This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/eq6O520dR9h5ZDTtwmQ1vFOWocg.roa File: eq6O520dR9h5ZDTtwmQ1vFOWocg.roa (raw, json) Hash identifier: WayNVSTyYUA3PrVVuq/1FxZpGE5s8+ZfaV8xAD2RAjQ= Subject key identifier: 7A:AE:8E:E7:6D:1D:47:D8:79:64:34:ED:C2:64:35:BC:53:96:A1:C8 Certificate issuer: /CN=59dd542781851c0bce5a3ea5cc387650ffc8277e Certificate serial: 019B7EA6D816A3C8D49CC56CDCB9D0EDE1B2 Authority key identifier: 59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/eq6O520dR9h5ZDTtwmQ1vFOWocg.roa Signing time: Fri 02 Jan 2026 12:20:22 +0000 ROA not before: Fri 02 Jan 2026 12:20:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201382 IP address blocks: 85.91.105.0/24 maxlen: 24 85.91.108.0/22 maxlen: 22 85.91.108.0/24 maxlen: 24 85.91.123.0/24 maxlen: 24 213.208.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.crl rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.mft rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:d8:16:a3:c8:d4:9c:c5:6c:dc:b9:d0:ed:e1:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59dd542781851c0bce5a3ea5cc387650ffc8277e Validity Not Before: Jan 2 12:20:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7aae8ee76d1d47d8796434edc26435bc5396a1c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:8b:68:ee:28:91:22:8b:11:04:6a:a4:6f:d3: 25:a2:c7:93:0a:19:96:6a:27:f1:3a:1d:57:4e:70: 67:6b:30:eb:d9:85:6b:e0:14:8d:58:db:c6:6b:0c: 74:37:22:de:40:c0:43:6a:10:dd:ad:e3:ee:ac:51: fc:84:11:1f:65:0a:95:08:ed:7e:63:50:2d:3b:4e: cc:49:aa:bd:c8:88:33:39:64:b1:8e:54:94:19:10: 97:ba:d9:82:46:c4:38:58:65:3f:da:26:4b:44:c5: 39:6b:0f:59:c4:83:9b:d3:a7:35:6b:cb:08:45:6a: 63:a8:93:f8:83:81:9d:18:15:8d:ce:8f:c0:00:f2: f0:69:28:39:4b:83:a6:72:1f:22:aa:9c:97:49:b4: 04:87:bb:c8:0f:ac:dc:81:85:63:4c:9d:76:c8:ab: bd:01:f3:81:eb:ff:ee:5d:ba:eb:c7:04:b4:39:a4: 4b:94:f5:f1:eb:8e:7b:3f:3e:14:a6:f7:48:18:d1: 3c:f5:fe:f3:fa:17:68:ca:78:c9:6a:b0:7d:f8:5b: 5d:14:80:36:87:76:20:40:ce:60:64:7a:e4:32:a2: b9:82:23:db:ec:64:06:2c:b5:44:af:78:a1:97:0d: 81:00:ed:89:76:59:e2:d7:b4:5d:ac:98:e3:7b:55: ef:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:AE:8E:E7:6D:1D:47:D8:79:64:34:ED:C2:64:35:BC:53:96:A1:C8 X509v3 Authority Key Identifier: keyid:59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/eq6O520dR9h5ZDTtwmQ1vFOWocg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.91.105.0/24 85.91.108.0/22 85.91.123.0/24 213.208.171.0/24 Signature Algorithm: sha256WithRSAEncryption a9:64:40:3a:ab:f8:5d:4e:cf:db:4a:07:59:94:a2:32:85:3e: d2:71:98:db:69:3b:10:37:3e:f7:94:73:ed:a7:00:52:41:2b: ce:99:c3:46:6b:a1:4c:39:b8:fb:61:8a:a9:4a:51:90:34:b2: a9:37:e5:6b:7e:6e:2c:c6:a3:34:bb:dc:51:da:17:45:45:4a: 3e:f4:4e:52:6d:f4:b2:65:c0:f6:a7:da:67:da:26:c4:cd:58: ed:20:db:54:cb:72:a3:38:f5:f6:34:28:da:f4:63:77:de:23: 3e:ae:36:aa:43:f9:48:d6:61:e6:b9:25:c2:fa:75:d6:ab:f7: 2a:fe:dc:e2:9e:6c:11:7a:a7:7d:49:c1:69:57:f0:1e:fd:f6: 5b:1d:6d:b8:58:28:8e:23:8f:01:b7:21:fc:7e:72:ae:9b:4b: 20:25:4b:dc:33:76:0e:1b:df:ff:ef:4c:f2:5b:7f:06:09:70: 95:67:65:cb:02:e3:02:71:37:46:0d:f2:42:40:3a:7f:22:14: ad:05:4f:f7:b9:13:ff:4b:39:e6:88:c5:66:a6:f5:85:50:b6: b3:dc:d7:18:25:bd:4e:85:f7:72:b8:03:07:33:ce:67:f1:f5: c3:97:64:51:5e:ef:f9:25:ba:d7:b1:cb:10:1f:c9:0a:ff:b1: 01:1d:f9:73 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt+ptgWo8jUnMVs3LnQ7eGyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5ZGQ1NDI3ODE4NTFjMGJjZTVhM2VhNWNjMzg3NjUwZmZj ODI3N2UwHhcNMjYwMTAyMTIyMDIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YWFlOGVlNzZkMWQ0N2Q4Nzk2NDM0ZWRjMjY0MzViYzUzOTZhMWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1oto7iiRIosRBGqkb9MloseTChmW aifxOh1XTnBnazDr2YVr4BSNWNvGawx0NyLeQMBDahDdrePurFH8hBEfZQqVCO1+ Y1AtO07MSaq9yIgzOWSxjlSUGRCXutmCRsQ4WGU/2iZLRMU5aw9ZxIOb06c1a8sI RWpjqJP4g4GdGBWNzo/AAPLwaSg5S4Omch8iqpyXSbQEh7vID6zcgYVjTJ12yKu9 AfOB6//uXbrrxwS0OaRLlPXx6457Pz4UpvdIGNE89f7z+hdoynjJarB9+FtdFIA2 h3YgQM5gZHrkMqK5giPb7GQGLLVEr3ihlw2BAO2Jdlni17RdrJjje1XvxwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFHqujudtHUfYeWQ07cJkNbxTlqHIMB8GA1UdIwQY MBaAFFndVCeBhRwLzlo+pcw4dlD/yCd+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2QxVUo0R0ZIQXZPV2o2bHpEaDJVUF9JSjM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi83OWM0YmEtMzhlMi00ZjVhLTk1OWYt NDdlMDkzNzk4OWE4LzEvZXE2TzUyMGRSOWg1WkRUdHdtUTF2Rk9Xb2NnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi83OWM0YmEtMzhlMi00ZjVhLTk1OWYtNDdlMDkzNzk4OWE4 LzEvV2QxVUo0R0ZIQXZPV2o2bHpEaDJVUF9JSjM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAVVtpAwQC VVtsAwQAVVt7AwQA1dCrMA0GCSqGSIb3DQEBCwUAA4IBAQCpZEA6q/hdTs/bSgdZ lKIyhT7ScZjbaTsQNz73lHPtpwBSQSvOmcNGa6FMObj7YYqpSlGQNLKpN+Vrfm4s xqM0u9xR2hdFRUo+9E5SbfSyZcD2p9pn2ibEzVjtINtUy3KjOPX2NCja9GN33iM+ rjaqQ/lI1mHmuSXC+nXWq/cq/tzinmwReqd9ScFpV/Ae/fZbHW24WCiOI48BtyH8 fnKum0sgJUvcM3YOG9//70zyW38GCXCVZ2XLAuMCcTdGDfJCQDp/IhStBU/3uRP/ SznmiMVmpvWFULaz3NcYJb1OhfdyuAMHM85n8fXDl2RRXu/5JbrXscsQH8kK/7EB Hflz -----END CERTIFICATE-----Generated at Mon Jan 26 00:39:20 2026 by rpki-client