This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/eqD1-410xbl18T07yvCtbxsa1Ms.roa File: eqD1-410xbl18T07yvCtbxsa1Ms.roa (raw, json) Hash identifier: IGD8JZ6WIWOq2cxiQwhCeO2QQ+pd/nJb7mzndaBQXkM= Subject key identifier: 7A:A0:F5:FB:8D:74:C5:B9:75:F1:3D:3B:CA:F0:AD:6F:1B:1A:D4:CB Certificate issuer: /CN=43a8e2899693fca00bd8041ba8801f2d88869108 Certificate serial: 019B76EBA5433BA2F65362E3C76FFCADD3A7 Authority key identifier: 43:A8:E2:89:96:93:FC:A0:0B:D8:04:1B:A8:80:1F:2D:88:86:91:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/eqD1-410xbl18T07yvCtbxsa1Ms.roa Signing time: Thu 01 Jan 2026 00:18:33 +0000 ROA not before: Thu 01 Jan 2026 00:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42487 IP address blocks: 45.81.172.0/22 maxlen: 22 2a0e:5b80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:a5:43:3b:a2:f6:53:62:e3:c7:6f:fc:ad:d3:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43a8e2899693fca00bd8041ba8801f2d88869108 Validity Not Before: Jan 1 00:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7aa0f5fb8d74c5b975f13d3bcaf0ad6f1b1ad4cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6d:84:c4:e3:7b:16:e4:43:a6:6a:46:f0:b1: 7a:5a:ab:b3:af:9d:a1:6e:7e:ba:10:a9:68:cb:54: 7d:f0:bf:78:93:08:87:68:17:bd:1a:d7:d8:28:1f: 02:15:0b:d3:c9:dc:59:80:ca:27:66:16:2c:51:e3: f9:4a:ba:47:5e:cc:b4:1c:2c:6a:a9:5e:75:19:8f: d2:3d:7a:c3:ff:d0:99:f2:0e:4f:d5:03:ba:7c:26: d3:42:36:0a:04:ef:76:34:13:81:b0:34:23:a3:99: 1d:cb:95:fb:44:8b:cb:1e:aa:62:2f:22:1f:0b:78: bd:7d:ed:6f:b4:f4:68:e1:11:a5:14:0b:f4:e4:b0: f2:3b:ac:99:46:94:d9:00:f7:4d:df:3e:4f:83:9d: 39:49:ba:d5:c8:b9:eb:43:b8:54:0c:2a:08:1e:e1: b3:66:48:b4:27:2f:d0:4b:26:70:b0:26:1d:82:4f: 03:2b:7a:4f:59:c5:56:24:d2:f3:e0:fe:67:65:29: 3a:41:36:b5:30:dc:f5:2f:c6:5d:ea:2b:cc:30:c8: 2a:b9:5d:30:a2:9e:10:3b:9a:1e:77:83:a5:8e:dd: f4:d1:e9:a6:3f:9c:61:0e:6a:22:1e:b2:33:43:26: c0:bd:f2:f7:ce:50:b0:b8:25:3d:d3:c7:cd:1c:16: 80:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:A0:F5:FB:8D:74:C5:B9:75:F1:3D:3B:CA:F0:AD:6F:1B:1A:D4:CB X509v3 Authority Key Identifier: keyid:43:A8:E2:89:96:93:FC:A0:0B:D8:04:1B:A8:80:1F:2D:88:86:91:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/eqD1-410xbl18T07yvCtbxsa1Ms.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.81.172.0/22 IPv6: 2a0e:5b80::/29 Signature Algorithm: sha256WithRSAEncryption 9d:35:c8:ee:c3:ea:97:54:7d:7f:b7:27:ce:65:6f:75:b6:f5: c1:0c:62:a6:31:1d:a1:b7:a2:63:a8:fb:92:4e:ec:5b:b1:36: 5f:49:e8:4c:91:12:96:bb:a0:4c:91:a1:0b:02:af:9a:41:7c: db:51:cf:d7:8c:45:83:f9:c9:c8:2c:03:f0:39:01:43:3f:f7: fd:d5:59:90:b5:a8:80:87:b3:ea:56:af:24:58:f8:14:8c:00: ef:16:ec:b7:2b:16:8e:eb:1b:4e:c6:d3:7a:60:0e:15:93:9c: 4e:b8:8e:d9:a9:cb:91:76:1b:83:0b:90:63:bb:d2:f5:e2:6d: 5a:a1:c5:c8:58:cc:9c:67:b3:0d:3b:f2:4c:8b:10:40:02:c5: 24:2e:2e:11:73:fd:3f:9c:51:71:89:5a:35:08:ba:c3:d0:5b: 11:77:e8:f6:e7:76:5a:41:34:4c:0d:aa:ee:f2:8c:bd:61:9a: 8a:0a:33:99:e1:78:8c:5c:41:00:ec:e8:4b:d5:96:75:e5:81: 65:54:db:9b:89:8b:57:59:51:c9:19:60:0f:18:43:25:93:8d: 61:9c:1e:5c:a4:15:6c:15:60:fd:9c:0a:f8:f5:d2:bd:13:d8: 60:4f:81:65:29:fa:d5:92:26:f8:51:9e:58:13:b2:84:0e:81: 07:79:0d:81 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt266VDO6L2U2Ljx2/8rdOnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzYThlMjg5OTY5M2ZjYTAwYmQ4MDQxYmE4ODAxZjJkODg4 NjkxMDgwHhcNMjYwMTAxMDAxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YWEwZjVmYjhkNzRjNWI5NzVmMTNkM2JjYWYwYWQ2ZjFiMWFkNGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtm2ExON7FuRDpmpG8LF6Wquzr52h bn66EKloy1R98L94kwiHaBe9GtfYKB8CFQvTydxZgMonZhYsUeP5SrpHXsy0HCxq qV51GY/SPXrD/9CZ8g5P1QO6fCbTQjYKBO92NBOBsDQjo5kdy5X7RIvLHqpiLyIf C3i9fe1vtPRo4RGlFAv05LDyO6yZRpTZAPdN3z5Pg505SbrVyLnrQ7hUDCoIHuGz Zki0Jy/QSyZwsCYdgk8DK3pPWcVWJNLz4P5nZSk6QTa1MNz1L8Zd6ivMMMgquV0w op4QO5oed4Oljt300emmP5xhDmoiHrIzQybAvfL3zlCwuCU908fNHBaAIwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFHqg9fuNdMW5dfE9O8rwrW8bGtTLMB8GA1UdIwQY MBaAFEOo4omWk/ygC9gEG6iAHy2IhpEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTZqaWlaYVRfS0FMMkFRYnFJQWZMWWlHa1FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xNGUwOTEtOTc5YS00ZWQ1LTlkNWUt NDk1NDI3MGUyNTA3LzEvZXFEMS00MTB4YmwxOFQwN3l2Q3RieHNhMU1zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8xNGUwOTEtOTc5YS00ZWQ1LTlkNWUtNDk1NDI3MGUyNTA3 LzEvUTZqaWlaYVRfS0FMMkFRYnFJQWZMWWlHa1FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLVGsMA0E AgACMAcDBQMqDluAMA0GCSqGSIb3DQEBCwUAA4IBAQCdNcjuw+qXVH1/tyfOZW91 tvXBDGKmMR2ht6JjqPuSTuxbsTZfSehMkRKWu6BMkaELAq+aQXzbUc/XjEWD+cnI LAPwOQFDP/f91VmQtaiAh7PqVq8kWPgUjADvFuy3KxaO6xtOxtN6YA4Vk5xOuI7Z qcuRdhuDC5Bju9L14m1aocXIWMycZ7MNO/JMixBAAsUkLi4Rc/0/nFFxiVo1CLrD 0FsRd+j253ZaQTRMDaru8oy9YZqKCjOZ4XiMXEEA7OhL1ZZ15YFlVNubiYtXWVHJ GWAPGEMlk41hnB5cpBVsFWD9nAr49dK9E9hgT4FlKfrVkib4UZ5YE7KEDoEHeQ2B -----END CERTIFICATE-----Generated at Mon Jan 12 01:33:24 2026 by rpki-client