This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/Eqnug_BZOFvr_XQwnuEd5hl709E.roa File: Eqnug_BZOFvr_XQwnuEd5hl709E.roa (raw, json) Hash identifier: ASSRzd0xPDHtXxdgI0+V2+QGXLiUdHlfEDVBKcrh7U8= Subject key identifier: 12:A9:EE:83:F0:59:38:5B:EB:FD:74:30:9E:E1:1D:E6:19:7B:D3:D1 Certificate issuer: /CN=2669dd2f4da888c27d130f99e88a2e0c590aad2f Certificate serial: 019B47B5B66FEFFC6C5961F58BFBC892C0CC Authority key identifier: 26:69:DD:2F:4D:A8:88:C2:7D:13:0F:99:E8:8A:2E:0C:59:0A:AD:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/Eqnug_BZOFvr_XQwnuEd5hl709E.roa Signing time: Mon 22 Dec 2025 20:17:29 +0000 ROA not before: Mon 22 Dec 2025 20:17:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 39637 IP address blocks: 194.42.122.0/23 maxlen: 24 195.72.122.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 17:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:b5:b6:6f:ef:fc:6c:59:61:f5:8b:fb:c8:92:c0:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2669dd2f4da888c27d130f99e88a2e0c590aad2f Validity Not Before: Dec 22 20:17:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=12a9ee83f059385bebfd74309ee11de6197bd3d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:39:c4:26:3a:e0:0b:6d:28:bf:1e:19:dc:38: cf:b4:5d:ed:24:c6:cd:8c:29:fa:e7:5a:16:7b:22: 65:ed:b1:73:9c:0f:51:68:f0:3c:36:b0:35:4c:7c: 0e:74:1b:05:65:b4:75:74:30:7e:ba:12:da:3a:7e: fb:4e:f7:5d:73:24:70:ec:e6:35:cb:41:2f:ab:c6: 4c:36:05:9a:48:8a:9d:86:db:cf:42:9e:bb:ba:9d: e3:71:44:36:86:2b:ae:a1:d7:3b:d7:ac:6d:6e:ec: 16:3b:de:dd:ee:5d:07:00:9f:b2:82:64:01:01:d6: 68:16:2a:b4:3d:35:80:58:50:6e:47:3b:ed:64:f7: e9:88:46:44:e4:d3:09:a3:02:42:9f:3b:a0:6c:d0: 6a:ea:74:c4:20:9f:34:23:9d:49:70:28:a9:9a:19: e8:5a:19:cf:5a:99:45:e1:fc:7b:a9:c6:38:07:df: 4c:b4:6f:f1:0d:bd:7f:f6:c5:ae:b9:18:6a:49:57: 93:fe:3e:28:5e:de:89:d7:62:4f:5a:91:e7:5a:d7: 2a:77:a6:f3:e2:e9:3b:f6:2f:80:36:68:78:be:8e: c1:2f:d3:f1:72:0f:db:c7:ff:43:d4:3f:0f:57:80: f7:ef:d7:04:57:1f:33:03:80:f4:36:7d:54:89:80: f8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:A9:EE:83:F0:59:38:5B:EB:FD:74:30:9E:E1:1D:E6:19:7B:D3:D1 X509v3 Authority Key Identifier: keyid:26:69:DD:2F:4D:A8:88:C2:7D:13:0F:99:E8:8A:2E:0C:59:0A:AD:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/Eqnug_BZOFvr_XQwnuEd5hl709E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.42.122.0/23 195.72.122.0/23 Signature Algorithm: sha256WithRSAEncryption 23:5b:48:db:2f:63:03:9a:7a:70:f1:04:83:a6:28:de:33:17: fd:ce:30:43:c8:a9:47:cc:e1:3e:03:2e:ca:b3:7c:aa:9e:42: b0:40:2f:ea:14:67:f0:41:a3:4c:31:88:76:a7:9c:30:3e:e8: 9b:8e:84:72:de:e0:8c:85:81:ae:b9:d2:23:c3:56:01:73:21: 0c:ca:88:18:08:23:48:e2:7c:40:29:4a:02:98:c2:77:a7:b4: 5f:87:45:b2:8e:89:a8:e9:67:1c:e1:66:5f:97:f3:a8:38:7a: 1b:08:b5:e6:a9:0d:9c:ea:c8:88:35:c1:fc:80:e9:93:c5:29: e4:b6:49:d8:78:cf:b0:61:83:77:65:3e:a0:6c:35:cf:8e:a7: e1:22:11:1d:ef:8f:43:44:a5:a6:bd:a1:f7:15:34:b3:aa:9e: 21:fd:93:4d:8f:48:4e:45:68:77:5f:0d:90:19:45:95:b3:f1: a6:be:60:34:bb:bb:74:40:50:b1:ab:27:3d:21:b0:bd:3b:75: b9:17:1b:57:db:bd:87:83:6f:1a:fd:5a:16:5a:05:6e:3b:4e: 0f:c3:59:50:f7:38:01:c2:5a:a9:fb:93:15:91:ea:76:2b:36: 6d:59:5b:ce:38:b0:71:d5:27:46:b7:c8:95:9f:2e:37:ed:51: 57:a0:48:3c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZtHtbZv7/xsWWH1i/vIksDMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2NjlkZDJmNGRhODg4YzI3ZDEzMGY5OWU4OGEyZTBjNTkw YWFkMmYwHhcNMjUxMjIyMjAxNzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMmE5ZWU4M2YwNTkzODViZWJmZDc0MzA5ZWUxMWRlNjE5N2JkM2QxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDnEJjrgC20ovx4Z3DjPtF3tJMbN jCn651oWeyJl7bFznA9RaPA8NrA1THwOdBsFZbR1dDB+uhLaOn77TvddcyRw7OY1 y0Evq8ZMNgWaSIqdhtvPQp67up3jcUQ2hiuuodc716xtbuwWO97d7l0HAJ+ygmQB AdZoFiq0PTWAWFBuRzvtZPfpiEZE5NMJowJCnzugbNBq6nTEIJ80I51JcCipmhno WhnPWplF4fx7qcY4B99MtG/xDb1/9sWuuRhqSVeT/j4oXt6J12JPWpHnWtcqd6bz 4uk79i+ANmh4vo7BL9Pxcg/bx/9D1D8PV4D379cEVx8zA4D0Nn1UiYD4uwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBKp7oPwWThb6/10MJ7hHeYZe9PRMB8GA1UdIwQY MBaAFCZp3S9NqIjCfRMPmeiKLgxZCq0vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSm1uZEwwMm9pTUo5RXctWjZJb3VERmtLclM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9jYWI1ODgtMzJmZC00YTZkLWEwZTIt ZjRkMzBhNzk0M2Y2LzEvRXFudWdfQlpPRnZyX1hRd251RWQ1aGw3MDlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9jYWI1ODgtMzJmZC00YTZkLWEwZTItZjRkMzBhNzk0M2Y2 LzEvSm1uZEwwMm9pTUo5RXctWjZJb3VERmtLclM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwip6AwQB w0h6MA0GCSqGSIb3DQEBCwUAA4IBAQAjW0jbL2MDmnpw8QSDpijeMxf9zjBDyKlH zOE+Ay7Ks3yqnkKwQC/qFGfwQaNMMYh2p5wwPuibjoRy3uCMhYGuudIjw1YBcyEM yogYCCNI4nxAKUoCmMJ3p7Rfh0Wyjomo6Wcc4WZfl/OoOHobCLXmqQ2c6siINcH8 gOmTxSnktknYeM+wYYN3ZT6gbDXPjqfhIhEd749DRKWmvaH3FTSzqp4h/ZNNj0hO RWh3Xw2QGUWVs/GmvmA0u7t0QFCxqyc9IbC9O3W5FxtX272Hg28a/VoWWgVuO04P w1lQ9zgBwlqp+5MVkep2KzZtWVvOOLBx1SdGt8iVny437VFXoEg8 -----END CERTIFICATE-----Generated at Thu Dec 25 01:16:46 2025 by rpki-client