This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/EzLM6o264fzi2aUeuo8X1-IxasQ.roa File: EzLM6o264fzi2aUeuo8X1-IxasQ.roa (raw, json) Hash identifier: egEkzBQdw69GxTodEUiKdxFXNinDxPmtmsSk0Laf0Kg= Subject key identifier: 13:32:CC:EA:8D:BA:E1:FC:E2:D9:A5:1E:BA:8F:17:D7:E2:31:6A:C4 Certificate issuer: /CN=78decead419807747c92ace69448113ff0928b85 Certificate serial: 019B7C1183ADA6269E3F3952D25C28757FCC Authority key identifier: 78:DE:CE:AD:41:98:07:74:7C:92:AC:E6:94:48:11:3F:F0:92:8B:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eN7OrUGYB3R8kqzmlEgRP_CSi4U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/EzLM6o264fzi2aUeuo8X1-IxasQ.roa Signing time: Fri 02 Jan 2026 00:18:01 +0000 ROA not before: Fri 02 Jan 2026 00:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197566 IP address blocks: 91.224.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/eN7OrUGYB3R8kqzmlEgRP_CSi4U.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/eN7OrUGYB3R8kqzmlEgRP_CSi4U.mft rsync://rpki.ripe.net/repository/DEFAULT/eN7OrUGYB3R8kqzmlEgRP_CSi4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:83:ad:a6:26:9e:3f:39:52:d2:5c:28:75:7f:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78decead419807747c92ace69448113ff0928b85 Validity Not Before: Jan 2 00:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1332ccea8dbae1fce2d9a51eba8f17d7e2316ac4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:98:8b:ef:d6:96:8e:e7:11:e3:71:42:63:f2: cd:0a:3f:a3:34:5c:ca:9d:d3:a8:34:d5:63:2b:59: 09:e9:7c:ef:87:3b:85:53:db:29:08:71:da:a7:a9: c0:87:00:7f:7c:cd:dd:a9:04:b9:2c:40:88:52:37: 09:3d:ac:e0:27:f3:8b:f2:98:d3:fb:6c:b3:37:51: 28:02:db:23:00:55:71:5d:f9:f2:7f:9a:5d:40:f2: 79:8b:45:b2:71:55:20:55:b1:e9:55:be:a5:48:d3: 7e:10:b0:0f:ff:7a:3b:56:08:8d:53:61:d2:c6:5c: b0:18:81:07:56:50:b2:cf:a7:35:af:78:a9:12:83: 10:c9:cb:c8:55:2d:b8:90:fe:c4:cf:68:e4:2c:e4: 11:aa:33:a5:6d:f1:7a:8e:90:1b:38:b2:66:a8:ce: 78:47:dc:71:d3:78:1d:c1:9f:97:b2:16:92:02:40: f7:24:d5:c0:2c:ce:3b:16:3b:7b:be:03:c7:48:a9: 11:dc:fd:55:68:99:8a:25:ee:be:35:8d:ca:6e:d1: 59:ec:97:93:1a:06:c3:00:92:c3:a2:7d:7d:c3:f8: 49:d7:0e:c2:23:88:26:9c:42:86:36:29:1d:70:89: b4:8f:0d:4d:87:d4:bd:bb:da:c2:5c:2b:48:2b:f5: 09:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:32:CC:EA:8D:BA:E1:FC:E2:D9:A5:1E:BA:8F:17:D7:E2:31:6A:C4 X509v3 Authority Key Identifier: keyid:78:DE:CE:AD:41:98:07:74:7C:92:AC:E6:94:48:11:3F:F0:92:8B:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eN7OrUGYB3R8kqzmlEgRP_CSi4U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/EzLM6o264fzi2aUeuo8X1-IxasQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/eN7OrUGYB3R8kqzmlEgRP_CSi4U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.224.90.0/24 Signature Algorithm: sha256WithRSAEncryption 78:6d:39:85:26:92:6b:77:71:a6:31:62:52:22:60:83:00:84: 02:70:41:91:54:4e:44:44:a7:55:58:74:12:18:9f:32:34:69: 48:f3:59:a4:b1:26:ee:58:1a:4a:6c:2d:e2:10:cb:58:aa:07: 1c:5d:6a:02:3a:d1:15:dd:48:26:d9:34:53:4d:a0:67:7f:70: 1b:a5:f2:70:60:0a:47:48:4d:0c:c1:45:51:7d:30:01:3d:70: 95:d7:27:7f:0d:27:94:69:2c:d9:ac:5f:c5:3a:5d:30:94:b4: f0:87:09:88:43:4d:e7:80:d8:c9:50:9f:64:b9:a7:03:5e:54: 56:c6:50:87:73:9e:6d:5b:07:ea:b8:58:bb:58:73:cb:10:fd: b3:83:90:99:29:77:b4:2d:f9:4c:9f:52:d6:24:07:93:04:fb: 74:35:be:9e:de:33:38:49:74:c1:1c:5f:10:e9:25:d8:a5:3f: 30:99:16:a9:34:59:03:cb:3a:11:8f:b4:4c:be:e3:73:ec:b0: 54:25:50:56:50:fb:16:48:3d:71:58:0d:68:d6:db:56:66:31: be:87:45:af:08:ac:8a:7a:94:70:1d:d9:77:9f:e8:60:68:bd: ff:db:ca:db:e1:6d:c4:99:68:a7:cb:03:24:ed:e7:2e:d1:67: 13:3e:90:35 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EYOtpiaePzlS0lwodX/MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4ZGVjZWFkNDE5ODA3NzQ3YzkyYWNlNjk0NDgxMTNmZjA5 MjhiODUwHhcNMjYwMTAyMDAxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzMyY2NlYThkYmFlMWZjZTJkOWE1MWViYThmMTdkN2UyMzE2YWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5iL79aWjucR43FCY/LNCj+jNFzK ndOoNNVjK1kJ6XzvhzuFU9spCHHap6nAhwB/fM3dqQS5LECIUjcJPazgJ/OL8pjT +2yzN1EoAtsjAFVxXfnyf5pdQPJ5i0WycVUgVbHpVb6lSNN+ELAP/3o7VgiNU2HS xlywGIEHVlCyz6c1r3ipEoMQycvIVS24kP7Ez2jkLOQRqjOlbfF6jpAbOLJmqM54 R9xx03gdwZ+XshaSAkD3JNXALM47Fjt7vgPHSKkR3P1VaJmKJe6+NY3KbtFZ7JeT GgbDAJLDon19w/hJ1w7CI4gmnEKGNikdcIm0jw1Nh9S9u9rCXCtIK/UJDwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBMyzOqNuuH84tmlHrqPF9fiMWrEMB8GA1UdIwQY MBaAFHjezq1BmAd0fJKs5pRIET/wkouFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZU43T3JVR1lCM1I4a3F6bWxFZ1JQX0NTaTRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9jMWY3ZGEtY2YyZS00MTBhLThhOTYt NzUzNjFhYzIwZDVlLzEvRXpMTTZvMjY0ZnppMmFVZXVvOFgxLUl4YXNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9jMWY3ZGEtY2YyZS00MTBhLThhOTYtNzUzNjFhYzIwZDVl LzEvZU43T3JVR1lCM1I4a3F6bWxFZ1JQX0NTaTRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+BaMA0G CSqGSIb3DQEBCwUAA4IBAQB4bTmFJpJrd3GmMWJSImCDAIQCcEGRVE5ERKdVWHQS GJ8yNGlI81mksSbuWBpKbC3iEMtYqgccXWoCOtEV3Ugm2TRTTaBnf3AbpfJwYApH SE0MwUVRfTABPXCV1yd/DSeUaSzZrF/FOl0wlLTwhwmIQ03ngNjJUJ9kuacDXlRW xlCHc55tWwfquFi7WHPLEP2zg5CZKXe0LflMn1LWJAeTBPt0Nb6e3jM4SXTBHF8Q 6SXYpT8wmRapNFkDyzoRj7RMvuNz7LBUJVBWUPsWSD1xWA1o1ttWZjG+h0WvCKyK epRwHdl3n+hgaL3/28rb4W3EmWinywMk7ecu0WcTPpA1 -----END CERTIFICATE-----Generated at Mon Jan 26 02:44:08 2026 by rpki-client