This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/EQUgl00EZFitLJ6oysydLWzSpDI.roa File: EQUgl00EZFitLJ6oysydLWzSpDI.roa (raw, json) Hash identifier: YdDTBE8waxg/izLbB0CYt1PqKhzSZ1hn6bGE3MrL1iw= Subject key identifier: 11:05:20:97:4D:04:64:58:AD:2C:9E:A8:CA:CC:9D:2D:6C:D2:A4:32 Certificate issuer: /CN=ea5187cbf738c0e9d7a3ed9bfcb2c4a677226483 Certificate serial: 019B76EBA1A3292D604C28F84EA193C3C30D Authority key identifier: EA:51:87:CB:F7:38:C0:E9:D7:A3:ED:9B:FC:B2:C4:A6:77:22:64:83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lGHy_c4wOnXo-2b_LLEpnciZIM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/EQUgl00EZFitLJ6oysydLWzSpDI.roa Signing time: Thu 01 Jan 2026 00:18:32 +0000 ROA not before: Thu 01 Jan 2026 00:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200306 IP address blocks: 2001:678:7e0::/48 maxlen: 48 2001:67c:2c40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.mft rsync://rpki.ripe.net/repository/DEFAULT/6lGHy_c4wOnXo-2b_LLEpnciZIM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:a1:a3:29:2d:60:4c:28:f8:4e:a1:93:c3:c3:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea5187cbf738c0e9d7a3ed9bfcb2c4a677226483 Validity Not Before: Jan 1 00:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=110520974d046458ad2c9ea8cacc9d2d6cd2a432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c7:41:d4:e6:09:b3:c5:63:70:9a:bd:42:f2: fe:89:02:fc:bf:2f:ac:1f:be:b1:9c:70:0c:a0:85: 18:0c:38:13:4a:4f:1d:65:98:4d:3d:a9:0f:b6:1a: 96:e4:06:77:3d:90:71:2c:b7:ba:e6:0f:7b:f9:bb: 7e:10:4c:5d:fb:ac:e1:e5:b4:1c:9b:89:f4:84:f2: a9:38:b2:02:d7:19:bf:22:36:5c:24:3e:47:59:30: 30:0c:62:48:19:83:f0:3d:db:2f:6f:49:0f:6b:c5: c8:24:8b:9c:dc:20:7f:ff:f1:a9:c5:ff:ed:5b:bd: 9d:16:48:70:7b:d6:8f:01:20:83:26:ab:78:a7:8d: eb:3e:d6:e3:b3:2e:dd:72:fd:42:11:f5:e9:17:6d: 99:84:7c:6b:64:57:be:3a:dd:b6:39:b8:de:ba:3b: 45:b5:21:ce:65:cb:54:77:4e:b8:c2:71:2a:69:2b: 9e:a1:51:06:2b:00:4e:6e:29:ce:40:a0:a9:67:c5: ce:e3:ad:bf:90:ba:d5:89:9c:81:4b:47:a4:ca:9f: 6e:fc:b4:78:83:c6:8c:f7:cf:4d:13:60:64:15:9f: b0:7f:52:a0:e2:76:6b:a3:a1:8f:1c:4d:43:5b:a7: 0f:97:4c:be:83:e1:31:74:53:ef:58:2b:93:a8:b1: ae:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:05:20:97:4D:04:64:58:AD:2C:9E:A8:CA:CC:9D:2D:6C:D2:A4:32 X509v3 Authority Key Identifier: keyid:EA:51:87:CB:F7:38:C0:E9:D7:A3:ED:9B:FC:B2:C4:A6:77:22:64:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lGHy_c4wOnXo-2b_LLEpnciZIM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/EQUgl00EZFitLJ6oysydLWzSpDI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/05f238-bb62-455d-9921-3a2722507ee5/1/6lGHy_c4wOnXo-2b_LLEpnciZIM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:7e0::/48 2001:67c:2c40::/48 Signature Algorithm: sha256WithRSAEncryption 28:6e:17:df:3d:44:d6:65:76:ae:15:c0:b9:7b:5d:b4:ca:18: 8e:8c:12:39:fa:7b:00:50:6f:09:90:d3:0a:48:89:b7:cd:5b: 93:50:a6:86:b2:33:64:b0:ea:a1:23:7e:80:80:da:9d:57:dd: 69:40:29:43:15:6f:49:4c:56:17:87:4f:1a:09:7d:6e:cd:a4: 0e:d2:74:42:8d:e8:70:76:1b:83:79:fb:41:32:bb:48:a5:a0: 76:84:0a:f2:3f:c0:ee:41:2b:88:72:0c:7e:d6:b8:b1:4e:8b: 6a:c1:42:57:7e:ab:73:03:57:8d:91:f2:c2:20:30:bf:fb:74: 5c:5c:49:fa:13:7f:49:6a:c6:f7:a7:9d:45:ac:07:fc:4b:25: bb:b8:79:97:fc:ae:92:bc:94:99:ec:9d:4b:ec:d2:7e:8c:a2: 85:a4:92:3d:f7:54:8d:d8:ea:02:b7:e0:73:f3:15:10:12:0b: ba:71:6f:e2:02:67:cd:92:a2:50:f3:13:59:a3:00:9c:0a:62: 21:96:3c:e1:57:7e:67:a8:29:15:fa:a4:be:33:57:aa:87:73: 79:c4:c3:4b:cd:66:10:e8:05:5a:96:d5:d9:21:e2:2e:c8:f1: 33:ec:bc:65:5b:b2:ed:e3:2f:17:bc:47:14:d4:a2:48:84:b7: c7:ce:9b:6a -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt266GjKS1gTCj4TqGTw8MNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhNTE4N2NiZjczOGMwZTlkN2EzZWQ5YmZjYjJjNGE2Nzcy MjY0ODMwHhcNMjYwMTAxMDAxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMTA1MjA5NzRkMDQ2NDU4YWQyYzllYThjYWNjOWQyZDZjZDJhNDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cdB1OYJs8VjcJq9QvL+iQL8vy+s H76xnHAMoIUYDDgTSk8dZZhNPakPthqW5AZ3PZBxLLe65g97+bt+EExd+6zh5bQc m4n0hPKpOLIC1xm/IjZcJD5HWTAwDGJIGYPwPdsvb0kPa8XIJIuc3CB///Gpxf/t W72dFkhwe9aPASCDJqt4p43rPtbjsy7dcv1CEfXpF22ZhHxrZFe+Ot22ObjeujtF tSHOZctUd064wnEqaSueoVEGKwBObinOQKCpZ8XO462/kLrViZyBS0ekyp9u/LR4 g8aM989NE2BkFZ+wf1Kg4nZro6GPHE1DW6cPl0y+g+ExdFPvWCuTqLGurwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFBEFIJdNBGRYrSyeqMrMnS1s0qQyMB8GA1UdIwQY MBaAFOpRh8v3OMDp16Ptm/yyxKZ3ImSDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmxHSHlfYzR3T25Yby0yYl9MTEVwbmNpWklNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8wNWYyMzgtYmI2Mi00NTVkLTk5MjEt M2EyNzIyNTA3ZWU1LzEvRVFVZ2wwMEVaRml0TEo2b3lzeWRMV3pTcERJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8wNWYyMzgtYmI2Mi00NTVkLTk5MjEtM2EyNzIyNTA3ZWU1 LzEvNmxHSHlfYzR3T25Yby0yYl9MTEVwbmNpWklNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAIAEGeAfg AwcAIAEGfCxAMA0GCSqGSIb3DQEBCwUAA4IBAQAobhffPUTWZXauFcC5e120yhiO jBI5+nsAUG8JkNMKSIm3zVuTUKaGsjNksOqhI36AgNqdV91pQClDFW9JTFYXh08a CX1uzaQO0nRCjehwdhuDeftBMrtIpaB2hAryP8DuQSuIcgx+1rixTotqwUJXfqtz A1eNkfLCIDC/+3RcXEn6E39Jasb3p51FrAf8SyW7uHmX/K6SvJSZ7J1L7NJ+jKKF pJI991SN2OoCt+Bz8xUQEgu6cW/iAmfNkqJQ8xNZowCcCmIhljzhV35nqCkV+qS+ M1eqh3N5xMNLzWYQ6AValtXZIeIuyPEz7LxlW7Lt4y8XvEcU1KJIhLfHzptq -----END CERTIFICATE-----Generated at Sun Jan 25 17:47:33 2026 by rpki-client