This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/EUcioYCNgoBr4fX2m_esrOCrQGM.roa File: EUcioYCNgoBr4fX2m_esrOCrQGM.roa (raw, json) Hash identifier: 0JHPbY7p1Ja0Q0GjkadwueehBILVs0m7aNuPr13Bguc= Subject key identifier: 11:47:22:A1:80:8D:82:80:6B:E1:F5:F6:9B:F7:AC:AC:E0:AB:40:63 Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815 Certificate serial: 019B7AC7E6C1E05684E9520AAE871E286834 Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/EUcioYCNgoBr4fX2m_esrOCrQGM.roa Signing time: Thu 01 Jan 2026 18:17:59 +0000 ROA not before: Thu 01 Jan 2026 18:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207008 IP address blocks: 193.42.217.0/25 maxlen: 25 193.42.217.128/26 maxlen: 26 193.42.217.192/26 maxlen: 26 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:e6:c1:e0:56:84:e9:52:0a:ae:87:1e:28:68:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815 Validity Not Before: Jan 1 18:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=114722a1808d82806be1f5f69bf7acace0ab4063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b7:a7:98:da:cb:f2:cc:4e:a1:3c:90:47:22: 97:d4:9b:c8:c5:6b:b1:67:98:db:da:47:74:01:c4: 53:08:78:db:95:63:8d:a4:99:f8:ae:d6:e3:0b:83: ae:0e:98:22:12:70:d4:24:13:6c:c7:f9:59:ad:b8: 69:ee:96:de:0b:e1:31:09:0a:b1:58:f4:a5:7a:fd: a8:e7:18:76:f2:51:7b:f8:a8:88:39:66:29:a5:7c: 60:d0:0f:1c:a4:92:31:a2:36:28:82:12:3b:ca:17: 61:7c:2b:46:19:14:c2:fd:11:ba:f6:ce:e0:db:6b: cb:83:09:e7:de:87:9c:36:c5:d6:ae:bd:f4:af:6f: 38:6a:f3:65:c3:8a:c5:44:ed:f9:44:1e:ee:35:47: b5:5b:9b:ba:5a:c3:10:bf:67:89:b6:58:72:77:73: 53:c7:88:bc:4a:f3:9b:84:9f:10:cc:67:38:88:d5: bd:39:46:a0:fd:77:f1:6d:e4:8f:25:31:50:df:45: 73:e1:e9:f3:77:1e:82:4e:89:97:c7:e5:f9:99:15: eb:08:9e:b6:09:29:d8:1c:3d:01:6c:f5:02:41:d0: 9e:6e:90:ff:8a:b1:bd:b9:9f:a4:d2:d6:b2:f6:a7: 64:2d:bc:03:73:ca:fd:bf:12:82:2b:fe:7d:12:84: a1:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:47:22:A1:80:8D:82:80:6B:E1:F5:F6:9B:F7:AC:AC:E0:AB:40:63 X509v3 Authority Key Identifier: keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/EUcioYCNgoBr4fX2m_esrOCrQGM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.42.217.0/24 Signature Algorithm: sha256WithRSAEncryption 76:bd:5f:2d:bb:01:3e:71:db:3b:97:0f:e2:84:99:98:39:58: d6:d8:34:18:a2:24:ca:cb:6b:ef:ad:7a:94:24:bf:b9:6c:d3: b3:be:cb:29:39:16:ab:d1:25:2a:f7:25:d4:e2:49:97:1d:6c: 8f:48:59:13:35:41:32:00:df:99:41:f2:6b:97:90:40:f3:d3: a2:00:2c:02:d1:5c:0f:fc:b6:65:2f:8a:11:2a:fb:35:3f:e7: 7b:5c:f8:b8:b3:91:f3:7b:36:05:0e:c2:56:06:e6:c2:b2:28: c6:f9:d0:c7:e8:d0:d7:b4:33:e5:e1:db:01:62:18:8a:65:3b: a4:f2:32:c2:59:4a:7a:d2:47:32:2b:e7:ca:98:05:3a:93:dd: 16:3e:76:0f:4a:64:67:5e:23:e3:5f:46:c1:58:8e:97:29:04: e4:34:a0:01:96:66:8f:94:f1:9a:40:84:db:36:7e:a9:96:b4: c8:63:bc:4d:48:32:5e:d8:32:28:9f:3e:f7:e9:37:7a:eb:9f: 0f:bd:56:3b:14:c6:9f:3c:57:52:ec:a6:f1:0d:59:59:f6:4a: e8:e4:29:c9:e7:6a:c9:f4:98:05:63:e1:55:d2:e2:24:fc:64: b1:92:74:2e:93:b6:24:88:fe:98:5f:c6:f6:57:dd:aa:e2:c1: fa:76:84:26 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x+bB4FaE6VIKroceKGg0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NTMxMGY1MDMxMzdhZThiMzVkNGYzMjlmNDZmMDY5ZGQ3 MDM4MTUwHhcNMjYwMTAxMTgxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMTQ3MjJhMTgwOGQ4MjgwNmJlMWY1ZjY5YmY3YWNhY2UwYWI0MDYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLenmNrL8sxOoTyQRyKX1JvIxWux Z5jb2kd0AcRTCHjblWONpJn4rtbjC4OuDpgiEnDUJBNsx/lZrbhp7pbeC+ExCQqx WPSlev2o5xh28lF7+KiIOWYppXxg0A8cpJIxojYoghI7yhdhfCtGGRTC/RG69s7g 22vLgwnn3oecNsXWrr30r284avNlw4rFRO35RB7uNUe1W5u6WsMQv2eJtlhyd3NT x4i8SvObhJ8QzGc4iNW9OUag/XfxbeSPJTFQ30Vz4enzdx6CTomXx+X5mRXrCJ62 CSnYHD0BbPUCQdCebpD/irG9uZ+k0tay9qdkLbwDc8r9vxKCK/59EoShswIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBFHIqGAjYKAa+H19pv3rKzgq0BjMB8GA1UdIwQY MBaAFKhTEPUDE3ros11PMp9G8GndcDgVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYt MzAxODlhNWE0ZWJhLzEvRVVjaW9ZQ05nb0JyNGZYMm1fZXNyT0NyUUdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYtMzAxODlhNWE0ZWJh LzEvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSrZMA0G CSqGSIb3DQEBCwUAA4IBAQB2vV8tuwE+cds7lw/ihJmYOVjW2DQYoiTKy2vvrXqU JL+5bNOzvsspORar0SUq9yXU4kmXHWyPSFkTNUEyAN+ZQfJrl5BA89OiACwC0VwP /LZlL4oRKvs1P+d7XPi4s5HzezYFDsJWBubCsijG+dDH6NDXtDPl4dsBYhiKZTuk 8jLCWUp60kcyK+fKmAU6k90WPnYPSmRnXiPjX0bBWI6XKQTkNKABlmaPlPGaQITb Nn6plrTIY7xNSDJe2DIonz736Td6658PvVY7FMafPFdS7KbxDVlZ9kro5CnJ52rJ 9JgFY+FV0uIk/GSxknQuk7YkiP6YX8b2V92q4sH6doQm -----END CERTIFICATE-----Generated at Mon Jan 26 01:52:41 2026 by rpki-client