This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/624220-c076-4a1d-aefb-b7f5d4395cc0/1/eypzd6poG3jDCG2V-Hkvi0h-uqk.roa File: eypzd6poG3jDCG2V-Hkvi0h-uqk.roa (raw, json) Hash identifier: a6MGVLLBIxQKSFoYyBfEEcE09ol5itCNEXdRhC5N+Ao= Subject key identifier: 7B:2A:73:77:AA:68:1B:78:C3:08:6D:95:F8:79:2F:8B:48:7E:BA:A9 Certificate issuer: /CN=9c329f3331f5343f290eb4a41f16c4363a282c90 Certificate serial: 019B7D5C8324E56188F395E0F2153828ABEF Authority key identifier: 9C:32:9F:33:31:F5:34:3F:29:0E:B4:A4:1F:16:C4:36:3A:28:2C:90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nDKfMzH1ND8pDrSkHxbENjooLJA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/624220-c076-4a1d-aefb-b7f5d4395cc0/1/eypzd6poG3jDCG2V-Hkvi0h-uqk.roa Signing time: Fri 02 Jan 2026 06:19:33 +0000 ROA not before: Fri 02 Jan 2026 06:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41992 IP address blocks: 193.34.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/624220-c076-4a1d-aefb-b7f5d4395cc0/1/nDKfMzH1ND8pDrSkHxbENjooLJA.crl rsync://rpki.ripe.net/repository/DEFAULT/42/624220-c076-4a1d-aefb-b7f5d4395cc0/1/nDKfMzH1ND8pDrSkHxbENjooLJA.mft rsync://rpki.ripe.net/repository/DEFAULT/nDKfMzH1ND8pDrSkHxbENjooLJA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 14:14:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:83:24:e5:61:88:f3:95:e0:f2:15:38:28:ab:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c329f3331f5343f290eb4a41f16c4363a282c90 Validity Not Before: Jan 2 06:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7b2a7377aa681b78c3086d95f8792f8b487ebaa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0a:27:4e:2b:63:5b:7e:ae:ef:c0:6a:15:6b: 3d:64:d2:10:d0:ee:40:01:ba:51:dd:1a:39:e2:89: d0:eb:b8:78:75:de:b6:41:9e:ac:6a:f7:08:3a:33: bb:b2:62:37:95:4b:b1:da:0b:79:2a:95:58:6e:e5: 64:28:13:0c:8a:6c:3f:4a:bc:c2:df:f7:6b:6c:c3: 74:2d:a1:60:da:b3:bb:5d:b5:99:d5:8e:f5:f2:12: 4d:cd:a2:31:06:f7:db:56:d9:2b:fe:d6:10:cf:10: 11:ac:82:56:81:c8:e3:94:5a:a2:a4:de:25:19:71: 57:b7:b1:84:db:2c:a7:28:4b:48:58:8d:3c:99:1c: c6:6d:df:07:5a:95:1e:72:1a:ea:33:cd:70:41:2a: 02:f5:4b:b6:d6:96:77:db:98:1a:cf:35:18:9c:06: 59:16:8a:7f:73:b1:7e:4d:25:9d:40:46:65:92:85: e0:61:c6:9b:02:b9:bb:68:ec:77:c8:95:3d:de:d4: ce:18:31:23:4c:00:d3:ca:57:f6:02:92:0e:b4:ef: 12:ff:15:3c:16:8b:c6:02:c0:63:6b:5b:1d:8a:fc: ac:cc:d2:24:96:3c:96:d4:13:5d:23:30:2e:c5:eb: 27:9a:92:e0:cc:b5:67:88:00:69:f7:b5:7f:85:88: 90:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:2A:73:77:AA:68:1B:78:C3:08:6D:95:F8:79:2F:8B:48:7E:BA:A9 X509v3 Authority Key Identifier: keyid:9C:32:9F:33:31:F5:34:3F:29:0E:B4:A4:1F:16:C4:36:3A:28:2C:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nDKfMzH1ND8pDrSkHxbENjooLJA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/624220-c076-4a1d-aefb-b7f5d4395cc0/1/eypzd6poG3jDCG2V-Hkvi0h-uqk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/624220-c076-4a1d-aefb-b7f5d4395cc0/1/nDKfMzH1ND8pDrSkHxbENjooLJA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.34.152.0/23 Signature Algorithm: sha256WithRSAEncryption 19:8d:bb:b9:e4:5a:4c:94:9a:87:08:de:62:75:92:9d:11:92: a4:2c:2b:48:1e:44:f5:bb:5e:a5:d2:e3:81:7b:b9:e5:92:c1: 7d:c0:35:ce:46:26:76:7c:33:da:c1:57:aa:b0:e5:09:3e:d6: ae:61:2f:e3:d3:24:5c:96:30:09:91:bc:3f:90:56:f8:14:b9: ba:59:86:cb:a4:87:58:d2:35:64:64:0e:1a:8e:7e:37:cf:02: fa:82:9c:09:2c:3a:10:68:eb:f4:da:3a:c7:25:15:25:74:84: 80:67:a1:5a:05:1f:65:f5:4b:d2:74:c6:82:0d:17:bf:66:39: 47:84:3a:f8:97:f1:c8:b2:b3:95:85:8a:93:66:59:82:e5:46: a1:dc:c9:bd:5e:1b:6c:5b:1e:82:82:98:e1:c6:57:b2:31:49: 2f:0e:4f:70:40:72:2e:08:a9:55:15:9b:d0:95:ef:f6:26:b7: 38:c4:f8:96:ff:5e:15:d2:96:28:2e:83:ea:f8:a8:9f:1f:cc: 33:3b:f8:c0:56:4e:d5:c1:44:1d:73:cd:1d:79:d6:1c:be:8d: ca:25:b2:eb:63:46:a3:6b:66:17:2f:f8:ab:61:dc:07:32:38: 9f:21:38:7a:18:e1:00:6a:d5:58:33:e3:16:67:66:3c:8e:33: 60:ce:be:dd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XIMk5WGI85Xg8hU4KKvvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljMzI5ZjMzMzFmNTM0M2YyOTBlYjRhNDFmMTZjNDM2M2Ey ODJjOTAwHhcNMjYwMTAyMDYxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YjJhNzM3N2FhNjgxYjc4YzMwODZkOTVmODc5MmY4YjQ4N2ViYWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugonTitjW36u78BqFWs9ZNIQ0O5A AbpR3Ro54onQ67h4dd62QZ6savcIOjO7smI3lUux2gt5KpVYbuVkKBMMimw/SrzC 3/drbMN0LaFg2rO7XbWZ1Y718hJNzaIxBvfbVtkr/tYQzxARrIJWgcjjlFqipN4l GXFXt7GE2yynKEtIWI08mRzGbd8HWpUechrqM81wQSoC9Uu21pZ325gazzUYnAZZ Fop/c7F+TSWdQEZlkoXgYcabArm7aOx3yJU93tTOGDEjTADTylf2ApIOtO8S/xU8 FovGAsBja1sdivyszNIkljyW1BNdIzAuxesnmpLgzLVniABp97V/hYiQ/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHsqc3eqaBt4wwhtlfh5L4tIfrqpMB8GA1UdIwQY MBaAFJwynzMx9TQ/KQ60pB8WxDY6KCyQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkRLZk16SDFORDhwRHJTa0h4YkVOam9vTEpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi82MjQyMjAtYzA3Ni00YTFkLWFlZmIt YjdmNWQ0Mzk1Y2MwLzEvZXlwemQ2cG9HM2pEQ0cyVi1Ia3ZpMGgtdXFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi82MjQyMjAtYzA3Ni00YTFkLWFlZmItYjdmNWQ0Mzk1Y2Mw LzEvbkRLZk16SDFORDhwRHJTa0h4YkVOam9vTEpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwSKYMA0G CSqGSIb3DQEBCwUAA4IBAQAZjbu55FpMlJqHCN5idZKdEZKkLCtIHkT1u16l0uOB e7nlksF9wDXORiZ2fDPawVeqsOUJPtauYS/j0yRcljAJkbw/kFb4FLm6WYbLpIdY 0jVkZA4ajn43zwL6gpwJLDoQaOv02jrHJRUldISAZ6FaBR9l9UvSdMaCDRe/ZjlH hDr4l/HIsrOVhYqTZlmC5Uah3Mm9XhtsWx6CgpjhxleyMUkvDk9wQHIuCKlVFZvQ le/2Jrc4xPiW/14V0pYoLoPq+KifH8wzO/jAVk7VwUQdc80dedYcvo3KJbLrY0aj a2YXL/irYdwHMjifITh6GOEAatVYM+MWZ2Y8jjNgzr7d -----END CERTIFICATE-----Generated at Thu Jan 8 20:16:09 2026 by rpki-client