This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/8d9136-1cb2-4349-ab86-5dc392de637b/1/EAfbw1tdW7YS4g6-HEloi9AGb3M.roa File: EAfbw1tdW7YS4g6-HEloi9AGb3M.roa (raw, json) Hash identifier: 7CA/xL5oWj2FQS+a86+X9Pizakh1u78n/2EeRBlMlDE= Subject key identifier: 10:07:DB:C3:5B:5D:5B:B6:12:E2:0E:BE:1C:49:68:8B:D0:06:6F:73 Certificate issuer: /CN=78356c6a831680e9b8b7c95514953007a9407e87 Certificate serial: 019BC6D2239554D3D388C6CA80458E55D280 Authority key identifier: 78:35:6C:6A:83:16:80:E9:B8:B7:C9:55:14:95:30:07:A9:40:7E:87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eDVsaoMWgOm4t8lVFJUwB6lAfoc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/8d9136-1cb2-4349-ab86-5dc392de637b/1/EAfbw1tdW7YS4g6-HEloi9AGb3M.roa Signing time: Fri 16 Jan 2026 12:40:19 +0000 ROA not before: Fri 16 Jan 2026 12:40:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34997 IP address blocks: 45.87.156.0/22 maxlen: 24 45.87.156.0/23 maxlen: 24 2a02:d500::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/8d9136-1cb2-4349-ab86-5dc392de637b/1/eDVsaoMWgOm4t8lVFJUwB6lAfoc.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/8d9136-1cb2-4349-ab86-5dc392de637b/1/eDVsaoMWgOm4t8lVFJUwB6lAfoc.mft rsync://rpki.ripe.net/repository/DEFAULT/eDVsaoMWgOm4t8lVFJUwB6lAfoc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c6:d2:23:95:54:d3:d3:88:c6:ca:80:45:8e:55:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78356c6a831680e9b8b7c95514953007a9407e87 Validity Not Before: Jan 16 12:40:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1007dbc35b5d5bb612e20ebe1c49688bd0066f73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:5c:b9:90:ca:6b:6f:bd:b9:56:68:c5:12:02: 02:35:9c:16:e1:cf:a5:87:ca:87:0e:ea:ea:63:0f: 16:07:6f:d5:44:ac:62:61:57:33:69:3b:d3:94:60: 5a:21:3c:59:af:c9:18:f1:df:83:96:c0:14:17:72: 39:ce:b5:25:c8:40:3d:a2:3e:18:e7:cb:0d:81:eb: 40:a0:9b:69:7a:60:da:81:09:a7:44:47:1f:51:f8: ac:5a:d3:b3:4b:55:96:dd:c2:27:ed:fc:7a:f1:95: 68:1d:a0:94:9e:bd:48:17:c7:f9:05:7e:53:6b:19: 0a:29:83:19:2b:73:a8:d3:a5:ae:db:f8:cf:f1:43: 53:cb:3b:39:4c:ba:b0:a7:3a:2e:56:ba:93:fe:2d: fb:a5:29:77:1c:e0:41:7d:d1:6b:ec:97:ff:96:d9: 5b:50:d6:01:57:64:db:a6:af:58:aa:de:7a:46:64: 9d:e1:ad:a2:d7:6a:d1:92:cf:6d:ea:7a:27:6e:c9: 60:68:f5:cd:5d:8f:60:d0:d3:42:b7:6f:95:dd:b8: d1:95:63:ec:c2:c0:11:ce:31:0e:47:26:bb:5d:d5: f6:40:41:d6:59:6c:04:8f:c3:41:cc:25:fd:36:1c: 5b:2e:90:bf:ad:c5:f6:98:d8:71:4d:1a:9c:7c:32: 9c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:07:DB:C3:5B:5D:5B:B6:12:E2:0E:BE:1C:49:68:8B:D0:06:6F:73 X509v3 Authority Key Identifier: keyid:78:35:6C:6A:83:16:80:E9:B8:B7:C9:55:14:95:30:07:A9:40:7E:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eDVsaoMWgOm4t8lVFJUwB6lAfoc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8d9136-1cb2-4349-ab86-5dc392de637b/1/EAfbw1tdW7YS4g6-HEloi9AGb3M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8d9136-1cb2-4349-ab86-5dc392de637b/1/eDVsaoMWgOm4t8lVFJUwB6lAfoc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.87.156.0/22 IPv6: 2a02:d500::/29 Signature Algorithm: sha256WithRSAEncryption 06:7b:4a:4c:25:47:1f:02:aa:80:27:1b:f2:13:89:a3:23:4d: 95:a5:75:09:3d:b6:ca:f3:cf:bb:03:a9:fd:5c:71:22:62:b2: b6:69:14:e2:83:66:66:30:67:90:61:5d:92:d5:7b:c9:c6:97: 75:dd:d1:0b:5c:5f:38:c8:88:10:6d:7d:10:77:86:5e:dc:bc: 79:34:cf:04:58:5b:b4:80:6f:a0:2a:24:4b:2f:82:12:93:d9: 4f:1d:98:47:79:c4:31:c2:3d:8d:be:f8:2f:a1:69:02:d0:cc: 5f:22:b8:fb:7a:15:53:57:ff:1f:db:42:6d:a0:21:25:8c:37: b2:b1:47:af:77:b5:e0:b6:b4:2c:7c:07:36:58:b0:db:70:7f: 60:76:b2:f6:91:50:f8:ef:fd:9a:2f:27:78:53:01:24:d6:19: 76:07:73:b3:69:81:98:1a:66:4f:a5:58:8a:f8:35:00:10:0d: dc:a0:89:10:7b:28:eb:6f:25:a7:6d:fd:06:94:d7:52:ef:e2: 21:f9:cc:ff:17:c0:0c:ad:26:9a:2f:3b:ec:76:f6:e5:15:48: 54:5b:48:30:25:1f:9f:ee:90:a4:c3:d7:c4:9b:ad:96:f9:82: 84:0b:cc:7a:84:17:ce:d3:71:32:a3:e0:c6:93:ae:4b:02:ca: 70:f2:29:1b -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZvG0iOVVNPTiMbKgEWOVdKAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4MzU2YzZhODMxNjgwZTliOGI3Yzk1NTE0OTUzMDA3YTk0 MDdlODcwHhcNMjYwMTE2MTI0MDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDA3ZGJjMzViNWQ1YmI2MTJlMjBlYmUxYzQ5Njg4YmQwMDY2ZjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVy5kMprb725VmjFEgICNZwW4c+l h8qHDurqYw8WB2/VRKxiYVczaTvTlGBaITxZr8kY8d+DlsAUF3I5zrUlyEA9oj4Y 58sNgetAoJtpemDagQmnREcfUfisWtOzS1WW3cIn7fx68ZVoHaCUnr1IF8f5BX5T axkKKYMZK3Oo06Wu2/jP8UNTyzs5TLqwpzouVrqT/i37pSl3HOBBfdFr7Jf/ltlb UNYBV2Tbpq9Yqt56RmSd4a2i12rRks9t6nonbslgaPXNXY9g0NNCt2+V3bjRlWPs wsARzjEORya7XdX2QEHWWWwEj8NBzCX9NhxbLpC/rcX2mNhxTRqcfDKcFwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBAH28NbXVu2EuIOvhxJaIvQBm9zMB8GA1UdIwQY MBaAFHg1bGqDFoDpuLfJVRSVMAepQH6HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZURWc2FvTVdnT200dDhsVkZKVXdCNmxBZm9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC84ZDkxMzYtMWNiMi00MzQ5LWFiODYt NWRjMzkyZGU2MzdiLzEvRUFmYncxdGRXN1lTNGc2LUhFbG9pOUFHYjNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC84ZDkxMzYtMWNiMi00MzQ5LWFiODYtNWRjMzkyZGU2Mzdi LzEvZURWc2FvTVdnT200dDhsVkZKVXdCNmxBZm9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLVecMA0E AgACMAcDBQMqAtUAMA0GCSqGSIb3DQEBCwUAA4IBAQAGe0pMJUcfAqqAJxvyE4mj I02VpXUJPbbK88+7A6n9XHEiYrK2aRTig2ZmMGeQYV2S1XvJxpd13dELXF84yIgQ bX0Qd4Ze3Lx5NM8EWFu0gG+gKiRLL4ISk9lPHZhHecQxwj2NvvgvoWkC0MxfIrj7 ehVTV/8f20JtoCEljDeysUevd7XgtrQsfAc2WLDbcH9gdrL2kVD47/2aLyd4UwEk 1hl2B3OzaYGYGmZPpViK+DUAEA3coIkQeyjrbyWnbf0GlNdS7+Ih+cz/F8AMrSaa LzvsdvblFUhUW0gwJR+f7pCkw9fEm62W+YKEC8x6hBfO03Eyo+DGk65LAspw8ikb -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:46 2026 by rpki-client