This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/EA1kZUuCbIYx39rp7mxpFmQOmAY.roa File: EA1kZUuCbIYx39rp7mxpFmQOmAY.roa (raw, json) Hash identifier: Sd328B/ygLhD6KVHyMuZZnuhtap4Yhzr8PbZgu4JU4Q= Subject key identifier: 10:0D:64:65:4B:82:6C:86:31:DF:DA:E9:EE:6C:69:16:64:0E:98:06 Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21 Certificate serial: 019B7F1506DC600BCB33D0417C172D9A2CCE Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/EA1kZUuCbIYx39rp7mxpFmQOmAY.roa Signing time: Fri 02 Jan 2026 14:20:43 +0000 ROA not before: Fri 02 Jan 2026 14:20:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208161 IP address blocks: 81.12.52.0/23 maxlen: 24 87.107.10.0/23 maxlen: 24 87.107.12.0/24 maxlen: 24 87.107.13.0/24 maxlen: 24 87.107.54.0/23 maxlen: 24 87.107.104.0/23 maxlen: 24 87.107.146.0/23 maxlen: 24 87.107.154.0/24 maxlen: 24 87.107.155.0/24 maxlen: 24 87.107.164.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:06:dc:60:0b:cb:33:d0:41:7c:17:2d:9a:2c:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21 Validity Not Before: Jan 2 14:20:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=100d64654b826c8631dfdae9ee6c6916640e9806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:14:dd:2e:45:2d:5d:a1:76:7d:20:d1:46:09: fa:30:31:10:72:16:f4:21:9e:bf:2c:17:55:9c:ef: 0f:3c:2c:8f:34:17:8a:29:76:48:a2:73:66:ec:0b: ad:6b:7e:fb:41:39:84:b4:14:15:bc:df:66:1e:79: 62:1c:37:b9:2b:ba:d8:56:f9:50:80:b3:02:e3:d3: 21:26:2e:49:45:cf:b9:fd:ff:08:48:87:d9:99:a4: 67:6a:3a:ae:a9:b4:31:64:fe:f5:21:e0:ea:e3:f2: 3f:5f:97:5f:f1:42:ff:11:73:80:f4:fd:14:65:c9: 2d:3d:bc:2b:a4:c9:e4:83:3d:9b:3f:19:76:17:c7: 8a:e4:01:1e:5f:5b:dc:94:0f:61:d0:f1:ce:93:94: 5f:a4:a8:28:ae:a3:c8:5d:1f:18:12:a2:9f:dc:ed: b7:e1:c8:fb:05:0c:93:fe:42:65:fd:10:37:2f:df: 0e:e3:0a:57:c2:3c:b1:09:63:1c:7e:f9:a8:b5:a1: 81:d0:a0:2b:84:4c:66:3b:b5:c2:5f:0a:aa:a4:68: b4:7c:d2:43:c7:aa:3e:e7:6e:22:44:b0:b8:17:ed: da:10:e1:8f:e1:d6:b7:f1:7f:d2:e8:7e:de:91:f7: 81:07:40:9b:37:05:e4:dd:84:6b:a4:98:04:71:06: 7d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:0D:64:65:4B:82:6C:86:31:DF:DA:E9:EE:6C:69:16:64:0E:98:06 X509v3 Authority Key Identifier: keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/EA1kZUuCbIYx39rp7mxpFmQOmAY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.12.52.0/23 87.107.10.0-87.107.13.255 87.107.54.0/23 87.107.104.0/23 87.107.146.0/23 87.107.154.0/23 87.107.164.0/23 Signature Algorithm: sha256WithRSAEncryption c1:74:5f:bd:84:16:3e:ef:3d:ba:9a:01:c7:82:35:f7:97:23: 54:8d:96:bc:1c:64:6e:4d:f6:62:64:cf:bd:a6:c3:8d:8e:6d: 67:c0:cf:9f:39:30:15:fb:e4:7b:e6:b2:5f:67:93:f4:11:91: c3:d5:bf:e7:75:de:b5:d2:82:75:c4:4f:a8:d8:22:8b:3a:df: 91:ce:80:c9:cd:56:84:4c:cf:66:23:2e:f1:db:f0:a7:55:c1: 72:3b:6a:e4:a2:05:0f:44:39:30:b6:9a:5a:bf:8b:d6:36:5b: b8:8a:a1:24:bd:45:4a:5a:8e:47:b6:c1:cb:bc:41:e8:08:cd: 0e:66:30:c6:69:23:ce:40:6c:48:b5:21:b2:ad:ae:65:0d:83: f4:39:5c:9a:1e:d7:07:6b:41:a4:cf:72:f3:20:07:ca:60:01: e7:1b:07:12:c1:6e:2b:c0:bf:43:f3:e4:c7:12:20:e9:2b:63: 62:f6:f8:41:46:0e:eb:ac:b5:e6:f9:cc:ba:d2:1d:33:8f:de: ea:ea:33:ff:5d:03:80:d4:b7:26:a4:ed:2f:32:38:6e:1c:6f: 4c:9f:32:2c:57:5e:e4:a7:1e:52:47:d9:0d:7e:a4:b5:18:a8: ff:5b:86:c3:a5:b3:4d:f9:78:40:aa:59:cd:cb:2f:55:64:5b: ea:fe:da:b9 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgISAZt/FQbcYAvLM9BBfBctmizOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwNzc1ZDk0NzFiODVkOTYzZmVmNmQyODM1OTBlMmQ5NDJk ZDVjMjEwHhcNMjYwMTAyMTQyMDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDBkNjQ2NTRiODI2Yzg2MzFkZmRhZTllZTZjNjkxNjY0MGU5ODA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhTdLkUtXaF2fSDRRgn6MDEQchb0 IZ6/LBdVnO8PPCyPNBeKKXZIonNm7Auta377QTmEtBQVvN9mHnliHDe5K7rYVvlQ gLMC49MhJi5JRc+5/f8ISIfZmaRnajquqbQxZP71IeDq4/I/X5df8UL/EXOA9P0U ZcktPbwrpMnkgz2bPxl2F8eK5AEeX1vclA9h0PHOk5RfpKgorqPIXR8YEqKf3O23 4cj7BQyT/kJl/RA3L98O4wpXwjyxCWMcfvmotaGB0KArhExmO7XCXwqqpGi0fNJD x6o+524iRLC4F+3aEOGP4da38X/S6H7ekfeBB0CbNwXk3YRrpJgEcQZ92QIDAQAB o4ICNTCCAjEwHQYDVR0OBBYEFBANZGVLgmyGMd/a6e5saRZkDpgGMB8GA1UdIwQY MBaAFAB3XZRxuF2WP+9tKDWQ4tlC3VwhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQt NzZiMzNlNGNlODIxLzEvRUExa1pVdUNiSVl4MzlycDdteHBGbVFPbUFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQtNzZiMzNlNGNlODIx LzEvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQBUQw0MAwD BAFXawoDBAFXawwDBAFXazYDBAFXa2gDBAFXa5IDBAFXa5oDBAFXa6QwDQYJKoZI hvcNAQELBQADggEBAMF0X72EFj7vPbqaAceCNfeXI1SNlrwcZG5N9mJkz72mw42O bWfAz585MBX75Hvmsl9nk/QRkcPVv+d13rXSgnXET6jYIos635HOgMnNVoRMz2Yj LvHb8KdVwXI7auSiBQ9EOTC2mlq/i9Y2W7iKoSS9RUpajke2wcu8QegIzQ5mMMZp I85AbEi1IbKtrmUNg/Q5XJoe1wdrQaTPcvMgB8pgAecbBxLBbivAv0Pz5McSIOkr Y2L2+EFGDuusteb5zLrSHTOP3urqM/9dA4DUtyak7S8yOG4cb0yfMixXXuSnHlJH 2Q1+pLUYqP9bhsOls035eECqWc3LL1VkW+r+2rk= -----END CERTIFICATE-----Generated at Sun Jan 25 18:06:04 2026 by rpki-client