This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/EO-GFIUPR48sAp5aBrNWYxfKBfk.roa File: EO-GFIUPR48sAp5aBrNWYxfKBfk.roa (raw, json) Hash identifier: N1OEbZhVg2nm300PS2ce6n2CYCYwixsCcw/0RwAla1s= Subject key identifier: 10:EF:86:14:85:0F:47:8F:2C:02:9E:5A:06:B3:56:63:17:CA:05:F9 Certificate issuer: /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24 Certificate serial: 019B7BA3DBF480EF0F2991F4211BE7725D8B Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/EO-GFIUPR48sAp5aBrNWYxfKBfk.roa Signing time: Thu 01 Jan 2026 22:18:14 +0000 ROA not before: Thu 01 Jan 2026 22:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203217 IP address blocks: 81.90.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:db:f4:80:ef:0f:29:91:f4:21:1b:e7:72:5d:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24 Validity Not Before: Jan 1 22:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=10ef8614850f478f2c029e5a06b3566317ca05f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8d:73:2a:1d:a9:0c:11:7b:72:77:82:26:ae: 2d:93:d0:2b:9a:57:f1:6a:3f:fc:02:54:2b:92:d8: d3:59:c2:e0:10:e8:6a:8f:40:ec:32:1e:eb:49:eb: be:be:c0:dd:60:f2:6d:3f:44:ad:bb:40:f2:5a:b6: c4:1a:78:49:c6:77:89:32:b8:5b:05:cf:9e:c8:b3: a0:43:47:78:fb:51:c8:ae:20:ec:a9:d5:90:50:e9: 67:58:4a:43:94:02:71:48:51:46:ec:e1:35:d2:59: cd:df:db:84:51:ce:be:58:43:2a:4d:d3:0f:e5:80: fe:e5:59:c4:8a:9a:8b:30:be:8d:28:00:dc:b6:9f: 58:e2:6a:d4:b7:0a:73:96:4b:44:a0:b5:7f:99:fe: be:64:12:8e:e9:24:ec:bc:8f:48:d7:f7:8e:bc:da: cf:ba:d1:c2:d2:74:50:5e:b0:c4:db:ee:f5:86:c6: 6e:4e:a5:f5:5e:ce:35:95:14:16:b1:b2:c8:0a:2a: ab:40:94:99:37:5c:f0:bf:fc:28:0c:2a:6b:01:57: 58:da:f7:b1:75:5d:16:89:b7:78:e4:69:a6:e5:16: 3b:fd:86:fa:21:70:61:75:a8:18:06:70:5d:7a:3b: 36:44:86:92:df:31:57:e7:6c:95:fb:eb:d3:4c:bb: 06:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:EF:86:14:85:0F:47:8F:2C:02:9E:5A:06:B3:56:63:17:CA:05:F9 X509v3 Authority Key Identifier: keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/EO-GFIUPR48sAp5aBrNWYxfKBfk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.90.17.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:79:94:c2:5b:b2:aa:72:0c:38:04:75:41:42:88:5b:34:20: 15:0f:52:68:13:e4:61:08:94:5d:76:e8:a6:79:01:34:a7:01: ea:2f:fb:95:a4:f8:b6:38:35:bc:ad:a5:da:f7:2a:b9:ba:72: 24:ec:63:62:6c:59:d6:43:15:f8:45:23:f3:f3:3c:ba:7d:80: 9b:54:d0:4e:d3:46:6b:d5:61:3f:3f:cb:b3:3a:10:81:0c:fd: 66:e7:03:73:0b:51:24:a9:ff:6e:ab:d0:d4:14:27:4d:d4:20: 35:70:3a:ae:78:38:71:44:76:cf:1a:a6:23:07:82:b3:e2:48: 7b:8a:02:bf:3d:4c:74:77:ad:cf:79:82:86:0b:23:05:07:c3: 3f:ae:6d:26:e1:64:7a:d6:0f:4f:ec:7e:c2:f5:1e:38:fe:61: 21:40:dc:6f:12:bf:87:c7:a9:d3:49:1e:83:99:1c:bc:12:bb: 19:e2:33:50:ae:0a:35:91:c1:ae:4d:34:4c:2d:7e:90:0d:de: 4b:1c:12:38:7a:a7:3b:9a:a0:f2:b0:b0:bc:ee:71:f5:32:af: 2a:76:19:b0:d1:92:b7:17:a4:2c:f5:33:2e:ad:42:c2:c5:db: b7:dd:a6:77:b7:0e:5b:f5:70:69:0c:04:27:42:9e:72:50:d9: 22:12:33:d1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o9v0gO8PKZH0IRvncl2LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5MjE2ZjVjMTY1YjgyN2E3ZmQ3M2Q4MTA3YWViZDJmNjNj NjNlMjQwHhcNMjYwMTAxMjIxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMGVmODYxNDg1MGY0NzhmMmMwMjllNWEwNmIzNTY2MzE3Y2EwNWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvI1zKh2pDBF7cneCJq4tk9Armlfx aj/8AlQrktjTWcLgEOhqj0DsMh7rSeu+vsDdYPJtP0Stu0DyWrbEGnhJxneJMrhb Bc+eyLOgQ0d4+1HIriDsqdWQUOlnWEpDlAJxSFFG7OE10lnN39uEUc6+WEMqTdMP 5YD+5VnEipqLML6NKADctp9Y4mrUtwpzlktEoLV/mf6+ZBKO6STsvI9I1/eOvNrP utHC0nRQXrDE2+71hsZuTqX1Xs41lRQWsbLICiqrQJSZN1zwv/woDCprAVdY2vex dV0Wibd45Gmm5RY7/Yb6IXBhdagYBnBdejs2RIaS3zFX52yV++vTTLsGdwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBDvhhSFD0ePLAKeWgazVmMXygX5MB8GA1UdIwQY MBaAFEkhb1wWW4J6f9c9gQeuvS9jxj4kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80ODQyYTktOWZjZC00YmI2LWJiMDQt MGRiYmMyNDllNjU3LzEvRU8tR0ZJVVBSNDhzQXA1YUJyTldZeGZLQmZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi80ODQyYTktOWZjZC00YmI2LWJiMDQtMGRiYmMyNDllNjU3 LzEvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUVoRMA0G CSqGSIb3DQEBCwUAA4IBAQAbeZTCW7Kqcgw4BHVBQohbNCAVD1JoE+RhCJRdduim eQE0pwHqL/uVpPi2ODW8raXa9yq5unIk7GNibFnWQxX4RSPz8zy6fYCbVNBO00Zr 1WE/P8uzOhCBDP1m5wNzC1Ekqf9uq9DUFCdN1CA1cDqueDhxRHbPGqYjB4Kz4kh7 igK/PUx0d63PeYKGCyMFB8M/rm0m4WR61g9P7H7C9R44/mEhQNxvEr+Hx6nTSR6D mRy8ErsZ4jNQrgo1kcGuTTRMLX6QDd5LHBI4eqc7mqDysLC87nH1Mq8qdhmw0ZK3 F6Qs9TMurULCxdu33aZ3tw5b9XBpDAQnQp5yUNkiEjPR -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:58 2026 by rpki-client