This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/et0olEFrB1y2vEuy1NWpl0biftA.roa File: et0olEFrB1y2vEuy1NWpl0biftA.roa (raw, json) Hash identifier: o7zVoM3aaUFP3OzR2+EuOIiIDki9aymtbkBZVSrLD3c= Subject key identifier: 7A:DD:28:94:41:6B:07:5C:B6:BC:4B:B2:D4:D5:A9:97:46:E2:7E:D0 Certificate issuer: /CN=79b5134b11f940911f0ff315c948daa53f732ee0 Certificate serial: 019B7E387201532DB508DDD6ADFF26E4E883 Authority key identifier: 79:B5:13:4B:11:F9:40:91:1F:0F:F3:15:C9:48:DA:A5:3F:73:2E:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/et0olEFrB1y2vEuy1NWpl0biftA.roa Signing time: Fri 02 Jan 2026 10:19:47 +0000 ROA not before: Fri 02 Jan 2026 10:19:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52033 IP address blocks: 46.254.48.0/24 maxlen: 24 46.254.49.0/24 maxlen: 24 46.254.50.0/24 maxlen: 24 46.254.51.0/24 maxlen: 24 46.254.52.0/24 maxlen: 24 46.254.53.0/24 maxlen: 24 46.254.54.0/24 maxlen: 24 46.254.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.mft rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:72:01:53:2d:b5:08:dd:d6:ad:ff:26:e4:e8:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79b5134b11f940911f0ff315c948daa53f732ee0 Validity Not Before: Jan 2 10:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7add2894416b075cb6bc4bb2d4d5a99746e27ed0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:5d:9e:b1:d4:8f:ee:19:7c:75:9e:ea:aa:72: 11:51:48:60:e3:c9:d1:b0:80:cb:da:3a:3a:1e:99: 61:9e:19:a6:75:5e:41:95:41:3f:21:de:e6:5c:01: 9a:04:af:d5:ec:cd:a1:ba:94:80:b1:64:c0:26:ab: 98:2a:09:57:91:12:06:f8:ba:37:a6:9a:37:95:56: a5:18:51:46:b9:5e:21:35:47:2c:86:cd:d5:6b:ef: ec:79:08:f8:6b:76:c5:ad:a1:59:fa:8f:fe:19:ef: b9:b5:f0:9d:f9:4e:45:3c:8f:c1:fd:ba:ab:cc:35: 0e:8a:7e:61:f2:7c:f4:7a:d7:27:19:05:24:b4:bb: be:e3:a6:e5:d0:df:5f:96:9d:ee:9e:ed:0d:56:c6: 1c:02:a5:80:25:eb:ce:2d:85:1b:81:cc:0b:75:bd: 6a:2c:a9:05:95:19:53:57:91:87:6e:4a:c5:47:6a: 7f:e0:c7:c6:9a:f2:07:a2:39:98:ca:af:59:ba:9e: ae:1c:9d:e7:90:9b:16:51:85:58:f4:ad:42:33:f2: 48:74:b4:7c:3f:10:50:13:cd:fc:c3:c2:64:70:0c: 8f:e6:9e:d0:5b:8f:3f:c8:6c:5f:9a:13:96:48:94: 4a:2e:8f:ce:1f:63:42:5a:af:19:59:3d:1a:10:3f: 18:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:DD:28:94:41:6B:07:5C:B6:BC:4B:B2:D4:D5:A9:97:46:E2:7E:D0 X509v3 Authority Key Identifier: keyid:79:B5:13:4B:11:F9:40:91:1F:0F:F3:15:C9:48:DA:A5:3F:73:2E:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ebUTSxH5QJEfD_MVyUjapT9zLuA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/et0olEFrB1y2vEuy1NWpl0biftA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/5e0994-94d2-46e1-8066-cec22ea79513/1/ebUTSxH5QJEfD_MVyUjapT9zLuA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.254.48.0/21 Signature Algorithm: sha256WithRSAEncryption 0a:91:77:5a:d8:ea:5c:34:17:09:3e:9d:01:6e:16:b8:31:7c: cd:ae:2e:12:11:0f:4f:16:15:fa:46:ca:4f:cd:90:42:93:c4: 4b:d7:d4:14:77:61:66:c9:b9:7a:73:22:f2:32:e3:fa:57:57: 92:37:83:7b:70:e1:e5:c1:b9:d5:09:3a:d7:91:91:d5:52:8b: 25:99:f3:82:06:18:58:41:bb:6c:d8:d5:48:f2:32:35:4c:9b: 70:1d:be:1c:5a:78:a3:8f:10:d4:eb:4a:a7:76:83:c4:48:65: 24:fa:de:31:58:2d:23:ed:5b:85:fb:6d:24:e0:19:04:b6:d8: 87:2b:ce:a1:38:1b:b9:d7:2c:94:9b:b7:9d:e5:8d:ec:b4:43: 63:9c:a9:18:a8:f2:e6:a8:7d:94:c6:7b:ca:ff:f3:e7:e5:f3: 0f:b1:8b:c9:db:04:97:e1:94:60:a2:0b:25:73:61:c2:46:9e: 5f:91:dd:1b:4c:8b:e9:0f:c4:51:f7:81:44:8f:97:11:94:1c: b9:29:a7:d1:bd:83:ec:8e:c2:73:bf:66:6c:37:df:13:a3:5a: d9:52:66:28:23:2d:94:1f:69:83:37:d8:85:ce:c8:e3:2b:7e: 95:fc:0c:16:42:8e:83:4e:f4:3c:03:48:4b:d5:ef:b0:3b:66: e6:e5:99:c2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OHIBUy21CN3Wrf8m5OiDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5YjUxMzRiMTFmOTQwOTExZjBmZjMxNWM5NDhkYWE1M2Y3 MzJlZTAwHhcNMjYwMTAyMTAxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YWRkMjg5NDQxNmIwNzVjYjZiYzRiYjJkNGQ1YTk5NzQ2ZTI3ZWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk12esdSP7hl8dZ7qqnIRUUhg48nR sIDL2jo6HplhnhmmdV5BlUE/Id7mXAGaBK/V7M2hupSAsWTAJquYKglXkRIG+Lo3 ppo3lValGFFGuV4hNUcshs3Va+/seQj4a3bFraFZ+o/+Ge+5tfCd+U5FPI/B/bqr zDUOin5h8nz0etcnGQUktLu+46bl0N9flp3unu0NVsYcAqWAJevOLYUbgcwLdb1q LKkFlRlTV5GHbkrFR2p/4MfGmvIHojmYyq9Zup6uHJ3nkJsWUYVY9K1CM/JIdLR8 PxBQE838w8JkcAyP5p7QW48/yGxfmhOWSJRKLo/OH2NCWq8ZWT0aED8YiQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHrdKJRBawdctrxLstTVqZdG4n7QMB8GA1UdIwQY MBaAFHm1E0sR+UCRHw/zFclI2qU/cy7gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWJVVFN4SDVRSkVmRF9NVnlVamFwVDl6THVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS81ZTA5OTQtOTRkMi00NmUxLTgwNjYt Y2VjMjJlYTc5NTEzLzEvZXQwb2xFRnJCMXkydkV1eTFOV3BsMGJpZnRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS81ZTA5OTQtOTRkMi00NmUxLTgwNjYtY2VjMjJlYTc5NTEz LzEvZWJVVFN4SDVRSkVmRF9NVnlVamFwVDl6THVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDLv4wMA0G CSqGSIb3DQEBCwUAA4IBAQAKkXda2OpcNBcJPp0Bbha4MXzNri4SEQ9PFhX6RspP zZBCk8RL19QUd2Fmybl6cyLyMuP6V1eSN4N7cOHlwbnVCTrXkZHVUoslmfOCBhhY Qbts2NVI8jI1TJtwHb4cWnijjxDU60qndoPESGUk+t4xWC0j7VuF+20k4BkEttiH K86hOBu51yyUm7ed5Y3stENjnKkYqPLmqH2UxnvK//Pn5fMPsYvJ2wSX4ZRgogsl c2HCRp5fkd0bTIvpD8RR94FEj5cRlBy5KafRvYPsjsJzv2ZsN98To1rZUmYoIy2U H2mDN9iFzsjjK36V/AwWQo6DTvQ8A0hL1e+wO2bm5ZnC -----END CERTIFICATE-----Generated at Mon Jan 26 05:31:44 2026 by rpki-client