This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/egsOE6bZvfKQiaDurlHql4l7FQo.roa File: egsOE6bZvfKQiaDurlHql4l7FQo.roa (raw, json) Hash identifier: BP8wlsBgKB6wKVje/kb04PbZKDtzqCLIojy+BbhlXD4= Subject key identifier: 7A:0B:0E:13:A6:D9:BD:F2:90:89:A0:EE:AE:51:EA:97:89:7B:15:0A Certificate issuer: /CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Certificate serial: 019B78349DD717294DD5BBF3E3290AF1D487 Authority key identifier: D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/egsOE6bZvfKQiaDurlHql4l7FQo.roa Signing time: Thu 01 Jan 2026 06:17:52 +0000 ROA not before: Thu 01 Jan 2026 06:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 54252 IP address blocks: 104.160.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 01:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:9d:d7:17:29:4d:d5:bb:f3:e3:29:0a:f1:d4:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Validity Not Before: Jan 1 06:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7a0b0e13a6d9bdf29089a0eeae51ea97897b150a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c2:01:3e:16:f9:c4:74:c1:05:35:c4:f8:70: 03:8f:af:36:e7:67:fb:02:db:5f:1b:63:3c:89:44: 63:04:22:48:08:45:4a:f2:1f:f8:e6:d1:cf:c9:ab: 99:14:17:24:97:21:d0:95:9a:93:bf:d8:d6:26:9d: 64:f0:d9:2d:84:1d:16:54:8f:04:8d:25:22:09:ea: 37:f6:9d:35:d8:ed:34:17:4e:1e:9a:d6:82:d9:41: 71:a1:12:60:e9:e9:5d:5e:c0:29:c8:01:17:f2:5f: b0:a5:08:31:e3:a5:48:b0:09:e5:a0:80:77:3a:88: 59:80:ae:1d:41:e1:f0:fc:34:8d:1d:a2:4d:a3:a0: 34:18:67:fd:7b:6a:b4:bc:5a:49:b5:b9:79:1e:e0: 5d:a6:59:e6:c2:b9:3e:1a:a0:75:3d:16:45:a2:3e: 66:3a:0e:44:79:b7:a0:80:4f:89:70:6b:d4:57:da: 43:bd:0a:23:a2:ba:1c:d9:3a:db:56:71:ce:91:a4: 14:19:f8:bb:eb:9d:0d:0e:cb:f9:d4:30:e4:9f:c9: 85:89:5a:72:47:9c:22:5e:d0:87:4b:62:fe:17:b6: f7:07:0d:cb:04:f3:ed:db:71:3a:37:9a:b2:1d:39: db:3c:d6:b5:bb:98:73:0f:c9:6c:e6:03:5a:1f:15: 26:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:0B:0E:13:A6:D9:BD:F2:90:89:A0:EE:AE:51:EA:97:89:7B:15:0A X509v3 Authority Key Identifier: keyid:D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/egsOE6bZvfKQiaDurlHql4l7FQo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.160.3.0/24 Signature Algorithm: sha256WithRSAEncryption 01:ee:22:33:d3:45:e0:b1:39:9b:b3:b6:c3:4c:cf:99:0e:59: e6:7f:b3:e4:66:7b:3f:13:09:f4:4c:f5:24:ee:be:9c:37:b7: 5a:12:a1:cd:44:55:80:40:00:58:0d:99:bb:82:84:3f:29:ff: 86:b0:ed:65:76:8c:f3:d6:fb:a9:99:ab:e9:5c:58:44:56:85: 3a:11:47:2a:94:80:3a:d0:ce:75:4c:8d:1f:68:b1:31:e8:ab: 94:a5:2b:ac:14:ed:1b:2a:09:a6:4c:27:3a:b2:09:e6:21:5a: 02:68:7e:16:2a:6f:bc:c9:d7:77:46:60:2b:bf:db:3a:27:79: 24:64:45:8d:96:95:4a:a4:ae:50:11:33:3b:52:ed:c4:6a:3f: db:49:db:f8:78:77:01:96:12:85:94:2c:32:38:57:1d:f9:b4: f5:d6:58:ab:dd:62:38:2f:85:5c:37:4f:09:ba:c2:ab:1d:21: c8:3b:55:5b:ca:e6:db:65:1a:db:74:ad:e6:a5:d8:58:b1:b2: af:ef:ce:1f:84:ca:d0:ad:5d:6e:b5:86:c2:7d:50:2d:6a:4b: 99:9c:7e:e5:f2:50:37:b8:eb:e0:33:59:2e:24:69:b7:fc:c6: 8d:6f:60:e2:91:cc:44:13:ad:c7:2b:0b:1c:8a:be:90:56:ec: cc:f4:5b:c1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NJ3XFylN1bvz4ykK8dSHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MmNiNDNjYTNjMGM1NzgxNmNlZTM2MDQ3OGQwY2Y4ODIy MDdmZDIwHhcNMjYwMTAxMDYxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTBiMGUxM2E2ZDliZGYyOTA4OWEwZWVhZTUxZWE5Nzg5N2IxNTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8IBPhb5xHTBBTXE+HADj68252f7 AttfG2M8iURjBCJICEVK8h/45tHPyauZFBcklyHQlZqTv9jWJp1k8NkthB0WVI8E jSUiCeo39p012O00F04emtaC2UFxoRJg6eldXsApyAEX8l+wpQgx46VIsAnloIB3 OohZgK4dQeHw/DSNHaJNo6A0GGf9e2q0vFpJtbl5HuBdplnmwrk+GqB1PRZFoj5m Og5EebeggE+JcGvUV9pDvQojoroc2TrbVnHOkaQUGfi7650NDsv51DDkn8mFiVpy R5wiXtCHS2L+F7b3Bw3LBPPt23E6N5qyHTnbPNa1u5hzD8ls5gNaHxUmJQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHoLDhOm2b3ykImg7q5R6peJexUKMB8GA1UdIwQY MBaAFNgstDyjwMV4Fs7jYEeNDPiCIH/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAt MTVmMTNlM2Y3ZDg1LzEvZWdzT0U2Ylp2ZktRaWFEdXJsSHFsNGw3RlFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAtMTVmMTNlM2Y3ZDg1 LzEvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKADMA0G CSqGSIb3DQEBCwUAA4IBAQAB7iIz00XgsTmbs7bDTM+ZDlnmf7PkZns/Ewn0TPUk 7r6cN7daEqHNRFWAQABYDZm7goQ/Kf+GsO1ldozz1vupmavpXFhEVoU6EUcqlIA6 0M51TI0faLEx6KuUpSusFO0bKgmmTCc6sgnmIVoCaH4WKm+8ydd3RmArv9s6J3kk ZEWNlpVKpK5QETM7Uu3Eaj/bSdv4eHcBlhKFlCwyOFcd+bT11lir3WI4L4VcN08J usKrHSHIO1VbyubbZRrbdK3mpdhYsbKv784fhMrQrV1utYbCfVAtakuZnH7l8lA3 uOvgM1kuJGm3/MaNb2DikcxEE63HKwscir6QVuzM9FvB -----END CERTIFICATE-----Generated at Sun Jan 25 11:45:11 2026 by rpki-client