This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/EUgnWUs3CsfaZnj_hnNyvxreJoQ.roa File: EUgnWUs3CsfaZnj_hnNyvxreJoQ.roa (raw, json) Hash identifier: pJY6CLyIZmy66AbMBmwM31A1sACoy25h4xx0+iPYYKE= Subject key identifier: 11:48:27:59:4B:37:0A:C7:DA:66:78:FF:86:73:72:BF:1A:DE:26:84 Certificate issuer: /CN=fb987244611b5230536744b6a89f044f32f462ea Certificate serial: 019B7C129FC05938EBF0543C7A865116C2D4 Authority key identifier: FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/EUgnWUs3CsfaZnj_hnNyvxreJoQ.roa Signing time: Fri 02 Jan 2026 00:19:13 +0000 ROA not before: Fri 02 Jan 2026 00:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49602 IP address blocks: 81.7.108.0/22 maxlen: 22 81.7.112.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:9f:c0:59:38:eb:f0:54:3c:7a:86:51:16:c2:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb987244611b5230536744b6a89f044f32f462ea Validity Not Before: Jan 2 00:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=114827594b370ac7da6678ff867372bf1ade2684 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:70:93:75:30:ea:f4:05:3e:b4:c4:c8:a4:04: c3:42:a5:19:e3:ed:5f:4b:3d:bb:a8:d8:fc:c2:2a: d7:2a:0a:2d:6d:ca:59:68:2a:0a:82:e2:37:ae:19: fe:6a:1a:4e:47:a3:c1:ae:c9:88:06:e8:85:5a:1c: 36:9f:55:14:ae:24:11:14:1e:1b:85:c4:fd:39:47: ff:d0:73:8e:91:7d:ae:e6:0b:25:d1:e2:d4:ea:ec: 2d:35:41:bf:fc:40:95:1b:1d:ba:c7:29:78:de:fc: ad:05:fb:05:aa:90:af:ed:65:e8:6b:22:50:28:ca: 1e:b0:a2:47:e8:44:66:97:b8:47:58:3c:7e:42:94: ca:65:ff:80:ae:8e:08:b2:69:d8:fa:6a:82:b0:f0: b0:aa:84:2c:b2:a6:f4:c0:e1:29:6f:f1:a3:49:6a: 5a:8e:28:6f:dd:b3:3a:ec:af:9b:40:93:5e:72:e8: 96:0d:d0:49:b3:70:14:90:f7:d1:1d:3a:1f:37:df: d0:b0:dd:82:7e:68:f8:b1:00:66:ea:a7:4c:92:10: 99:08:d3:a1:d9:c6:1d:a9:c1:f8:88:31:a8:8d:79: 8b:c7:e9:0d:47:fe:e1:6a:2e:ad:3c:96:1a:e4:68: 69:26:d0:1f:e0:f3:a3:1f:7c:80:e1:dd:aa:81:42: 63:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:48:27:59:4B:37:0A:C7:DA:66:78:FF:86:73:72:BF:1A:DE:26:84 X509v3 Authority Key Identifier: keyid:FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/EUgnWUs3CsfaZnj_hnNyvxreJoQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.7.108.0-81.7.113.255 Signature Algorithm: sha256WithRSAEncryption 8a:06:27:c5:e6:61:d0:66:e5:58:3b:fc:fd:db:9d:2c:75:82: 08:e6:02:6a:91:b6:5d:94:a7:d8:5c:23:58:d7:67:71:15:71: ee:66:fd:ba:57:3f:61:69:b3:fe:7c:5b:3a:0a:1e:90:d8:f3: a2:a6:51:8c:93:27:83:af:0d:13:77:47:ec:71:25:ac:10:c1: 7f:31:23:58:d8:e7:30:a3:0f:d6:c9:f8:5b:b0:ce:06:ac:52: 10:ea:c3:f5:93:a2:2e:dd:0e:79:61:f5:b4:18:69:f1:70:ee: b6:e2:64:27:d4:e9:38:28:27:ac:58:52:d0:58:3b:73:c2:ae: dc:4c:54:25:0d:3b:5b:f0:e0:e2:cb:c8:f4:db:fb:8b:9c:ca: 07:b7:f9:c6:cd:84:35:82:8a:34:f9:73:f8:61:c3:d2:fe:f0: 37:3a:28:d0:c6:b8:cd:ea:81:ad:74:c6:39:d8:09:86:02:ba: 42:fc:be:b7:bd:b7:f8:a0:f2:95:43:ae:70:5f:67:bd:1b:6c: 54:cf:8e:e1:43:1e:2a:2b:a6:cc:3f:4e:91:d1:05:e4:a1:df: ec:2e:fe:de:db:bb:05:47:48:35:ba:02:96:08:48:5d:ea:da: ab:22:48:f9:c2:0e:55:99:2f:2c:35:a5:f6:df:8f:b5:22:1f: d5:c9:e6:49 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgISAZt8Ep/AWTjr8FQ8eoZRFsLUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiOTg3MjQ0NjExYjUyMzA1MzY3NDRiNmE4OWYwNDRmMzJm NDYyZWEwHhcNMjYwMTAyMDAxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMTQ4Mjc1OTRiMzcwYWM3ZGE2Njc4ZmY4NjczNzJiZjFhZGUyNjg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA43CTdTDq9AU+tMTIpATDQqUZ4+1f Sz27qNj8wirXKgotbcpZaCoKguI3rhn+ahpOR6PBrsmIBuiFWhw2n1UUriQRFB4b hcT9OUf/0HOOkX2u5gsl0eLU6uwtNUG//ECVGx26xyl43vytBfsFqpCv7WXoayJQ KMoesKJH6ERml7hHWDx+QpTKZf+Aro4IsmnY+mqCsPCwqoQssqb0wOEpb/GjSWpa jihv3bM67K+bQJNecuiWDdBJs3AUkPfRHTofN9/QsN2Cfmj4sQBm6qdMkhCZCNOh 2cYdqcH4iDGojXmLx+kNR/7hai6tPJYa5GhpJtAf4POjH3yA4d2qgUJjOwIDAQAB o4ICEzCCAg8wHQYDVR0OBBYEFBFIJ1lLNwrH2mZ4/4Zzcr8a3iaEMB8GA1UdIwQY MBaAFPuYckRhG1IwU2dEtqifBE8y9GLqMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS01aHlSR0ViVWpCVFowUzJxSjhFVHpMMFl1by5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQvMzE5ZDdjLTdlNzYtNDMwOC1iYzAw LWJlNTgzMmQ1ZjdhYS8xL0VVZ25XVXMzQ3NmYVpual9obk55dnhyZUpvUS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNDQvMzE5ZDdjLTdlNzYtNDMwOC1iYzAwLWJlNTgzMmQ1Zjdh YS8xLzEtNWh5UkdFYlVqQlRaMFMycUo4RVR6TDBZdW8uY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwJwYIKwYBBQUHAQcBAf8EGDAWMBQEAgABMA4wDAMEAlEH bAMEAVEHcDANBgkqhkiG9w0BAQsFAAOCAQEAigYnxeZh0GblWDv8/dudLHWCCOYC apG2XZSn2FwjWNdncRVx7mb9ulc/YWmz/nxbOgoekNjzoqZRjJMng68NE3dH7HEl rBDBfzEjWNjnMKMP1sn4W7DOBqxSEOrD9ZOiLt0OeWH1tBhp8XDutuJkJ9TpOCgn rFhS0Fg7c8Ku3ExUJQ07W/Dg4svI9Nv7i5zKB7f5xs2ENYKKNPlz+GHD0v7wNzoo 0Ma4zeqBrXTGOdgJhgK6Qvy+t723+KDylUOucF9nvRtsVM+O4UMeKiumzD9OkdEF 5KHf7C7+3tu7BUdINboClghIXeraqyJI+cIOVZkvLDWl9t+PtSIf1cnmSQ== -----END CERTIFICATE-----Generated at Sun Jan 25 19:37:24 2026 by rpki-client