This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/Eb_E6fwUoCaY280jS6zIbLf-Ekg.roa File: Eb_E6fwUoCaY280jS6zIbLf-Ekg.roa (raw, json) Hash identifier: Q2/ZJXr2QIdBa9yss5O/wJYnVVCvAGxuYe91JBXhEFQ= Subject key identifier: 11:BF:C4:E9:FC:14:A0:26:98:DB:CD:23:4B:AC:C8:6C:B7:FE:12:48 Certificate issuer: /CN=bd6fa37a2483cf579fa86250119ac0133475aad8 Certificate serial: 019B7B367CCE3B42C990BB5DF80B1E1E12E9 Authority key identifier: BD:6F:A3:7A:24:83:CF:57:9F:A8:62:50:11:9A:C0:13:34:75:AA:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vW-jeiSDz1efqGJQEZrAEzR1qtg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/Eb_E6fwUoCaY280jS6zIbLf-Ekg.roa Signing time: Thu 01 Jan 2026 20:18:46 +0000 ROA not before: Thu 01 Jan 2026 20:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137443 IP address blocks: 45.86.140.0/22 maxlen: 24 45.133.228.0/22 maxlen: 24 45.138.80.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/vW-jeiSDz1efqGJQEZrAEzR1qtg.crl rsync://rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/vW-jeiSDz1efqGJQEZrAEzR1qtg.mft rsync://rpki.ripe.net/repository/DEFAULT/vW-jeiSDz1efqGJQEZrAEzR1qtg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:7c:ce:3b:42:c9:90:bb:5d:f8:0b:1e:1e:12:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd6fa37a2483cf579fa86250119ac0133475aad8 Validity Not Before: Jan 1 20:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=11bfc4e9fc14a02698dbcd234bacc86cb7fe1248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9b:64:30:b0:e3:68:ae:76:8b:53:15:3a:0d: 02:af:68:e2:62:a8:6e:8a:26:fd:79:f2:65:3e:9e: 3a:96:f8:d3:f5:b6:cb:b8:61:b2:25:b1:87:c9:96: 81:98:9c:c0:7d:b3:5e:8f:3c:82:a4:04:8a:24:ee: 2b:d2:df:45:4c:25:af:13:82:70:85:1e:8e:68:e6: 53:e9:9b:93:33:c4:f5:51:2b:a2:b6:b4:8a:40:86: cf:88:26:30:d1:39:aa:a0:5a:a4:0a:75:59:d7:a0: 8d:49:3d:50:52:9f:78:5b:69:47:a2:29:3d:51:a0: 1e:01:b4:24:f2:9d:ff:13:75:7d:2f:34:08:9b:0b: 65:19:08:1e:e8:24:13:6d:8a:05:1d:fa:3a:69:2c: 55:b8:6a:fd:67:0a:37:a3:b1:35:33:e0:df:b5:f8: 95:7b:1a:ee:5f:de:ab:e3:c2:58:1f:ec:f9:76:fe: 44:f7:66:6c:6f:ff:dd:85:19:6c:95:06:9c:ae:6e: 30:20:6f:8a:81:f0:85:65:96:dc:1c:7d:21:96:3c: 13:66:1d:df:c7:25:19:b1:2c:73:1d:de:b3:49:11: 85:c3:db:2b:4b:28:ed:ec:06:41:dc:3a:12:7b:09: 39:ba:21:66:4a:fc:f5:18:36:4b:2c:7d:34:12:f0: 06:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:BF:C4:E9:FC:14:A0:26:98:DB:CD:23:4B:AC:C8:6C:B7:FE:12:48 X509v3 Authority Key Identifier: keyid:BD:6F:A3:7A:24:83:CF:57:9F:A8:62:50:11:9A:C0:13:34:75:AA:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vW-jeiSDz1efqGJQEZrAEzR1qtg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/Eb_E6fwUoCaY280jS6zIbLf-Ekg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/vW-jeiSDz1efqGJQEZrAEzR1qtg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.86.140.0/22 45.133.228.0/22 45.138.80.0/22 Signature Algorithm: sha256WithRSAEncryption b5:1f:c1:d2:e1:65:b0:58:a0:bb:0e:22:13:84:1e:0a:cb:34: 78:90:47:a0:43:e1:43:a6:a7:23:ed:a4:a6:12:ac:7a:88:3d: b9:c3:2d:86:12:2d:bf:3d:82:05:51:66:c5:d2:71:54:2e:f3: e9:98:0e:98:b4:c7:b6:a2:c1:1a:c7:26:93:27:3b:72:66:33: 6d:f5:67:9c:3e:48:28:e5:d8:21:9c:94:e9:3d:6c:6f:cc:5d: 90:8b:f0:0c:09:17:67:c3:7a:48:d2:c6:c1:19:e8:df:9e:89: d8:09:df:e1:21:bf:99:60:ce:79:6b:73:88:db:46:48:7b:28: e0:32:68:51:6a:40:aa:a5:86:9d:c3:1b:f9:28:d1:63:4c:b0: 32:3b:86:b4:71:ca:4d:ee:b0:05:36:8a:ec:13:0a:62:81:df: d7:1e:66:a3:c6:3a:da:80:79:a4:05:dd:26:73:e1:5d:82:54: ba:6a:80:b6:63:59:94:21:1f:6f:2c:40:02:c0:55:7b:85:57: df:ca:39:10:12:17:f1:7a:91:94:e8:dc:a6:16:ca:f2:97:f7: 17:f8:a0:95:09:6f:7c:38:d8:f7:b1:95:08:d8:5c:c7:a0:c9: a3:38:fa:73:5a:2b:0e:c8:3c:46:dd:f3:73:2e:6f:4e:27:8f: fa:92:8b:e0 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7NnzOO0LJkLtd+AseHhLpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkNmZhMzdhMjQ4M2NmNTc5ZmE4NjI1MDExOWFjMDEzMzQ3 NWFhZDgwHhcNMjYwMTAxMjAxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMWJmYzRlOWZjMTRhMDI2OThkYmNkMjM0YmFjYzg2Y2I3ZmUxMjQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ptkMLDjaK52i1MVOg0Cr2jiYqhu iib9efJlPp46lvjT9bbLuGGyJbGHyZaBmJzAfbNejzyCpASKJO4r0t9FTCWvE4Jw hR6OaOZT6ZuTM8T1USuitrSKQIbPiCYw0TmqoFqkCnVZ16CNST1QUp94W2lHoik9 UaAeAbQk8p3/E3V9LzQImwtlGQge6CQTbYoFHfo6aSxVuGr9Zwo3o7E1M+DftfiV exruX96r48JYH+z5dv5E92Zsb//dhRlslQacrm4wIG+KgfCFZZbcHH0hljwTZh3f xyUZsSxzHd6zSRGFw9srSyjt7AZB3DoSewk5uiFmSvz1GDZLLH00EvAGqQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFBG/xOn8FKAmmNvNI0usyGy3/hJIMB8GA1UdIwQY MBaAFL1vo3okg89Xn6hiUBGawBM0darYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlctamVpU0R6MWVmcUdKUUVackFFelIxcXRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9lM2FkYTItYzlkZi00NGUyLThiMGYt OGZmMTYxMWU4YmI0LzEvRWJfRTZmd1VvQ2FZMjgwalM2ekliTGYtRWtnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9lM2FkYTItYzlkZi00NGUyLThiMGYtOGZmMTYxMWU4YmI0 LzEvdlctamVpU0R6MWVmcUdKUUVackFFelIxcXRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLVaMAwQC LYXkAwQCLYpQMA0GCSqGSIb3DQEBCwUAA4IBAQC1H8HS4WWwWKC7DiIThB4KyzR4 kEegQ+FDpqcj7aSmEqx6iD25wy2GEi2/PYIFUWbF0nFULvPpmA6YtMe2osEaxyaT JztyZjNt9WecPkgo5dghnJTpPWxvzF2Qi/AMCRdnw3pI0sbBGejfnonYCd/hIb+Z YM55a3OI20ZIeyjgMmhRakCqpYadwxv5KNFjTLAyO4a0ccpN7rAFNorsEwpigd/X HmajxjragHmkBd0mc+FdglS6aoC2Y1mUIR9vLEACwFV7hVffyjkQEhfxepGU6Nym Fsryl/cX+KCVCW98ONj3sZUI2FzHoMmjOPpzWisOyDxG3fNzLm9OJ4/6kovg -----END CERTIFICATE-----Generated at Sun Jan 25 17:19:50 2026 by rpki-client