This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/EAdzQIoOkWIxeAX2egmYbOGa2TY.roa File: EAdzQIoOkWIxeAX2egmYbOGa2TY.roa (raw, json) Hash identifier: FmYvFp8b6P7aKS1iSZ+Aa3ljJdjXeyIZV5bYVlFv2Os= Subject key identifier: 10:07:73:40:8A:0E:91:62:31:78:05:F6:7A:09:98:6C:E1:9A:D9:36 Certificate issuer: /CN=464952bc165441ec6e2e2010c933dc830f361731 Certificate serial: 019B7C135E7F95E89D5B2837B96DD8CEDC78 Authority key identifier: 46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/EAdzQIoOkWIxeAX2egmYbOGa2TY.roa Signing time: Fri 02 Jan 2026 00:20:02 +0000 ROA not before: Fri 02 Jan 2026 00:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50424 IP address blocks: 89.37.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:5e:7f:95:e8:9d:5b:28:37:b9:6d:d8:ce:dc:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=464952bc165441ec6e2e2010c933dc830f361731 Validity Not Before: Jan 2 00:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=100773408a0e9162317805f67a09986ce19ad936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:36:bf:29:c4:fc:e5:50:b1:68:04:66:d8:1a: c5:f7:ab:2b:77:b4:78:f2:de:16:95:bf:52:e8:75: a5:cd:ab:aa:78:7f:d1:29:01:d9:0b:3e:59:a2:24: ba:77:f2:c6:51:df:98:22:43:f4:e5:8d:40:7a:fc: 8b:38:af:7a:c3:17:1b:95:60:6a:99:ce:e0:3e:79: 9d:ee:5f:e3:3c:00:a9:fa:5e:2f:03:bd:05:92:3a: 11:70:3c:85:da:74:f3:22:fe:ee:d1:8c:82:67:4c: 92:ce:44:ae:ea:45:83:94:80:bf:d0:20:55:c8:86: ae:97:a9:88:06:e3:43:72:f9:d6:75:b7:34:1c:37: 89:9d:8f:16:61:0b:99:fd:92:69:ae:9a:d5:65:8b: f0:f6:5f:65:a6:c5:85:ec:72:09:8d:fc:36:32:12: 0e:b7:33:45:3f:63:94:ae:99:a4:a3:c2:9f:60:bb: 7d:a6:d6:ba:26:f8:fc:1f:77:dc:c8:17:c7:2a:e7: 3e:5a:65:4f:3a:94:ff:46:ab:bf:d7:d2:8c:50:17: d5:a2:e8:3f:03:60:02:25:bb:cc:7a:e7:0e:37:de: c5:78:f1:a0:78:b5:f4:ed:14:2f:7e:01:5b:37:6b: d4:b4:d0:56:ea:cb:17:29:10:3f:a8:14:0c:e9:6e: a4:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:07:73:40:8A:0E:91:62:31:78:05:F6:7A:09:98:6C:E1:9A:D9:36 X509v3 Authority Key Identifier: keyid:46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/EAdzQIoOkWIxeAX2egmYbOGa2TY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.37.141.0/24 Signature Algorithm: sha256WithRSAEncryption 05:08:30:ba:06:5f:e2:b2:08:7e:f5:b6:ba:bd:87:c9:e0:47: 73:fc:6e:b2:20:a6:96:7f:2c:77:78:61:98:bb:ac:78:5a:09: fd:64:57:36:e0:3c:97:d9:84:e4:a4:fd:43:01:57:87:51:4d: fc:1e:99:16:43:fe:eb:f1:99:cd:67:a0:9b:ca:53:1f:02:6b: d4:f2:e5:a4:08:51:b6:86:ab:26:14:68:bd:c9:3b:ac:46:40: f3:24:1d:ad:67:70:20:22:9d:0e:cf:ea:ad:54:3d:4c:e5:a2: 63:63:16:b2:4a:f1:55:bf:41:a7:c4:0e:3e:60:e8:ed:a6:9c: 4a:eb:81:1a:75:f0:17:34:d5:28:32:f9:03:fb:cf:db:19:dd: 5d:a0:6f:ce:56:f5:18:bb:56:14:8d:6c:49:3d:f2:93:1a:e5: 0a:ef:10:f6:28:1c:c4:8e:d6:d5:3e:a1:30:05:51:f1:bc:1a: 64:49:9e:6f:35:a8:73:6e:f3:06:41:8d:8d:39:1d:58:3f:0c: de:51:c5:f8:cf:6c:dc:a5:38:1c:c7:8b:e7:94:e5:e3:29:15: 6b:4c:73:85:d7:2a:72:c4:8d:30:8f:df:09:29:60:bd:73:61: eb:38:25:3d:a1:30:0b:30:6c:32:86:59:e2:b4:9a:a3:4b:61: 5b:89:a3:11 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E15/leidWyg3uW3Yztx4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NDk1MmJjMTY1NDQxZWM2ZTJlMjAxMGM5MzNkYzgzMGYz NjE3MzEwHhcNMjYwMTAyMDAyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDA3NzM0MDhhMGU5MTYyMzE3ODA1ZjY3YTA5OTg2Y2UxOWFkOTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTa/KcT85VCxaARm2BrF96srd7R4 8t4Wlb9S6HWlzauqeH/RKQHZCz5ZoiS6d/LGUd+YIkP05Y1AevyLOK96wxcblWBq mc7gPnmd7l/jPACp+l4vA70FkjoRcDyF2nTzIv7u0YyCZ0ySzkSu6kWDlIC/0CBV yIaul6mIBuNDcvnWdbc0HDeJnY8WYQuZ/ZJprprVZYvw9l9lpsWF7HIJjfw2MhIO tzNFP2OUrpmko8KfYLt9pta6Jvj8H3fcyBfHKuc+WmVPOpT/Rqu/19KMUBfVoug/ A2ACJbvMeucON97FePGgeLX07RQvfgFbN2vUtNBW6ssXKRA/qBQM6W6kuQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBAHc0CKDpFiMXgF9noJmGzhmtk2MB8GA1UdIwQY MBaAFEZJUrwWVEHsbi4gEMkz3IMPNhcxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQt ODQyODU4MTIyYmJjLzEvRUFkelFJb09rV0l4ZUFYMmVnbVliT0dhMlRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQtODQyODU4MTIyYmJj LzEvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSWNMA0G CSqGSIb3DQEBCwUAA4IBAQAFCDC6Bl/isgh+9ba6vYfJ4Edz/G6yIKaWfyx3eGGY u6x4Wgn9ZFc24DyX2YTkpP1DAVeHUU38HpkWQ/7r8ZnNZ6CbylMfAmvU8uWkCFG2 hqsmFGi9yTusRkDzJB2tZ3AgIp0Oz+qtVD1M5aJjYxaySvFVv0GnxA4+YOjtppxK 64EadfAXNNUoMvkD+8/bGd1doG/OVvUYu1YUjWxJPfKTGuUK7xD2KBzEjtbVPqEw BVHxvBpkSZ5vNahzbvMGQY2NOR1YPwzeUcX4z2zcpTgcx4vnlOXjKRVrTHOF1ypy xI0wj98JKWC9c2HrOCU9oTALMGwyhlnitJqjS2FbiaMR -----END CERTIFICATE-----Generated at Wed Jan 7 22:33:34 2026 by rpki-client