This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/EQyiKX_7-Wpxq09KJocOiD7iVtg.roa
File: EQyiKX_7-Wpxq09KJocOiD7iVtg.roa (raw, json)
Hash identifier: xSHc+sset4mHHx5Au4SFQGD7gPC3y5Gef/MK9s8Iy4Y=
Subject key identifier: 11:0C:A2:29:7F:FB:F9:6A:71:AB:4F:4A:26:87:0E:88:3E:E2:56:D8
Certificate issuer: /CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2
Certificate serial: 019B7C804E4CB11ED2D23AD09EECD336A6D0
Authority key identifier: AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/EQyiKX_7-Wpxq09KJocOiD7iVtg.roa
Signing time: Fri 02 Jan 2026 02:19:01 +0000
ROA not before: Fri 02 Jan 2026 02:19:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201119
IP address blocks: 91.228.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:80:4e:4c:b1:1e:d2:d2:3a:d0:9e:ec:d3:36:a6:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2
Validity
Not Before: Jan 2 02:19:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=110ca2297ffbf96a71ab4f4a26870e883ee256d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9e:48:ad:6a:b1:b8:ee:7f:af:2e:0b:0f:4d:
9b:1e:4e:10:b6:43:81:79:4f:b6:2c:68:61:b6:1e:
97:6d:b6:f2:bd:43:04:f1:78:3e:d0:ba:95:60:a3:
bb:e4:84:45:2d:6e:6d:3f:72:ed:29:a7:7d:d0:06:
e5:58:2c:84:56:53:c6:7d:c8:a7:99:42:a1:cc:26:
b7:9f:90:f1:33:82:ce:41:4c:86:45:2d:e8:ad:24:
31:17:a4:e3:0a:52:94:35:cc:13:2c:31:86:c9:de:
f8:62:3b:0d:3e:ff:77:55:4f:74:2a:2f:95:80:ad:
4b:16:4c:d2:a3:fd:ee:b0:ab:12:5d:31:a6:bb:4d:
4d:8a:53:0a:be:49:f9:cd:f9:cb:6d:58:4c:ac:68:
29:b8:b7:f2:82:29:13:bc:93:d8:e1:ad:d5:20:42:
fa:b1:0f:36:92:3c:3b:c5:cc:4c:df:61:05:b4:2d:
07:b5:c1:7b:c1:00:19:11:6e:8e:c4:24:46:d9:d9:
c2:f7:60:49:07:5c:78:ba:e0:7c:fd:93:3f:0f:cd:
46:88:b9:38:ee:73:64:51:ab:3b:8c:e8:9f:26:a9:
fe:94:e0:1b:7f:ce:50:a1:9b:39:51:24:0b:75:07:
51:10:84:a9:a2:af:d9:b0:f9:a0:10:19:9f:c1:3a:
d5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:0C:A2:29:7F:FB:F9:6A:71:AB:4F:4A:26:87:0E:88:3E:E2:56:D8
X509v3 Authority Key Identifier:
keyid:AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/EQyiKX_7-Wpxq09KJocOiD7iVtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.202.0/24
Signature Algorithm: sha256WithRSAEncryption
63:82:58:bd:f7:87:a0:42:2f:04:61:21:70:a9:81:20:8f:fa:
69:88:59:b3:ce:59:f0:bf:92:53:09:10:ef:08:17:99:1b:bc:
bd:0e:b1:31:c4:2e:e6:f3:40:7b:79:f0:9b:57:74:e0:e1:d5:
ec:77:91:82:89:1d:be:b0:94:9d:6c:50:87:b6:ce:50:dc:2c:
11:1a:e9:33:31:68:33:59:2c:82:dd:23:0d:2d:cc:ba:c1:a7:
97:cf:c4:1f:5e:26:7c:95:17:4f:dc:22:2c:39:27:a3:41:07:
ad:fd:52:aa:70:1a:0b:d7:88:5c:53:cd:90:99:49:ef:9c:62:
ce:e7:6b:c7:3c:71:19:94:3f:07:7e:ae:8f:e2:45:e4:95:99:
d5:fa:2a:01:46:e6:1e:bd:a3:d3:41:b5:33:1d:56:64:4e:06:
1e:6a:8f:7c:4e:ee:fc:c4:67:26:1c:e6:0c:70:b0:90:f8:94:
c5:15:7d:46:3b:a7:f3:32:a8:9b:b6:36:31:22:10:62:2e:f4:
71:ce:ef:96:50:e1:86:29:11:52:8b:2c:3e:9b:b1:4f:92:47:
98:73:93:f3:a1:fc:03:cc:a3:9c:fd:23:ad:d0:a4:91:a5:53:
19:ee:5b:06:cd:5d:de:c6:c6:a8:c3:52:a3:0b:e5:fa:71:af:
9d:b2:bf:bd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt8gE5MsR7S0jrQnuzTNqbQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNWU5M2Y5MDIzNTRjZTQ4MDRiNGNiMDQ5Y2Y2OGIyMGY3
NmFlYjIwHhcNMjYwMTAyMDIxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTBjYTIyOTdmZmJmOTZhNzFhYjRmNGEyNjg3MGU4ODNlZTI1NmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnp5IrWqxuO5/ry4LD02bHk4QtkOB
eU+2LGhhth6XbbbyvUME8Xg+0LqVYKO75IRFLW5tP3LtKad90AblWCyEVlPGfcin
mUKhzCa3n5DxM4LOQUyGRS3orSQxF6TjClKUNcwTLDGGyd74YjsNPv93VU90Ki+V
gK1LFkzSo/3usKsSXTGmu01NilMKvkn5zfnLbVhMrGgpuLfygikTvJPY4a3VIEL6
sQ82kjw7xcxM32EFtC0HtcF7wQAZEW6OxCRG2dnC92BJB1x4uuB8/ZM/D81GiLk4
7nNkUas7jOifJqn+lOAbf85QoZs5USQLdQdREISpoq/ZsPmgEBmfwTrVCQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBEMoil/+/lqcatPSiaHDog+4lbYMB8GA1UdIwQY
MBaAFK9ek/kCNUzkgEtMsEnPaLIPdq6yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWIt
N2UwNWFkMDE5MGNlLzEvRVF5aUtYXzctV3B4cTA5S0pvY09pRDdpVnRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWItN2UwNWFkMDE5MGNl
LzEvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+TKMA0G
CSqGSIb3DQEBCwUAA4IBAQBjgli994egQi8EYSFwqYEgj/ppiFmzzlnwv5JTCRDv
CBeZG7y9DrExxC7m80B7efCbV3Tg4dXsd5GCiR2+sJSdbFCHts5Q3CwRGukzMWgz
WSyC3SMNLcy6waeXz8QfXiZ8lRdP3CIsOSejQQet/VKqcBoL14hcU82QmUnvnGLO
52vHPHEZlD8Hfq6P4kXklZnV+ioBRuYevaPTQbUzHVZkTgYeao98Tu78xGcmHOYM
cLCQ+JTFFX1GO6fzMqibtjYxIhBiLvRxzu+WUOGGKRFSiyw+m7FPkkeYc5PzofwD
zKOc/SOt0KSRpVMZ7lsGzV3exsaow1KjC+X6ca+dsr+9
-----END CERTIFICATE-----
Generated at Mon Jan 26 02:25:11 2026 by rpki-client