This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/eToy7Dy86gp6pNPMymfDqa4MdTI.roa File: eToy7Dy86gp6pNPMymfDqa4MdTI.roa (raw, json) Hash identifier: dTIlaV1AqccCy+1JNiT8jHC2RbOVH0ledpyPTc9PFZo= Subject key identifier: 79:3A:32:EC:3C:BC:EA:0A:7A:A4:D3:CC:CA:67:C3:A9:AE:0C:75:32 Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3 Certificate serial: 019B77C67A6CA3FCDA1E86D1D5637A03E300 Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/eToy7Dy86gp6pNPMymfDqa4MdTI.roa Signing time: Thu 01 Jan 2026 04:17:34 +0000 ROA not before: Thu 01 Jan 2026 04:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204448 IP address blocks: 80.95.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:7a:6c:a3:fc:da:1e:86:d1:d5:63:7a:03:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3 Validity Not Before: Jan 1 04:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=793a32ec3cbcea0a7aa4d3ccca67c3a9ae0c7532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:86:f9:21:6d:34:2a:44:1d:68:92:11:a0:9f: 15:b4:aa:dc:7b:35:f2:22:4d:f0:05:11:1d:30:8a: 03:72:aa:d0:7f:2b:f9:f4:51:c3:4a:40:16:e4:64: 53:ab:32:af:43:c8:78:75:4a:6b:1c:4b:61:c9:d8: dc:03:88:5b:7c:80:46:0a:c8:41:07:18:55:d0:e2: 0a:5e:83:60:d4:4d:a2:1e:a7:c2:39:99:1a:54:66: 89:d1:54:01:e3:e9:a8:af:37:78:c1:73:1e:75:88: f7:63:7e:3f:42:80:d9:17:0d:8f:77:d3:45:3f:1c: 2e:59:0e:df:1a:fb:49:d8:5d:04:03:b2:a4:f8:28: b3:9c:f4:3f:6d:fc:fc:18:83:5d:fc:eb:a0:66:9f: f7:86:31:1d:25:26:69:ad:5f:21:69:c3:8d:6b:55: 03:6a:03:08:40:cb:43:35:9c:6f:8d:83:ca:fa:a8: 25:5a:5a:70:cd:9c:18:33:aa:8a:66:c1:c3:ac:19: 52:2a:9b:c7:45:20:95:3d:22:cd:85:c4:70:97:f4: 0e:7d:90:2b:51:29:dd:61:e6:02:05:2e:1e:42:89: 81:1b:82:11:cf:81:c6:0a:f6:41:55:39:71:48:ed: c3:4e:83:76:f4:20:be:38:41:95:e4:90:c5:09:0b: a8:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:3A:32:EC:3C:BC:EA:0A:7A:A4:D3:CC:CA:67:C3:A9:AE:0C:75:32 X509v3 Authority Key Identifier: keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/eToy7Dy86gp6pNPMymfDqa4MdTI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.95.23.0/24 Signature Algorithm: sha256WithRSAEncryption 29:8c:d7:0f:2e:11:3c:82:33:08:1f:e7:03:38:c4:87:07:49: 10:dd:9b:83:1a:64:39:9b:2d:2b:82:c6:d9:8f:e0:f8:13:b2: 8e:6a:64:43:ba:1c:0c:52:fa:21:59:1a:e4:30:a4:5a:df:cf: 2f:3b:68:41:d3:64:26:5f:17:4f:33:1d:e2:3d:0b:d8:58:30: f1:a7:b1:34:0e:a1:df:ee:2b:a0:fe:b6:65:8a:20:d6:e2:09: 22:a6:b8:c1:8e:30:f9:3c:15:bf:a3:dd:4e:c0:03:d1:4a:53: 92:92:c5:41:c4:4a:9b:de:e3:5a:5a:68:23:94:dc:30:3a:ab: cc:90:14:59:c7:b2:75:82:98:48:83:a2:ff:bd:f1:2d:91:ce: 66:20:10:80:2f:45:a6:e7:b9:e8:26:fc:44:1a:ba:56:08:27: aa:15:19:df:3e:1f:c7:c9:16:40:6e:c7:bf:71:af:98:f1:19: 92:4b:74:54:64:71:a4:00:e1:ab:13:44:2e:63:df:64:10:16: f3:f7:6e:20:ef:42:49:be:ea:23:d8:a1:63:a5:8a:b9:51:45: a1:68:69:21:54:2f:97:85:70:8d:5a:b9:b3:72:d1:28:87:99: 6d:4b:4e:f8:b7:4c:48:58:77:e8:96:7a:40:d3:5f:d4:3d:56: 46:63:56:5e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xnpso/zaHobR1WN6A+MAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViZWM5MDMwYzcwYTNkNDE5MmQ1OWMyOGRjYzhkNTQ3Njk0 MzQwYjMwHhcNMjYwMTAxMDQxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OTNhMzJlYzNjYmNlYTBhN2FhNGQzY2NjYTY3YzNhOWFlMGM3NTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4b5IW00KkQdaJIRoJ8VtKrcezXy Ik3wBREdMIoDcqrQfyv59FHDSkAW5GRTqzKvQ8h4dUprHEthydjcA4hbfIBGCshB BxhV0OIKXoNg1E2iHqfCOZkaVGaJ0VQB4+morzd4wXMedYj3Y34/QoDZFw2Pd9NF PxwuWQ7fGvtJ2F0EA7Kk+CiznPQ/bfz8GINd/OugZp/3hjEdJSZprV8hacONa1UD agMIQMtDNZxvjYPK+qglWlpwzZwYM6qKZsHDrBlSKpvHRSCVPSLNhcRwl/QOfZAr USndYeYCBS4eQomBG4IRz4HGCvZBVTlxSO3DToN29CC+OEGV5JDFCQuouQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHk6Muw8vOoKeqTTzMpnw6muDHUyMB8GA1UdIwQY MBaAFOvskDDHCj1BktWcKNzI1UdpQ0CzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8zNzJiODctOTVmNC00Yzk4LWE2ZjQt NGE2Zjg2ODMyNjVjLzEvZVRveTdEeTg2Z3A2cE5QTXltZkRxYTRNZFRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8zNzJiODctOTVmNC00Yzk4LWE2ZjQtNGE2Zjg2ODMyNjVj LzEvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUF8XMA0G CSqGSIb3DQEBCwUAA4IBAQApjNcPLhE8gjMIH+cDOMSHB0kQ3ZuDGmQ5my0rgsbZ j+D4E7KOamRDuhwMUvohWRrkMKRa388vO2hB02QmXxdPMx3iPQvYWDDxp7E0DqHf 7iug/rZliiDW4gkiprjBjjD5PBW/o91OwAPRSlOSksVBxEqb3uNaWmgjlNwwOqvM kBRZx7J1gphIg6L/vfEtkc5mIBCAL0Wm57noJvxEGrpWCCeqFRnfPh/HyRZAbse/ ca+Y8RmSS3RUZHGkAOGrE0QuY99kEBbz924g70JJvuoj2KFjpYq5UUWhaGkhVC+X hXCNWrmzctEoh5ltS074t0xIWHfolnpA01/UPVZGY1Ze -----END CERTIFICATE-----Generated at Sun Jan 25 12:18:02 2026 by rpki-client