This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/tEK5xeFRZZT0xmnBo_SJCuhaz6M.roa File: tEK5xeFRZZT0xmnBo_SJCuhaz6M.roa (raw, json) Hash identifier: Ptc+FGC+cpAZyzLKTVYPy89IR+7KjxXcG3j40Vai/9Y= Subject key identifier: B4:42:B9:C5:E1:51:65:94:F4:C6:69:C1:A3:F4:89:0A:E8:5A:CF:A3 Certificate issuer: /CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba Certificate serial: 019B79ED53538663853515966FEEA2947532 Authority key identifier: E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/tEK5xeFRZZT0xmnBo_SJCuhaz6M.roa Signing time: Thu 01 Jan 2026 14:19:15 +0000 ROA not before: Thu 01 Jan 2026 14:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215432 IP address blocks: 45.151.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:53:53:86:63:85:35:15:96:6f:ee:a2:94:75:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba Validity Not Before: Jan 1 14:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b442b9c5e1516594f4c669c1a3f4890ae85acfa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:49:f6:82:ac:ae:c2:cc:f6:11:34:8c:c8:d5: 6c:b9:cb:76:02:49:a7:b1:54:91:cc:c5:22:ae:fa: 35:52:cc:e9:6b:b0:aa:cb:da:1e:12:44:ca:da:f4: bc:cc:e2:80:54:55:99:c1:ef:0b:18:83:28:56:e2: b5:f8:84:3c:d0:cb:2f:4d:9c:48:93:a4:58:03:d8: d5:8b:93:9d:30:58:eb:5b:48:30:71:0a:88:c5:2b: d5:5a:2e:b4:0c:09:0c:00:6f:8b:c5:db:b5:a5:9b: 1d:3f:09:ee:bc:57:49:16:7f:5c:a4:ec:d7:01:b9: df:bd:38:f2:71:b7:4c:b9:0f:63:de:d0:25:17:b3: f8:e4:bc:7f:ca:c6:93:b3:fa:6a:38:3b:f1:2e:ca: 94:ed:fa:3b:73:fd:d6:a4:0b:6b:98:eb:67:ad:91: e6:e7:0c:84:9a:49:2e:a7:69:c2:9f:d8:bc:19:b8: 9d:91:a3:6e:c7:ce:8e:a7:6b:48:dc:5f:31:8a:1a: a2:a4:a4:a6:4f:06:85:af:40:7a:42:16:e9:ce:44: ec:6d:e2:e2:24:81:9f:53:62:1b:30:4e:97:5a:27: 72:32:bf:ec:26:d9:6c:05:47:4e:06:70:7c:8c:4f: 81:35:2f:5f:a6:73:17:48:15:62:9e:5f:58:6c:f5: e7:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:42:B9:C5:E1:51:65:94:F4:C6:69:C1:A3:F4:89:0A:E8:5A:CF:A3 X509v3 Authority Key Identifier: keyid:E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/tEK5xeFRZZT0xmnBo_SJCuhaz6M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.151.124.0/24 Signature Algorithm: sha256WithRSAEncryption bd:1e:27:06:de:01:64:27:15:86:12:9e:ab:f5:3a:df:89:2a: 54:e9:ef:35:1e:fa:12:23:e2:72:17:fb:c1:c5:07:4c:38:9e: 07:39:bd:dc:dd:a5:c2:21:5c:df:13:7b:40:c9:37:eb:f5:0a: 06:72:67:64:05:cc:ea:63:1a:7a:1a:75:b7:2a:bb:ee:38:e9: dc:e1:42:4a:e9:cf:fc:bd:c2:d0:03:09:56:1f:f2:9d:4c:5a: e5:50:30:04:90:f7:42:89:f3:b2:13:9f:13:fe:8e:d2:28:0b: 39:8c:8e:eb:30:13:02:87:4f:04:94:97:68:11:eb:68:00:64: b1:0e:01:9c:91:67:1c:df:05:a0:7c:b5:e3:f4:d7:fe:37:fa: ff:58:36:17:64:74:30:d0:e4:25:6a:47:61:71:95:63:2d:f7: 5c:7c:e9:8f:ae:35:5b:6d:53:4b:3c:e3:6b:d1:70:c3:51:b8: 36:59:22:ad:ea:17:8e:c9:f6:38:e4:e3:97:d6:ed:bf:d4:3f: f1:34:ba:6b:37:a3:f7:f0:87:55:cc:97:ab:ee:9d:50:b1:e2: 5c:f2:45:cf:ac:d9:43:93:e5:ef:47:c6:80:73:ca:96:ff:35: 87:5e:e8:63:b8:f5:ad:5a:22:a0:ac:b8:cd:6d:93:34:cb:a1: 43:bd:06:e5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57VNThmOFNRWWb+6ilHUyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0YmU4ZWZlYzFmYjAzZDhhZjk3OWFmMWNiYTEzYTA4NDVh N2IwYmEwHhcNMjYwMTAxMTQxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDQyYjljNWUxNTE2NTk0ZjRjNjY5YzFhM2Y0ODkwYWU4NWFjZmEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4En2gqyuwsz2ETSMyNVsuct2Akmn sVSRzMUirvo1Uszpa7Cqy9oeEkTK2vS8zOKAVFWZwe8LGIMoVuK1+IQ80MsvTZxI k6RYA9jVi5OdMFjrW0gwcQqIxSvVWi60DAkMAG+Lxdu1pZsdPwnuvFdJFn9cpOzX AbnfvTjycbdMuQ9j3tAlF7P45Lx/ysaTs/pqODvxLsqU7fo7c/3WpAtrmOtnrZHm 5wyEmkkup2nCn9i8GbidkaNux86Op2tI3F8xihqipKSmTwaFr0B6QhbpzkTsbeLi JIGfU2IbME6XWidyMr/sJtlsBUdOBnB8jE+BNS9fpnMXSBVinl9YbPXnowIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLRCucXhUWWU9MZpwaP0iQroWs+jMB8GA1UdIwQY MBaAFOS+jv7B+wPYr5ea8cuhOghFp7C6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wZjlmMDItYzJhZC00ZWM4LWI0ZDUt ZGZiZmEzZmNmMDIxLzEvdEVLNXhlRlJaWlQweG1uQm9fU0pDdWhhejZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wZjlmMDItYzJhZC00ZWM4LWI0ZDUtZGZiZmEzZmNmMDIx LzEvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZd8MA0G CSqGSIb3DQEBCwUAA4IBAQC9HicG3gFkJxWGEp6r9TrfiSpU6e81HvoSI+JyF/vB xQdMOJ4HOb3c3aXCIVzfE3tAyTfr9QoGcmdkBczqYxp6GnW3KrvuOOnc4UJK6c/8 vcLQAwlWH/KdTFrlUDAEkPdCifOyE58T/o7SKAs5jI7rMBMCh08ElJdoEetoAGSx DgGckWcc3wWgfLXj9Nf+N/r/WDYXZHQw0OQlakdhcZVjLfdcfOmPrjVbbVNLPONr 0XDDUbg2WSKt6heOyfY45OOX1u2/1D/xNLprN6P38IdVzJer7p1QseJc8kXPrNlD k+XvR8aAc8qW/zWHXuhjuPWtWiKgrLjNbZM0y6FDvQbl -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:39 2026 by rpki-client