This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/eQRk02-rqRsoVMzAY3_UPFAuAlo.roa File: eQRk02-rqRsoVMzAY3_UPFAuAlo.roa (raw, json) Hash identifier: 7f1oukrkE94Uqo0kLbpw4xRpMp5ggZCo2gEHz8zdJ4w= Subject key identifier: 79:04:64:D3:6F:AB:A9:1B:28:54:CC:C0:63:7F:D4:3C:50:2E:02:5A Certificate issuer: /CN=c06cb5642e87d4e4e0309084228e29e6999ed0b7 Certificate serial: 019B7CEDEEC7AACFD94CDBD9162CF40216D4 Authority key identifier: C0:6C:B5:64:2E:87:D4:E4:E0:30:90:84:22:8E:29:E6:99:9E:D0:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/eQRk02-rqRsoVMzAY3_UPFAuAlo.roa Signing time: Fri 02 Jan 2026 04:18:46 +0000 ROA not before: Fri 02 Jan 2026 04:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6730 IP address blocks: 45.85.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.mft rsync://rpki.ripe.net/repository/DEFAULT/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:ee:c7:aa:cf:d9:4c:db:d9:16:2c:f4:02:16:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c06cb5642e87d4e4e0309084228e29e6999ed0b7 Validity Not Before: Jan 2 04:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=790464d36faba91b2854ccc0637fd43c502e025a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:78:4e:0a:76:f0:2d:96:cc:08:61:5f:70:14: f9:bb:fb:1a:3b:e9:6a:ed:09:dd:2f:3a:8d:98:04: 1a:26:6c:55:e6:f9:23:95:f6:6a:2a:31:5b:da:b1: ba:08:e7:d7:0c:ac:cb:14:66:fd:65:df:b2:8f:27: 21:46:04:03:04:8d:d1:9c:2a:de:de:c4:64:59:9b: 8d:d3:92:6c:d5:93:48:94:7f:0d:c7:07:2d:d4:16: 52:f8:49:64:6a:1f:b8:61:3d:1f:48:e1:f2:f6:b0: 8e:67:d3:09:39:0a:a9:f9:09:30:e0:f0:0b:39:a4: ec:81:c8:1a:b3:5b:91:66:c8:a1:4d:5e:f2:36:5f: d6:64:0a:51:e2:6b:22:34:f3:ee:8f:51:fa:3f:b1: 58:71:41:1d:65:d6:ba:32:2a:4f:95:24:cf:9d:80: da:fd:a3:07:8f:7a:e0:35:d2:cd:b2:8f:7f:8b:54: 49:32:71:9c:2b:82:eb:03:4b:41:c8:de:d6:a0:a5: e1:fa:04:14:02:76:44:69:ac:a5:8f:ee:21:7b:b6: 2b:16:65:da:c6:05:fc:70:82:01:46:89:2f:f7:34: 33:0b:18:87:27:31:b4:64:b8:fa:c4:f4:eb:0a:d8: 96:5a:7e:87:6a:cd:f2:6d:c1:3f:58:4f:b7:97:28: 89:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:04:64:D3:6F:AB:A9:1B:28:54:CC:C0:63:7F:D4:3C:50:2E:02:5A X509v3 Authority Key Identifier: keyid:C0:6C:B5:64:2E:87:D4:E4:E0:30:90:84:22:8E:29:E6:99:9E:D0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/eQRk02-rqRsoVMzAY3_UPFAuAlo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.85.99.0/24 Signature Algorithm: sha256WithRSAEncryption 99:80:02:3f:62:48:72:06:1f:23:a4:0c:27:69:96:ea:eb:db: 96:f6:77:73:98:10:8f:ad:a1:f3:c3:b9:61:2c:45:31:4b:a0: 4e:d1:1f:2c:93:a3:ae:83:4e:f3:b3:47:f8:44:45:3b:24:6b: a7:20:e6:52:03:1f:59:18:12:e3:3a:d5:2d:2e:56:38:0f:e1: d5:29:bd:51:38:4a:4e:1e:98:35:4d:25:01:29:fa:38:3b:00: 8a:bf:0d:01:e1:26:8f:a4:d8:76:ac:42:0c:fb:a8:28:8c:18: 9c:d5:81:3c:c7:98:78:ef:f2:da:ff:39:a1:9a:7b:3c:32:df: 8d:78:40:dc:08:19:32:30:b2:2c:6f:ee:67:6a:58:48:fe:01: 86:db:ef:e0:75:db:16:e5:60:e7:34:c1:03:a4:b6:b3:1a:01: 68:57:f1:f9:8a:c8:1f:82:e8:a5:30:38:cd:46:2f:3a:2f:78: 0c:53:e7:ab:48:77:c4:f7:69:f3:96:37:d7:de:74:c1:1c:79: d0:97:a9:cf:63:ac:c2:2d:5d:75:2d:57:88:f4:5e:e4:54:b3: 7d:b4:b3:21:0f:58:c1:f0:12:03:53:55:d9:bc:29:5c:dd:c9: 49:a6:a6:6d:d8:37:08:45:d3:7f:7f:7d:4c:ae:59:48:72:d9: 75:0f:84:8e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87e7Hqs/ZTNvZFiz0AhbUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwNmNiNTY0MmU4N2Q0ZTRlMDMwOTA4NDIyOGUyOWU2OTk5 ZWQwYjcwHhcNMjYwMTAyMDQxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OTA0NjRkMzZmYWJhOTFiMjg1NGNjYzA2MzdmZDQzYzUwMmUwMjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5HhOCnbwLZbMCGFfcBT5u/saO+lq 7QndLzqNmAQaJmxV5vkjlfZqKjFb2rG6COfXDKzLFGb9Zd+yjychRgQDBI3RnCre 3sRkWZuN05Js1ZNIlH8Nxwct1BZS+Elkah+4YT0fSOHy9rCOZ9MJOQqp+Qkw4PAL OaTsgcgas1uRZsihTV7yNl/WZApR4msiNPPuj1H6P7FYcUEdZda6MipPlSTPnYDa /aMHj3rgNdLNso9/i1RJMnGcK4LrA0tByN7WoKXh+gQUAnZEaaylj+4he7YrFmXa xgX8cIIBRokv9zQzCxiHJzG0ZLj6xPTrCtiWWn6Has3ybcE/WE+3lyiJYwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHkEZNNvq6kbKFTMwGN/1DxQLgJaMB8GA1UdIwQY MBaAFMBstWQuh9Tk4DCQhCKOKeaZntC3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0d5MVpDNkgxT1RnTUpDRUlvNHA1cG1lMExjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9hNDAwNjYtMDVlYS00MDNlLWI4ZTct MDdjZjBiMzNhODQ5LzEvZVFSazAyLXJxUnNvVk16QVkzX1VQRkF1QWxvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9hNDAwNjYtMDVlYS00MDNlLWI4ZTctMDdjZjBiMzNhODQ5 LzEvd0d5MVpDNkgxT1RnTUpDRUlvNHA1cG1lMExjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVVjMA0G CSqGSIb3DQEBCwUAA4IBAQCZgAI/YkhyBh8jpAwnaZbq69uW9ndzmBCPraHzw7lh LEUxS6BO0R8sk6Oug07zs0f4REU7JGunIOZSAx9ZGBLjOtUtLlY4D+HVKb1ROEpO Hpg1TSUBKfo4OwCKvw0B4SaPpNh2rEIM+6gojBic1YE8x5h47/La/zmhmns8Mt+N eEDcCBkyMLIsb+5nalhI/gGG2+/gddsW5WDnNMEDpLazGgFoV/H5isgfguilMDjN Ri86L3gMU+erSHfE92nzljfX3nTBHHnQl6nPY6zCLV11LVeI9F7kVLN9tLMhD1jB 8BIDU1XZvClc3clJpqZt2DcIRdN/f31MrllIctl1D4SO -----END CERTIFICATE-----Generated at Mon Jan 26 05:03:05 2026 by rpki-client