This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/EUgLAWtAQkj2b81EVNaYNI21B8Q.roa File: EUgLAWtAQkj2b81EVNaYNI21B8Q.roa (raw, json) Hash identifier: YH1yRF3btNqvfXvDOf+ohxslhwH0GDsrS4U4ZZBSNxE= Subject key identifier: 11:48:0B:01:6B:40:42:48:F6:6F:CD:44:54:D6:98:34:8D:B5:07:C4 Certificate issuer: /CN=f56b2049b3a9aa6f2368e6eeb4bfcd167953a5e9 Certificate serial: 019B7F1595DA2F164EB1A1DC121A6D75CB80 Authority key identifier: F5:6B:20:49:B3:A9:AA:6F:23:68:E6:EE:B4:BF:CD:16:79:53:A5:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/EUgLAWtAQkj2b81EVNaYNI21B8Q.roa Signing time: Fri 02 Jan 2026 14:21:19 +0000 ROA not before: Fri 02 Jan 2026 14:21:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201791 IP address blocks: 45.155.212.0/22 maxlen: 24 185.103.76.0/22 maxlen: 22 195.35.114.0/23 maxlen: 24 2a06:2a80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.crl rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:95:da:2f:16:4e:b1:a1:dc:12:1a:6d:75:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f56b2049b3a9aa6f2368e6eeb4bfcd167953a5e9 Validity Not Before: Jan 2 14:21:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=11480b016b404248f66fcd4454d698348db507c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:32:9c:fa:e8:fd:69:90:4c:a4:f6:4b:bc:15: 0d:bc:bd:d2:b0:02:51:1f:d4:49:b6:07:d9:af:7a: 55:de:57:50:cc:4f:a7:92:8b:ec:35:e6:cc:41:68: 25:92:22:a8:98:d2:93:e8:da:b3:ea:df:a7:a0:58: a6:c3:06:6a:7d:d8:d6:bb:e3:7c:e9:e2:b4:3d:69: 96:a2:9f:13:e2:b6:64:fe:a6:a3:c6:fa:79:60:0d: 55:f3:ad:35:b8:dd:f3:fe:5b:41:14:0a:c4:e6:6b: 48:9e:4b:f9:a4:a4:e2:51:6e:40:a7:1f:ee:2c:78: 06:29:bd:3c:0c:a6:ac:35:de:75:03:0a:cf:c3:e0: 5f:8f:51:bd:27:b1:c4:2d:60:71:f5:ca:f1:75:0e: ef:f4:2c:48:0c:fd:bd:c8:27:f1:67:97:b4:1e:23: 08:78:5f:10:e5:4d:f2:b5:67:28:9d:af:74:bf:82: 12:2f:30:30:e5:ad:97:2e:cf:c8:7e:b7:92:b5:43: 8e:ae:2e:24:1a:a0:5a:56:2c:fc:42:23:74:06:e1: bd:2e:dc:75:4e:9a:82:68:68:f2:b5:39:9d:bf:05: d9:ae:7a:9a:35:63:85:49:4c:18:ac:5e:43:d5:e6: cb:1c:99:9d:39:6f:b7:8a:0f:8c:36:ce:08:f1:7a: 9b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:48:0B:01:6B:40:42:48:F6:6F:CD:44:54:D6:98:34:8D:B5:07:C4 X509v3 Authority Key Identifier: keyid:F5:6B:20:49:B3:A9:AA:6F:23:68:E6:EE:B4:BF:CD:16:79:53:A5:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/EUgLAWtAQkj2b81EVNaYNI21B8Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.155.212.0/22 185.103.76.0/22 195.35.114.0/23 IPv6: 2a06:2a80::/29 Signature Algorithm: sha256WithRSAEncryption 19:b8:a1:fb:b6:96:ec:12:09:35:db:57:b1:50:dd:a3:2f:b7: ee:06:12:dd:8d:21:31:1f:76:d8:6e:5d:40:ab:fe:e3:e1:6b: 43:12:1f:96:3b:a3:08:0a:81:e2:e6:96:2c:ff:dd:e1:ba:1b: 97:1a:9b:2e:b1:02:12:3f:07:35:2a:49:7b:8e:bc:1e:ff:5f: db:34:8c:da:6b:e5:17:19:68:f2:ff:ba:aa:60:cb:ad:d5:71: 8e:15:e3:84:2c:f2:33:95:9a:11:db:41:23:81:19:38:dd:90: e7:f1:d1:90:42:1f:a3:29:e8:93:fe:86:9a:90:fd:ab:d3:71: 2b:f8:77:89:cf:5b:79:39:a0:ae:12:c2:9a:46:3c:75:8a:0f: d6:3e:b2:1d:7c:eb:ca:30:bb:cd:23:8c:02:65:3e:54:19:dc: 58:3d:32:77:e5:bc:df:d5:39:d7:1f:e7:0f:36:0f:62:17:67: a2:37:23:a7:91:5d:6e:40:2f:8e:87:63:e2:36:72:47:3c:31: 7f:85:89:ad:83:49:55:f5:64:89:9c:4b:60:49:bd:13:53:1a: ef:40:b9:e6:dc:20:aa:e5:18:9a:ae:fa:2f:65:42:45:a2:d9: 78:2d:61:35:c5:65:8f:d4:cb:79:9f:83:4e:ff:c7:88:3d:f6: b4:c1:a5:18 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt/FZXaLxZOsaHcEhptdcuAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1NmIyMDQ5YjNhOWFhNmYyMzY4ZTZlZWI0YmZjZDE2Nzk1 M2E1ZTkwHhcNMjYwMTAyMTQyMTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMTQ4MGIwMTZiNDA0MjQ4ZjY2ZmNkNDQ1NGQ2OTgzNDhkYjUwN2M0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TKc+uj9aZBMpPZLvBUNvL3SsAJR H9RJtgfZr3pV3ldQzE+nkovsNebMQWglkiKomNKT6Nqz6t+noFimwwZqfdjWu+N8 6eK0PWmWop8T4rZk/qajxvp5YA1V8601uN3z/ltBFArE5mtInkv5pKTiUW5Apx/u LHgGKb08DKasNd51AwrPw+Bfj1G9J7HELWBx9crxdQ7v9CxIDP29yCfxZ5e0HiMI eF8Q5U3ytWcona90v4ISLzAw5a2XLs/IfreStUOOri4kGqBaViz8QiN0BuG9Ltx1 TpqCaGjytTmdvwXZrnqaNWOFSUwYrF5D1ebLHJmdOW+3ig+MNs4I8XqbiwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFBFICwFrQEJI9m/NRFTWmDSNtQfEMB8GA1UdIwQY MBaAFPVrIEmzqapvI2jm7rS/zRZ5U6XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVdzZ1NiT3BxbThqYU9idXRMX05GbmxUcGVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9kMWE3MWMtYjhmOC00MTJkLTlkYTEt MjQwMWI3NDIwNmYzLzEvRVVnTEFXdEFRa2oyYjgxRVZOYVlOSTIxQjhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9kMWE3MWMtYjhmOC00MTJkLTlkYTEtMjQwMWI3NDIwNmYz LzEvOVdzZ1NiT3BxbThqYU9idXRMX05GbmxUcGVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCLZvUAwQC uWdMAwQBwyNyMA0EAgACMAcDBQMqBiqAMA0GCSqGSIb3DQEBCwUAA4IBAQAZuKH7 tpbsEgk121exUN2jL7fuBhLdjSExH3bYbl1Aq/7j4WtDEh+WO6MICoHi5pYs/93h uhuXGpsusQISPwc1Kkl7jrwe/1/bNIzaa+UXGWjy/7qqYMut1XGOFeOELPIzlZoR 20EjgRk43ZDn8dGQQh+jKeiT/oaakP2r03Er+HeJz1t5OaCuEsKaRjx1ig/WPrId fOvKMLvNI4wCZT5UGdxYPTJ35bzf1TnXH+cPNg9iF2eiNyOnkV1uQC+Oh2PiNnJH PDF/hYmtg0lV9WSJnEtgSb0TUxrvQLnm3CCq5RiarvovZUJFotl4LWE1xWWP1Mt5 n4NO/8eIPfa0waUY -----END CERTIFICATE-----Generated at Mon Jan 26 07:23:36 2026 by rpki-client