This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/EqMzjpZI_PA25pj2HGjF-sxEQuw.roa File: EqMzjpZI_PA25pj2HGjF-sxEQuw.roa (raw, json) Hash identifier: Q+Tx0hJ38g+PHWlMRUIi6h6t6P6zwUEAYvtkrEbFArY= Subject key identifier: 12:A3:33:8E:96:48:FC:F0:36:E6:98:F6:1C:68:C5:FA:CC:44:42:EC Certificate issuer: /CN=cb10243f98636faa0fb6c5ae6bad9b0abad23438 Certificate serial: 019B7C7F23BFC1529F7612D4B2CB77D98180 Authority key identifier: CB:10:24:3F:98:63:6F:AA:0F:B6:C5:AE:6B:AD:9B:0A:BA:D2:34:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxAkP5hjb6oPtsWua62bCrrSNDg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/EqMzjpZI_PA25pj2HGjF-sxEQuw.roa Signing time: Fri 02 Jan 2026 02:17:45 +0000 ROA not before: Fri 02 Jan 2026 02:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60372 IP address blocks: 185.4.252.0/24 maxlen: 24 185.4.253.0/24 maxlen: 24 185.4.253.192/27 maxlen: 27 185.4.254.0/24 maxlen: 24 185.4.255.0/24 maxlen: 24 185.4.255.112/29 maxlen: 29 185.156.212.0/24 maxlen: 24 185.156.212.8/29 maxlen: 29 185.156.212.24/29 maxlen: 29 185.156.213.0/24 maxlen: 24 185.156.214.0/24 maxlen: 24 185.156.215.0/24 maxlen: 24 2a02:7740::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.mft rsync://rpki.ripe.net/repository/DEFAULT/yxAkP5hjb6oPtsWua62bCrrSNDg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:23:bf:c1:52:9f:76:12:d4:b2:cb:77:d9:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb10243f98636faa0fb6c5ae6bad9b0abad23438 Validity Not Before: Jan 2 02:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=12a3338e9648fcf036e698f61c68c5facc4442ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:64:b5:80:65:81:44:a7:ff:40:0b:dd:fa:89: 05:88:44:d8:fb:a6:c1:fb:87:77:63:a5:c0:ac:8e: 7a:bf:f1:9d:aa:c0:f5:94:ba:50:28:44:34:92:ee: a7:a0:d3:19:8b:e7:5a:d3:2e:2e:05:a9:d8:31:5f: a2:0f:a9:67:b7:f0:83:41:9a:9d:90:99:a9:28:ae: 4b:8a:ff:cf:91:9d:84:9b:02:1a:34:7a:eb:18:c4: e0:58:22:ca:19:79:a8:01:07:e9:ee:87:68:77:3d: 92:b2:37:4e:96:68:50:f3:4a:f1:7c:63:5e:32:40: 9f:78:3f:87:84:b0:84:cf:ae:f8:58:50:55:47:cf: fb:03:c0:8d:94:0d:ea:05:6a:66:15:3f:83:d2:9d: 99:15:8d:77:e3:d0:b4:b7:f5:b4:9b:9c:7b:40:a3: 2b:7a:47:37:e6:54:81:f2:97:1d:99:f3:2a:3c:78: 90:c4:36:92:07:92:40:a1:9d:50:ae:25:65:4f:2f: dd:5a:84:35:2e:68:8c:ff:6b:53:4b:0c:32:53:9f: 05:76:e6:35:bf:88:5e:e7:d2:20:2f:fc:05:57:14: 3a:6e:44:65:cb:be:d3:54:63:6b:52:d6:16:7f:79: de:2f:49:e6:48:5d:4e:a1:ec:3f:7a:aa:3f:72:78: 77:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:A3:33:8E:96:48:FC:F0:36:E6:98:F6:1C:68:C5:FA:CC:44:42:EC X509v3 Authority Key Identifier: keyid:CB:10:24:3F:98:63:6F:AA:0F:B6:C5:AE:6B:AD:9B:0A:BA:D2:34:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxAkP5hjb6oPtsWua62bCrrSNDg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/EqMzjpZI_PA25pj2HGjF-sxEQuw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.4.252.0/22 185.156.212.0/22 IPv6: 2a02:7740::/32 Signature Algorithm: sha256WithRSAEncryption 5f:4f:32:fb:45:e3:52:78:60:ce:cd:dd:02:5a:05:82:84:b5: 68:88:53:b6:d7:3f:ab:06:d2:62:95:83:3d:87:56:2a:53:f2: 2d:47:b6:d6:1d:5b:3a:17:65:97:91:b4:1f:d8:b2:3f:fa:ab: c2:3e:f7:fa:f8:f9:db:05:fb:bc:0d:71:02:86:9c:ca:d7:0f: 40:01:68:c3:6d:64:fd:e4:ff:91:d8:17:35:80:7f:cb:6d:6d: df:d9:84:3d:00:f0:1f:72:1d:fd:bd:a0:18:4a:13:86:19:fa: a1:13:bb:b3:11:29:00:a8:0a:85:f8:91:e2:2c:bc:bd:67:8d: 63:ef:3b:67:37:7a:3a:dd:cc:b4:ca:64:99:73:b2:b7:c8:d6: 68:4e:c1:8d:e1:b2:48:a2:08:07:3d:0a:87:68:87:4b:f6:49: 0e:98:67:35:99:c0:eb:31:6d:f0:7f:fd:9d:64:f5:88:cb:33: 5f:f4:3b:c6:56:e8:94:20:5b:ff:e2:42:9b:0e:fe:70:00:a5: 3f:b4:71:f2:03:92:e3:64:fd:94:50:c3:89:e0:20:87:35:e9: 24:85:2e:ca:05:b5:44:6f:8e:7b:da:6e:c5:04:b2:77:50:93: 42:d3:02:d8:fa:d2:f6:52:c5:97:03:18:24:55:fa:9e:f3:81: 29:92:21:e6 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt8fyO/wVKfdhLUsst32YGAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiMTAyNDNmOTg2MzZmYWEwZmI2YzVhZTZiYWQ5YjBhYmFk MjM0MzgwHhcNMjYwMTAyMDIxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMmEzMzM4ZTk2NDhmY2YwMzZlNjk4ZjYxYzY4YzVmYWNjNDQ0MmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGS1gGWBRKf/QAvd+okFiETY+6bB +4d3Y6XArI56v/GdqsD1lLpQKEQ0ku6noNMZi+da0y4uBanYMV+iD6lnt/CDQZqd kJmpKK5Liv/PkZ2EmwIaNHrrGMTgWCLKGXmoAQfp7ododz2SsjdOlmhQ80rxfGNe MkCfeD+HhLCEz674WFBVR8/7A8CNlA3qBWpmFT+D0p2ZFY1349C0t/W0m5x7QKMr ekc35lSB8pcdmfMqPHiQxDaSB5JAoZ1QriVlTy/dWoQ1LmiM/2tTSwwyU58FduY1 v4he59IgL/wFVxQ6bkRly77TVGNrUtYWf3neL0nmSF1Ooew/eqo/cnh3XwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFBKjM46WSPzwNuaY9hxoxfrMRELsMB8GA1UdIwQY MBaAFMsQJD+YY2+qD7bFrmutmwq60jQ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveXhBa1A1aGpiNm9QdHNXdWE2MmJDcnJTTkRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9mOGViOWMtNWI5OS00Y2VmLTkzZjAt NDhmMTUxYjUyMzFmLzEvRXFNempwWklfUEEyNXBqMkhHakYtc3hFUXV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9mOGViOWMtNWI5OS00Y2VmLTkzZjAtNDhmMTUxYjUyMzFm LzEveXhBa1A1aGpiNm9QdHNXdWE2MmJDcnJTTkRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuQT8AwQC uZzUMA0EAgACMAcDBQAqAndAMA0GCSqGSIb3DQEBCwUAA4IBAQBfTzL7ReNSeGDO zd0CWgWChLVoiFO21z+rBtJilYM9h1YqU/ItR7bWHVs6F2WXkbQf2LI/+qvCPvf6 +PnbBfu8DXEChpzK1w9AAWjDbWT95P+R2Bc1gH/LbW3f2YQ9APAfch39vaAYShOG GfqhE7uzESkAqAqF+JHiLLy9Z41j7ztnN3o63cy0ymSZc7K3yNZoTsGN4bJIoggH PQqHaIdL9kkOmGc1mcDrMW3wf/2dZPWIyzNf9DvGVuiUIFv/4kKbDv5wAKU/tHHy A5LjZP2UUMOJ4CCHNekkhS7KBbVEb4572m7FBLJ3UJNC0wLY+tL2UsWXAxgkVfqe 84EpkiHm -----END CERTIFICATE-----Generated at Thu Jan 8 11:02:00 2026 by rpki-client