This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/EtqpvJ3wwieaUcuII15zgYzT3Po.roa File: EtqpvJ3wwieaUcuII15zgYzT3Po.roa (raw, json) Hash identifier: tLmfVIM+XcsVwC8W6onwkX2PrlAqRhgWxMYsh665F2M= Subject key identifier: 12:DA:A9:BC:9D:F0:C2:27:9A:51:CB:88:23:5E:73:81:8C:D3:DC:FA Certificate issuer: /CN=464952bc165441ec6e2e2010c933dc830f361731 Certificate serial: 019B7C135F4142BA131058F71FDA2F626796 Authority key identifier: 46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/EtqpvJ3wwieaUcuII15zgYzT3Po.roa Signing time: Fri 02 Jan 2026 00:20:02 +0000 ROA not before: Fri 02 Jan 2026 00:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58074 IP address blocks: 89.37.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:5f:41:42:ba:13:10:58:f7:1f:da:2f:62:67:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=464952bc165441ec6e2e2010c933dc830f361731 Validity Not Before: Jan 2 00:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=12daa9bc9df0c2279a51cb88235e73818cd3dcfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:60:db:1f:9d:4a:bd:80:bf:63:c7:3f:53:1a: 78:81:ee:18:b4:c5:5f:ef:21:bf:f8:41:91:a5:0e: d1:9d:58:df:ee:41:07:fe:11:73:94:ed:d2:6a:26: d2:c7:55:4a:c4:46:63:11:6b:ff:28:6d:52:0c:c7: ee:b9:84:cb:33:4e:1d:10:50:8b:e4:ba:93:40:49: a3:e6:1f:ab:55:24:5f:33:ba:79:fa:40:1a:b7:92: da:cc:26:18:85:20:52:7f:92:89:7d:db:bd:f0:1f: 09:18:e7:98:a4:8e:35:70:da:6d:46:f2:1d:0d:dd: ed:da:48:2d:a8:89:f8:94:ee:fe:f7:1b:3c:d9:09: eb:38:a2:1a:6c:ca:63:1a:84:c2:44:7e:dd:83:42: 34:c3:ab:5d:3d:27:f0:44:b9:a3:fe:a1:27:dc:0a: 3c:8a:a3:40:8b:21:71:e0:f3:cb:b5:bf:ef:fd:a9: ba:35:f5:5d:f3:eb:f7:3c:83:e1:c5:8a:0e:b9:9e: 61:4f:b1:ae:83:e4:f4:f0:55:5c:4e:6e:ac:47:14: 49:34:0c:c3:04:cb:b9:a3:59:a2:14:50:1d:62:11: d8:6d:9e:aa:af:45:24:2f:71:14:a2:ba:3a:eb:8d: 89:28:2c:c8:1c:e8:2c:3a:4a:83:26:fd:34:5d:f6: d7:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:DA:A9:BC:9D:F0:C2:27:9A:51:CB:88:23:5E:73:81:8C:D3:DC:FA X509v3 Authority Key Identifier: keyid:46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/EtqpvJ3wwieaUcuII15zgYzT3Po.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.37.139.0/24 Signature Algorithm: sha256WithRSAEncryption b2:db:09:ae:d0:35:07:ac:8f:82:9a:59:c9:eb:ee:24:38:85: f6:fb:1c:ab:4c:c6:81:21:a7:97:33:fb:98:5d:48:86:ee:81: 2c:5e:3a:d9:4f:95:d0:35:a6:0c:a1:93:e6:06:02:49:05:0a: b0:34:1e:ba:61:f4:e1:ad:54:bd:d5:9b:ff:44:43:2d:58:83: 0e:5d:47:80:e2:96:03:6a:83:23:b0:44:b6:cb:23:3b:c3:0a: 1c:43:57:cf:0f:e3:05:c1:f3:67:e3:76:97:e2:9d:70:72:51: 94:e1:c9:fa:3d:02:3a:98:e3:2f:cf:50:3d:cf:c9:00:0e:52: 6b:d5:d8:28:19:bf:cb:89:48:66:ee:63:f8:f3:61:ab:d8:6b: fc:24:6f:85:b7:fc:5f:e0:b8:91:58:2b:d2:81:58:fa:08:9f: bb:d6:89:62:1a:2b:f8:75:7c:b9:ba:d5:48:5c:98:39:97:b5: f4:d5:f1:c3:f7:2f:f6:87:d3:04:eb:16:c9:5e:07:94:d1:0c: 06:15:c4:53:3f:93:9a:91:56:b6:44:8d:3a:27:55:0a:6c:52: 3d:dc:0b:1f:51:31:16:8b:0e:31:e4:d6:14:c1:24:0d:f1:00: a8:4e:aa:e4:83:36:ff:4f:a6:37:72:d7:71:75:44:c7:a6:8f: 1e:85:3c:f3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E19BQroTEFj3H9ovYmeWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NDk1MmJjMTY1NDQxZWM2ZTJlMjAxMGM5MzNkYzgzMGYz NjE3MzEwHhcNMjYwMTAyMDAyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMmRhYTliYzlkZjBjMjI3OWE1MWNiODgyMzVlNzM4MThjZDNkY2ZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5GDbH51KvYC/Y8c/Uxp4ge4YtMVf 7yG/+EGRpQ7RnVjf7kEH/hFzlO3SaibSx1VKxEZjEWv/KG1SDMfuuYTLM04dEFCL 5LqTQEmj5h+rVSRfM7p5+kAat5LazCYYhSBSf5KJfdu98B8JGOeYpI41cNptRvId Dd3t2kgtqIn4lO7+9xs82QnrOKIabMpjGoTCRH7dg0I0w6tdPSfwRLmj/qEn3Ao8 iqNAiyFx4PPLtb/v/am6NfVd8+v3PIPhxYoOuZ5hT7Gug+T08FVcTm6sRxRJNAzD BMu5o1miFFAdYhHYbZ6qr0UkL3EUoro6642JKCzIHOgsOkqDJv00XfbXTwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBLaqbyd8MInmlHLiCNec4GM09z6MB8GA1UdIwQY MBaAFEZJUrwWVEHsbi4gEMkz3IMPNhcxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQt ODQyODU4MTIyYmJjLzEvRXRxcHZKM3d3aWVhVWN1SUkxNXpnWXpUM1BvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQtODQyODU4MTIyYmJj LzEvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSWLMA0G CSqGSIb3DQEBCwUAA4IBAQCy2wmu0DUHrI+CmlnJ6+4kOIX2+xyrTMaBIaeXM/uY XUiG7oEsXjrZT5XQNaYMoZPmBgJJBQqwNB66YfThrVS91Zv/REMtWIMOXUeA4pYD aoMjsES2yyM7wwocQ1fPD+MFwfNn43aX4p1wclGU4cn6PQI6mOMvz1A9z8kADlJr 1dgoGb/LiUhm7mP482Gr2Gv8JG+Ft/xf4LiRWCvSgVj6CJ+71oliGiv4dXy5utVI XJg5l7X01fHD9y/2h9ME6xbJXgeU0QwGFcRTP5OakVa2RI06J1UKbFI93AsfUTEW iw4x5NYUwSQN8QCoTqrkgzb/T6Y3ctdxdUTHpo8ehTzz -----END CERTIFICATE-----Generated at Sat Jan 3 06:27:42 2026 by rpki-client