This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/EdrkWbcqLRMSNrh6Sa5x5mnTLPc.roa File: EdrkWbcqLRMSNrh6Sa5x5mnTLPc.roa (raw, json) Hash identifier: Fk5tDegQkNWmVnCc3SYJvszlVAARBSOO/qIaE+GvEdY= Subject key identifier: 11:DA:E4:59:B7:2A:2D:13:12:36:B8:7A:49:AE:71:E6:69:D3:2C:F7 Certificate issuer: /CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8 Certificate serial: 019B7D5B703C0BF350CF20A2B6DBB9E2B1D1 Authority key identifier: 38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/EdrkWbcqLRMSNrh6Sa5x5mnTLPc.roa Signing time: Fri 02 Jan 2026 06:18:23 +0000 ROA not before: Fri 02 Jan 2026 06:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213044 IP address blocks: 45.154.217.0/24 maxlen: 24 2a0a:d6c0:217::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:70:3c:0b:f3:50:cf:20:a2:b6:db:b9:e2:b1:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8 Validity Not Before: Jan 2 06:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=11dae459b72a2d131236b87a49ae71e669d32cf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8a:9c:4f:22:4a:ef:b7:0e:84:32:22:66:ac: 46:6e:13:61:38:c1:48:f0:5b:fe:88:6a:d2:d4:f5: a4:97:3c:e5:49:6f:ab:7b:0e:da:b7:c0:a3:67:b8: 1f:b6:6b:37:23:cc:dc:f9:5c:5e:c5:88:24:ef:0e: 77:40:50:63:39:3e:e3:58:79:0e:0a:d8:19:76:c5: 5b:13:ef:a3:e1:8d:fe:aa:46:ea:78:74:e3:2b:cd: c4:c5:2f:c3:68:2a:7f:1b:61:b1:46:14:ec:be:15: be:28:ad:54:5c:69:a8:15:23:3f:ae:1e:7f:a5:c5: 98:e7:a0:9b:c4:47:56:15:e8:3d:67:db:79:5f:fc: 96:f7:66:dc:77:94:54:c3:25:e3:c5:1e:12:42:0c: e3:47:41:69:76:47:79:d0:9e:c4:31:8f:7a:07:59: 65:12:39:d5:32:68:69:90:07:c2:33:45:6e:56:b0: 9c:aa:32:a2:c4:20:34:66:cf:78:bb:ba:13:f3:2d: 74:b8:bc:a3:29:3e:ba:ff:92:7e:b1:ef:7a:8a:2c: f4:e0:ac:b6:83:25:66:1b:37:c5:99:4b:38:e5:5d: db:66:70:6b:29:33:5a:7e:0a:fe:f1:a1:4a:2e:e8: 1b:9b:58:46:40:54:0b:83:e9:40:a2:ab:de:27:75: 73:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:DA:E4:59:B7:2A:2D:13:12:36:B8:7A:49:AE:71:E6:69:D3:2C:F7 X509v3 Authority Key Identifier: keyid:38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/EdrkWbcqLRMSNrh6Sa5x5mnTLPc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.154.217.0/24 IPv6: 2a0a:d6c0:217::/48 Signature Algorithm: sha256WithRSAEncryption 77:74:96:0b:80:2f:d4:34:2d:a0:39:72:1c:ff:11:7d:62:aa: 7f:1e:62:70:13:f8:6b:88:17:c7:4a:4f:2f:74:3c:d7:6e:22: ff:f7:10:b4:bc:33:14:d1:1c:0c:59:ae:26:9c:a6:85:ae:0a: 2b:fb:1a:ad:69:54:26:25:00:bb:24:73:ae:20:af:96:68:7b: 62:4f:4f:36:c6:ab:d9:72:1c:12:76:bb:e6:87:4f:52:6d:3a: 30:65:7b:3b:63:69:85:18:bf:bb:69:93:10:a1:bd:37:02:b9: 98:d5:cd:90:31:4d:e7:45:b2:97:b3:68:cb:42:10:5b:fd:64: 94:70:f0:76:05:38:1d:01:75:d6:fb:a9:59:2e:eb:03:de:c3: 7c:16:c8:97:07:51:0c:7c:18:7d:fd:94:b3:a7:73:cf:c7:27: 1f:7f:5f:a7:b9:eb:66:6a:05:cf:5b:27:cc:0f:9e:b8:37:f9: 5a:00:74:c5:76:cd:43:3c:db:d5:d6:a3:fe:ce:3a:48:3e:36: c6:94:cf:95:0e:24:6e:78:c2:51:41:46:47:fb:6f:50:36:ea: 86:73:be:e6:e6:bb:d0:16:cc:93:45:7a:85:5c:b6:64:f8:21: 18:3b:28:dd:f9:2c:c2:af:01:87:16:7f:01:62:46:45:bf:71: 18:59:21:74 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt9W3A8C/NQzyCittu54rHRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4N2Q2ZGY3ZWI3NTQyZTAzMzNhZWVkZDE0YWRmZjhmNTFm OGNiZDgwHhcNMjYwMTAyMDYxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMWRhZTQ1OWI3MmEyZDEzMTIzNmI4N2E0OWFlNzFlNjY5ZDMyY2Y3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoqcTyJK77cOhDIiZqxGbhNhOMFI 8Fv+iGrS1PWklzzlSW+rew7at8CjZ7gftms3I8zc+VxexYgk7w53QFBjOT7jWHkO CtgZdsVbE++j4Y3+qkbqeHTjK83ExS/DaCp/G2GxRhTsvhW+KK1UXGmoFSM/rh5/ pcWY56CbxEdWFeg9Z9t5X/yW92bcd5RUwyXjxR4SQgzjR0Fpdkd50J7EMY96B1ll EjnVMmhpkAfCM0VuVrCcqjKixCA0Zs94u7oT8y10uLyjKT66/5J+se96iiz04Ky2 gyVmGzfFmUs45V3bZnBrKTNafgr+8aFKLugbm1hGQFQLg+lAoqveJ3VzsQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFBHa5Fm3Ki0TEja4ekmuceZp0yz3MB8GA1UdIwQY MBaAFDh9bffrdULgMzru3RSt/49R+MvYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9kNGE4OWMtNTRiMi00NDViLWJiN2Mt NjA5YTQ4YjJiMTRkLzEvRWRya1diY3FMUk1TTnJoNlNhNXg1bW5UTFBjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9kNGE4OWMtNTRiMi00NDViLWJiN2MtNjA5YTQ4YjJiMTRk LzEvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQALZrZMA8E AgACMAkDBwAqCtbAAhcwDQYJKoZIhvcNAQELBQADggEBAHd0lguAL9Q0LaA5chz/ EX1iqn8eYnAT+GuIF8dKTy90PNduIv/3ELS8MxTRHAxZriacpoWuCiv7Gq1pVCYl ALskc64gr5Zoe2JPTzbGq9lyHBJ2u+aHT1JtOjBleztjaYUYv7tpkxChvTcCuZjV zZAxTedFspezaMtCEFv9ZJRw8HYFOB0Bddb7qVku6wPew3wWyJcHUQx8GH39lLOn c8/HJx9/X6e562ZqBc9bJ8wPnrg3+VoAdMV2zUM829XWo/7OOkg+NsaUz5UOJG54 wlFBRkf7b1A26oZzvubmu9AWzJNFeoVctmT4IRg7KN35LMKvAYcWfwFiRkW/cRhZ IXQ= -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:27 2026 by rpki-client