This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/EeAR-0FuIgpREXK4CZj7bbiR324.roa File: EeAR-0FuIgpREXK4CZj7bbiR324.roa (raw, json) Hash identifier: nK35rOT9ZlV+vNlZLQE4MxQolHHOslBBZTHEZhrQ+LA= Subject key identifier: 11:E0:11:FB:41:6E:22:0A:51:11:72:B8:09:98:FB:6D:B8:91:DF:6E Certificate issuer: /CN=cf224c84aeba859b90c8936cba6167ee4c44ece7 Certificate serial: 019B7911363760AEA2E2278CC63B9A491F43 Authority key identifier: CF:22:4C:84:AE:BA:85:9B:90:C8:93:6C:BA:61:67:EE:4C:44:EC:E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zyJMhK66hZuQyJNsumFn7kxE7Oc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/EeAR-0FuIgpREXK4CZj7bbiR324.roa Signing time: Thu 01 Jan 2026 10:18:49 +0000 ROA not before: Thu 01 Jan 2026 10:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50837 IP address blocks: 109.224.243.0/24 maxlen: 24 185.113.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.mft rsync://rpki.ripe.net/repository/DEFAULT/zyJMhK66hZuQyJNsumFn7kxE7Oc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:36:37:60:ae:a2:e2:27:8c:c6:3b:9a:49:1f:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf224c84aeba859b90c8936cba6167ee4c44ece7 Validity Not Before: Jan 1 10:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=11e011fb416e220a511172b80998fb6db891df6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d6:c0:88:d8:fb:9f:dc:61:16:d7:76:28:c5: 49:59:9d:3f:b6:e2:5b:b3:1d:7e:6b:fa:b4:58:43: 37:cb:51:9a:fb:01:8e:00:c1:ce:c3:c1:ba:fa:5d: be:ed:bb:b7:bf:c2:45:87:cd:9c:ac:ae:30:9b:81: 73:c0:c0:6d:41:28:08:f3:77:6f:c2:0e:e3:7d:d7: 60:ac:42:f5:23:85:12:54:5b:91:f3:c6:c3:cc:49: e9:0d:b0:a8:a0:3d:ec:59:7a:36:ad:9f:78:a0:0e: fa:39:9f:38:e0:d4:c1:c4:88:6b:1e:70:e2:23:9b: 7e:9b:b7:7d:f7:f7:7c:4e:a7:f5:20:c9:da:a8:22: 2c:48:5a:80:51:79:35:c0:b8:c9:25:5e:83:e4:50: 5a:dc:6d:dc:42:0d:4d:04:76:f4:96:b2:db:fb:f3: b6:2b:23:0b:df:a7:9e:49:a6:8c:51:ea:34:50:8d: 51:4b:5c:27:8d:8f:ed:29:5e:52:7d:20:4a:bf:3c: a7:4e:0b:3c:3f:fd:f5:b2:7b:22:8b:a2:68:77:15: d6:0c:97:b6:52:37:44:d7:2e:80:9c:8c:6a:a5:06: a5:aa:61:0a:62:af:d6:57:3a:e9:9a:cb:ac:e8:07: 85:9f:2f:01:ec:58:2b:83:86:62:58:07:2e:b7:a2: 55:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:E0:11:FB:41:6E:22:0A:51:11:72:B8:09:98:FB:6D:B8:91:DF:6E X509v3 Authority Key Identifier: keyid:CF:22:4C:84:AE:BA:85:9B:90:C8:93:6C:BA:61:67:EE:4C:44:EC:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zyJMhK66hZuQyJNsumFn7kxE7Oc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/EeAR-0FuIgpREXK4CZj7bbiR324.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.224.243.0/24 185.113.222.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:65:3f:9b:98:dd:f6:92:d5:e2:0c:2e:6e:bd:fd:01:1c:8f: 49:ae:9d:6b:17:72:6c:83:0b:d6:26:16:e7:2f:0c:e5:b6:03: cf:9d:17:76:c2:7d:e4:4a:16:70:ea:cc:d1:1a:40:08:a5:c3: 73:cb:b4:4f:29:f3:18:da:6b:8a:16:5e:34:e2:d4:9f:88:2c: a3:55:ba:69:e4:28:6f:0b:5a:0e:56:97:0f:5b:08:09:a1:bc: 40:46:6b:7a:23:3f:cb:41:fa:7a:15:70:f6:0e:c0:90:19:84: 42:fc:62:e7:4d:17:32:76:d9:30:47:ca:c0:30:b6:a1:b9:f8: e1:6d:9c:c4:c9:bd:e3:79:b9:37:f0:09:6e:7d:55:3e:1e:1b: d2:8b:d9:11:3c:cf:5d:f4:57:29:a1:f9:57:71:22:cd:1b:c6: 26:ca:f6:92:97:f6:35:94:ed:b0:33:fc:5a:e9:b8:f6:dc:6b: 7a:cf:80:fb:7d:0e:2c:bf:20:60:45:a7:a9:03:09:80:43:58: 6a:cb:70:af:8e:19:28:1a:cf:7f:d2:b1:d3:93:f9:f8:00:72: c5:5b:0a:5d:5d:03:84:24:7b:cc:c2:da:cc:ae:c9:3f:58:df: f5:f9:f5:05:e9:4d:25:66:25:41:c5:bd:ca:e4:c3:55:2e:08: e0:2f:c9:2c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5ETY3YK6i4ieMxjuaSR9DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMjI0Yzg0YWViYTg1OWI5MGM4OTM2Y2JhNjE2N2VlNGM0 NGVjZTcwHhcNMjYwMTAxMTAxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMWUwMTFmYjQxNmUyMjBhNTExMTcyYjgwOTk4ZmI2ZGI4OTFkZjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdbAiNj7n9xhFtd2KMVJWZ0/tuJb sx1+a/q0WEM3y1Ga+wGOAMHOw8G6+l2+7bu3v8JFh82crK4wm4FzwMBtQSgI83dv wg7jfddgrEL1I4USVFuR88bDzEnpDbCooD3sWXo2rZ94oA76OZ844NTBxIhrHnDi I5t+m7d99/d8Tqf1IMnaqCIsSFqAUXk1wLjJJV6D5FBa3G3cQg1NBHb0lrLb+/O2 KyML36eeSaaMUeo0UI1RS1wnjY/tKV5SfSBKvzynTgs8P/31snsii6JodxXWDJe2 UjdE1y6AnIxqpQalqmEKYq/WVzrpmsus6AeFny8B7Fgrg4ZiWAcut6JVUQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBHgEftBbiIKURFyuAmY+224kd9uMB8GA1UdIwQY MBaAFM8iTISuuoWbkMiTbLphZ+5MROznMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenlKTWhLNjZoWnVReUpOc3VtRm43a3hFN09jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8wNzE2ZGYtMzQxYi00YTA4LWE0NTEt NTk2MjI1MDMxZWUzLzEvRWVBUi0wRnVJZ3BSRVhLNENaajdiYmlSMzI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8wNzE2ZGYtMzQxYi00YTA4LWE0NTEtNTk2MjI1MDMxZWUz LzEvenlKTWhLNjZoWnVReUpOc3VtRm43a3hFN09jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAbeDzAwQA uXHeMA0GCSqGSIb3DQEBCwUAA4IBAQBuZT+bmN32ktXiDC5uvf0BHI9Jrp1rF3Js gwvWJhbnLwzltgPPnRd2wn3kShZw6szRGkAIpcNzy7RPKfMY2muKFl404tSfiCyj Vbpp5ChvC1oOVpcPWwgJobxARmt6Iz/LQfp6FXD2DsCQGYRC/GLnTRcydtkwR8rA MLahufjhbZzEyb3jebk38AlufVU+HhvSi9kRPM9d9FcpoflXcSLNG8YmyvaSl/Y1 lO2wM/xa6bj23Gt6z4D7fQ4svyBgRaepAwmAQ1hqy3CvjhkoGs9/0rHTk/n4AHLF WwpdXQOEJHvMwtrMrsk/WN/1+fUF6U0lZiVBxb3K5MNVLgjgL8ks -----END CERTIFICATE-----Generated at Mon Jan 26 07:23:29 2026 by rpki-client