This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/EKwGj8cGWTKa1emZfvaG-_KFnug.roa File: EKwGj8cGWTKa1emZfvaG-_KFnug.roa (raw, json) Hash identifier: 0WqMi3eKQHHkupGYUjixsLx2D37mbsIXi9Fsl7hZLiw= Subject key identifier: 10:AC:06:8F:C7:06:59:32:9A:D5:E9:99:7E:F6:86:FB:F2:85:9E:E8 Certificate issuer: /CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83 Certificate serial: 019B7EA5591B365B6F004C83BF660CB7968F Authority key identifier: 22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/EKwGj8cGWTKa1emZfvaG-_KFnug.roa Signing time: Fri 02 Jan 2026 12:18:44 +0000 ROA not before: Fri 02 Jan 2026 12:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20912 IP address blocks: 46.102.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.mft rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:59:1b:36:5b:6f:00:4c:83:bf:66:0c:b7:96:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=222c4585bd88fb27cadf29ee5bb95d6575fcef83 Validity Not Before: Jan 2 12:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=10ac068fc70659329ad5e9997ef686fbf2859ee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e5:cd:0e:66:67:77:2b:75:28:9d:54:7d:de: 0c:fb:60:f9:5f:d1:7b:f1:02:31:b2:cf:f4:f0:d4: 29:86:be:50:53:02:5f:e4:8a:6c:31:0d:02:e7:a5: 3d:43:52:33:9e:6d:53:c6:25:9b:19:5f:86:1f:61: 46:81:3d:21:c3:23:74:32:16:24:6b:95:22:1e:09: 86:d0:88:3d:62:e5:03:80:9a:54:7b:d4:0d:cb:6a: c6:71:c7:a3:14:2b:fe:8c:cb:fe:e6:6b:eb:4e:71: 55:ac:74:c1:2a:0a:4e:fe:12:7f:b9:8c:f7:5f:a8: 7a:02:2d:c6:5d:f0:5b:7b:47:a2:f3:56:fb:b2:ef: 75:8c:aa:af:7a:e3:26:06:6d:9a:02:b6:88:48:61: eb:55:91:1f:ed:b5:6d:40:95:d7:f2:c3:a0:b8:f8: e8:59:3b:17:34:8e:ed:aa:40:ee:66:51:d9:40:d3: 9e:44:37:39:12:17:28:be:44:6b:4d:6a:33:ef:34: 94:ce:56:6b:d2:30:33:2d:71:bf:32:f4:6e:09:c4: 6f:9a:c0:fb:4a:ce:16:bb:0a:79:49:b8:0e:5c:a2: ef:4b:c2:bf:3a:fc:f8:67:30:b7:04:56:41:3e:04: 46:c2:67:c6:e1:f2:c8:cf:9e:09:d4:05:28:d8:c0: 54:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:AC:06:8F:C7:06:59:32:9A:D5:E9:99:7E:F6:86:FB:F2:85:9E:E8 X509v3 Authority Key Identifier: keyid:22:2C:45:85:BD:88:FB:27:CA:DF:29:EE:5B:B9:5D:65:75:FC:EF:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IixFhb2I-yfK3ynuW7ldZXX874M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/EKwGj8cGWTKa1emZfvaG-_KFnug.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6eb365-803a-4c2f-b7ae-c647a8c1ddfa/1/IixFhb2I-yfK3ynuW7ldZXX874M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.102.96.0/22 Signature Algorithm: sha256WithRSAEncryption 4c:70:f5:e4:55:0d:34:ab:38:39:0a:5b:82:33:31:45:67:77: 33:81:55:11:a4:6a:51:16:d8:6c:94:cc:cd:09:8c:37:de:8c: 98:cf:e8:53:0a:93:fb:9d:48:60:fe:01:5b:de:a5:ac:fb:1c: d1:5e:55:e8:7f:89:b1:38:30:d3:35:91:a5:da:90:2e:83:6e: bb:b8:4c:0f:36:88:dc:f6:f2:fc:fe:08:7f:2e:6f:f9:8a:8b: 6b:ad:8f:dd:7c:fb:50:49:58:ae:35:b5:0c:41:39:e7:f9:a1: 49:41:09:35:aa:6c:07:97:6e:fc:6e:41:bc:83:56:d6:af:41: c6:36:4a:3e:1d:65:b6:2e:4c:40:4d:eb:f1:95:4b:66:72:16: d1:d9:0e:f0:83:2b:b1:1f:70:0e:6c:4a:74:9e:1f:5c:b4:14: c6:16:9e:ca:dd:e1:e7:c2:64:08:5c:aa:9e:be:3e:14:c7:69: ba:cf:4d:44:54:7c:8e:78:42:e0:92:46:bd:a7:34:67:d5:79: f7:f1:b8:50:ab:a3:36:2f:0e:10:f9:ec:06:09:16:95:a7:cb: df:17:ca:6f:a1:d2:9a:35:80:43:65:a6:2c:9b:e1:6f:a0:84: a0:a0:26:55:78:da:da:e6:7f:bf:7d:a9:14:22:98:07:75:1b: 82:55:1b:f6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pVkbNltvAEyDv2YMt5aPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyMmM0NTg1YmQ4OGZiMjdjYWRmMjllZTViYjk1ZDY1NzVm Y2VmODMwHhcNMjYwMTAyMTIxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMGFjMDY4ZmM3MDY1OTMyOWFkNWU5OTk3ZWY2ODZmYmYyODU5ZWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+XNDmZndyt1KJ1Ufd4M+2D5X9F7 8QIxss/08NQphr5QUwJf5IpsMQ0C56U9Q1Iznm1TxiWbGV+GH2FGgT0hwyN0MhYk a5UiHgmG0Ig9YuUDgJpUe9QNy2rGccejFCv+jMv+5mvrTnFVrHTBKgpO/hJ/uYz3 X6h6Ai3GXfBbe0ei81b7su91jKqveuMmBm2aAraISGHrVZEf7bVtQJXX8sOguPjo WTsXNI7tqkDuZlHZQNOeRDc5EhcovkRrTWoz7zSUzlZr0jAzLXG/MvRuCcRvmsD7 Ss4Wuwp5SbgOXKLvS8K/Ovz4ZzC3BFZBPgRGwmfG4fLIz54J1AUo2MBU4QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBCsBo/HBlkymtXpmX72hvvyhZ7oMB8GA1UdIwQY MBaAFCIsRYW9iPsnyt8p7lu5XWV1/O+DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWl4RmhiMkkteWZLM3ludVc3bGRaWFg4NzRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC82ZWIzNjUtODAzYS00YzJmLWI3YWUt YzY0N2E4YzFkZGZhLzEvRUt3R2o4Y0dXVEthMWVtWmZ2YUctX0tGbnVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC82ZWIzNjUtODAzYS00YzJmLWI3YWUtYzY0N2E4YzFkZGZh LzEvSWl4RmhiMkkteWZLM3ludVc3bGRaWFg4NzRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLmZgMA0G CSqGSIb3DQEBCwUAA4IBAQBMcPXkVQ00qzg5CluCMzFFZ3czgVURpGpRFthslMzN CYw33oyYz+hTCpP7nUhg/gFb3qWs+xzRXlXof4mxODDTNZGl2pAug267uEwPNojc 9vL8/gh/Lm/5iotrrY/dfPtQSViuNbUMQTnn+aFJQQk1qmwHl278bkG8g1bWr0HG Nko+HWW2LkxATevxlUtmchbR2Q7wgyuxH3AObEp0nh9ctBTGFp7K3eHnwmQIXKqe vj4Ux2m6z01EVHyOeELgkka9pzRn1Xn38bhQq6M2Lw4Q+ewGCRaVp8vfF8pvodKa NYBDZaYsm+FvoISgoCZVeNra5n+/fakUIpgHdRuCVRv2 -----END CERTIFICATE-----Generated at Sun Jan 25 23:03:37 2026 by rpki-client