This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/eyKr_-fPlEKPF_FKnUr7hqSIc80.roa File: eyKr_-fPlEKPF_FKnUr7hqSIc80.roa (raw, json) Hash identifier: SNk7RPdvxKlj8qcBz0QvoG07Jh0J2CMKKRz83B/00rM= Subject key identifier: 7B:22:AB:FF:E7:CF:94:42:8F:17:F1:4A:9D:4A:FB:86:A4:88:73:CD Certificate issuer: /CN=7b732b6e5710ba8289cff4bb226b75bc4b07819f Certificate serial: 019B7B3540B474BC04722C0EB8A91A8DEDD5 Authority key identifier: 7B:73:2B:6E:57:10:BA:82:89:CF:F4:BB:22:6B:75:BC:4B:07:81:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e3MrblcQuoKJz_S7Imt1vEsHgZ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/eyKr_-fPlEKPF_FKnUr7hqSIc80.roa Signing time: Thu 01 Jan 2026 20:17:25 +0000 ROA not before: Thu 01 Jan 2026 20:17:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207471 IP address blocks: 45.87.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/e3MrblcQuoKJz_S7Imt1vEsHgZ8.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/e3MrblcQuoKJz_S7Imt1vEsHgZ8.mft rsync://rpki.ripe.net/repository/DEFAULT/e3MrblcQuoKJz_S7Imt1vEsHgZ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:40:b4:74:bc:04:72:2c:0e:b8:a9:1a:8d:ed:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b732b6e5710ba8289cff4bb226b75bc4b07819f Validity Not Before: Jan 1 20:17:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7b22abffe7cf94428f17f14a9d4afb86a48873cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a1:30:ea:c6:1c:3c:a1:93:09:ba:ae:ef:6e: da:a1:ba:cb:43:5b:62:2f:40:97:26:a7:8b:10:aa: 88:dc:99:a1:84:7a:6c:61:53:8a:47:71:6a:c0:a1: d0:89:87:32:f3:c7:b1:a1:3b:a1:eb:3b:1e:c0:29: 54:a2:bc:19:ac:a4:d7:aa:05:7d:16:06:8f:ea:c3: 40:dc:d5:9b:96:e5:70:df:6b:75:42:1d:ee:db:85: 3d:39:4a:92:0d:d0:2b:32:de:db:06:5f:de:a0:94: 09:d6:a1:a0:d4:db:dc:eb:4c:d5:6c:dc:f8:8f:f8: b0:bd:67:a8:eb:f8:15:41:1d:b8:24:f3:f8:8b:1a: 58:2e:35:b6:5d:73:da:eb:61:f4:45:c7:0d:d2:f3: 30:e4:e8:87:20:cb:63:02:f8:25:6c:a6:13:3b:be: 2c:3f:5f:05:67:b4:3d:5b:a7:5a:34:d1:70:87:b3: 9c:33:58:dd:7d:d6:be:79:5c:79:10:6d:22:b9:2f: 96:ee:ca:a3:de:0a:4c:b9:9d:75:86:61:39:8a:37: 5b:51:17:87:3b:1c:d4:9e:d9:c0:06:53:79:8d:54: 81:e3:fa:cc:48:dd:eb:4c:bf:8d:5c:b7:cd:4e:4c: 71:72:c7:90:93:ee:22:22:53:ba:01:86:69:cf:d1: 01:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:22:AB:FF:E7:CF:94:42:8F:17:F1:4A:9D:4A:FB:86:A4:88:73:CD X509v3 Authority Key Identifier: keyid:7B:73:2B:6E:57:10:BA:82:89:CF:F4:BB:22:6B:75:BC:4B:07:81:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3MrblcQuoKJz_S7Imt1vEsHgZ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/eyKr_-fPlEKPF_FKnUr7hqSIc80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/e3MrblcQuoKJz_S7Imt1vEsHgZ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.87.223.0/24 Signature Algorithm: sha256WithRSAEncryption 78:50:f2:37:8c:5f:e7:d6:10:5a:0b:f9:92:8c:39:63:30:74: ab:91:3a:2c:ad:ea:9d:20:9f:b8:42:72:e3:75:33:f5:41:5b: e7:3a:bc:40:6f:d2:40:89:a3:5d:4a:87:44:71:cf:ab:9f:3d: 5e:b5:28:e6:3f:4a:88:06:3d:cf:2e:66:10:53:30:f9:84:e2: 4e:a0:24:8c:be:1e:06:68:cd:51:f7:5f:b3:99:74:4a:c5:c6: ae:f6:38:7a:e4:fa:48:40:73:2d:7d:8b:1b:06:35:ae:73:35: 1e:c6:f7:d0:02:17:15:f9:f3:94:f0:6e:3e:72:57:d0:c6:83: c0:fe:42:1c:4e:4a:2a:52:28:79:e9:b3:24:7c:cb:e6:f7:cf: 3c:e2:72:89:7d:15:3b:76:cd:1e:4e:51:ef:a5:fb:fe:ad:70: ce:f3:4d:e9:fb:e9:a8:be:d3:88:6a:15:ae:34:75:64:a2:4d: 44:83:cc:71:89:9d:6e:b7:66:49:1e:1b:e7:4b:40:fa:e2:ff: 97:04:82:c1:e0:6c:74:c8:92:3f:07:83:2f:ea:22:b3:55:99: 25:92:cb:02:37:a5:e4:dd:97:33:a1:28:34:92:d8:9d:2f:60: a7:0f:2d:34:29:e2:f3:75:f5:8b:78:1f:36:4b:9a:2b:ce:6a: c2:a0:0e:ec -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NUC0dLwEciwOuKkaje3VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNzMyYjZlNTcxMGJhODI4OWNmZjRiYjIyNmI3NWJjNGIw NzgxOWYwHhcNMjYwMTAxMjAxNzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YjIyYWJmZmU3Y2Y5NDQyOGYxN2YxNGE5ZDRhZmI4NmE0ODg3M2NkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6Ew6sYcPKGTCbqu727aobrLQ1ti L0CXJqeLEKqI3JmhhHpsYVOKR3FqwKHQiYcy88exoTuh6zsewClUorwZrKTXqgV9 FgaP6sNA3NWbluVw32t1Qh3u24U9OUqSDdArMt7bBl/eoJQJ1qGg1Nvc60zVbNz4 j/iwvWeo6/gVQR24JPP4ixpYLjW2XXPa62H0RccN0vMw5OiHIMtjAvglbKYTO74s P18FZ7Q9W6daNNFwh7OcM1jdfda+eVx5EG0iuS+W7sqj3gpMuZ11hmE5ijdbUReH OxzUntnABlN5jVSB4/rMSN3rTL+NXLfNTkxxcseQk+4iIlO6AYZpz9EBUwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHsiq//nz5RCjxfxSp1K+4akiHPNMB8GA1UdIwQY MBaAFHtzK25XELqCic/0uyJrdbxLB4GfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTNNcmJsY1F1b0tKel9TN0ltdDF2RXNIZ1o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8zMzkxY2UtYTc5NS00MDFmLTgzOWQt YTRkMGQxMGM5MDE2LzEvZXlLcl8tZlBsRUtQRl9GS25VcjdocVNJYzgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8zMzkxY2UtYTc5NS00MDFmLTgzOWQtYTRkMGQxMGM5MDE2 LzEvZTNNcmJsY1F1b0tKel9TN0ltdDF2RXNIZ1o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVffMA0G CSqGSIb3DQEBCwUAA4IBAQB4UPI3jF/n1hBaC/mSjDljMHSrkTosreqdIJ+4QnLj dTP1QVvnOrxAb9JAiaNdSodEcc+rnz1etSjmP0qIBj3PLmYQUzD5hOJOoCSMvh4G aM1R91+zmXRKxcau9jh65PpIQHMtfYsbBjWuczUexvfQAhcV+fOU8G4+clfQxoPA /kIcTkoqUih56bMkfMvm98884nKJfRU7ds0eTlHvpfv+rXDO803p++movtOIahWu NHVkok1Eg8xxiZ1ut2ZJHhvnS0D64v+XBILB4Gx0yJI/B4Mv6iKzVZklkssCN6Xk 3ZczoSg0ktidL2CnDy00KeLzdfWLeB82S5orzmrCoA7s -----END CERTIFICATE-----Generated at Mon Jan 26 02:25:00 2026 by rpki-client