This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/EOa20siYhVvooEhEC-epku9D3Yo.roa File: EOa20siYhVvooEhEC-epku9D3Yo.roa (raw, json) Hash identifier: CaHqewaEFsaPKRUAGEnwAKh1/0YdOwyqr30Vur/C7RQ= Subject key identifier: 10:E6:B6:D2:C8:98:85:5B:E8:A0:48:44:0B:E7:A9:92:EF:43:DD:8A Certificate issuer: /CN=e3342c586371d465bcf35f79e1660e11e0805155 Certificate serial: 019B7E39291B70E203856A790D31619B336C Authority key identifier: E3:34:2C:58:63:71:D4:65:BC:F3:5F:79:E1:66:0E:11:E0:80:51:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zQsWGNx1GW881954WYOEeCAUVU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/EOa20siYhVvooEhEC-epku9D3Yo.roa Signing time: Fri 02 Jan 2026 10:20:33 +0000 ROA not before: Fri 02 Jan 2026 10:20:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52153 IP address blocks: 91.222.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.mft rsync://rpki.ripe.net/repository/DEFAULT/4zQsWGNx1GW881954WYOEeCAUVU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:29:1b:70:e2:03:85:6a:79:0d:31:61:9b:33:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3342c586371d465bcf35f79e1660e11e0805155 Validity Not Before: Jan 2 10:20:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=10e6b6d2c898855be8a048440be7a992ef43dd8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:aa:3d:e5:bb:18:6f:5c:46:63:0d:5c:a0:31: da:8b:36:89:bf:bf:6b:56:c0:72:47:0f:73:28:7e: 7e:a1:21:85:97:39:53:8c:92:43:b0:94:0f:5c:24: 57:e9:15:38:05:33:55:32:a2:15:07:c0:ef:db:42: d6:74:77:8e:a3:11:5e:21:0e:bf:7e:88:96:2c:16: 7a:f4:98:6c:a1:ba:5c:cd:4c:a7:4a:89:3d:e4:fe: b0:15:06:e3:29:8e:98:12:09:ab:76:3b:17:9b:30: 1c:b6:dc:de:ab:21:2d:21:2d:15:87:fd:2b:a8:52: 78:45:87:8e:20:70:56:bd:4b:6f:be:4a:7c:b8:28: 5d:06:2e:34:c4:c5:8a:eb:e2:6b:3c:c4:fe:dd:e1: 23:9d:93:00:2b:a5:72:5c:ea:b5:2d:49:be:3d:fd: 11:3b:b0:1e:39:6d:9d:d2:27:60:77:ed:6f:83:4d: 15:32:ee:e2:ab:7e:ad:89:0d:f1:91:e0:90:17:ca: 4d:5e:b5:23:68:1f:4b:1f:3e:2f:e7:b9:b4:1b:a9: 93:f0:10:41:3c:89:9b:70:3c:e0:76:6c:c0:f4:1d: 42:07:0e:7b:c4:c6:5b:56:4f:d9:42:99:5c:92:b9: 94:12:74:e1:ac:74:54:ea:ee:56:dd:0a:9a:43:ad: 7a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:E6:B6:D2:C8:98:85:5B:E8:A0:48:44:0B:E7:A9:92:EF:43:DD:8A X509v3 Authority Key Identifier: keyid:E3:34:2C:58:63:71:D4:65:BC:F3:5F:79:E1:66:0E:11:E0:80:51:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zQsWGNx1GW881954WYOEeCAUVU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/EOa20siYhVvooEhEC-epku9D3Yo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.222.192.0/22 Signature Algorithm: sha256WithRSAEncryption a6:c2:00:1f:be:e8:0d:65:5c:68:80:48:2b:be:55:25:50:3a: e6:50:cd:b5:81:e1:a2:7f:5e:3d:dd:bc:3f:1e:27:95:03:d9: a9:ad:f1:bc:50:98:e8:17:46:e0:87:8a:1f:9d:22:7a:d0:da: c9:0f:80:02:6a:14:35:7a:60:59:98:09:3c:17:58:6e:40:55: 08:02:ce:ce:0f:73:13:70:2b:0d:1e:8f:94:c0:81:8a:d8:74: 43:bb:c9:2d:fb:a7:4a:61:86:5b:da:01:f0:22:5f:80:e2:64: 15:e2:13:dc:2d:a7:b4:93:b3:30:6c:d9:cd:44:64:b8:69:94: f9:d9:78:8a:42:9b:fa:41:77:c0:dd:d2:41:5d:17:73:5a:95: 14:51:a1:2c:db:5b:86:cf:5d:ed:36:80:c1:4b:d3:c9:37:8c: f8:74:de:5c:c9:12:5d:c9:a5:8b:39:aa:47:76:c4:70:4c:45: 8d:f7:43:cb:0b:08:2b:7e:4d:98:31:36:78:67:c3:c6:ea:a6: 95:3b:51:71:79:15:bb:5e:65:44:44:9c:81:31:fb:77:46:6e: 13:75:1e:a0:43:0f:44:06:a8:93:52:85:bc:c0:56:f4:e1:17: b5:18:ec:5b:ef:b2:5c:da:33:4a:e4:b1:42:21:85:af:3c:ff: a3:7f:79:70 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OSkbcOIDhWp5DTFhmzNsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzMzQyYzU4NjM3MWQ0NjViY2YzNWY3OWUxNjYwZTExZTA4 MDUxNTUwHhcNMjYwMTAyMTAyMDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMGU2YjZkMmM4OTg4NTViZThhMDQ4NDQwYmU3YTk5MmVmNDNkZDhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ao95bsYb1xGYw1coDHaizaJv79r VsByRw9zKH5+oSGFlzlTjJJDsJQPXCRX6RU4BTNVMqIVB8Dv20LWdHeOoxFeIQ6/ foiWLBZ69JhsobpczUynSok95P6wFQbjKY6YEgmrdjsXmzActtzeqyEtIS0Vh/0r qFJ4RYeOIHBWvUtvvkp8uChdBi40xMWK6+JrPMT+3eEjnZMAK6VyXOq1LUm+Pf0R O7AeOW2d0idgd+1vg00VMu7iq36tiQ3xkeCQF8pNXrUjaB9LHz4v57m0G6mT8BBB PImbcDzgdmzA9B1CBw57xMZbVk/ZQplckrmUEnThrHRU6u5W3QqaQ616iwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBDmttLImIVb6KBIRAvnqZLvQ92KMB8GA1UdIwQY MBaAFOM0LFhjcdRlvPNfeeFmDhHggFFVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHpRc1dHTngxR1c4ODE5NTRXWU9FZUNBVVZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8zZjIzNTUtNjZmZi00MGI3LTk4ZDYt ZDk1YTM4ZjBjMDZlLzEvRU9hMjBzaVloVnZvb0VoRUMtZXBrdTlEM1lvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi8zZjIzNTUtNjZmZi00MGI3LTk4ZDYtZDk1YTM4ZjBjMDZl LzEvNHpRc1dHTngxR1c4ODE5NTRXWU9FZUNBVVZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW97AMA0G CSqGSIb3DQEBCwUAA4IBAQCmwgAfvugNZVxogEgrvlUlUDrmUM21geGif1493bw/ HieVA9mprfG8UJjoF0bgh4ofnSJ60NrJD4ACahQ1emBZmAk8F1huQFUIAs7OD3MT cCsNHo+UwIGK2HRDu8kt+6dKYYZb2gHwIl+A4mQV4hPcLae0k7MwbNnNRGS4aZT5 2XiKQpv6QXfA3dJBXRdzWpUUUaEs21uGz13tNoDBS9PJN4z4dN5cyRJdyaWLOapH dsRwTEWN90PLCwgrfk2YMTZ4Z8PG6qaVO1FxeRW7XmVERJyBMft3Rm4TdR6gQw9E BqiTUoW8wFb04Re1GOxb77Jc2jNK5LFCIYWvPP+jf3lw -----END CERTIFICATE-----Generated at Mon Jan 26 11:39:53 2026 by rpki-client