This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/EdRGRNAOunRYG7-_JByQf_-npzI.roa File: EdRGRNAOunRYG7-_JByQf_-npzI.roa (raw, json) Hash identifier: hCZ1ruXMfJaNp5NsNXemKDBnVae+viS5ZTIr51GpNRQ= Subject key identifier: 11:D4:46:44:D0:0E:BA:74:58:1B:BF:BF:24:1C:90:7F:FF:A7:A7:32 Certificate issuer: /CN=8aab4c0cf21c1a3d6ea41068cbe908be388e450a Certificate serial: 019B78A2BC6D3EA5A23061772C7FE7BB7230 Authority key identifier: 8A:AB:4C:0C:F2:1C:1A:3D:6E:A4:10:68:CB:E9:08:BE:38:8E:45:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iqtMDPIcGj1upBBoy-kIvjiORQo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/EdRGRNAOunRYG7-_JByQf_-npzI.roa Signing time: Thu 01 Jan 2026 08:18:09 +0000 ROA not before: Thu 01 Jan 2026 08:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 53991 IP address blocks: 45.11.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.mft rsync://rpki.ripe.net/repository/DEFAULT/iqtMDPIcGj1upBBoy-kIvjiORQo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:bc:6d:3e:a5:a2:30:61:77:2c:7f:e7:bb:72:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8aab4c0cf21c1a3d6ea41068cbe908be388e450a Validity Not Before: Jan 1 08:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=11d44644d00eba74581bbfbf241c907fffa7a732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4b:aa:35:b7:55:54:a8:26:ff:64:03:5d:c6: 11:cf:4a:0d:c7:e7:7e:f7:9b:3a:31:e0:aa:56:33: bd:ff:be:d8:fd:db:a3:a5:a3:4b:35:46:36:15:29: 56:f8:7e:35:c4:2e:23:cc:cd:80:f1:bc:11:76:25: f1:59:3a:5d:e1:5d:f1:db:99:99:4a:a3:59:2d:39: 89:49:61:a8:6c:10:0b:50:be:e9:3d:ae:0e:4a:0c: 69:0c:cd:ea:d7:70:0c:5b:d0:30:94:49:84:c3:e5: bc:6f:37:ef:00:f7:c9:bb:65:1a:ad:e7:2e:56:93: 16:70:5e:31:fc:4d:89:08:b2:4e:66:5c:81:87:29: 82:db:b2:93:58:07:93:ae:70:85:d6:f9:8a:bf:67: 30:ce:62:df:de:a7:f8:67:1d:bd:ea:39:c6:a4:e7: 52:7b:d9:29:40:53:10:54:97:c1:90:9b:75:47:39: 7f:0a:56:ac:24:1e:46:96:2e:43:82:37:88:74:65: 5f:2d:4e:b5:6f:cc:dc:44:77:cb:39:73:06:6f:80: d0:84:d5:99:03:33:d1:b9:1b:e3:d1:aa:5c:d1:58: a5:59:11:66:8a:28:7d:57:62:22:c4:c1:cb:2c:f3: 61:06:b3:28:62:28:fa:ff:2e:a7:34:a3:ba:e2:50: 4a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:D4:46:44:D0:0E:BA:74:58:1B:BF:BF:24:1C:90:7F:FF:A7:A7:32 X509v3 Authority Key Identifier: keyid:8A:AB:4C:0C:F2:1C:1A:3D:6E:A4:10:68:CB:E9:08:BE:38:8E:45:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iqtMDPIcGj1upBBoy-kIvjiORQo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/EdRGRNAOunRYG7-_JByQf_-npzI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.11.128.0/24 Signature Algorithm: sha256WithRSAEncryption b6:88:d4:e8:0f:d6:1a:1f:d9:06:59:d0:b3:b9:60:c5:0a:5a: 4d:42:c3:8c:96:33:b8:92:0a:ca:24:38:3f:ba:71:e8:22:55: 86:2e:1a:e6:34:5c:e2:e3:9c:f8:b6:fc:99:b4:f1:dc:41:a7: 19:8b:77:e5:5b:68:ed:17:71:13:24:83:42:be:53:cc:fe:7f: ae:cf:cf:a6:3c:24:3f:c1:86:e3:6c:cc:d3:f2:0d:55:87:86: c3:e0:e8:b0:d3:36:81:2b:07:fa:35:77:7a:72:f8:ea:3e:ab: a5:c3:b9:d9:94:e5:29:19:83:e3:08:ac:7a:0a:b0:21:31:8a: 49:bc:bb:ed:3a:c8:8b:98:20:0b:e6:fe:73:7e:60:4b:45:f0: 78:de:5f:05:b5:1e:d4:19:0e:6a:58:d1:0b:7d:3f:9e:cb:5a: 3c:58:52:07:79:4b:24:52:7f:11:ef:5d:35:28:d3:fc:1f:a9: 7d:07:99:ca:88:3b:84:eb:d6:db:3d:a8:5b:72:e9:62:c4:22: 5b:0d:a9:ac:5a:fa:0b:67:96:9c:6c:aa:61:60:c4:ea:5e:db: 1f:b5:fd:86:8d:15:ab:06:06:00:06:b1:4e:f2:4e:2e:3e:1a: 07:a1:44:89:7f:47:ce:ac:f1:cf:ef:a3:8c:6f:3b:f0:2b:97: 0b:08:f2:9c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4orxtPqWiMGF3LH/nu3IwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhYWI0YzBjZjIxYzFhM2Q2ZWE0MTA2OGNiZTkwOGJlMzg4 ZTQ1MGEwHhcNMjYwMTAxMDgxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMWQ0NDY0NGQwMGViYTc0NTgxYmJmYmYyNDFjOTA3ZmZmYTdhNzMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUuqNbdVVKgm/2QDXcYRz0oNx+d+ 95s6MeCqVjO9/77Y/dujpaNLNUY2FSlW+H41xC4jzM2A8bwRdiXxWTpd4V3x25mZ SqNZLTmJSWGobBALUL7pPa4OSgxpDM3q13AMW9AwlEmEw+W8bzfvAPfJu2Uarecu VpMWcF4x/E2JCLJOZlyBhymC27KTWAeTrnCF1vmKv2cwzmLf3qf4Zx296jnGpOdS e9kpQFMQVJfBkJt1Rzl/ClasJB5Gli5DgjeIdGVfLU61b8zcRHfLOXMGb4DQhNWZ AzPRuRvj0apc0VilWRFmiih9V2IixMHLLPNhBrMoYij6/y6nNKO64lBKBwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBHURkTQDrp0WBu/vyQckH//p6cyMB8GA1UdIwQY MBaAFIqrTAzyHBo9bqQQaMvpCL44jkUKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXF0TURQSWNHajF1cEJCb3kta0l2amlPUlFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NDBjMWUtMWE0Yy00Y2EyLWJkNTMt NTM3YjFiNDlkZmU3LzEvRWRSR1JOQU91blJZRzctX0pCeVFmXy1ucHpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83NDBjMWUtMWE0Yy00Y2EyLWJkNTMtNTM3YjFiNDlkZmU3 LzEvaXF0TURQSWNHajF1cEJCb3kta0l2amlPUlFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQuAMA0G CSqGSIb3DQEBCwUAA4IBAQC2iNToD9YaH9kGWdCzuWDFClpNQsOMljO4kgrKJDg/ unHoIlWGLhrmNFzi45z4tvyZtPHcQacZi3flW2jtF3ETJINCvlPM/n+uz8+mPCQ/ wYbjbMzT8g1Vh4bD4Oiw0zaBKwf6NXd6cvjqPqulw7nZlOUpGYPjCKx6CrAhMYpJ vLvtOsiLmCAL5v5zfmBLRfB43l8FtR7UGQ5qWNELfT+ey1o8WFIHeUskUn8R7101 KNP8H6l9B5nKiDuE69bbPahbculixCJbDamsWvoLZ5acbKphYMTqXtsftf2GjRWr BgYABrFO8k4uPhoHoUSJf0fOrPHP76OMbzvwK5cLCPKc -----END CERTIFICATE-----Generated at Sun Jan 25 15:13:24 2026 by rpki-client