This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/eZbHi3bD8wlIPz4tTJot4vHapfY.roa File: eZbHi3bD8wlIPz4tTJot4vHapfY.roa (raw, json) Hash identifier: k3Qh6AbEN1N9pnR+EfqZFG3TCE15WbY8pAT9IwZUOTE= Subject key identifier: 79:96:C7:8B:76:C3:F3:09:48:3F:3E:2D:4C:9A:2D:E2:F1:DA:A5:F6 Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Certificate serial: 019B76EADDFEE10247B58212E22F75404B85 Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/eZbHi3bD8wlIPz4tTJot4vHapfY.roa Signing time: Thu 01 Jan 2026 00:17:42 +0000 ROA not before: Thu 01 Jan 2026 00:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 271993 IP address blocks: 45.8.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:dd:fe:e1:02:47:b5:82:12:e2:2f:75:40:4b:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Validity Not Before: Jan 1 00:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7996c78b76c3f309483f3e2d4c9a2de2f1daa5f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:50:8b:b1:41:51:e1:18:b2:0b:c4:4f:8d:15: d5:e5:bc:20:70:9d:b6:66:a0:2b:8e:55:15:a8:6a: 6e:96:0d:23:be:9a:86:f0:9a:a6:da:f9:19:bd:77: ae:fa:41:b1:a8:92:33:ac:cc:22:c4:9a:62:c4:2a: 2d:05:e4:13:33:a5:2c:7d:a3:11:f4:6b:c6:72:e4: ff:65:09:37:5e:e6:d4:ee:25:3c:f5:80:f7:05:38: 5a:25:55:fe:66:42:18:a0:e2:39:b5:7f:66:81:35: 7b:20:ab:d7:47:ff:32:00:88:a2:b0:fe:6e:7b:88: df:a7:d2:e4:e2:a8:47:87:c7:c6:0c:2a:d6:26:60: ca:08:d6:da:ee:5b:75:e8:9c:55:2e:61:5d:01:c8: 42:f7:dc:eb:f9:72:6b:d6:51:67:48:7b:3d:2f:de: a3:76:30:cf:31:62:e7:43:74:2c:2f:32:e4:90:6f: 2d:34:91:4a:38:a9:e5:c0:ba:11:ea:b6:70:72:e2: 66:3d:92:6f:a6:b4:07:e8:10:05:f9:84:9c:72:f2: 81:90:3e:28:8f:28:7d:36:f4:92:21:aa:5c:47:dd: 2c:e3:ae:a8:0e:30:ac:86:1d:d0:e8:a7:17:9a:a3: c2:02:59:14:e0:00:bd:70:b2:1e:b8:60:85:3a:80: b5:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:96:C7:8B:76:C3:F3:09:48:3F:3E:2D:4C:9A:2D:E2:F1:DA:A5:F6 X509v3 Authority Key Identifier: keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/eZbHi3bD8wlIPz4tTJot4vHapfY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.8.207.0/24 Signature Algorithm: sha256WithRSAEncryption 48:b2:2d:5b:8d:c0:70:36:2b:b7:f6:39:b2:57:3c:82:28:50: 81:35:42:81:01:3b:65:d6:c6:68:b8:51:32:4c:11:19:70:a8: 49:5c:3b:f9:81:e2:3f:16:5b:07:25:f3:e5:84:d3:f7:9f:d7: 8f:ca:2e:f2:3d:13:dd:f8:5c:04:18:16:15:db:89:cb:9b:49: 9f:19:4f:3a:73:aa:68:ba:75:ac:e1:bd:a9:d0:c7:f6:54:37: a0:c7:b7:7f:39:62:bd:34:ad:a2:15:ac:de:98:b0:1c:7a:ea: 27:eb:86:f9:6f:fc:21:8a:f6:7b:d8:3c:1d:9c:bf:a3:55:c1: 41:39:87:a3:ae:6c:7f:fe:70:4f:f6:2d:3f:9e:b7:b5:41:3a: a2:b1:1d:5f:1c:ee:9c:fc:ff:8b:5c:9d:11:6d:9c:cb:2d:78: 85:73:e9:57:4b:c4:f4:e2:2b:d8:ce:50:f2:70:2f:46:89:51: 0f:0b:68:66:75:5c:d4:a5:bd:6c:d9:49:a5:29:e6:53:43:79: ac:52:6e:b0:6a:d0:1e:5f:7b:1e:8e:95:5a:23:c6:47:56:80: 53:50:1a:d9:ab:a1:eb:f8:ed:99:4d:12:56:3d:f8:12:31:c3: 7c:90:6d:d2:fc:b4:97:8d:c0:f9:e4:28:98:d2:50:fa:20:f2: 9d:8a:2e:e7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26t3+4QJHtYIS4i91QEuFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj Zjk3MDQwHhcNMjYwMTAxMDAxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OTk2Yzc4Yjc2YzNmMzA5NDgzZjNlMmQ0YzlhMmRlMmYxZGFhNWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1CLsUFR4RiyC8RPjRXV5bwgcJ22 ZqArjlUVqGpulg0jvpqG8Jqm2vkZvXeu+kGxqJIzrMwixJpixCotBeQTM6UsfaMR 9GvGcuT/ZQk3XubU7iU89YD3BThaJVX+ZkIYoOI5tX9mgTV7IKvXR/8yAIiisP5u e4jfp9Lk4qhHh8fGDCrWJmDKCNba7lt16JxVLmFdAchC99zr+XJr1lFnSHs9L96j djDPMWLnQ3QsLzLkkG8tNJFKOKnlwLoR6rZwcuJmPZJvprQH6BAF+YSccvKBkD4o jyh9NvSSIapcR90s466oDjCshh3Q6KcXmqPCAlkU4AC9cLIeuGCFOoC1KwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHmWx4t2w/MJSD8+LUyaLeLx2qX2MB8GA1UdIwQY MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct ZTg2MTIxYzU5NGRmLzEvZVpiSGkzYkQ4d2xJUHo0dFRKb3Q0dkhhcGZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQjPMA0G CSqGSIb3DQEBCwUAA4IBAQBIsi1bjcBwNiu39jmyVzyCKFCBNUKBATtl1sZouFEy TBEZcKhJXDv5geI/FlsHJfPlhNP3n9ePyi7yPRPd+FwEGBYV24nLm0mfGU86c6po unWs4b2p0Mf2VDegx7d/OWK9NK2iFazemLAceuon64b5b/whivZ72DwdnL+jVcFB OYejrmx//nBP9i0/nre1QTqisR1fHO6c/P+LXJ0RbZzLLXiFc+lXS8T04ivYzlDy cC9GiVEPC2hmdVzUpb1s2UmlKeZTQ3msUm6watAeX3sejpVaI8ZHVoBTUBrZq6Hr +O2ZTRJWPfgSMcN8kG3S/LSXjcD55CiY0lD6IPKdii7n -----END CERTIFICATE-----Generated at Sun Jan 25 08:48:09 2026 by rpki-client