This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/eCDlzK7WYx2wyI-MhH3sYue8XDg.roa File: eCDlzK7WYx2wyI-MhH3sYue8XDg.roa (raw, json) Hash identifier: 98RRinAUWzlpQnMjZqJmjkePB1/6O3taw25GtrD0NQY= Subject key identifier: 78:20:E5:CC:AE:D6:63:1D:B0:C8:8F:8C:84:7D:EC:62:E7:BC:5C:38 Certificate issuer: /CN=9b32a2e8fcbeee63020ba93daab9076c37bc9991 Certificate serial: 019B7F847D2CF237B7E1A310B8AA1E552D0D Authority key identifier: 9B:32:A2:E8:FC:BE:EE:63:02:0B:A9:3D:AA:B9:07:6C:37:BC:99:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzKi6Py-7mMCC6k9qrkHbDe8mZE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/eCDlzK7WYx2wyI-MhH3sYue8XDg.roa Signing time: Fri 02 Jan 2026 16:22:27 +0000 ROA not before: Fri 02 Jan 2026 16:22:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57986 IP address blocks: 45.15.200.0/24 maxlen: 24 45.15.201.0/24 maxlen: 24 45.15.202.0/24 maxlen: 24 45.15.203.0/24 maxlen: 24 2a0e:3180::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.mft rsync://rpki.ripe.net/repository/DEFAULT/mzKi6Py-7mMCC6k9qrkHbDe8mZE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:7d:2c:f2:37:b7:e1:a3:10:b8:aa:1e:55:2d:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b32a2e8fcbeee63020ba93daab9076c37bc9991 Validity Not Before: Jan 2 16:22:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7820e5ccaed6631db0c88f8c847dec62e7bc5c38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ff:c2:bf:e4:35:5a:de:f5:78:2c:b0:21:f6: 9e:85:42:d0:09:52:fa:15:5c:e7:39:79:23:31:ae: 6c:49:ba:00:09:67:ec:01:11:1a:26:ce:25:69:c7: e5:eb:8c:6d:c0:56:ea:c4:f8:13:1f:86:4b:bc:69: 62:07:85:68:08:2b:bc:63:22:2b:ea:ac:de:d1:26: 1e:d6:8f:4b:30:fc:60:82:c7:87:4e:cd:dd:ca:b1: 02:ff:5b:bb:3b:6d:03:86:33:c7:6d:5f:e9:56:e1: 4f:f9:54:de:ed:91:03:ad:e1:8a:6f:a3:28:00:99: d0:a8:dd:2c:79:78:fc:0f:c2:3d:30:96:64:b0:1a: 96:9e:41:5b:af:79:a9:dc:61:4f:bc:d2:ea:c7:9f: 00:67:f4:84:d4:64:a2:d8:86:56:c4:db:a0:93:a3: b0:ca:c7:f9:95:82:be:46:98:1b:66:a5:44:9d:2c: 59:0c:fc:94:48:9f:64:67:09:0b:88:4f:b1:47:f7: 76:08:97:3b:73:97:ed:7b:75:ba:9c:54:a2:22:e1: 32:b9:d8:67:2a:8f:66:be:58:b9:5e:c3:cc:a5:62: 48:3e:4d:70:42:0d:b5:14:3f:b4:be:c4:bf:ee:06: 90:51:fb:9c:e9:72:ff:29:4b:c2:78:68:0c:1d:af: ff:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:20:E5:CC:AE:D6:63:1D:B0:C8:8F:8C:84:7D:EC:62:E7:BC:5C:38 X509v3 Authority Key Identifier: keyid:9B:32:A2:E8:FC:BE:EE:63:02:0B:A9:3D:AA:B9:07:6C:37:BC:99:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzKi6Py-7mMCC6k9qrkHbDe8mZE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/eCDlzK7WYx2wyI-MhH3sYue8XDg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.15.200.0/22 IPv6: 2a0e:3180::/64 Signature Algorithm: sha256WithRSAEncryption 07:f1:91:8f:f2:90:d4:75:dc:79:ae:f3:17:d6:7d:7a:f3:53: 9b:39:eb:c3:3b:73:fa:12:e7:aa:0b:27:d4:85:37:3c:c2:7d: 82:1f:0d:76:58:c5:4c:c3:4d:99:61:90:fe:bd:c9:16:b2:4d: 6d:df:c0:84:97:30:ea:6f:d6:4b:c8:d6:31:f2:8e:f4:2c:27: a8:dc:59:5f:93:cd:61:85:f1:3e:24:a3:2a:b0:d5:fb:9d:5f: 93:c5:78:c8:85:71:db:24:b9:06:ee:b9:89:40:ca:2a:a1:91: 05:bc:1f:40:71:85:eb:59:00:38:b4:78:c6:56:9d:9e:9c:21: c9:77:96:ba:51:eb:6e:e5:a7:66:09:b8:8e:7c:3a:72:12:44: 93:94:b4:73:81:08:dd:0e:5e:50:69:48:42:6f:82:95:be:e1: 89:85:5b:28:06:6a:ba:4f:39:8e:ef:35:c3:6c:e5:5f:b4:94: cd:a5:cb:a9:ab:9a:c0:68:c0:9c:b1:8c:30:e8:47:8f:5c:7f: 1e:26:c4:03:d1:77:55:c8:a7:b5:e7:08:fb:bb:c9:89:a1:13: 00:fc:26:e3:e3:6d:4e:a5:9b:75:e1:b7:ee:b8:df:8a:27:45: f8:4b:f7:17:a6:60:8d:a2:45:c0:2d:70:bb:1e:ae:78:62:be: 47:43:21:55 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgISAZt/hH0s8je34aMQuKoeVS0NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliMzJhMmU4ZmNiZWVlNjMwMjBiYTkzZGFhYjkwNzZjMzdi Yzk5OTEwHhcNMjYwMTAyMTYyMjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODIwZTVjY2FlZDY2MzFkYjBjODhmOGM4NDdkZWM2MmU3YmM1YzM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjf/Cv+Q1Wt71eCywIfaehULQCVL6 FVznOXkjMa5sSboACWfsAREaJs4lacfl64xtwFbqxPgTH4ZLvGliB4VoCCu8YyIr 6qze0SYe1o9LMPxggseHTs3dyrEC/1u7O20DhjPHbV/pVuFP+VTe7ZEDreGKb6Mo AJnQqN0seXj8D8I9MJZksBqWnkFbr3mp3GFPvNLqx58AZ/SE1GSi2IZWxNugk6Ow ysf5lYK+RpgbZqVEnSxZDPyUSJ9kZwkLiE+xR/d2CJc7c5fte3W6nFSiIuEyudhn Ko9mvli5XsPMpWJIPk1wQg21FD+0vsS/7gaQUfuc6XL/KUvCeGgMHa//2QIDAQAB o4ICHDCCAhgwHQYDVR0OBBYEFHgg5cyu1mMdsMiPjIR97GLnvFw4MB8GA1UdIwQY MBaAFJsyouj8vu5jAgupPaq5B2w3vJmRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXpLaTZQeS03bU1DQzZrOXFya0hiRGU4bVpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9kZjIxY2ItMDhhYy00ZTVjLWI4NTQt ZTNhYjkwODdkNDAzLzEvZUNEbHpLN1dZeDJ3eUktTWhIM3NZdWU4WERnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS9kZjIxY2ItMDhhYy00ZTVjLWI4NTQtZTNhYjkwODdkNDAz LzEvbXpLaTZQeS03bU1DQzZrOXFya0hiRGU4bVpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDIGCCsGAQUFBwEHAQH/BCMwITAMBAIAATAGAwQCLQ/IMBEE AgACMAsDCQAqDjGAAAAAADANBgkqhkiG9w0BAQsFAAOCAQEAB/GRj/KQ1HXcea7z F9Z9evNTmznrwztz+hLnqgsn1IU3PMJ9gh8NdljFTMNNmWGQ/r3JFrJNbd/AhJcw 6m/WS8jWMfKO9CwnqNxZX5PNYYXxPiSjKrDV+51fk8V4yIVx2yS5Bu65iUDKKqGR BbwfQHGF61kAOLR4xladnpwhyXeWulHrbuWnZgm4jnw6chJEk5S0c4EI3Q5eUGlI Qm+Clb7hiYVbKAZquk85ju81w2zlX7SUzaXLqauawGjAnLGMMOhHj1x/HibEA9F3 VcintecI+7vJiaETAPwm4+NtTqWbdeG37rjfiidF+Ev3F6ZgjaJFwC1wux6ueGK+ R0MhVQ== -----END CERTIFICATE-----Generated at Sun Jan 25 22:12:51 2026 by rpki-client