This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/EIOYZpIbkL6BC-x4564aTLDYD5I.roa File: EIOYZpIbkL6BC-x4564aTLDYD5I.roa (raw, json) Hash identifier: z0WBT/Sycw1oUBchenD/iEcWbUKjtiNpM4WnCTpU/AQ= Subject key identifier: 10:83:98:66:92:1B:90:BE:81:0B:EC:78:E7:AE:1A:4C:B0:D8:0F:92 Certificate issuer: /CN=20e425a32b62d39818c4cbb0081075686fc4c8e8 Certificate serial: 019B7B35F66AD7648C3AF263661E0853EEBA Authority key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/EIOYZpIbkL6BC-x4564aTLDYD5I.roa Signing time: Thu 01 Jan 2026 20:18:12 +0000 ROA not before: Thu 01 Jan 2026 20:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198682 IP address blocks: 95.170.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:f6:6a:d7:64:8c:3a:f2:63:66:1e:08:53:ee:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8 Validity Not Before: Jan 1 20:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=10839866921b90be810bec78e7ae1a4cb0d80f92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d8:33:13:ae:84:37:5f:05:aa:93:d7:00:2a: 47:b8:8d:1b:ce:0d:ea:1a:42:88:b4:8d:61:96:f6: 3a:a6:ec:45:95:de:9a:39:a1:24:0a:66:09:ef:da: 2c:ed:e5:79:b6:5a:d7:a6:4a:f3:0f:1d:6e:cd:79: c0:b6:8a:f4:36:63:de:39:11:ee:6a:2e:22:b0:7d: d7:fa:1b:85:03:84:ca:66:df:c5:64:33:09:f7:70: a8:ef:dc:05:11:09:2e:4b:64:41:da:1c:b0:17:5f: 52:10:d7:e4:8e:ae:c2:ae:fa:2f:ea:7f:10:a0:66: e5:e1:b0:5c:90:90:f7:84:d8:65:ca:57:98:cb:ae: 53:cd:2d:75:6f:78:cd:2a:3a:62:cb:08:2e:c1:87: 51:6c:d3:5f:70:f8:03:59:e3:85:f4:ba:f0:23:6c: db:ac:97:84:5e:1f:48:ea:c7:22:0e:4b:d4:13:9b: 55:22:ed:62:9a:a0:24:33:a8:e6:d7:a5:9a:31:ca: b2:b3:ed:7e:f0:eb:0b:61:22:10:a9:3a:b9:88:fb: ea:03:41:34:8d:f0:5d:78:e0:95:ae:b5:2b:fb:06: 90:55:22:d4:e4:d1:d6:4a:39:43:76:d2:cb:2b:73: 67:70:bc:b5:11:82:8c:c1:52:12:c6:ad:1b:5e:38: 9c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:83:98:66:92:1B:90:BE:81:0B:EC:78:E7:AE:1A:4C:B0:D8:0F:92 X509v3 Authority Key Identifier: keyid:20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/EIOYZpIbkL6BC-x4564aTLDYD5I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.170.4.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:e3:eb:32:06:3b:12:89:91:ef:2f:c5:aa:b0:bc:d9:b3:c4: 9f:61:7e:54:94:9b:85:c1:be:5d:e0:55:45:74:be:87:1e:68: 43:64:f9:1f:f3:57:46:fa:17:25:9a:59:80:09:d6:a5:ce:b9: de:08:ba:bc:96:f9:1a:51:e4:9e:aa:67:eb:f1:b0:8f:72:f1: a7:84:f8:cc:8d:c7:22:35:66:85:6b:47:ab:c4:5b:32:b7:22: 63:d7:b1:b1:61:47:99:fb:b6:a9:4f:be:3b:d9:8c:14:46:b8: ba:e5:b9:57:cc:6c:07:79:6e:01:30:21:6b:31:f1:f2:f2:96: ad:bd:46:57:24:e8:67:1f:ad:24:82:05:fa:4e:47:64:74:75: aa:22:e9:ce:0f:48:d6:f7:0a:0c:55:3f:f4:40:27:7a:bf:c6: 81:e7:9a:70:5d:3f:5c:1e:bc:24:08:82:31:2a:18:64:d5:5f: ef:f8:6c:82:a2:f5:ce:2d:1c:6d:98:58:3a:d8:af:f2:89:ed: af:b5:dd:ae:7e:62:55:2f:0a:b6:76:03:7a:28:db:f3:89:4d: 68:57:e0:b2:a5:10:ed:a6:c4:c4:59:43:00:8f:61:c2:ba:fd: cb:c0:ec:e1:a5:d5:0d:b4:8e:b7:86:9a:31:0e:ed:17:61:69: cb:ec:2c:ab -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NfZq12SMOvJjZh4IU+66MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZTQyNWEzMmI2MmQzOTgxOGM0Y2JiMDA4MTA3NTY4NmZj NGM4ZTgwHhcNMjYwMTAxMjAxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDgzOTg2NjkyMWI5MGJlODEwYmVjNzhlN2FlMWE0Y2IwZDgwZjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNgzE66EN18FqpPXACpHuI0bzg3q GkKItI1hlvY6puxFld6aOaEkCmYJ79os7eV5tlrXpkrzDx1uzXnAtor0NmPeORHu ai4isH3X+huFA4TKZt/FZDMJ93Co79wFEQkuS2RB2hywF19SENfkjq7Crvov6n8Q oGbl4bBckJD3hNhlyleYy65TzS11b3jNKjpiywguwYdRbNNfcPgDWeOF9LrwI2zb rJeEXh9I6sciDkvUE5tVIu1imqAkM6jm16WaMcqys+1+8OsLYSIQqTq5iPvqA0E0 jfBdeOCVrrUr+waQVSLU5NHWSjlDdtLLK3NncLy1EYKMwVISxq0bXjiczwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBCDmGaSG5C+gQvseOeuGkyw2A+SMB8GA1UdIwQY MBaAFCDkJaMrYtOYGMTLsAgQdWhvxMjoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGIt ZWNkMjk2NWNiN2U3LzEvRUlPWVpwSWJrTDZCQy14NDU2NGFUTERZRDVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9mZDhjMDEtN2I3MS00NDJjLTlhZGItZWNkMjk2NWNiN2U3 LzEvSU9RbG95dGkwNWdZeE11d0NCQjFhR19FeU9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX6oEMA0G CSqGSIb3DQEBCwUAA4IBAQAb4+syBjsSiZHvL8WqsLzZs8SfYX5UlJuFwb5d4FVF dL6HHmhDZPkf81dG+hclmlmACdalzrneCLq8lvkaUeSeqmfr8bCPcvGnhPjMjcci NWaFa0erxFsytyJj17GxYUeZ+7apT7472YwURri65blXzGwHeW4BMCFrMfHy8pat vUZXJOhnH60kggX6TkdkdHWqIunOD0jW9woMVT/0QCd6v8aB55pwXT9cHrwkCIIx Khhk1V/v+GyCovXOLRxtmFg62K/yie2vtd2ufmJVLwq2dgN6KNvziU1oV+CypRDt psTEWUMAj2HCuv3LwOzhpdUNtI63hpoxDu0XYWnL7Cyr -----END CERTIFICATE-----Generated at Sun Jan 25 08:47:25 2026 by rpki-client