This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/EjuIE4enXZzinM4ZfgsSD3gwxuY.roa File: EjuIE4enXZzinM4ZfgsSD3gwxuY.roa (raw, json) Hash identifier: VmAOnFMFZNZ7v7h3b1tL7nh4Drf7aU0G1qxfw7anYLc= Subject key identifier: 12:3B:88:13:87:A7:5D:9C:E2:9C:CE:19:7E:0B:12:0F:78:30:C6:E6 Certificate issuer: /CN=4ce90379bd8d04374b3adef060d51ae215710935 Certificate serial: 019B7FF2AECA1540A69AEF0E856D967A44F4 Authority key identifier: 4C:E9:03:79:BD:8D:04:37:4B:3A:DE:F0:60:D5:1A:E2:15:71:09:35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOkDeb2NBDdLOt7wYNUa4hVxCTU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/EjuIE4enXZzinM4ZfgsSD3gwxuY.roa Signing time: Fri 02 Jan 2026 18:22:49 +0000 ROA not before: Fri 02 Jan 2026 18:22:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202870 IP address blocks: 45.137.234.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/TOkDeb2NBDdLOt7wYNUa4hVxCTU.crl rsync://rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/TOkDeb2NBDdLOt7wYNUa4hVxCTU.mft rsync://rpki.ripe.net/repository/DEFAULT/TOkDeb2NBDdLOt7wYNUa4hVxCTU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:ae:ca:15:40:a6:9a:ef:0e:85:6d:96:7a:44:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ce90379bd8d04374b3adef060d51ae215710935 Validity Not Before: Jan 2 18:22:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=123b881387a75d9ce29cce197e0b120f7830c6e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1d:42:0a:4d:15:b9:60:2e:35:be:ff:c5:42: a1:50:8f:cd:ce:10:ba:9e:15:8c:fb:f1:34:fb:22: 84:46:d9:41:4e:c5:d2:12:55:f0:25:c6:f7:74:ca: c5:3a:dd:ec:77:d8:34:a7:99:dc:01:df:5b:3e:69: 7c:c1:19:a4:55:09:09:2a:f6:76:61:88:f1:ee:81: dd:90:45:be:23:45:14:7a:f1:c6:cb:ba:c1:cf:75: 67:a3:e6:15:32:cd:36:c8:23:1b:58:d3:c1:91:fa: 7b:7e:6d:bf:05:d8:09:21:83:0c:24:75:36:22:6c: 8b:72:a5:6c:ef:72:d9:75:98:1c:8a:c9:27:34:b9: c0:1e:a0:a1:54:bd:9d:62:81:6a:bf:23:d6:0a:7e: 5b:f1:4d:04:73:f1:ef:34:24:40:97:e7:7c:08:83: 40:f3:81:2d:32:4d:1d:7f:46:13:87:36:b2:9c:b1: 2f:0e:ec:ef:37:24:1e:ba:fe:f6:8d:ed:19:1c:e0: 39:cd:64:de:38:9f:81:b6:7b:4c:a1:48:d9:90:dd: 3f:45:f4:6d:25:94:0f:b7:23:26:ee:f0:a7:b1:1c: cd:c8:5c:31:a9:47:7f:6a:5a:70:04:0c:6f:ec:2b: 52:eb:c8:6b:45:e9:f9:d0:23:3e:3c:d6:0b:26:89: bd:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:3B:88:13:87:A7:5D:9C:E2:9C:CE:19:7E:0B:12:0F:78:30:C6:E6 X509v3 Authority Key Identifier: keyid:4C:E9:03:79:BD:8D:04:37:4B:3A:DE:F0:60:D5:1A:E2:15:71:09:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOkDeb2NBDdLOt7wYNUa4hVxCTU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/EjuIE4enXZzinM4ZfgsSD3gwxuY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9bacf8-146c-4b63-9d36-8200b86603b1/1/TOkDeb2NBDdLOt7wYNUa4hVxCTU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.137.234.0/23 Signature Algorithm: sha256WithRSAEncryption 41:19:37:ae:8c:68:7e:d3:24:b7:3b:e4:8f:a3:0d:b2:3a:6e: f7:66:4c:71:0b:22:c2:a8:da:12:57:b4:e6:5d:93:27:ec:57: 8e:73:85:71:fc:d6:6f:10:36:6f:63:44:b8:04:93:1c:b7:c6: 7f:c0:ec:0d:fe:1b:a2:a6:bf:12:83:2d:9f:64:ce:b9:f7:bf: ff:54:91:fb:9e:21:6c:c5:30:9d:4b:31:1b:3e:a4:68:7d:be: 11:94:8f:2c:5c:62:f1:76:30:33:ed:51:b3:4e:1f:21:2c:0b: 61:3e:61:7e:ce:6d:45:82:9d:5f:8a:60:3a:2e:ca:cf:23:f1: bd:88:a2:78:db:57:64:37:3f:ff:b0:b7:4e:27:ae:26:66:49: 7e:1a:b8:01:4f:c3:fa:4a:c6:3e:3c:8e:76:83:b0:1d:11:56: 4c:f7:47:a2:74:74:79:58:86:c2:2a:4c:c8:25:83:be:0d:0f: 64:53:a7:9c:83:db:25:0d:fc:32:c9:21:7b:bb:1a:5f:22:9b: 4c:4f:83:d3:51:b0:9a:e3:68:5c:5e:10:f3:4b:70:60:94:03: 50:cc:e2:d4:da:6f:a4:4c:aa:87:02:19:7c:cf:9a:48:6a:b6: 41:ad:96:ac:62:77:36:9a:66:ff:63:c6:0a:d5:f2:dc:af:4d: b5:ba:ce:ca -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8q7KFUCmmu8OhW2WekT0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjZTkwMzc5YmQ4ZDA0Mzc0YjNhZGVmMDYwZDUxYWUyMTU3 MTA5MzUwHhcNMjYwMTAyMTgyMjQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjNiODgxMzg3YTc1ZDljZTI5Y2NlMTk3ZTBiMTIwZjc4MzBjNmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtR1CCk0VuWAuNb7/xUKhUI/NzhC6 nhWM+/E0+yKERtlBTsXSElXwJcb3dMrFOt3sd9g0p5ncAd9bPml8wRmkVQkJKvZ2 YYjx7oHdkEW+I0UUevHGy7rBz3Vno+YVMs02yCMbWNPBkfp7fm2/BdgJIYMMJHU2 ImyLcqVs73LZdZgcisknNLnAHqChVL2dYoFqvyPWCn5b8U0Ec/HvNCRAl+d8CINA 84EtMk0df0YThzaynLEvDuzvNyQeuv72je0ZHOA5zWTeOJ+BtntMoUjZkN0/RfRt JZQPtyMm7vCnsRzNyFwxqUd/alpwBAxv7CtS68hrRen50CM+PNYLJom97wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBI7iBOHp12c4pzOGX4LEg94MMbmMB8GA1UdIwQY MBaAFEzpA3m9jQQ3Szre8GDVGuIVcQk1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVE9rRGViMk5CRGRMT3Q3d1lOVWE0aFZ4Q1RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85YmFjZjgtMTQ2Yy00YjYzLTlkMzYt ODIwMGI4NjYwM2IxLzEvRWp1SUU0ZW5YWnppbk00WmZnc1NEM2d3eHVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni85YmFjZjgtMTQ2Yy00YjYzLTlkMzYtODIwMGI4NjYwM2Ix LzEvVE9rRGViMk5CRGRMT3Q3d1lOVWE0aFZ4Q1RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLYnqMA0G CSqGSIb3DQEBCwUAA4IBAQBBGTeujGh+0yS3O+SPow2yOm73ZkxxCyLCqNoSV7Tm XZMn7FeOc4Vx/NZvEDZvY0S4BJMct8Z/wOwN/huipr8Sgy2fZM6597//VJH7niFs xTCdSzEbPqRofb4RlI8sXGLxdjAz7VGzTh8hLAthPmF+zm1Fgp1fimA6LsrPI/G9 iKJ421dkNz//sLdOJ64mZkl+GrgBT8P6SsY+PI52g7AdEVZM90eidHR5WIbCKkzI JYO+DQ9kU6ecg9slDfwyySF7uxpfIptMT4PTUbCa42hcXhDzS3BglANQzOLU2m+k TKqHAhl8z5pIarZBrZasYnc2mmb/Y8YK1fLcr021us7K -----END CERTIFICATE-----Generated at Mon Jan 26 15:18:48 2026 by rpki-client