This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/ei8OTREn63voSBE5nxK-2OquN1c.roa File: ei8OTREn63voSBE5nxK-2OquN1c.roa (raw, json) Hash identifier: rtdm6RL7c+SJK/SooK4jKjSilqnAkSqbJlBiuodfm0c= Subject key identifier: 7A:2F:0E:4D:11:27:EB:7B:E8:48:11:39:9F:12:BE:D8:EA:AE:37:57 Certificate issuer: /CN=52ceee2d6d7a50c92499da1a21f2abb7a2a774c8 Certificate serial: 019B7C80A52575DFAC3B2B671CFD216537A2 Authority key identifier: 52:CE:EE:2D:6D:7A:50:C9:24:99:DA:1A:21:F2:AB:B7:A2:A7:74:C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/ei8OTREn63voSBE5nxK-2OquN1c.roa Signing time: Fri 02 Jan 2026 02:19:24 +0000 ROA not before: Fri 02 Jan 2026 02:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6786 IP address blocks: 62.169.4.0/24 maxlen: 24 62.169.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.crl rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.mft rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:a5:25:75:df:ac:3b:2b:67:1c:fd:21:65:37:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52ceee2d6d7a50c92499da1a21f2abb7a2a774c8 Validity Not Before: Jan 2 02:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a2f0e4d1127eb7be84811399f12bed8eaae3757 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7f:bc:20:65:56:1f:7a:3d:f8:81:19:50:9f: 32:a4:08:d9:3c:61:4f:6a:fb:d7:ab:53:09:93:38: 87:96:4a:a4:0e:54:41:d7:d0:55:a2:4a:f5:4e:58: 33:19:7e:53:f2:9d:01:dc:01:f5:7d:d3:7c:7b:7b: 92:ff:50:34:be:ae:df:8a:f1:af:81:ff:e8:59:18: 67:87:5e:7d:6c:24:5c:34:99:5e:f4:3b:17:95:7f: 0c:0d:d9:64:71:0e:f2:5e:c1:47:1f:f2:7a:af:c9: f6:b7:dc:90:0a:d5:b9:da:3c:fb:a4:31:1b:18:a5: 67:96:86:ce:33:95:bf:05:69:dd:ac:8d:3c:c0:b4: 1e:d1:d3:43:7d:8d:bc:6a:24:4f:ce:d9:85:f1:89: 7a:4b:8d:37:56:ef:da:ae:74:09:1e:ca:0b:1f:0b: f6:ed:f5:f6:08:82:55:be:81:18:72:92:3b:25:2c: 6d:c2:af:6e:82:25:8a:af:6e:1c:34:29:0d:a7:3d: 46:32:e5:0f:6e:88:eb:ad:f8:23:ca:b9:14:2e:10: 37:38:09:4b:fb:a9:e6:82:64:d3:16:73:08:5a:73: 8a:dd:ea:26:97:9a:65:cd:bd:c6:c4:a7:53:b2:51: 4f:f3:1e:f1:de:cd:77:c7:7c:5b:a7:ae:b2:8c:87: 6c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:2F:0E:4D:11:27:EB:7B:E8:48:11:39:9F:12:BE:D8:EA:AE:37:57 X509v3 Authority Key Identifier: keyid:52:CE:EE:2D:6D:7A:50:C9:24:99:DA:1A:21:F2:AB:B7:A2:A7:74:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us7uLW16UMkkmdoaIfKrt6KndMg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/ei8OTREn63voSBE5nxK-2OquN1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/decaeb-3f95-4f2a-af65-0c020a7e4a44/1/Us7uLW16UMkkmdoaIfKrt6KndMg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.169.4.0/24 62.169.7.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:bc:f7:58:b0:de:bd:9b:d3:b4:a9:a8:ef:af:68:94:f7:63: 63:d4:7a:e0:d4:cb:2d:86:41:f7:82:dc:c3:3f:ad:55:23:35: 15:0c:99:55:2e:c0:33:e8:86:ba:98:c6:79:35:de:ca:61:e7: 39:03:f2:dd:42:14:e3:7e:62:51:00:5a:45:06:90:dc:36:34: 29:40:b2:64:b5:e2:75:fa:49:f6:3d:2d:f0:73:f9:85:1c:24: 1f:1a:8e:16:4c:a2:7e:3e:fe:0c:e8:10:11:65:15:67:39:62: dd:12:b2:5f:77:d6:2c:ad:a5:b9:1f:7f:5e:69:67:a6:f1:b1: 3e:69:a2:0b:c7:c3:dc:f0:03:68:a9:7e:56:93:c2:4a:56:ef: 77:17:c3:0a:a5:a8:e5:43:36:81:3c:79:8e:fb:2d:38:9e:98: d7:ec:09:42:95:47:13:a6:3a:10:1b:ed:84:1c:9c:29:73:5b: 97:06:8e:7a:bb:5d:0d:3e:95:47:f2:8a:4b:04:bc:93:aa:d2: 1d:7b:d5:1f:49:5a:34:6b:4e:c8:45:f8:24:e0:c7:0f:45:30: 6c:9d:a8:95:cb:b3:22:01:c2:72:88:54:20:c9:3b:4f:2b:5e: e2:ca:e6:50:e5:36:38:03:ff:11:58:d2:33:08:35:a9:f2:5a: db:b9:8e:c1 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8gKUldd+sOytnHP0hZTeiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyY2VlZTJkNmQ3YTUwYzkyNDk5ZGExYTIxZjJhYmI3YTJh Nzc0YzgwHhcNMjYwMTAyMDIxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTJmMGU0ZDExMjdlYjdiZTg0ODExMzk5ZjEyYmVkOGVhYWUzNzU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3+8IGVWH3o9+IEZUJ8ypAjZPGFP avvXq1MJkziHlkqkDlRB19BVokr1TlgzGX5T8p0B3AH1fdN8e3uS/1A0vq7fivGv gf/oWRhnh159bCRcNJle9DsXlX8MDdlkcQ7yXsFHH/J6r8n2t9yQCtW52jz7pDEb GKVnlobOM5W/BWndrI08wLQe0dNDfY28aiRPztmF8Yl6S403Vu/arnQJHsoLHwv2 7fX2CIJVvoEYcpI7JSxtwq9ugiWKr24cNCkNpz1GMuUPbojrrfgjyrkULhA3OAlL +6nmgmTTFnMIWnOK3eoml5plzb3GxKdTslFP8x7x3s13x3xbp66yjIdshQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHovDk0RJ+t76EgROZ8SvtjqrjdXMB8GA1UdIwQY MBaAFFLO7i1telDJJJnaGiHyq7eip3TIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXM3dUxXMTZVTWtrbWRvYUlmS3J0NktuZE1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9kZWNhZWItM2Y5NS00ZjJhLWFmNjUt MGMwMjBhN2U0YTQ0LzEvZWk4T1RSRW42M3ZvU0JFNW54Sy0yT3F1TjFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9kZWNhZWItM2Y5NS00ZjJhLWFmNjUtMGMwMjBhN2U0YTQ0 LzEvVXM3dUxXMTZVTWtrbWRvYUlmS3J0NktuZE1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAPqkEAwQA PqkHMA0GCSqGSIb3DQEBCwUAA4IBAQCfvPdYsN69m9O0qajvr2iU92Nj1Hrg1Mst hkH3gtzDP61VIzUVDJlVLsAz6Ia6mMZ5Nd7KYec5A/LdQhTjfmJRAFpFBpDcNjQp QLJkteJ1+kn2PS3wc/mFHCQfGo4WTKJ+Pv4M6BARZRVnOWLdErJfd9YsraW5H39e aWem8bE+aaILx8Pc8ANoqX5Wk8JKVu93F8MKpajlQzaBPHmO+y04npjX7AlClUcT pjoQG+2EHJwpc1uXBo56u10NPpVH8opLBLyTqtIde9UfSVo0a07IRfgk4McPRTBs naiVy7MiAcJyiFQgyTtPK17iyuZQ5TY4A/8RWNIzCDWp8lrbuY7B -----END CERTIFICATE-----Generated at Sun Jan 25 23:03:49 2026 by rpki-client