This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/EYqilavXprc2FLL8KIowGf2TSuo.roa File: EYqilavXprc2FLL8KIowGf2TSuo.roa (raw, json) Hash identifier: 6uN/QSpU/95Lf3RHLemvXq4xBYigUHIrCbA+BPlWG1c= Subject key identifier: 11:8A:A2:95:AB:D7:A6:B7:36:14:B2:FC:28:8A:30:19:FD:93:4A:EA Certificate issuer: /CN=9338840926ac73ead5b6187919e88f10032299ca Certificate serial: 019ADF6E23BA4CED3A7FCB34949896CBDCFF Authority key identifier: 93:38:84:09:26:AC:73:EA:D5:B6:18:79:19:E8:8F:10:03:22:99:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kziECSasc-rVthh5GeiPEAMimco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/EYqilavXprc2FLL8KIowGf2TSuo.roa Signing time: Tue 02 Dec 2025 14:18:48 +0000 ROA not before: Tue 02 Dec 2025 14:18:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212957 IP address blocks: 45.148.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.crl rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.mft rsync://rpki.ripe.net/repository/DEFAULT/kziECSasc-rVthh5GeiPEAMimco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:df:6e:23:ba:4c:ed:3a:7f:cb:34:94:98:96:cb:dc:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9338840926ac73ead5b6187919e88f10032299ca Validity Not Before: Dec 2 14:18:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=118aa295abd7a6b73614b2fc288a3019fd934aea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:70:8d:89:06:06:b1:73:dd:84:22:85:2a:09: 24:f9:c4:0a:21:28:14:6b:da:fc:b6:23:60:fe:81: 75:49:d8:e2:83:4f:ce:0a:c1:2b:d5:d6:51:8b:84: ce:a5:e3:b5:6b:46:55:0b:a0:6a:c6:23:8a:50:65: c1:7b:e4:e3:a7:5e:4e:47:d0:e9:94:0d:df:71:cb: cd:c4:67:bb:15:75:1e:b2:13:1c:0c:76:38:45:81: 1c:f5:e0:96:4d:9d:1e:23:2e:41:cf:76:a9:24:b9: 90:e6:58:16:c8:ac:df:40:95:f0:aa:b1:e4:e4:01: b7:fc:11:42:22:91:e4:af:c2:e0:69:6e:8f:e0:26: f2:ed:4f:31:7c:5b:bf:ce:b0:dc:2d:0f:72:a7:42: 49:e2:47:56:d8:2b:8e:fd:9a:44:83:59:d9:ae:60: 27:1e:92:d8:5e:0d:d8:41:26:bf:c9:38:e4:2d:49: 7a:1b:38:38:14:5b:e1:69:7c:ec:4c:ba:00:76:86: 74:0d:d3:9a:f2:cf:ba:62:35:f6:a9:e7:b8:8a:57: cb:5d:e7:bf:43:ae:36:9b:e3:42:8b:30:f5:94:2e: 71:86:37:84:fe:47:6e:db:21:83:20:e4:1d:24:8e: 94:56:da:28:cc:50:cb:3a:c3:b0:9d:f6:37:87:8d: 5e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:8A:A2:95:AB:D7:A6:B7:36:14:B2:FC:28:8A:30:19:FD:93:4A:EA X509v3 Authority Key Identifier: keyid:93:38:84:09:26:AC:73:EA:D5:B6:18:79:19:E8:8F:10:03:22:99:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kziECSasc-rVthh5GeiPEAMimco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/EYqilavXprc2FLL8KIowGf2TSuo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.148.72.0/24 Signature Algorithm: sha256WithRSAEncryption 21:82:64:48:b4:38:f6:b6:e1:53:a1:d7:0c:2d:06:51:e2:00: e3:91:04:b3:92:0f:f8:77:49:67:88:29:94:87:2c:41:e4:c9: 0d:94:0a:72:50:8d:dc:71:78:52:15:9c:ce:c2:35:d0:a9:94: 5e:28:f1:cd:cb:0b:47:ea:9c:92:a7:e1:d3:e1:ed:20:b8:32: 88:0e:65:99:8d:3f:ad:c4:02:b1:48:f6:67:84:6e:60:1c:07: 89:d8:12:ba:1d:69:31:79:4e:70:87:19:21:82:7b:4a:89:18: 33:57:36:dc:70:d0:e2:ca:34:61:56:68:45:4d:8c:64:ca:f1: ce:75:cd:58:69:4d:56:4b:0a:d9:10:8d:d0:8a:86:fa:1e:d7: a5:91:4f:8d:5b:70:e3:ef:57:43:be:c5:0d:e1:18:0f:cc:0b: 38:10:2a:92:11:1e:e1:71:d4:f3:89:89:ef:e6:55:ef:2e:e0: c1:76:41:7b:e9:4a:c4:85:6b:6f:8c:cd:56:d4:77:35:25:fa: a9:5c:c4:9c:ff:48:6c:15:78:29:82:8e:60:40:f8:44:6c:fd: 91:06:d9:8b:ca:16:a2:cb:4c:b4:a6:3a:ee:39:5d:5f:dd:13: 3c:eb:8f:18:2e:74:c9:e7:3d:b9:9c:e1:f2:39:43:21:32:85: 36:58:dc:29 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrfbiO6TO06f8s0lJiWy9z/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzMzg4NDA5MjZhYzczZWFkNWI2MTg3OTE5ZTg4ZjEwMDMy Mjk5Y2EwHhcNMjUxMjAyMTQxODQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMThhYTI5NWFiZDdhNmI3MzYxNGIyZmMyODhhMzAxOWZkOTM0YWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1XCNiQYGsXPdhCKFKgkk+cQKISgU a9r8tiNg/oF1Sdjig0/OCsEr1dZRi4TOpeO1a0ZVC6BqxiOKUGXBe+Tjp15OR9Dp lA3fccvNxGe7FXUeshMcDHY4RYEc9eCWTZ0eIy5Bz3apJLmQ5lgWyKzfQJXwqrHk 5AG3/BFCIpHkr8LgaW6P4Cby7U8xfFu/zrDcLQ9yp0JJ4kdW2CuO/ZpEg1nZrmAn HpLYXg3YQSa/yTjkLUl6Gzg4FFvhaXzsTLoAdoZ0DdOa8s+6YjX2qee4ilfLXee/ Q642m+NCizD1lC5xhjeE/kdu2yGDIOQdJI6UVtoozFDLOsOwnfY3h41e9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBGKopWr16a3NhSy/CiKMBn9k0rqMB8GA1UdIwQY MBaAFJM4hAkmrHPq1bYYeRnojxADIpnKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3ppRUNTYXNjLXJWdGhoNUdlaVBFQU1pbWNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8wYmQ0ZDMtZDQ2Yy00ODNmLTk1NmUt ZWE3YWU3MmJkMzJkLzEvRVlxaWxhdlhwcmMyRkxMOEtJb3dHZjJUU3VvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS8wYmQ0ZDMtZDQ2Yy00ODNmLTk1NmUtZWE3YWU3MmJkMzJk LzEva3ppRUNTYXNjLXJWdGhoNUdlaVBFQU1pbWNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZRIMA0G CSqGSIb3DQEBCwUAA4IBAQAhgmRItDj2tuFTodcMLQZR4gDjkQSzkg/4d0lniCmU hyxB5MkNlApyUI3ccXhSFZzOwjXQqZReKPHNywtH6pySp+HT4e0guDKIDmWZjT+t xAKxSPZnhG5gHAeJ2BK6HWkxeU5whxkhgntKiRgzVzbccNDiyjRhVmhFTYxkyvHO dc1YaU1WSwrZEI3Qiob6HtelkU+NW3Dj71dDvsUN4RgPzAs4ECqSER7hcdTziYnv 5lXvLuDBdkF76UrEhWtvjM1W1Hc1JfqpXMSc/0hsFXgpgo5gQPhEbP2RBtmLyhai y0y0pjruOV1f3RM8648YLnTJ5z25nOHyOUMhMoU2WNwp -----END CERTIFICATE-----Generated at Sat Dec 6 10:51:24 2025 by rpki-client