This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/EUznPNdi1RBuO_YCf9akt2u9WRY.roa File: EUznPNdi1RBuO_YCf9akt2u9WRY.roa (raw, json) Hash identifier: LZ23fGDWAJm3pcS6NWs5vwLClCe20PqadqZJEm5+Myk= Subject key identifier: 11:4C:E7:3C:D7:62:D5:10:6E:3B:F6:02:7F:D6:A4:B7:6B:BD:59:16 Certificate issuer: /CN=a499903dab85f6a59772b3edfd4bf0e491af57c4 Certificate serial: 019B7AC86676E12797B92B9D63E3ABFA8AC9 Authority key identifier: A4:99:90:3D:AB:85:F6:A5:97:72:B3:ED:FD:4B:F0:E4:91:AF:57:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/EUznPNdi1RBuO_YCf9akt2u9WRY.roa Signing time: Thu 01 Jan 2026 18:18:32 +0000 ROA not before: Thu 01 Jan 2026 18:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1275 IP address blocks: 212.201.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 03:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:66:76:e1:27:97:b9:2b:9d:63:e3:ab:fa:8a:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a499903dab85f6a59772b3edfd4bf0e491af57c4 Validity Not Before: Jan 1 18:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=114ce73cd762d5106e3bf6027fd6a4b76bbd5916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:24:ca:70:9f:f2:59:53:c4:24:ea:78:c7:1f: 2b:83:c8:e8:10:4c:d1:40:d5:d5:86:15:49:bc:1c: 81:92:d4:3f:6e:66:eb:08:9d:59:d5:42:66:80:e7: ae:c0:fd:4c:27:a2:ef:17:6b:42:90:02:12:46:53: a9:02:7f:89:2f:f4:d4:70:c2:ef:04:21:9b:85:bd: 83:1b:f7:76:b9:39:1f:27:88:ae:f4:dc:9e:2b:15: 78:3b:78:05:e3:b6:25:64:6c:6a:0d:07:68:d0:17: 74:2b:d7:72:07:a9:d1:4c:34:21:68:c3:20:75:ab: 21:b0:d3:d1:69:53:ed:7d:60:24:bc:48:c2:ca:03: fa:fc:d5:a4:70:08:c5:68:c1:83:1f:75:0a:83:c8: db:20:60:09:41:09:05:34:2d:93:83:2f:d0:7f:3d: 41:28:32:17:5d:8e:3f:a8:7f:8d:a2:51:89:28:9b: f8:a6:b6:c1:88:d5:b1:22:0d:40:fa:ce:17:65:e4: 9f:07:f6:25:cc:75:a3:d9:eb:4d:e1:0a:1e:b7:55: 4d:92:d2:09:4d:4c:f5:80:9f:aa:d1:83:93:82:7f: 23:34:84:c6:dc:24:e0:7c:df:33:fc:de:16:c4:05: d2:83:0b:68:70:0d:c7:33:03:a0:27:26:cf:5f:71: 31:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:4C:E7:3C:D7:62:D5:10:6E:3B:F6:02:7F:D6:A4:B7:6B:BD:59:16 X509v3 Authority Key Identifier: keyid:A4:99:90:3D:AB:85:F6:A5:97:72:B3:ED:FD:4B:F0:E4:91:AF:57:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/EUznPNdi1RBuO_YCf9akt2u9WRY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.201.255.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:1e:8c:f0:69:a5:85:1e:6c:0f:4c:92:df:a0:02:96:cc:5c: ad:6f:3d:b1:a1:dc:ab:ea:30:e6:cc:9b:22:95:9d:fe:60:d7: fd:99:12:71:3b:90:1b:9d:26:09:56:2b:68:f4:fd:4c:97:ff: 1a:e3:b9:76:dc:d3:1c:ae:0b:4f:76:83:3b:5a:62:72:4c:b4: b8:99:f6:c0:da:e1:1c:bb:60:b9:51:e6:37:45:a5:f0:83:ca: 8b:f1:b4:e6:d6:fd:19:15:d3:63:a9:a4:9e:85:d1:3e:f6:3a: 12:39:86:75:06:f5:68:82:4e:9e:49:58:49:3f:ae:56:e5:78: 3f:92:5d:46:89:88:1a:be:48:6f:15:59:d6:db:1a:2a:c8:4a: e2:c2:86:0f:1c:35:93:10:09:99:67:b8:aa:d8:48:3e:9e:be: 59:77:5c:6e:97:1d:e3:09:b3:f0:c5:72:d4:02:3e:4b:d6:57: a9:2a:e3:de:28:af:22:4d:8a:d7:05:6c:ad:0e:dc:34:67:de: 36:08:78:d2:b8:f8:e0:d4:e5:18:85:9d:4c:55:be:46:fe:06: 28:e8:9a:a9:05:15:61:c9:8a:59:38:af:e3:5f:6b:dd:0c:0c: 2d:d3:77:a6:7e:00:8a:6c:cd:b5:ed:96:a7:c4:6d:d2:72:37: 0c:75:db:c6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yGZ24SeXuSudY+Or+orJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0OTk5MDNkYWI4NWY2YTU5NzcyYjNlZGZkNGJmMGU0OTFh ZjU3YzQwHhcNMjYwMTAxMTgxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMTRjZTczY2Q3NjJkNTEwNmUzYmY2MDI3ZmQ2YTRiNzZiYmQ1OTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2iTKcJ/yWVPEJOp4xx8rg8joEEzR QNXVhhVJvByBktQ/bmbrCJ1Z1UJmgOeuwP1MJ6LvF2tCkAISRlOpAn+JL/TUcMLv BCGbhb2DG/d2uTkfJ4iu9NyeKxV4O3gF47YlZGxqDQdo0Bd0K9dyB6nRTDQhaMMg dashsNPRaVPtfWAkvEjCygP6/NWkcAjFaMGDH3UKg8jbIGAJQQkFNC2Tgy/Qfz1B KDIXXY4/qH+NolGJKJv4prbBiNWxIg1A+s4XZeSfB/YlzHWj2etN4Qoet1VNktIJ TUz1gJ+q0YOTgn8jNITG3CTgfN8z/N4WxAXSgwtocA3HMwOgJybPX3ExEwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBFM5zzXYtUQbjv2An/WpLdrvVkWMB8GA1UdIwQY MBaAFKSZkD2rhfall3Kz7f1L8OSRr1fEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEptUVBhdUY5cVdYY3JQdF9Vdnc1Skd2VjhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC84ZWRhOWEtZDEzYy00NDMwLThjZjQt NTdlYzEyZTg2NDFlLzEvRVV6blBOZGkxUkJ1T19ZQ2Y5YWt0MnU5V1JZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC84ZWRhOWEtZDEzYy00NDMwLThjZjQtNTdlYzEyZTg2NDFl LzEvcEptUVBhdUY5cVdYY3JQdF9Vdnc1Skd2VjhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1Mn/MA0G CSqGSIb3DQEBCwUAA4IBAQAKHozwaaWFHmwPTJLfoAKWzFytbz2xodyr6jDmzJsi lZ3+YNf9mRJxO5AbnSYJVito9P1Ml/8a47l23NMcrgtPdoM7WmJyTLS4mfbA2uEc u2C5UeY3RaXwg8qL8bTm1v0ZFdNjqaSehdE+9joSOYZ1BvVogk6eSVhJP65W5Xg/ kl1GiYgavkhvFVnW2xoqyEriwoYPHDWTEAmZZ7iq2Eg+nr5Zd1xulx3jCbPwxXLU Aj5L1lepKuPeKK8iTYrXBWytDtw0Z942CHjSuPjg1OUYhZ1MVb5G/gYo6JqpBRVh yYpZOK/jX2vdDAwt03emfgCKbM217ZanxG3ScjcMddvG -----END CERTIFICATE-----Generated at Mon Jan 26 13:10:47 2026 by rpki-client