This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/eE8w7Gi2e_s5rLXawSVZCcaRlvk.roa File: eE8w7Gi2e_s5rLXawSVZCcaRlvk.roa (raw, json) Hash identifier: g0rKhAIGDEgpNj647haSdnpBK13OSalrt6qPIIz9V48= Subject key identifier: 78:4F:30:EC:68:B6:7B:FB:39:AC:B5:DA:C1:25:59:09:C6:91:96:F9 Certificate issuer: /CN=0bf543e23e29fb03748d0939726f30fe9affa19e Certificate serial: 019B77597933B84D72619100EAFEE9920958 Authority key identifier: 0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/eE8w7Gi2e_s5rLXawSVZCcaRlvk.roa Signing time: Thu 01 Jan 2026 02:18:30 +0000 ROA not before: Thu 01 Jan 2026 02:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204829 IP address blocks: 45.66.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:79:33:b8:4d:72:61:91:00:ea:fe:e9:92:09:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bf543e23e29fb03748d0939726f30fe9affa19e Validity Not Before: Jan 1 02:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=784f30ec68b67bfb39acb5dac1255909c69196f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8c:4d:7e:f5:88:8c:16:fe:92:1b:8f:5d:1f: b6:8c:71:52:13:22:1d:2c:08:49:f7:9e:2f:f8:88: e7:0d:c9:b9:a2:1b:81:3e:85:74:12:cc:d4:4e:f5: 1b:8b:1b:c6:be:b6:3c:98:02:09:e8:e1:62:b9:1e: 95:14:e4:36:bd:a7:f3:34:39:a1:bb:ca:66:6c:4c: 88:5a:cc:2d:16:f0:1f:a1:88:60:20:c8:0a:de:40: c8:d1:fd:3a:b8:9a:a1:be:dd:f9:94:a1:76:5f:b9: 3e:e6:ca:c7:da:7f:bc:bf:4d:12:d2:ec:c7:66:43: c4:6a:82:91:d9:cd:8d:6f:86:97:6d:0b:8b:27:e5: 80:fe:6c:91:a5:f6:73:af:21:41:b9:a2:74:27:59: 68:c5:9c:74:88:d4:88:89:7b:02:4c:b9:b5:6d:8c: 5d:6a:11:72:97:6b:84:d2:f8:cc:f7:f9:2c:68:c8: 17:c0:72:24:98:e8:bc:fd:a4:a0:23:d0:9c:29:21: dd:62:cd:7b:a9:b1:86:2e:94:81:a9:75:d8:7c:34: ca:4b:72:ca:f1:5c:3a:6b:08:ac:57:0f:8e:5f:b4: 00:35:3f:6b:40:a4:cd:fa:ca:f3:79:cf:23:a2:db: ce:ff:a6:ba:e4:c0:c2:70:1c:11:f6:0a:e5:d1:97: 63:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:4F:30:EC:68:B6:7B:FB:39:AC:B5:DA:C1:25:59:09:C6:91:96:F9 X509v3 Authority Key Identifier: keyid:0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/eE8w7Gi2e_s5rLXawSVZCcaRlvk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.66.55.0/24 Signature Algorithm: sha256WithRSAEncryption 49:a9:2d:b3:7a:7e:c0:aa:94:62:a2:32:93:9b:17:98:7c:b7: 48:fd:0e:50:b6:08:45:5f:19:61:2b:c5:30:39:f4:9a:e2:30: 18:51:9f:ac:47:2d:59:40:13:eb:56:69:18:33:f5:7c:13:8f: e7:6d:35:b3:36:7a:ac:7d:3f:f1:f0:24:91:69:d6:6d:40:7b: f4:62:8c:5a:c9:cd:d6:33:36:40:4e:3b:9d:f9:3c:d4:1d:d7: 06:c7:bb:f5:59:bb:65:17:1b:bf:e7:93:85:89:c5:b2:2a:88: 48:3d:48:86:94:a2:55:f2:4f:09:d3:0f:5a:a8:dd:ac:b6:d1: e1:80:51:02:40:30:7d:ea:36:55:e1:4b:80:a5:f5:7c:e8:63: ca:01:d7:a2:82:b4:b1:6e:1f:b1:42:a8:d8:a3:2a:bb:9a:62: 2b:64:1d:14:0b:64:8c:06:f0:fe:20:e7:d4:58:8a:38:87:6d: 51:af:63:bb:9c:f7:ce:de:c7:26:9c:b5:db:61:31:41:ce:55: ab:bc:72:9e:dd:aa:75:c9:7e:32:90:5f:bf:d7:b7:1d:d4:7b: 38:44:b3:2c:1c:cf:20:95:c2:f3:b8:82:18:c5:61:46:93:75: 70:56:23:ab:44:11:ed:ea:9d:3b:a3:32:a7:e9:85:a7:61:be: f0:5b:bc:c7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WXkzuE1yYZEA6v7pkglYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiZjU0M2UyM2UyOWZiMDM3NDhkMDkzOTcyNmYzMGZlOWFm ZmExOWUwHhcNMjYwMTAxMDIxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODRmMzBlYzY4YjY3YmZiMzlhY2I1ZGFjMTI1NTkwOWM2OTE5NmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4xNfvWIjBb+khuPXR+2jHFSEyId LAhJ954v+IjnDcm5ohuBPoV0EszUTvUbixvGvrY8mAIJ6OFiuR6VFOQ2vafzNDmh u8pmbEyIWswtFvAfoYhgIMgK3kDI0f06uJqhvt35lKF2X7k+5srH2n+8v00S0uzH ZkPEaoKR2c2Nb4aXbQuLJ+WA/myRpfZzryFBuaJ0J1loxZx0iNSIiXsCTLm1bYxd ahFyl2uE0vjM9/ksaMgXwHIkmOi8/aSgI9CcKSHdYs17qbGGLpSBqXXYfDTKS3LK 8Vw6awisVw+OX7QANT9rQKTN+srzec8jotvO/6a65MDCcBwR9grl0Zdj1wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHhPMOxotnv7Oay12sElWQnGkZb5MB8GA1UdIwQY MBaAFAv1Q+I+KfsDdI0JOXJvMP6a/6GeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ19WRDRqNHAtd04walFrNWNtOHdfcHJfb1o0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9hZmEzNGMtZjNmMC00MDVjLWIwODMt YTM1ZmM0MzhkNGNhLzEvZUU4dzdHaTJlX3M1ckxYYXdTVlpDY2FSbHZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9hZmEzNGMtZjNmMC00MDVjLWIwODMtYTM1ZmM0MzhkNGNh LzEvQ19WRDRqNHAtd04walFrNWNtOHdfcHJfb1o0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUI3MA0G CSqGSIb3DQEBCwUAA4IBAQBJqS2zen7AqpRiojKTmxeYfLdI/Q5QtghFXxlhK8Uw OfSa4jAYUZ+sRy1ZQBPrVmkYM/V8E4/nbTWzNnqsfT/x8CSRadZtQHv0Yoxayc3W MzZATjud+TzUHdcGx7v1WbtlFxu/55OFicWyKohIPUiGlKJV8k8J0w9aqN2sttHh gFECQDB96jZV4UuApfV86GPKAdeigrSxbh+xQqjYoyq7mmIrZB0UC2SMBvD+IOfU WIo4h21Rr2O7nPfO3scmnLXbYTFBzlWrvHKe3ap1yX4ykF+/17cd1Hs4RLMsHM8g lcLzuIIYxWFGk3VwViOrRBHt6p07ozKn6YWnYb7wW7zH -----END CERTIFICATE-----Generated at Sun Jan 25 23:03:51 2026 by rpki-client