This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/eu0CoO4MQ8ynKFtapNpQqOzhd5U.roa File: eu0CoO4MQ8ynKFtapNpQqOzhd5U.roa (raw, json) Hash identifier: CE6Pwn13O7Jm2klRaAsz6obokQcz3Q5vJ5OCjk+3oLA= Subject key identifier: 7A:ED:02:A0:EE:0C:43:CC:A7:28:5B:5A:A4:DA:50:A8:EC:E1:77:95 Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065 Certificate serial: 019B79101AD3361697E325CBECE66CFD4AE0 Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/eu0CoO4MQ8ynKFtapNpQqOzhd5U.roa Signing time: Thu 01 Jan 2026 10:17:37 +0000 ROA not before: Thu 01 Jan 2026 10:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206065 IP address blocks: 37.32.36.0/22 maxlen: 24 45.140.228.0/22 maxlen: 22 45.156.180.0/22 maxlen: 22 45.156.192.0/22 maxlen: 22 45.156.194.0/23 maxlen: 24 85.198.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:1a:d3:36:16:97:e3:25:cb:ec:e6:6c:fd:4a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065 Validity Not Before: Jan 1 10:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7aed02a0ee0c43cca7285b5aa4da50a8ece17795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fc:8d:1d:d3:bc:da:f8:17:9d:e2:cb:92:25: eb:59:f8:a6:ad:d3:e6:fb:26:a2:38:ef:df:00:49: dd:95:71:c9:cf:a2:ea:87:3a:08:d6:b2:7d:82:19: e7:42:aa:c7:3e:d3:65:ce:a3:f3:8d:51:a0:8d:fa: 26:63:d0:a6:f7:ef:69:cc:fb:f9:56:a3:18:b4:cf: 9e:aa:ed:c2:9a:ee:df:50:9e:d1:20:60:3f:a2:69: 65:04:6a:77:36:e3:30:19:a3:38:45:51:92:17:fb: b8:67:e9:fb:7e:3b:fe:c5:02:cd:78:fe:5f:d1:b9: 9b:95:cf:25:ee:c7:c4:27:94:1e:a4:4c:3a:ef:3e: a0:07:ce:51:b0:6b:aa:31:35:3a:2f:20:1a:af:31: 34:39:45:bf:b2:57:51:cd:7d:0a:6b:94:05:f5:6e: bd:ff:48:a1:da:8a:66:a7:15:c3:a1:a6:0c:b5:3e: 22:a8:1c:f0:e2:2b:76:65:51:0a:72:cd:a1:5f:c0: cf:77:d7:8e:7f:1a:92:b8:00:bf:5d:73:a7:d2:20: 72:93:6d:8e:67:d1:37:eb:87:b6:77:69:b1:33:d8: 9a:c1:37:21:1a:56:45:45:ff:c7:d7:6d:df:02:6d: 48:d4:32:77:d0:a9:bc:f0:07:e2:ca:fb:a3:a0:51: 93:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:ED:02:A0:EE:0C:43:CC:A7:28:5B:5A:A4:DA:50:A8:EC:E1:77:95 X509v3 Authority Key Identifier: keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/eu0CoO4MQ8ynKFtapNpQqOzhd5U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.32.36.0/22 45.140.228.0/22 45.156.180.0/22 45.156.192.0/22 85.198.48.0/20 Signature Algorithm: sha256WithRSAEncryption 2c:27:d6:a5:f9:45:9c:c9:98:ee:ed:07:65:ff:77:dc:8c:87: ac:aa:19:32:a5:45:f2:37:cb:e5:f9:cd:71:9a:8f:9c:24:76: 75:fd:23:2b:b6:81:78:03:d0:30:e1:18:a6:90:c0:5c:b1:4b: 64:5a:7e:84:b5:b0:9f:af:2c:0f:c8:a5:f4:21:9b:90:64:ac: 1a:51:59:ef:de:f5:6d:61:c7:e2:32:d0:fd:d7:f9:dd:27:8c: 8a:5b:6d:80:68:a9:68:f7:af:ac:ad:44:75:26:36:1b:69:e8: 24:d0:d8:a5:37:26:60:c8:89:8e:92:23:7c:ca:0e:ad:16:b6: 1f:b0:31:dc:58:cd:d3:36:37:c2:bb:ed:3a:39:8f:65:b6:74: 32:a1:30:ea:2a:3b:cf:d1:cd:9d:ed:b8:7d:05:3d:e4:67:b1: 04:62:25:bd:13:5a:73:67:0a:1b:9e:a4:fd:85:46:ba:40:b9: c0:28:1c:00:f3:18:66:cd:dc:14:67:1c:6e:84:d0:d7:f1:c7: 73:40:57:42:c7:45:33:d7:ea:c2:08:6c:c0:7f:f5:75:2c:b3: 4f:b6:8e:86:26:ac:dd:56:3d:9b:0f:38:31:3a:7f:e6:91:48: 35:ae:fd:20:51:d2:53:ba:22:14:ad:07:06:f4:f0:1b:48:3c: ab:2c:e3:4f -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt5EBrTNhaX4yXL7OZs/UrgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MWI3YTIyZTUxY2ZiOWNmODQyMDVlNDQ0OTk5OGFkNTVk OGYwNjUwHhcNMjYwMTAxMTAxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YWVkMDJhMGVlMGM0M2NjYTcyODViNWFhNGRhNTBhOGVjZTE3Nzk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufyNHdO82vgXneLLkiXrWfimrdPm +yaiOO/fAEndlXHJz6LqhzoI1rJ9ghnnQqrHPtNlzqPzjVGgjfomY9Cm9+9pzPv5 VqMYtM+equ3Cmu7fUJ7RIGA/omllBGp3NuMwGaM4RVGSF/u4Z+n7fjv+xQLNeP5f 0bmblc8l7sfEJ5QepEw67z6gB85RsGuqMTU6LyAarzE0OUW/sldRzX0Ka5QF9W69 /0ih2opmpxXDoaYMtT4iqBzw4it2ZVEKcs2hX8DPd9eOfxqSuAC/XXOn0iByk22O Z9E364e2d2mxM9iawTchGlZFRf/H123fAm1I1DJ30Km88AfiyvujoFGTOQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFHrtAqDuDEPMpyhbWqTaUKjs4XeVMB8GA1UdIwQY MBaAFAgbeiLlHPuc+EIF5ESZmK1V2PBlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYt MDM2NzI2OGZmODcxLzEvZXUwQ29PNE1ROHluS0Z0YXBOcFFxT3poZDVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYtMDM2NzI2OGZmODcx LzEvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCJSAkAwQC LYzkAwQCLZy0AwQCLZzAAwQEVcYwMA0GCSqGSIb3DQEBCwUAA4IBAQAsJ9al+UWc yZju7Qdl/3fcjIesqhkypUXyN8vl+c1xmo+cJHZ1/SMrtoF4A9Aw4RimkMBcsUtk Wn6EtbCfrywPyKX0IZuQZKwaUVnv3vVtYcfiMtD91/ndJ4yKW22AaKlo96+srUR1 JjYbaegk0NilNyZgyImOkiN8yg6tFrYfsDHcWM3TNjfCu+06OY9ltnQyoTDqKjvP 0c2d7bh9BT3kZ7EEYiW9E1pzZwobnqT9hUa6QLnAKBwA8xhmzdwUZxxuhNDX8cdz QFdCx0Uz1+rCCGzAf/V1LLNPto6GJqzdVj2bDzgxOn/mkUg1rv0gUdJTuiIUrQcG 9PAbSDyrLONP -----END CERTIFICATE-----Generated at Sun Jan 25 21:05:01 2026 by rpki-client