This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/E75DLN2iCENj8PjVM_tk1YHbjLM.roa File: E75DLN2iCENj8PjVM_tk1YHbjLM.roa (raw, json) Hash identifier: 1JsAATeSGfiVVR+Q635ybGZ+zpaD1JCxcVIOom7Etew= Subject key identifier: 13:BE:43:2C:DD:A2:08:43:63:F0:F8:D5:33:FB:64:D5:81:DB:8C:B3 Certificate issuer: /CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7 Certificate serial: 019B783491A1731648C9D746F10CD7A6181B Authority key identifier: 34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/E75DLN2iCENj8PjVM_tk1YHbjLM.roa Signing time: Thu 01 Jan 2026 06:17:49 +0000 ROA not before: Thu 01 Jan 2026 06:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214159 IP address blocks: 185.189.44.0/22 maxlen: 32 2a02:ae00:2000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.crl rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.mft rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:91:a1:73:16:48:c9:d7:46:f1:0c:d7:a6:18:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3433ae1c60672c7591a8f97d68f79fb2a5ee8da7 Validity Not Before: Jan 1 06:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=13be432cdda2084363f0f8d533fb64d581db8cb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:7e:b7:9f:2f:b3:4f:79:59:b7:83:3e:be:70: 10:b7:9e:2d:74:83:77:69:f8:f7:68:23:be:71:fb: 42:25:ae:ab:93:f1:6d:06:b4:b2:d7:46:96:6d:87: 05:13:53:6d:92:76:27:7d:6e:fe:3c:33:2a:a8:a6: c2:28:a8:0a:57:05:22:b9:2d:de:96:52:4f:53:eb: ba:dc:c5:90:3c:d4:85:ee:60:89:5c:5b:7a:15:8c: e4:90:93:de:54:eb:6d:a7:f1:61:d6:6c:d6:aa:8e: f0:b0:06:85:f6:66:19:2e:20:47:d2:5d:62:12:ed: 87:59:67:d5:b2:1a:f3:20:dc:e3:d4:dc:62:94:7a: 58:b8:1f:6c:78:4b:bf:56:4f:85:45:df:2e:5b:f3: 07:ff:02:a0:1c:9a:3d:ff:e8:c7:28:cb:4b:b7:7f: db:02:1b:2d:82:74:40:de:2c:ab:3d:da:87:60:0a: 09:e8:31:e1:1e:28:46:c9:3d:57:37:55:48:e0:6e: 2c:c3:7f:24:a0:1c:0e:6f:f6:32:0c:a0:8a:b5:83: 4d:16:ce:1d:ae:dc:d4:69:6d:fd:ad:17:0e:4b:68: 1c:0c:bb:65:6f:82:ba:47:ec:b7:74:79:fa:8f:93: 64:41:4a:53:2a:ea:ca:a0:15:0c:b5:34:51:d3:cd: 4c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:BE:43:2C:DD:A2:08:43:63:F0:F8:D5:33:FB:64:D5:81:DB:8C:B3 X509v3 Authority Key Identifier: keyid:34:33:AE:1C:60:67:2C:75:91:A8:F9:7D:68:F7:9F:B2:A5:EE:8D:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NDOuHGBnLHWRqPl9aPefsqXujac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/E75DLN2iCENj8PjVM_tk1YHbjLM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9ca446-fc5c-4746-b26f-30ce83701b39/1/NDOuHGBnLHWRqPl9aPefsqXujac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.189.44.0/22 IPv6: 2a02:ae00:2000::/36 Signature Algorithm: sha256WithRSAEncryption 6d:ea:ee:49:1d:87:37:dd:2e:dc:51:a6:b9:3e:67:40:a8:03: d2:4d:22:e9:8d:5e:17:13:e7:aa:3b:16:0e:59:ee:64:ae:7d: dc:e4:4c:71:4c:b2:5b:4a:02:bb:fd:00:3a:88:39:dd:37:a7: 22:ae:50:e0:0c:ec:dc:3f:7b:4e:f6:7f:cb:3f:17:1c:d6:33: 52:f6:52:d4:59:44:ba:f3:e4:83:67:b6:48:d1:19:09:02:d2: 92:b1:41:6b:6b:03:5c:19:91:6f:c7:bd:cb:9d:c7:c7:41:30: e2:03:8d:73:ac:e4:76:56:17:a8:2c:3b:2b:42:b3:ae:88:73: b0:7c:1e:cb:fd:05:73:6e:9c:80:4e:9b:2a:0f:31:af:92:f3: 7c:ba:af:5b:65:6c:7c:76:05:12:a9:34:da:5a:d3:36:4b:d9: 69:2e:14:56:68:7e:f8:d6:d6:18:75:e0:22:ea:76:0a:a3:dd: 89:64:7f:dd:2a:54:f5:71:15:fd:f0:90:c4:67:bc:46:e8:9a: 0c:0e:36:9b:3d:2c:7f:de:d6:54:dd:dc:8f:42:bc:e8:ed:c6: 5a:a6:0e:9a:a6:26:42:49:dd:14:16:cf:50:f2:51:aa:69:07: 3b:06:55:66:da:af:7c:df:df:86:1b:69:79:b0:1a:40:03:6f: 34:06:cd:c2 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt4NJGhcxZIyddG8QzXphgbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0MzNhZTFjNjA2NzJjNzU5MWE4Zjk3ZDY4Zjc5ZmIyYTVl ZThkYTcwHhcNMjYwMTAxMDYxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxM2JlNDMyY2RkYTIwODQzNjNmMGY4ZDUzM2ZiNjRkNTgxZGI4Y2IzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl363ny+zT3lZt4M+vnAQt54tdIN3 afj3aCO+cftCJa6rk/FtBrSy10aWbYcFE1NtknYnfW7+PDMqqKbCKKgKVwUiuS3e llJPU+u63MWQPNSF7mCJXFt6FYzkkJPeVOttp/Fh1mzWqo7wsAaF9mYZLiBH0l1i Eu2HWWfVshrzINzj1NxilHpYuB9seEu/Vk+FRd8uW/MH/wKgHJo9/+jHKMtLt3/b AhstgnRA3iyrPdqHYAoJ6DHhHihGyT1XN1VI4G4sw38koBwOb/YyDKCKtYNNFs4d rtzUaW39rRcOS2gcDLtlb4K6R+y3dHn6j5NkQUpTKurKoBUMtTRR081M/QIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFBO+QyzdoghDY/D41TP7ZNWB24yzMB8GA1UdIwQY MBaAFDQzrhxgZyx1kaj5fWj3n7Kl7o2nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkRPdUhHQm5MSFdScVBsOWFQZWZzcVh1amFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My85Y2E0NDYtZmM1Yy00NzQ2LWIyNmYt MzBjZTgzNzAxYjM5LzEvRTc1RExOMmlDRU5qOFBqVk1fdGsxWUhiakxNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My85Y2E0NDYtZmM1Yy00NzQ2LWIyNmYtMzBjZTgzNzAxYjM5 LzEvTkRPdUhHQm5MSFdScVBsOWFQZWZzcVh1amFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCub0sMA4E AgACMAgDBgQqAq4AIDANBgkqhkiG9w0BAQsFAAOCAQEAberuSR2HN90u3FGmuT5n QKgD0k0i6Y1eFxPnqjsWDlnuZK593ORMcUyyW0oCu/0AOog53TenIq5Q4Azs3D97 TvZ/yz8XHNYzUvZS1FlEuvPkg2e2SNEZCQLSkrFBa2sDXBmRb8e9y53Hx0Ew4gON c6zkdlYXqCw7K0KzrohzsHwey/0Fc26cgE6bKg8xr5LzfLqvW2VsfHYFEqk02lrT NkvZaS4UVmh++NbWGHXgIup2CqPdiWR/3SpU9XEV/fCQxGe8RuiaDA42mz0sf97W VN3cj0K86O3GWqYOmqYmQkndFBbPUPJRqmkHOwZVZtqvfN/fhhtpebAaQANvNAbN wg== -----END CERTIFICATE-----Generated at Sun Jan 25 16:38:37 2026 by rpki-client