This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/eo5H4o3ZZ3iXbDapo6cBEE7NS6M.roa File: eo5H4o3ZZ3iXbDapo6cBEE7NS6M.roa (raw, json) Hash identifier: X2Eq1j8xxP8127RbRQQH82ZQaRO794u+GIRwZ/G/1eM= Subject key identifier: 7A:8E:47:E2:8D:D9:67:78:97:6C:36:A9:A3:A7:01:10:4E:CD:4B:A3 Certificate issuer: /CN=a7d78de0234e6f99701592f536e45f5f5594eec3 Certificate serial: 019B7F843B8DDE37D53FBC37209A3AFE6876 Authority key identifier: A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/eo5H4o3ZZ3iXbDapo6cBEE7NS6M.roa Signing time: Fri 02 Jan 2026 16:22:11 +0000 ROA not before: Fri 02 Jan 2026 16:22:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213420 IP address blocks: 85.222.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:3b:8d:de:37:d5:3f:bc:37:20:9a:3a:fe:68:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7d78de0234e6f99701592f536e45f5f5594eec3 Validity Not Before: Jan 2 16:22:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a8e47e28dd96778976c36a9a3a701104ecd4ba3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a6:d6:ca:e0:1f:d6:e2:be:e6:2b:b3:67:b1: a7:de:80:c3:a7:3b:e2:8c:95:d4:ee:11:1c:c1:09: a9:8c:49:5b:f5:3c:86:e6:82:57:32:2a:df:e6:cc: a0:08:83:04:99:72:c3:85:d5:a1:a9:72:65:2f:2f: 5c:ae:8d:b3:94:69:50:df:5d:ef:76:2b:11:cf:da: 12:7a:f8:a0:71:01:b3:8c:3d:a9:be:48:82:f1:d0: 9b:bd:38:6b:ce:5f:84:1a:db:41:84:eb:3b:3f:9d: 3b:53:ad:7f:c9:1d:58:34:0f:f6:c8:79:60:ad:3f: 73:60:fa:23:6f:92:df:59:aa:13:43:d5:7d:b4:0a: d8:6f:4d:18:01:f5:cf:7b:2d:15:e1:dc:5c:fe:64: aa:97:6a:d9:af:67:80:1e:ea:f8:61:ce:64:31:84: b4:6a:fc:77:3b:b7:98:4f:7c:71:c7:a9:60:21:db: c3:68:40:0d:cb:16:c7:80:33:45:8b:fe:ac:ea:45: 1f:15:d2:81:0c:58:2d:ac:f7:09:1f:cf:a7:3e:3c: 93:c8:6c:aa:aa:39:0a:64:1b:b7:94:f0:24:3c:ea: 6b:5f:95:db:81:ed:3f:55:73:c3:31:2b:62:02:c2: d2:74:5e:f7:c1:e7:05:f3:95:c2:9a:68:ea:c2:70: bb:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:8E:47:E2:8D:D9:67:78:97:6C:36:A9:A3:A7:01:10:4E:CD:4B:A3 X509v3 Authority Key Identifier: keyid:A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/eo5H4o3ZZ3iXbDapo6cBEE7NS6M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.222.172.0/24 Signature Algorithm: sha256WithRSAEncryption ac:cc:32:50:de:e1:96:32:3d:0a:61:b4:a7:22:0a:fc:e0:e7: 85:d8:e1:f4:23:e0:1d:be:18:4c:41:43:54:7f:c3:24:24:04: b9:bf:ac:6e:14:d4:61:20:c6:70:71:7a:a9:d9:f0:a5:8b:fb: 89:d7:17:31:e4:5e:8a:14:a1:11:e6:9e:92:c1:20:0e:a9:af: ab:fb:48:5e:89:42:b4:93:a7:0a:bc:27:e1:83:59:99:35:95: 82:fa:53:d2:51:2c:36:ca:06:ee:46:9e:59:3c:6a:de:4b:28: e5:38:d9:f8:8e:9e:eb:32:47:da:25:0d:6e:40:8c:5d:0e:47: a6:3b:27:2a:3e:9c:37:b8:9f:1f:bd:40:5d:85:5d:20:62:94: 87:0e:ec:66:57:41:27:50:28:3b:90:b5:80:10:68:38:6e:1c: c3:e1:5a:9c:85:9f:f1:b1:5e:3d:f0:cc:ce:44:2f:7f:f4:e3: 9e:7e:2d:39:73:48:09:be:3b:b0:99:51:cc:dd:af:bb:46:3c: 8b:da:a3:0b:bb:c3:53:82:9c:46:ec:f5:4e:58:59:07:8a:4f: df:55:e6:52:33:7c:d8:6a:03:60:70:f1:0a:7d:d7:d3:9d:e9: b9:37:af:0e:63:6f:bc:4b:6a:b7:98:71:12:11:06:6f:15:6b: e9:99:09:62 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hDuN3jfVP7w3IJo6/mh2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3ZDc4ZGUwMjM0ZTZmOTk3MDE1OTJmNTM2ZTQ1ZjVmNTU5 NGVlYzMwHhcNMjYwMTAyMTYyMjExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YThlNDdlMjhkZDk2Nzc4OTc2YzM2YTlhM2E3MDExMDRlY2Q0YmEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qbWyuAf1uK+5iuzZ7Gn3oDDpzvi jJXU7hEcwQmpjElb9TyG5oJXMirf5sygCIMEmXLDhdWhqXJlLy9cro2zlGlQ313v disRz9oSevigcQGzjD2pvkiC8dCbvThrzl+EGttBhOs7P507U61/yR1YNA/2yHlg rT9zYPojb5LfWaoTQ9V9tArYb00YAfXPey0V4dxc/mSql2rZr2eAHur4Yc5kMYS0 avx3O7eYT3xxx6lgIdvDaEANyxbHgDNFi/6s6kUfFdKBDFgtrPcJH8+nPjyTyGyq qjkKZBu3lPAkPOprX5Xbge0/VXPDMStiAsLSdF73wecF85XCmmjqwnC7xwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHqOR+KN2Wd4l2w2qaOnARBOzUujMB8GA1UdIwQY MBaAFKfXjeAjTm+ZcBWS9TbkX19VlO7DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDllTjRDTk9iNWx3RlpMMU51UmZYMVdVN3NNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8zMWFhYmEtYWM3ZS00ODlmLTg3N2Mt MjhkNWI2MDdhNDdmLzEvZW81SDRvM1paM2lYYkRhcG82Y0JFRTdOUzZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My8zMWFhYmEtYWM3ZS00ODlmLTg3N2MtMjhkNWI2MDdhNDdm LzEvcDllTjRDTk9iNWx3RlpMMU51UmZYMVdVN3NNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVd6sMA0G CSqGSIb3DQEBCwUAA4IBAQCszDJQ3uGWMj0KYbSnIgr84OeF2OH0I+AdvhhMQUNU f8MkJAS5v6xuFNRhIMZwcXqp2fCli/uJ1xcx5F6KFKER5p6SwSAOqa+r+0heiUK0 k6cKvCfhg1mZNZWC+lPSUSw2ygbuRp5ZPGreSyjlONn4jp7rMkfaJQ1uQIxdDkem OycqPpw3uJ8fvUBdhV0gYpSHDuxmV0EnUCg7kLWAEGg4bhzD4VqchZ/xsV498MzO RC9/9OOefi05c0gJvjuwmVHM3a+7RjyL2qMLu8NTgpxG7PVOWFkHik/fVeZSM3zY agNgcPEKfdfTnem5N68OY2+8S2q3mHESEQZvFWvpmQli -----END CERTIFICATE-----Generated at Mon Jan 26 10:24:12 2026 by rpki-client