This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/EQqG5pO47lNfEEMJMQXnfFhHy0g.roa File: EQqG5pO47lNfEEMJMQXnfFhHy0g.roa (raw, json) Hash identifier: oqfH/2bzTNUQ0aWLtfdu9eQeVvBb2v0lxrHYYZEWqOM= Subject key identifier: 11:0A:86:E6:93:B8:EE:53:5F:10:43:09:31:05:E7:7C:58:47:CB:48 Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c Certificate serial: 019B7B360FA5A201974955D8C31197E6FA87 Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/EQqG5pO47lNfEEMJMQXnfFhHy0g.roa Signing time: Thu 01 Jan 2026 20:18:19 +0000 ROA not before: Thu 01 Jan 2026 20:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57746 IP address blocks: 176.223.96.0/22 maxlen: 22 176.223.96.0/23 maxlen: 23 176.223.98.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:0f:a5:a2:01:97:49:55:d8:c3:11:97:e6:fa:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c Validity Not Before: Jan 1 20:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=110a86e693b8ee535f1043093105e77c5847cb48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:35:a9:c1:6a:91:d3:4d:b6:9f:12:f6:ed:7f: 0f:dc:78:c2:81:c0:9a:f1:e8:c1:04:1d:54:6b:3e: 65:0f:6b:6f:36:b6:93:40:2a:5d:47:e8:23:4d:2c: f1:46:e8:07:57:a9:a6:51:32:6b:91:17:f6:5b:81: 41:d0:7a:5e:6e:f9:6a:39:24:3d:f9:84:ab:8a:3a: 46:3f:7c:d5:90:19:d5:89:f0:28:53:3b:3b:90:91: 14:88:e2:75:b9:66:6c:7c:64:28:af:17:9a:5b:6d: ea:72:0e:b8:c6:7e:79:5b:76:86:d5:73:67:ae:06: 2a:0d:1f:88:af:95:54:93:51:cc:ff:17:95:81:bd: 7c:58:b5:ad:db:13:ed:0c:c2:04:a6:82:22:4f:0d: 8e:ac:45:19:91:b2:f2:11:8c:22:65:eb:27:f0:7f: f3:5a:9a:8e:f9:de:2b:61:04:f5:43:1a:bf:16:e9: aa:27:55:9e:d8:cf:5c:87:8c:67:ec:f5:47:e8:33: 76:e4:df:94:38:74:5a:40:7a:2d:74:f9:87:bf:fe: 4e:c2:f3:ea:5e:fd:d1:e8:a6:0d:9c:b5:dd:39:f6: aa:bd:92:10:1c:b9:c6:bb:13:42:1c:01:31:68:99: 3a:da:f1:53:15:14:f9:8c:cd:d6:7a:cf:87:bd:95: c5:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:0A:86:E6:93:B8:EE:53:5F:10:43:09:31:05:E7:7C:58:47:CB:48 X509v3 Authority Key Identifier: keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/EQqG5pO47lNfEEMJMQXnfFhHy0g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.223.96.0/22 Signature Algorithm: sha256WithRSAEncryption 84:25:c8:70:7b:a3:ae:a9:e3:70:7b:b4:48:37:c8:c8:b4:78: a4:14:0f:6b:d3:28:7e:73:5d:72:bc:8b:91:26:c5:0f:ff:fb: fd:75:44:fe:82:0d:a0:43:3b:15:49:60:15:15:6a:b9:5c:b1: aa:2e:b1:d2:4f:a5:51:83:4c:3b:d8:d5:19:15:0d:92:4d:4f: 9c:ba:35:b0:36:e8:26:7e:c8:09:32:d6:ac:7c:16:b1:3e:d2: b5:21:55:28:07:6f:e8:75:3c:51:47:14:6f:df:45:32:dd:17: 1b:ea:0f:10:18:ce:66:5c:03:2d:46:b0:d1:81:88:f4:81:fb: 1b:84:3f:c3:fb:43:47:7d:85:34:69:f0:d5:df:5a:b1:87:68: d0:03:56:09:9a:ff:90:eb:22:3a:88:43:bd:48:2a:1d:4a:76: 15:5e:ba:87:6d:31:1c:b4:e8:28:87:9f:84:d5:fc:44:04:d9: f1:95:b9:5a:4f:1f:25:f9:88:22:d9:9d:db:3b:9b:e1:83:b6: 34:fb:9d:2a:56:0b:46:94:b3:1f:84:35:9f:cd:0f:d8:26:b2: e3:b9:85:3a:40:8e:69:2a:a7:88:df:48:84:32:19:e7:38:c3: 45:0d:a0:18:b5:5b:d5:3f:83:24:71:7b:ea:9b:4e:fe:47:f1: 7a:7b:b3:83 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Ng+logGXSVXYwxGX5vqHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZjEzMmRmMTNlNGJlNTNkODI1MGM4YzQ4NDIwMjY0ZWVm NmMxNGMwHhcNMjYwMTAxMjAxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMTBhODZlNjkzYjhlZTUzNWYxMDQzMDkzMTA1ZTc3YzU4NDdjYjQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DWpwWqR0022nxL27X8P3HjCgcCa 8ejBBB1Uaz5lD2tvNraTQCpdR+gjTSzxRugHV6mmUTJrkRf2W4FB0HpebvlqOSQ9 +YSrijpGP3zVkBnVifAoUzs7kJEUiOJ1uWZsfGQorxeaW23qcg64xn55W3aG1XNn rgYqDR+Ir5VUk1HM/xeVgb18WLWt2xPtDMIEpoIiTw2OrEUZkbLyEYwiZesn8H/z WpqO+d4rYQT1Qxq/FumqJ1We2M9ch4xn7PVH6DN25N+UOHRaQHotdPmHv/5OwvPq Xv3R6KYNnLXdOfaqvZIQHLnGuxNCHAExaJk62vFTFRT5jM3Wes+HvZXFlQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBEKhuaTuO5TXxBDCTEF53xYR8tIMB8GA1UdIwQY MBaAFH3xMt8T5L5T2CUMjEhCAmTu9sFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmZFeTN4UGt2bFBZSlF5TVNFSUNaTzcyd1V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9jMzc0OTctNjM3Ni00NjFlLTkzYzYt OTc3ODY3NGVkYzk3LzEvRVFxRzVwTzQ3bE5mRUVNSk1RWG5mRmhIeTBnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9jMzc0OTctNjM3Ni00NjFlLTkzYzYtOTc3ODY3NGVkYzk3 LzEvZmZFeTN4UGt2bFBZSlF5TVNFSUNaTzcyd1V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCsN9gMA0G CSqGSIb3DQEBCwUAA4IBAQCEJchwe6OuqeNwe7RIN8jItHikFA9r0yh+c11yvIuR JsUP//v9dUT+gg2gQzsVSWAVFWq5XLGqLrHST6VRg0w72NUZFQ2STU+cujWwNugm fsgJMtasfBaxPtK1IVUoB2/odTxRRxRv30Uy3Rcb6g8QGM5mXAMtRrDRgYj0gfsb hD/D+0NHfYU0afDV31qxh2jQA1YJmv+Q6yI6iEO9SCodSnYVXrqHbTEctOgoh5+E 1fxEBNnxlblaTx8l+Ygi2Z3bO5vhg7Y0+50qVgtGlLMfhDWfzQ/YJrLjuYU6QI5p KqeI30iEMhnnOMNFDaAYtVvVP4MkcXvqm07+R/F6e7OD -----END CERTIFICATE-----Generated at Sun Jan 25 21:24:37 2026 by rpki-client