0m_w8KsWOkwAt8H0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/EINzrIURAAo22BLwl6OL1a5UpOQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.15.108.0/22 213.161.224.0/19 213.184.192.0/19 IPv6: 2a0b:5100::/29 Signature Algorithm: sha256WithRSAEncryption 6d:77:50:49:96:97:bd:1a:a5:cd:3d:e4:41:17:a4:41:df:7a: d2:74:ff:f1:fc:bc:4d:fd:de:f1:ea:c2:8a:df:65:ac:ea:da: 8d:16:d7:ea:e4:79:2f:75:c3:ab:36:4d:e3:c4:96:c9:ca:b7: f0:d1:78:7f:b6:91:72:4f:e9:f4:63:3f:eb:a3:f9:2a:ed:24: 3a:e0:5f:b0:42:b0:14:8e:b5:cd:65:d5:3f:a6:51:5d:c5:fa: 49:ef:95:98:f5:47:6d:c1:6a:78:fa:0c:be:bd:6d:6b:6b:e8: f6:c5:e5:71:f0:40:0d:b2:ad:0e:f5:8c:8a:af:93:0c:95:a0: 64:11:51:94:52:32:ec:30:1d:de:91:6f:c3:81:f5:b5:54:75: 99:ae:da:e5:e3:eb:11:84:ab:4a:57:e0:46:f0:6f:c9:0d:b8: 9b:61:3e:d7:1d:df:b3:5b:a8:cf:1c:92:0c:ca:9e:38:2c:8c: c9:b2:3f:e3:56:7b:e2:ad:f9:54:a9:ce:ee:52:39:4e:62:e3: e0:0d:65:39:4f:57:0f:fc:4e:8c:18:aa:2f:5c:0f:6a:ae:3f: 97:59:80:1d:f0:08:e0:73:d0:3a:2a:4a:b4:30:c6:d0:6f:f9: aa:ba:36:ae:61:b7:1b:d4:45:8c:e6:3d:82:0f:08:56:f6:29: 24:05:3f:77 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt26416/p7hsjfObA/Ee+ljMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczZDkxY2RjYzBjMWIzNjNiNDliZmMzYzJhYzU4ZTkzMDAy ZGYwN2QwHhcNMjYwMTAxMDAxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDgzNzNhYzg1MTEwMDBhMzZkODEyZjA5N2EzOGJkNWFlNTRhNGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhy5K+94MqYlGJxPqfOH1fnxsIMl FNghhIcJBNbzHd7MuazHWPGD6dz9XKcQNx8ZUGRqWrAm1RHljarWvmSCLKVIyxi0 Kw+YQjLMW6wLyt4bINZcCcapOE5wYlezhQHASrrC09H036U1JT+dokS6VZEjPPwU v/rCZa/zZKK3nZklQt0ghnjHOawWd00Wk5kL7TmI1vB0Lkpy+P++SFrS4TrAkGOI HgzavV67brD/cbDYtWIh3Oc09uPUBWY50QUj3RWQ0Twd+e+hkxYfhw55EPzgeeCq qrcE1qSAZ24f/rh4TJ9fMyVCxCNdj//rOI9nMBhTarGUjVkpsVkQI4Rt7QIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFBCDc6yFEQAKNtgS8Jeji9WuVKTkMB8GA1UdIwQY MBaAFHPZHNzAwbNjtJv8PCrFjpMALfB9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzlrYzNNREJzMk8wbV93OEtzV09rd0F0OEgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi82YzgyN2UtYjAzMS00Njc1LWIzNDgt YjE1NTI0MDliNmQxLzEvRUlOenJJVVJBQW8yMkJMd2w2T0wxYTVVcE9RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi82YzgyN2UtYjAzMS00Njc1LWIzNDgtYjE1NTI0MDliNmQx LzEvYzlrYzNNREJzMk8wbV93OEtzV09rd0F0OEgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCLQ9sAwQF 1aHgAwQF1bjAMA0EAgACMAcDBQMqC1EAMA0GCSqGSIb3DQEBCwUAA4IBAQBtd1BJ lpe9GqXNPeRBF6RB33rSdP/x/LxN/d7x6sKK32Ws6tqNFtfq5HkvdcOrNk3jxJbJ yrfw0Xh/tpFyT+n0Yz/ro/kq7SQ64F+wQrAUjrXNZdU/plFdxfpJ75WY9UdtwWp4 +gy+vW1ra+j2xeVx8EANsq0O9YyKr5MMlaBkEVGUUjLsMB3ekW/DgfW1VHWZrtrl 4+sRhKtKV+BG8G/JDbibYT7XHd+zW6jPHJIMyp44LIzJsj/jVnvirflUqc7uUjlO YuPgDWU5T1cP/E6MGKovXA9qrj+XWYAd8Ajgc9A6Kkq0MMbQb/mqujauYbcb1EWM 5j2CDwhW9ikkBT93 -----END CERTIFICATE-----Generated at Mon Jan 26 10:24:45 2026 by rpki-client