This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EqGNcARaB2Vc_Wfmu2eO9oSwrRY.roa File: EqGNcARaB2Vc_Wfmu2eO9oSwrRY.roa (raw, json) Hash identifier: EFt+KU8HlKxeQj8XgtkE+yR5OAGJkYNEUpiBRCi7B3A= Subject key identifier: 12:A1:8D:70:04:5A:07:65:5C:FD:67:E6:BB:67:8E:F6:84:B0:AD:16 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B26C961DA0D2DC70A9F88CD8E8D321F9E Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EqGNcARaB2Vc_Wfmu2eO9oSwrRY.roa Signing time: Tue 16 Dec 2025 10:51:30 +0000 ROA not before: Tue 16 Dec 2025 10:51:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 151704 IP address blocks: 45.95.3.0/24 maxlen: 24 87.121.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:c9:61:da:0d:2d:c7:0a:9f:88:cd:8e:8d:32:1f:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Dec 16 10:51:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=12a18d70045a07655cfd67e6bb678ef684b0ad16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:fe:d6:88:a6:4f:79:9d:6e:35:45:e4:8e:94: 23:32:51:b2:b9:c9:73:ed:b2:c4:e8:80:44:ab:bd: e5:bd:4a:ca:06:fa:ba:5e:44:a8:f7:52:b5:fc:d4: 9a:bd:f7:10:4f:da:ad:ad:5c:c6:84:3e:71:f5:8e: bf:77:54:af:72:6d:75:38:0c:45:27:9d:56:c5:1d: 40:7a:96:e1:da:ef:18:ac:de:64:15:ff:ca:b0:6d: 49:d0:47:26:b9:28:07:00:6c:f6:da:c5:22:8a:77: b6:1f:e7:be:f8:20:38:60:f1:67:83:61:58:2a:4c: 09:38:d7:84:2e:9e:01:fb:9c:79:5c:f6:13:ad:32: fe:63:93:c5:b8:ea:6d:6d:3d:3f:e1:98:6e:da:2f: dc:4c:5e:cc:a9:e1:68:72:f1:d0:80:eb:d9:6e:67: 53:29:40:bc:a7:36:1e:64:f9:14:c7:03:a5:28:13: df:31:36:9f:8a:f1:50:52:cc:97:ec:3d:98:1b:25: 4d:f2:c0:18:9c:fe:29:23:bf:76:04:4f:56:ac:87: e5:36:e1:3e:77:bb:fa:ee:89:39:94:44:fc:ce:39: 0c:47:25:3d:5a:d0:01:54:79:d3:50:2c:38:fc:0f: 89:07:f1:10:40:e7:88:4d:a3:d4:ea:df:9b:10:4e: 2a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:A1:8D:70:04:5A:07:65:5C:FD:67:E6:BB:67:8E:F6:84:B0:AD:16 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EqGNcARaB2Vc_Wfmu2eO9oSwrRY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.95.3.0/24 87.121.98.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:bf:4d:b2:99:dc:fa:af:ed:ca:de:7f:a5:9f:c6:15:9a:c5: d2:25:34:e8:a9:72:b8:fc:a0:af:32:4f:99:65:bf:6b:46:d5: 8a:55:a5:2d:7d:d6:35:36:28:68:cf:59:14:e0:13:01:39:95: a0:32:40:e0:94:45:a1:68:ff:d0:0e:00:ac:84:76:1e:4c:2a: 05:25:91:33:29:9d:66:3f:c6:c2:b2:20:6e:f6:5c:b9:25:ca: f1:b2:45:51:28:b5:73:c8:86:aa:3e:15:4d:21:e3:61:44:1b: c5:e2:23:31:d5:a5:43:e9:f1:dd:6e:a0:b0:58:09:bf:a9:36: 66:27:b7:0c:61:8f:5c:4d:44:ad:2d:e1:04:34:81:3a:7c:2d: df:1b:a7:99:5b:34:5a:bd:03:53:c5:aa:40:45:4e:6c:bf:f2: ae:fd:9c:bc:43:9f:b8:8e:e2:a9:bd:b5:32:e1:ec:fa:1c:10: 0b:72:10:94:ef:b6:0d:cb:f3:bb:a1:63:53:15:99:37:38:d6: f5:0f:c0:bc:9e:db:bc:62:2f:17:a0:a1:a5:0a:df:c5:7c:30: 4c:34:7a:1e:f4:35:1c:e7:d0:76:e9:06:50:09:bc:8d:ba:eb: 24:fe:1e:45:42:f6:2e:46:37:35:5b:d4:b8:3b:5e:e2:23:86: d2:03:e6:9a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsmyWHaDS3HCp+IzY6NMh+eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjUxMjE2MTA1MTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMmExOGQ3MDA0NWEwNzY1NWNmZDY3ZTZiYjY3OGVmNjg0YjBhZDE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAov7WiKZPeZ1uNUXkjpQjMlGyuclz 7bLE6IBEq73lvUrKBvq6XkSo91K1/NSavfcQT9qtrVzGhD5x9Y6/d1Svcm11OAxF J51WxR1Aepbh2u8YrN5kFf/KsG1J0EcmuSgHAGz22sUiine2H+e++CA4YPFng2FY KkwJONeELp4B+5x5XPYTrTL+Y5PFuOptbT0/4Zhu2i/cTF7MqeFocvHQgOvZbmdT KUC8pzYeZPkUxwOlKBPfMTafivFQUsyX7D2YGyVN8sAYnP4pI792BE9WrIflNuE+ d7v67ok5lET8zjkMRyU9WtABVHnTUCw4/A+JB/EQQOeITaPU6t+bEE4qywIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBKhjXAEWgdlXP1n5rtnjvaEsK0WMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvRXFHTmNBUmFCMlZjX1dmbXUyZU85b1N3clJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALV8DAwQA V3liMA0GCSqGSIb3DQEBCwUAA4IBAQB7v02ymdz6r+3K3n+ln8YVmsXSJTToqXK4 /KCvMk+ZZb9rRtWKVaUtfdY1Nihoz1kU4BMBOZWgMkDglEWhaP/QDgCshHYeTCoF JZEzKZ1mP8bCsiBu9ly5JcrxskVRKLVzyIaqPhVNIeNhRBvF4iMx1aVD6fHdbqCw WAm/qTZmJ7cMYY9cTUStLeEENIE6fC3fG6eZWzRavQNTxapARU5sv/Ku/Zy8Q5+4 juKpvbUy4ez6HBALchCU77YNy/O7oWNTFZk3ONb1D8C8ntu8Yi8XoKGlCt/FfDBM NHoe9DUc59B26QZQCbyNuusk/h5FQvYuRjc1W9S4O17iI4bSA+aa -----END CERTIFICATE-----Generated at Sat Dec 20 06:07:40 2025 by rpki-client