This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/669ebf-ee7f-4eb7-8486-95ad92ac8698/1/ERVnvcHm3_aCNNp0XApisyyWMMo.roa File: ERVnvcHm3_aCNNp0XApisyyWMMo.roa (raw, json) Hash identifier: A6lnUxQU45bl1IXJraY/n4k6V7kjC4ZKad6O1K1oIds= Subject key identifier: 11:15:67:BD:C1:E6:DF:F6:82:34:DA:74:5C:0A:62:B3:2C:96:30:CA Certificate issuer: /CN=1062bc36512658a0f7d3f96bc1d8e67d9fd4918b Certificate serial: 019B7C127A616F7ACC9E704A37BD7B23FBED Authority key identifier: 10:62:BC:36:51:26:58:A0:F7:D3:F9:6B:C1:D8:E6:7D:9F:D4:91:8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EGK8NlEmWKD30_lrwdjmfZ_UkYs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/669ebf-ee7f-4eb7-8486-95ad92ac8698/1/ERVnvcHm3_aCNNp0XApisyyWMMo.roa Signing time: Fri 02 Jan 2026 00:19:04 +0000 ROA not before: Fri 02 Jan 2026 00:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197297 IP address blocks: 46.253.144.0/20 maxlen: 24 46.253.145.0/24 maxlen: 24 195.245.86.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/669ebf-ee7f-4eb7-8486-95ad92ac8698/1/EGK8NlEmWKD30_lrwdjmfZ_UkYs.crl rsync://rpki.ripe.net/repository/DEFAULT/54/669ebf-ee7f-4eb7-8486-95ad92ac8698/1/EGK8NlEmWKD30_lrwdjmfZ_UkYs.mft rsync://rpki.ripe.net/repository/DEFAULT/EGK8NlEmWKD30_lrwdjmfZ_UkYs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:7a:61:6f:7a:cc:9e:70:4a:37:bd:7b:23:fb:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1062bc36512658a0f7d3f96bc1d8e67d9fd4918b Validity Not Before: Jan 2 00:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=111567bdc1e6dff68234da745c0a62b32c9630ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2a:c5:e8:ab:2c:7c:82:24:a3:9e:b8:6a:11: 91:bd:fa:db:8c:b7:af:70:58:ec:fc:14:40:a7:0d: b4:da:b7:6f:3a:22:a6:ba:39:a5:9e:96:62:8f:66: 1b:f2:37:fa:e7:04:a4:06:68:c9:3e:a7:7b:82:52: 80:b7:e9:0e:1c:42:72:c6:e3:d7:4a:02:02:c6:4d: 5d:2d:9d:ea:c0:2e:76:54:0c:74:c4:f5:82:07:7c: 6a:18:e3:13:b0:9e:44:9b:57:ed:40:fe:8f:a5:a0: 86:5b:d3:0a:60:a9:25:46:0e:58:b5:db:db:aa:b8: 44:34:d3:34:4e:64:0b:b1:57:49:b6:01:d9:d8:9f: 8c:58:64:6a:4a:d6:3b:7f:0e:7e:c0:98:a5:29:c8: 3e:86:08:1c:75:47:a9:51:0e:3d:dc:3c:29:ce:b3: 88:c7:5d:83:50:83:41:8c:18:59:f9:aa:ad:ed:20: a0:0a:99:29:d1:81:8f:da:3b:c8:c3:56:24:1d:ab: 49:4b:81:ad:d7:71:df:96:9a:6d:3c:20:ed:fb:62: 31:f8:f7:e8:f2:14:de:48:66:25:41:11:29:26:81: 9c:78:35:98:9e:e5:de:59:fe:83:4d:51:23:59:46: b7:bf:03:51:8b:b2:46:85:b5:4b:1f:1f:f9:99:be: 2f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:15:67:BD:C1:E6:DF:F6:82:34:DA:74:5C:0A:62:B3:2C:96:30:CA X509v3 Authority Key Identifier: keyid:10:62:BC:36:51:26:58:A0:F7:D3:F9:6B:C1:D8:E6:7D:9F:D4:91:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EGK8NlEmWKD30_lrwdjmfZ_UkYs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/669ebf-ee7f-4eb7-8486-95ad92ac8698/1/ERVnvcHm3_aCNNp0XApisyyWMMo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/669ebf-ee7f-4eb7-8486-95ad92ac8698/1/EGK8NlEmWKD30_lrwdjmfZ_UkYs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.253.144.0/20 195.245.86.0/23 Signature Algorithm: sha256WithRSAEncryption 0c:ca:b6:93:bc:90:c2:6a:a0:56:55:10:1d:e0:dd:62:ef:c9: 24:ab:99:6a:85:6e:c8:41:ad:0c:66:ed:6f:f3:b5:d1:f7:14: e9:29:45:ef:7c:b7:6b:e7:2d:c4:3e:1c:0b:76:c0:54:0f:ae: 2f:ff:6c:fc:25:12:08:37:cc:de:fb:60:b4:a5:e2:2f:04:b9: bc:94:a6:fd:a4:8b:4c:29:6b:06:87:3c:0e:e6:d6:ca:12:f9: 33:6a:3c:9b:b4:d5:06:b9:63:8c:e6:5b:a2:36:3c:bd:b4:e4: a1:15:c2:d6:37:5d:4e:6f:37:cc:b5:42:c1:7f:f1:de:69:84: 9e:9d:e4:01:69:67:be:88:43:c0:9f:2b:e0:4b:97:df:b6:bd: 2e:d0:cc:07:33:80:5d:22:ed:7e:9f:8f:a7:3c:ad:26:90:96: e0:db:0d:8a:a0:ce:56:73:f9:f8:af:8a:81:6a:a0:a2:40:ca: c8:50:4f:ed:ae:6c:f9:15:f6:3b:92:0d:aa:7d:32:21:3c:a1: 13:42:a1:cd:f5:33:d5:30:0a:bc:ff:f2:65:4a:93:86:59:22: a3:ce:8c:67:cf:4e:58:98:54:99:8e:c1:f6:59:48:ba:be:c2: 9f:cb:3f:3d:1c:13:cc:f9:1a:e5:01:39:c7:f9:89:0a:8f:79: c2:29:df:63 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8Enphb3rMnnBKN717I/vtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwNjJiYzM2NTEyNjU4YTBmN2QzZjk2YmMxZDhlNjdkOWZk NDkxOGIwHhcNMjYwMTAyMDAxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMTE1NjdiZGMxZTZkZmY2ODIzNGRhNzQ1YzBhNjJiMzJjOTYzMGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryrF6KssfIIko564ahGRvfrbjLev cFjs/BRApw202rdvOiKmujmlnpZij2Yb8jf65wSkBmjJPqd7glKAt+kOHEJyxuPX SgICxk1dLZ3qwC52VAx0xPWCB3xqGOMTsJ5Em1ftQP6PpaCGW9MKYKklRg5Ytdvb qrhENNM0TmQLsVdJtgHZ2J+MWGRqStY7fw5+wJilKcg+hggcdUepUQ493DwpzrOI x12DUINBjBhZ+aqt7SCgCpkp0YGP2jvIw1YkHatJS4Gt13HflpptPCDt+2Ix+Pfo 8hTeSGYlQREpJoGceDWYnuXeWf6DTVEjWUa3vwNRi7JGhbVLHx/5mb4v8wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBEVZ73B5t/2gjTadFwKYrMsljDKMB8GA1UdIwQY MBaAFBBivDZRJlig99P5a8HY5n2f1JGLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUdLOE5sRW1XS0QzMF9scndkam1mWl9Va1lzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC82NjllYmYtZWU3Zi00ZWI3LTg0ODYt OTVhZDkyYWM4Njk4LzEvRVJWbnZjSG0zX2FDTk5wMFhBcGlzeXlXTU1vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC82NjllYmYtZWU3Zi00ZWI3LTg0ODYtOTVhZDkyYWM4Njk4 LzEvRUdLOE5sRW1XS0QzMF9scndkam1mWl9Va1lzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQELv2QAwQB w/VWMA0GCSqGSIb3DQEBCwUAA4IBAQAMyraTvJDCaqBWVRAd4N1i78kkq5lqhW7I Qa0MZu1v87XR9xTpKUXvfLdr5y3EPhwLdsBUD64v/2z8JRIIN8ze+2C0peIvBLm8 lKb9pItMKWsGhzwO5tbKEvkzajybtNUGuWOM5luiNjy9tOShFcLWN11ObzfMtULB f/HeaYSeneQBaWe+iEPAnyvgS5fftr0u0MwHM4BdIu1+n4+nPK0mkJbg2w2KoM5W c/n4r4qBaqCiQMrIUE/trmz5FfY7kg2qfTIhPKETQqHN9TPVMAq8//JlSpOGWSKj zoxnz05YmFSZjsH2WUi6vsKfyz89HBPM+RrlATnH+YkKj3nCKd9j -----END CERTIFICATE-----Generated at Mon Jan 26 01:39:47 2026 by rpki-client