This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/qEsk61krs4UNghsWKgM1rpZTsAA.roa File: qEsk61krs4UNghsWKgM1rpZTsAA.roa (raw, json) Hash identifier: zR7J3cxzeRnLNGTYl/CdMoo52lC6GVsx4Ud+EzU7nAE= Subject key identifier: A8:4B:24:EB:59:2B:B3:85:0D:82:1B:16:2A:03:35:AE:96:53:B0:00 Certificate issuer: /CN=e7c07db9880133c5cdce005bca111b552cd14c53 Certificate serial: 019B7B3698D3299FF1F71C8392B4BF8C48A6 Authority key identifier: E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/qEsk61krs4UNghsWKgM1rpZTsAA.roa Signing time: Thu 01 Jan 2026 20:18:54 +0000 ROA not before: Thu 01 Jan 2026 20:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47536 IP address blocks: 45.12.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.mft rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:98:d3:29:9f:f1:f7:1c:83:92:b4:bf:8c:48:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7c07db9880133c5cdce005bca111b552cd14c53 Validity Not Before: Jan 1 20:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a84b24eb592bb3850d821b162a0335ae9653b000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:06:8d:13:05:09:8d:ac:f6:ba:69:f8:7d:e0: 3e:32:a9:24:f0:79:c8:91:f1:0d:45:eb:2a:af:61: 3f:32:ba:87:d8:d9:03:ac:90:e8:36:70:14:ef:cd: 36:ff:87:ce:da:e8:9d:e8:b0:ab:fb:d8:12:4a:27: 85:96:9b:10:5b:15:3d:7b:0b:58:8c:29:5e:f5:4c: a4:a8:2c:ee:11:a5:94:1c:19:86:c0:a5:96:66:41: 09:a9:de:d0:3c:df:c2:61:a3:6f:a3:17:67:cc:d5: 1e:cd:44:da:40:b6:f5:9c:82:b4:cd:33:a2:ef:7c: 5f:57:79:7a:4b:1a:50:fd:26:55:92:90:cc:6f:68: 76:56:78:fb:91:11:13:04:a7:48:d6:30:75:1b:d6: 2b:a7:8c:32:eb:be:b5:ca:c8:ef:98:b6:b6:7d:73: d9:f1:8d:c2:34:59:1f:83:9f:bb:d8:1e:3a:1e:b1: b1:e6:3c:78:1d:29:87:23:ca:61:b8:ab:40:c2:29: f5:04:aa:f0:f8:d1:d2:3e:e5:a3:74:aa:58:9e:ec: 43:a7:e4:a8:65:c1:0d:4c:72:5f:58:91:f6:d8:c5: 2a:00:29:24:83:df:d2:be:49:ef:20:9c:9d:d1:c5: 81:be:02:03:80:d5:e3:d4:47:08:4d:19:0a:17:17: d9:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:4B:24:EB:59:2B:B3:85:0D:82:1B:16:2A:03:35:AE:96:53:B0:00 X509v3 Authority Key Identifier: keyid:E7:C0:7D:B9:88:01:33:C5:CD:CE:00:5B:CA:11:1B:55:2C:D1:4C:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58B9uYgBM8XNzgBbyhEbVSzRTFM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/qEsk61krs4UNghsWKgM1rpZTsAA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8cdd49-c094-4c6a-918c-0aa463cdfca0/1/58B9uYgBM8XNzgBbyhEbVSzRTFM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.12.201.0/24 Signature Algorithm: sha256WithRSAEncryption 94:e4:1e:e6:3f:63:62:26:0a:1b:8b:cb:74:e1:25:70:32:c2: c4:3d:c1:9a:fd:92:fc:4d:2a:1e:e6:ef:8b:87:60:d5:82:c8: 64:46:eb:2d:6e:73:18:56:ce:9b:ef:b1:b8:01:a1:26:88:24: bf:23:36:c5:4f:b8:51:12:84:3c:ba:88:59:a2:04:e9:75:1d: 5e:77:d3:07:a5:68:cc:7f:57:24:c5:a1:ab:b4:fd:b4:6f:ed: 88:54:c2:1e:81:84:7c:17:61:74:cc:3d:ec:c5:98:95:eb:ba: 6c:0b:ec:46:46:a3:05:ed:86:fc:0c:01:07:b8:37:f5:9a:d7: cf:b7:62:e3:01:a4:a8:9e:f3:7a:7d:d4:05:48:0e:ba:db:f4: b9:c0:7f:1e:87:13:f4:8a:89:6f:76:4a:87:94:57:85:4e:90: 93:8d:2d:05:fb:72:bb:98:40:b4:58:bd:0a:a2:54:41:31:2d: f8:ed:05:9e:3c:34:6d:88:80:f0:a7:c4:3d:79:7c:f5:a7:3c: 20:d2:36:20:ac:03:6d:21:a8:da:64:ea:a8:af:24:60:65:56: 28:13:e1:9e:0f:c9:e1:9f:52:05:85:06:34:4a:5d:74:de:b0: 64:93:e8:af:e4:d6:b5:b2:18:75:96:77:34:5f:95:8a:05:ee: b4:31:41:5d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NpjTKZ/x9xyDkrS/jEimMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3YzA3ZGI5ODgwMTMzYzVjZGNlMDA1YmNhMTExYjU1MmNk MTRjNTMwHhcNMjYwMTAxMjAxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhODRiMjRlYjU5MmJiMzg1MGQ4MjFiMTYyYTAzMzVhZTk2NTNiMDAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4QaNEwUJjaz2umn4feA+Mqkk8HnI kfENResqr2E/MrqH2NkDrJDoNnAU7802/4fO2uid6LCr+9gSSieFlpsQWxU9ewtY jCle9UykqCzuEaWUHBmGwKWWZkEJqd7QPN/CYaNvoxdnzNUezUTaQLb1nIK0zTOi 73xfV3l6SxpQ/SZVkpDMb2h2Vnj7kRETBKdI1jB1G9Yrp4wy6761ysjvmLa2fXPZ 8Y3CNFkfg5+72B46HrGx5jx4HSmHI8phuKtAwin1BKrw+NHSPuWjdKpYnuxDp+So ZcENTHJfWJH22MUqACkkg9/SvknvIJyd0cWBvgIDgNXj1EcITRkKFxfZeQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKhLJOtZK7OFDYIbFioDNa6WU7AAMB8GA1UdIwQY MBaAFOfAfbmIATPFzc4AW8oRG1Us0UxTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNThCOXVZZ0JNOFhOemdCYnloRWJWU3pSVEZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi84Y2RkNDktYzA5NC00YzZhLTkxOGMt MGFhNDYzY2RmY2EwLzEvcUVzazYxa3JzNFVOZ2hzV0tnTTFycFpUc0FBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi84Y2RkNDktYzA5NC00YzZhLTkxOGMtMGFhNDYzY2RmY2Ew LzEvNThCOXVZZ0JNOFhOemdCYnloRWJWU3pSVEZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQzJMA0G CSqGSIb3DQEBCwUAA4IBAQCU5B7mP2NiJgobi8t04SVwMsLEPcGa/ZL8TSoe5u+L h2DVgshkRustbnMYVs6b77G4AaEmiCS/IzbFT7hREoQ8uohZogTpdR1ed9MHpWjM f1ckxaGrtP20b+2IVMIegYR8F2F0zD3sxZiV67psC+xGRqMF7Yb8DAEHuDf1mtfP t2LjAaSonvN6fdQFSA662/S5wH8ehxP0iolvdkqHlFeFTpCTjS0F+3K7mEC0WL0K olRBMS347QWePDRtiIDwp8Q9eXz1pzwg0jYgrANtIajaZOqoryRgZVYoE+GeD8nh n1IFhQY0Sl103rBkk+iv5Na1shh1lnc0X5WKBe60MUFd -----END CERTIFICATE-----Generated at Sun Jan 25 21:58:35 2026 by rpki-client