This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/EyQyKXmF8y_Jr6qFb_FfYoihgAM.roa File: EyQyKXmF8y_Jr6qFb_FfYoihgAM.roa (raw, json) Hash identifier: V48zZ4foJ1VYrvY794dgxk2ozwFXIlT+k/ehWKBbp5M= Subject key identifier: 13:24:32:29:79:85:F3:2F:C9:AF:AA:85:6F:F1:5F:62:88:A1:80:03 Certificate issuer: /CN=e8a851ddae5a64cc38825395be9a507da95ab7cf Certificate serial: 019B7C127ACE21A850E01EE837D4D10BDD5A Authority key identifier: E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/EyQyKXmF8y_Jr6qFb_FfYoihgAM.roa Signing time: Fri 02 Jan 2026 00:19:04 +0000 ROA not before: Fri 02 Jan 2026 00:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202447 IP address blocks: 147.236.118.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.crl rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.mft rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:7a:ce:21:a8:50:e0:1e:e8:37:d4:d1:0b:dd:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8a851ddae5a64cc38825395be9a507da95ab7cf Validity Not Before: Jan 2 00:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=132432297985f32fc9afaa856ff15f6288a18003 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:41:aa:83:1d:5a:a9:5f:c7:72:64:53:f3:55: d4:a5:29:d7:2a:01:ef:c9:38:71:51:8c:d5:f1:df: 63:10:11:22:e2:97:49:6a:45:2c:13:75:b4:71:c7: 55:27:4d:01:76:e3:26:95:b6:eb:d5:59:e1:c3:75: 47:eb:73:0f:26:29:ee:f7:8f:a1:82:38:aa:35:e9: fc:ed:e3:ce:29:e8:b8:d1:77:0b:50:02:07:c3:3d: 1e:d6:40:5e:5f:a2:2a:30:5a:57:7e:f2:8c:56:09: 80:f4:14:9a:61:43:fa:1f:9b:70:0f:2e:d3:f4:be: 35:5a:da:9e:72:b4:2c:d9:80:63:50:09:d4:df:3c: 9c:94:5c:b2:85:5e:7e:56:82:fb:25:75:47:2b:41: 8b:39:9c:ef:4e:b4:b8:6c:39:f2:0e:03:83:81:d5: 10:33:fa:70:08:19:a3:d9:87:85:16:f9:66:9a:b4: 9a:f5:c9:27:67:82:e8:58:ff:cd:f5:9b:74:f7:3d: 82:ac:00:db:5d:1f:96:61:1a:2b:1e:14:de:3e:50: 94:25:fb:d1:3e:82:64:02:6b:97:fb:2e:4f:40:b0: 39:2c:b9:1c:ad:0f:bf:fb:15:18:34:fb:4c:d5:49: 39:27:16:c8:fd:d9:ba:a4:d8:66:0c:a1:64:ed:c5: c6:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:24:32:29:79:85:F3:2F:C9:AF:AA:85:6F:F1:5F:62:88:A1:80:03 X509v3 Authority Key Identifier: keyid:E8:A8:51:DD:AE:5A:64:CC:38:82:53:95:BE:9A:50:7D:A9:5A:B7:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KhR3a5aZMw4glOVvppQfalat88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/EyQyKXmF8y_Jr6qFb_FfYoihgAM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3638d7-3ec3-4595-a631-110c878dcd29/1/6KhR3a5aZMw4glOVvppQfalat88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.236.118.0/23 Signature Algorithm: sha256WithRSAEncryption 77:08:0e:8f:8a:8e:dd:b3:3c:99:e1:7d:48:48:1c:29:e7:ab: 73:11:19:6e:48:89:1b:8d:a7:e8:4a:67:22:4e:d4:d0:43:95: 32:9f:e1:18:e8:3b:ba:ba:8e:84:37:92:7f:63:6f:9f:e8:21: 39:09:ca:9e:78:17:b8:b6:8f:70:5b:f8:4f:2a:a2:76:14:8f: 8f:b6:69:e5:df:9c:b0:51:4f:1b:a7:eb:4e:a0:c7:16:2d:c0: 9e:ab:07:01:37:e3:ea:79:57:e2:b1:24:7a:32:97:11:7d:16: 7a:6c:d6:e0:b3:c1:8f:06:9b:d0:ae:2f:c7:72:06:31:13:4c: fa:bf:6b:90:ea:84:65:9e:4e:49:ca:34:be:e5:36:cd:6d:3d: 6f:12:7a:6e:47:7b:3e:0c:47:11:ef:2a:7f:33:fc:98:2f:ab: 4a:9c:af:24:a4:1c:76:f0:53:f5:75:ce:53:db:2c:7d:94:ef: 19:62:35:34:4d:c1:2d:0d:6d:c4:8e:15:f0:51:6f:eb:c4:28: 9b:ba:13:c4:9a:92:29:5f:d3:40:9f:4a:e8:5d:71:88:a6:da: 5a:27:c6:29:4c:8d:8a:da:25:22:54:f7:bb:fb:80:bd:60:28: 3d:a9:36:c2:32:3e:54:28:74:a4:a1:8a:ca:b5:61:a6:a9:38: f6:4c:54:70 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EnrOIahQ4B7oN9TRC91aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4YTg1MWRkYWU1YTY0Y2MzODgyNTM5NWJlOWE1MDdkYTk1 YWI3Y2YwHhcNMjYwMTAyMDAxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzI0MzIyOTc5ODVmMzJmYzlhZmFhODU2ZmYxNWY2Mjg4YTE4MDAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkGqgx1aqV/HcmRT81XUpSnXKgHv yThxUYzV8d9jEBEi4pdJakUsE3W0ccdVJ00BduMmlbbr1Vnhw3VH63MPJinu94+h gjiqNen87ePOKei40XcLUAIHwz0e1kBeX6IqMFpXfvKMVgmA9BSaYUP6H5twDy7T 9L41WtqecrQs2YBjUAnU3zyclFyyhV5+VoL7JXVHK0GLOZzvTrS4bDnyDgODgdUQ M/pwCBmj2YeFFvlmmrSa9cknZ4LoWP/N9Zt09z2CrADbXR+WYRorHhTePlCUJfvR PoJkAmuX+y5PQLA5LLkcrQ+/+xUYNPtM1Uk5JxbI/dm6pNhmDKFk7cXGFQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBMkMil5hfMvya+qhW/xX2KIoYADMB8GA1UdIwQY MBaAFOioUd2uWmTMOIJTlb6aUH2pWrfPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNktoUjNhNWFaTXc0Z2xPVnZwcFFmYWxhdDg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8zNjM4ZDctM2VjMy00NTk1LWE2MzEt MTEwYzg3OGRjZDI5LzEvRXlReUtYbUY4eV9KcjZxRmJfRmZZb2loZ0FNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8zNjM4ZDctM2VjMy00NTk1LWE2MzEtMTEwYzg3OGRjZDI5 LzEvNktoUjNhNWFaTXc0Z2xPVnZwcFFmYWxhdDg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBk+x2MA0G CSqGSIb3DQEBCwUAA4IBAQB3CA6Pio7dszyZ4X1ISBwp56tzERluSIkbjafoSmci TtTQQ5Uyn+EY6Du6uo6EN5J/Y2+f6CE5CcqeeBe4to9wW/hPKqJ2FI+Ptmnl35yw UU8bp+tOoMcWLcCeqwcBN+PqeVfisSR6MpcRfRZ6bNbgs8GPBpvQri/HcgYxE0z6 v2uQ6oRlnk5JyjS+5TbNbT1vEnpuR3s+DEcR7yp/M/yYL6tKnK8kpBx28FP1dc5T 2yx9lO8ZYjU0TcEtDW3EjhXwUW/rxCibuhPEmpIpX9NAn0roXXGIptpaJ8YpTI2K 2iUiVPe7+4C9YCg9qTbCMj5UKHSkoYrKtWGmqTj2TFRw -----END CERTIFICATE-----Generated at Mon Jan 26 04:38:56 2026 by rpki-client