This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/76d7ae-de67-4a05-a71b-de774b0e31df/1/eK1Z4-kI7xtwgkRHFwokm6IQfiA.roa File: eK1Z4-kI7xtwgkRHFwokm6IQfiA.roa (raw, json) Hash identifier: Amg8RSjuWxmCHDVccTSJSqHK9UDEuD22DTzLYwn/oU0= Subject key identifier: 78:AD:59:E3:E9:08:EF:1B:70:82:44:47:17:0A:24:9B:A2:10:7E:20 Certificate issuer: /CN=fa5a25982f7b747112b0ff358f3d24a562cfcfec Certificate serial: 019AE0B17FC9D370AADD60AF7D4E089A9B42 Authority key identifier: FA:5A:25:98:2F:7B:74:71:12:B0:FF:35:8F:3D:24:A5:62:CF:CF:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-lolmC97dHESsP81jz0kpWLPz-w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/76d7ae-de67-4a05-a71b-de774b0e31df/1/eK1Z4-kI7xtwgkRHFwokm6IQfiA.roa Signing time: Tue 02 Dec 2025 20:12:00 +0000 ROA not before: Tue 02 Dec 2025 20:12:00 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 210937 IP address blocks: 46.175.133.0/24 maxlen: 24 2a11:1d40::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/76d7ae-de67-4a05-a71b-de774b0e31df/1/1-lolmC97dHESsP81jz0kpWLPz-w.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/76d7ae-de67-4a05-a71b-de774b0e31df/1/1-lolmC97dHESsP81jz0kpWLPz-w.mft rsync://rpki.ripe.net/repository/DEFAULT/1-lolmC97dHESsP81jz0kpWLPz-w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e0:b1:7f:c9:d3:70:aa:dd:60:af:7d:4e:08:9a:9b:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa5a25982f7b747112b0ff358f3d24a562cfcfec Validity Not Before: Dec 2 20:12:00 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=78ad59e3e908ef1b70824447170a249ba2107e20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d4:4e:28:ae:ef:3e:be:35:26:31:19:1b:14: eb:9e:5e:d4:6f:d1:85:50:40:94:28:42:06:25:40: 9f:af:84:67:fe:4d:c9:e6:6c:9f:a3:07:ce:28:96: 40:62:ed:b2:4a:9a:ca:ad:80:8f:a9:97:c1:30:f7: ef:ad:0b:c9:5c:ad:73:ec:c7:47:59:3a:50:01:cc: 86:45:20:d6:bc:0b:46:c5:a0:c5:e0:3d:22:e9:72: 13:f7:40:d2:f4:3a:0f:bf:8b:30:26:12:cc:de:78: 10:d9:4b:33:f8:96:4c:d7:ec:fc:be:9c:10:24:fe: 50:b2:36:1f:ea:24:bd:8f:32:0b:79:a8:1f:d1:85: b8:fa:f0:55:e3:32:ea:c0:8d:e6:4f:9c:56:96:60: 9c:c7:82:49:39:bf:22:53:d2:00:57:59:63:d2:4c: 89:7a:96:29:f6:6f:d2:ce:a5:c5:30:8d:53:e1:37: 85:26:a4:54:85:e1:3b:cd:6f:7a:c1:d0:75:15:07: 8c:47:f3:41:a0:cb:a7:d8:aa:51:eb:f1:27:b2:a4: b9:7f:6e:72:74:e4:53:44:d2:16:c3:e2:54:3d:01: 1a:16:08:9c:67:94:dc:18:71:d7:62:6d:61:76:a5: 65:df:05:38:57:cd:01:48:af:4f:14:8a:4c:93:4b: e1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:AD:59:E3:E9:08:EF:1B:70:82:44:47:17:0A:24:9B:A2:10:7E:20 X509v3 Authority Key Identifier: keyid:FA:5A:25:98:2F:7B:74:71:12:B0:FF:35:8F:3D:24:A5:62:CF:CF:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lolmC97dHESsP81jz0kpWLPz-w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/76d7ae-de67-4a05-a71b-de774b0e31df/1/eK1Z4-kI7xtwgkRHFwokm6IQfiA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/76d7ae-de67-4a05-a71b-de774b0e31df/1/1-lolmC97dHESsP81jz0kpWLPz-w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.175.133.0/24 IPv6: 2a11:1d40::/29 Signature Algorithm: sha256WithRSAEncryption 18:75:87:4c:b1:5a:ac:1c:52:7a:1c:2b:5a:87:27:a7:91:5f: 95:81:68:42:2f:c6:9a:02:68:37:34:cd:82:6d:40:f6:9c:30: 05:9f:95:ae:a5:c8:d3:b3:f2:75:15:1d:39:ec:5c:b4:5d:bc: ed:15:18:18:56:16:c4:59:d6:0b:cd:a1:4a:be:c1:20:04:4a: 98:31:1a:93:ab:81:0c:8d:06:3f:69:30:3d:11:f5:30:37:96: ab:b2:34:1f:b3:74:61:36:4c:40:3f:4f:e7:3b:88:24:bc:73: 10:a2:a3:5e:c3:b7:09:e7:b8:54:44:53:eb:61:f1:5f:ea:7f: 2e:08:c7:3e:3b:c6:77:a9:66:f0:af:29:29:72:aa:3a:c6:12: 63:c3:34:06:84:19:fd:71:f9:ba:59:7c:55:c1:73:fb:73:94: 54:c4:4b:30:9a:67:b0:86:3c:4d:cf:6d:b2:be:6c:d8:cf:7d: 3c:14:9d:30:d6:d5:d0:eb:f4:8f:ef:56:6e:6e:7f:75:76:c3: ea:39:c1:d5:4b:fd:06:f0:3e:9f:99:3b:16:0f:4d:58:bf:50: cc:a0:8e:a5:eb:a9:1a:b7:7d:06:9d:dd:c8:9a:cf:c9:4b:0a: 31:e1:4f:29:ad:de:c4:a3:d4:56:44:8d:10:26:70:fc:fb:a4: 4a:38:34:89 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZrgsX/J03Cq3WCvfU4ImptCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhNWEyNTk4MmY3Yjc0NzExMmIwZmYzNThmM2QyNGE1NjJj ZmNmZWMwHhcNMjUxMjAyMjAxMjAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OGFkNTllM2U5MDhlZjFiNzA4MjQ0NDcxNzBhMjQ5YmEyMTA3ZTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtROKK7vPr41JjEZGxTrnl7Ub9GF UECUKEIGJUCfr4Rn/k3J5myfowfOKJZAYu2ySprKrYCPqZfBMPfvrQvJXK1z7MdH WTpQAcyGRSDWvAtGxaDF4D0i6XIT90DS9DoPv4swJhLM3ngQ2Usz+JZM1+z8vpwQ JP5QsjYf6iS9jzILeagf0YW4+vBV4zLqwI3mT5xWlmCcx4JJOb8iU9IAV1lj0kyJ epYp9m/SzqXFMI1T4TeFJqRUheE7zW96wdB1FQeMR/NBoMun2KpR6/EnsqS5f25y dORTRNIWw+JUPQEaFgicZ5TcGHHXYm1hdqVl3wU4V80BSK9PFIpMk0vhlQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFHitWePpCO8bcIJERxcKJJuiEH4gMB8GA1UdIwQY MBaAFPpaJZgve3RxErD/NY89JKViz8/sMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1sb2xtQzk3ZEhFU3NQODFqejBrcFdMUHotdy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTkvNzZkN2FlLWRlNjctNGEwNS1hNzFi LWRlNzc0YjBlMzFkZi8xL2VLMVo0LWtJN3h0d2drUkhGd29rbTZJUWZpQS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYTkvNzZkN2FlLWRlNjctNGEwNS1hNzFiLWRlNzc0YjBlMzFk Zi8xLzEtbG9sbUM5N2RIRVNzUDgxanowa3BXTFB6LXcuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAAur4Uw DQQCAAIwBwMFAyoRHUAwDQYJKoZIhvcNAQELBQADggEBABh1h0yxWqwcUnocK1qH J6eRX5WBaEIvxpoCaDc0zYJtQPacMAWfla6lyNOz8nUVHTnsXLRdvO0VGBhWFsRZ 1gvNoUq+wSAESpgxGpOrgQyNBj9pMD0R9TA3lquyNB+zdGE2TEA/T+c7iCS8cxCi o17DtwnnuFREU+th8V/qfy4Ixz47xnepZvCvKSlyqjrGEmPDNAaEGf1x+bpZfFXB c/tzlFTESzCaZ7CGPE3PbbK+bNjPfTwUnTDW1dDr9I/vVm5uf3V2w+o5wdVL/Qbw Pp+ZOxYPTVi/UMygjqXrqRq3fQad3ciaz8lLCjHhTymt3sSj1FZEjRAmcPz7pEo4 NIk= -----END CERTIFICATE-----Generated at Sat Dec 6 12:44:42 2025 by rpki-client