This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/Eo3L-3lPzBtGwSWfnMDXuxuu6nc.roa File: Eo3L-3lPzBtGwSWfnMDXuxuu6nc.roa (raw, json) Hash identifier: KayjLv1EKOAgncKf1kvYzIArRjjjosmZ3G86Nh3L73E= Subject key identifier: 12:8D:CB:FB:79:4F:CC:1B:46:C1:25:9F:9C:C0:D7:BB:1B:AE:EA:77 Certificate issuer: /CN=15f889fed0085fc21b08fcbbb252c3106df99aa8 Certificate serial: 019B775933B5D155E7080B3D6A24210897C0 Authority key identifier: 15:F8:89:FE:D0:08:5F:C2:1B:08:FC:BB:B2:52:C3:10:6D:F9:9A:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/Eo3L-3lPzBtGwSWfnMDXuxuu6nc.roa Signing time: Thu 01 Jan 2026 02:18:13 +0000 ROA not before: Thu 01 Jan 2026 02:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13101 IP address blocks: 45.145.236.0/22 maxlen: 22 46.22.152.0/21 maxlen: 21 72.251.252.0/22 maxlen: 22 109.94.212.0/22 maxlen: 22 185.234.200.0/22 maxlen: 22 192.166.40.0/22 maxlen: 22 202.71.144.0/21 maxlen: 21 206.168.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:33:b5:d1:55:e7:08:0b:3d:6a:24:21:08:97:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15f889fed0085fc21b08fcbbb252c3106df99aa8 Validity Not Before: Jan 1 02:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=128dcbfb794fcc1b46c1259f9cc0d7bb1baeea77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:87:04:4d:fb:01:64:f5:a3:ef:f1:2c:b9:ce: 45:81:b5:cc:c3:47:dd:52:cb:a6:73:fa:ba:a3:99: bf:f2:17:75:55:e5:98:96:93:b4:cc:cc:21:af:b2: c2:b0:50:f0:a9:26:13:11:36:c7:83:c1:77:21:0d: aa:32:69:4b:cd:02:70:71:d6:8e:fe:df:48:1b:4d: 69:0d:33:3f:ce:22:e1:5a:2b:f3:43:dc:19:3d:4a: 51:60:b2:c1:73:ca:25:21:53:01:55:cd:af:82:eb: c3:7c:71:8a:d6:57:42:67:f8:7f:ec:ad:23:14:4a: d3:55:b9:90:00:08:cb:b1:87:e7:91:36:e6:7d:8a: 85:07:3b:22:aa:5f:12:f8:72:99:d9:25:e9:59:e3: d7:b8:53:cb:66:c2:74:2c:b0:eb:64:8a:6a:83:10: 77:56:1d:7c:c8:24:d4:47:c8:8e:ab:1a:1b:81:7b: 26:30:e0:c3:d2:b9:c1:7d:4f:08:3b:55:4e:24:69: 4e:49:14:e5:14:ad:46:b9:c4:6d:29:d2:39:23:99: 7e:58:d8:45:ab:17:e5:3c:b3:49:12:e8:aa:8d:8a: 5b:8d:db:cd:91:a2:a9:24:63:3b:70:33:07:90:c9: e3:25:90:a2:f0:c0:3a:1f:84:13:b4:64:bf:73:be: 59:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:8D:CB:FB:79:4F:CC:1B:46:C1:25:9F:9C:C0:D7:BB:1B:AE:EA:77 X509v3 Authority Key Identifier: keyid:15:F8:89:FE:D0:08:5F:C2:1B:08:FC:BB:B2:52:C3:10:6D:F9:9A:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/Eo3L-3lPzBtGwSWfnMDXuxuu6nc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.145.236.0/22 46.22.152.0/21 72.251.252.0/22 109.94.212.0/22 185.234.200.0/22 192.166.40.0/22 202.71.144.0/21 206.168.72.0/21 Signature Algorithm: sha256WithRSAEncryption 1a:86:a3:c6:cd:39:c3:06:e2:14:ab:73:b7:6e:8e:8d:74:66: 0f:14:02:6f:f0:be:52:cd:3c:64:d5:dd:6f:a5:c8:2a:27:8e: 0f:43:b7:5d:5b:88:f6:65:79:44:d7:d5:8b:31:75:e6:77:b8: f7:47:1e:74:cb:54:eb:62:52:3e:8a:25:ca:69:f3:81:9b:38: 77:43:31:b9:36:14:46:cb:60:1a:f2:36:25:96:81:35:95:fa: 63:79:e8:d8:ab:5d:b6:c0:ba:b1:c7:b8:fa:f5:15:e6:f5:7f: 01:ea:fb:cb:fd:53:68:04:90:95:4b:25:7a:d3:ba:8e:1b:26: d4:0b:3f:d3:15:b6:dc:8a:d0:5e:a6:ff:4c:05:27:09:09:ae: 87:ac:44:0e:c3:1f:18:8d:4b:ce:15:62:fb:d9:b4:d5:c5:77: ce:ae:ca:5d:d2:df:db:e0:40:19:73:cd:eb:36:74:57:dd:5b: 37:c3:ef:22:34:cd:f3:3d:e5:18:59:69:cb:eb:5b:27:84:04: c2:fa:ae:5d:f2:c9:a5:84:8a:f4:86:2a:b6:2b:db:6e:8f:1b: f6:0e:ff:5c:2a:3b:e4:83:16:2a:75:73:7e:3d:0b:ba:12:76: dc:10:b4:71:ff:d9:f7:0b:77:ab:dc:4a:bc:f4:52:cf:5a:78: 63:2c:58:77 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZt3WTO10VXnCAs9aiQhCJfAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1Zjg4OWZlZDAwODVmYzIxYjA4ZmNiYmIyNTJjMzEwNmRm OTlhYTgwHhcNMjYwMTAxMDIxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjhkY2JmYjc5NGZjYzFiNDZjMTI1OWY5Y2MwZDdiYjFiYWVlYTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoocETfsBZPWj7/Esuc5FgbXMw0fd Usumc/q6o5m/8hd1VeWYlpO0zMwhr7LCsFDwqSYTETbHg8F3IQ2qMmlLzQJwcdaO /t9IG01pDTM/ziLhWivzQ9wZPUpRYLLBc8olIVMBVc2vguvDfHGK1ldCZ/h/7K0j FErTVbmQAAjLsYfnkTbmfYqFBzsiql8S+HKZ2SXpWePXuFPLZsJ0LLDrZIpqgxB3 Vh18yCTUR8iOqxobgXsmMODD0rnBfU8IO1VOJGlOSRTlFK1GucRtKdI5I5l+WNhF qxflPLNJEuiqjYpbjdvNkaKpJGM7cDMHkMnjJZCi8MA6H4QTtGS/c75ZcQIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFBKNy/t5T8wbRsEln5zA17sbrup3MB8GA1UdIwQY MBaAFBX4if7QCF/CGwj8u7JSwxBt+ZqoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmZpSl90QUlYOEliQ1B5N3NsTERFRzM1bXFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9mOTUyZmItOTMxOC00OWI2LWI5NDYt MWUzYTE5NTQ3OGUwLzEvRW8zTC0zbFB6QnRHd1NXZm5NRFh1eHV1Nm5jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9mOTUyZmItOTMxOC00OWI2LWI5NDYtMWUzYTE5NTQ3OGUw LzEvRmZpSl90QUlYOEliQ1B5N3NsTERFRzM1bXFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQCLZHsAwQD LhaYAwQCSPv8AwQCbV7UAwQCuerIAwQCwKYoAwQDykeQAwQDzqhIMA0GCSqGSIb3 DQEBCwUAA4IBAQAahqPGzTnDBuIUq3O3bo6NdGYPFAJv8L5SzTxk1d1vpcgqJ44P Q7ddW4j2ZXlE19WLMXXmd7j3Rx50y1TrYlI+iiXKafOBmzh3QzG5NhRGy2Aa8jYl loE1lfpjeejYq122wLqxx7j69RXm9X8B6vvL/VNoBJCVSyV607qOGybUCz/TFbbc itBepv9MBScJCa6HrEQOwx8YjUvOFWL72bTVxXfOrspd0t/b4EAZc83rNnRX3Vs3 w+8iNM3zPeUYWWnL61snhATC+q5d8smlhIr0hiq2K9tujxv2Dv9cKjvkgxYqdXN+ PQu6EnbcELRx/9n3C3er3Eq89FLPWnhjLFh3 -----END CERTIFICATE-----Generated at Mon Jan 26 10:25:26 2026 by rpki-client