This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/66weAc2jQR4cpqZJijFd1sf301w.roa File: 66weAc2jQR4cpqZJijFd1sf301w.roa (raw, json) Hash identifier: QzlH+p0PV5zvwqJmhfFaYurkNZtY37Urkhr+A3Txvmc= Subject key identifier: EB:AC:1E:01:CD:A3:41:1E:1C:A6:A6:49:8A:31:5D:D6:C7:F7:D3:5C Certificate issuer: /CN=d3d4e0da68c1446689419d103711b191ded567f4 Certificate serial: 019B7F1531FCED755E220ED353086CB2BF85 Authority key identifier: D3:D4:E0:DA:68:C1:44:66:89:41:9D:10:37:11:B1:91:DE:D5:67:F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/66weAc2jQR4cpqZJijFd1sf301w.roa Signing time: Fri 02 Jan 2026 14:20:54 +0000 ROA not before: Fri 02 Jan 2026 14:20:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3249 IP address blocks: 45.139.107.0/24 maxlen: 24 46.29.35.0/24 maxlen: 24 2a13:cec0::/48 maxlen: 48 2a13:cec1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:31:fc:ed:75:5e:22:0e:d3:53:08:6c:b2:bf:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3d4e0da68c1446689419d103711b191ded567f4 Validity Not Before: Jan 2 14:20:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ebac1e01cda3411e1ca6a6498a315dd6c7f7d35c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9f:74:a9:1c:01:be:4a:50:4e:d8:0d:a3:f5: d9:57:4c:a4:44:d9:39:da:d3:b3:79:96:b9:61:53: cc:8a:f4:ac:88:18:6e:45:18:0f:64:da:b8:23:ea: 5a:3d:16:cf:4e:b0:ec:65:b9:00:32:85:61:0a:ca: ed:28:55:e0:51:a9:f2:a3:aa:a7:98:53:f8:80:e9: bf:dd:fe:95:54:e3:38:79:ce:18:81:05:8a:97:2a: 5d:3e:d0:d6:3e:4d:49:0d:5d:97:73:fc:12:9f:4b: 12:b4:41:ec:1f:9b:e9:ac:f0:11:32:ff:03:45:de: ef:21:14:06:ba:85:34:31:4d:8a:f3:1c:7f:2b:81: 23:19:a3:66:7e:f7:8c:d8:3e:88:71:9c:51:a8:9c: 97:be:fb:5f:da:3b:f2:30:99:e1:f4:3a:ac:3b:5f: 6c:43:93:70:7f:1d:d1:b4:53:8a:6a:4b:e3:71:c9: 96:32:cd:10:2c:1e:5d:bd:9b:b7:8d:a2:89:8c:d5: ec:60:2f:27:88:6f:f9:2c:ed:0c:11:cd:8b:f5:4e: e5:ef:88:e5:09:b4:98:cf:0a:62:07:0f:f9:64:96: 95:b9:d0:82:69:27:ee:c8:1d:cf:e1:90:c8:36:6d: 24:34:bb:7c:4a:e5:2d:fd:67:02:ad:a2:95:3d:86: a6:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:AC:1E:01:CD:A3:41:1E:1C:A6:A6:49:8A:31:5D:D6:C7:F7:D3:5C X509v3 Authority Key Identifier: keyid:D3:D4:E0:DA:68:C1:44:66:89:41:9D:10:37:11:B1:91:DE:D5:67:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/66weAc2jQR4cpqZJijFd1sf301w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.139.107.0/24 46.29.35.0/24 IPv6: 2a13:cec0::/48 2a13:cec1::/48 Signature Algorithm: sha256WithRSAEncryption 93:51:97:5d:36:95:23:f0:26:35:1b:87:ab:d0:ab:03:94:c3: 8d:7e:73:da:f7:f1:e3:c8:9f:45:db:8e:3f:30:5e:72:c9:de: eb:29:c0:4e:12:99:20:d3:79:30:4b:01:4a:7b:8a:e7:19:72: f3:96:f4:3f:02:fb:36:ba:4e:e3:ad:e4:33:ad:94:11:e4:9a: 1f:00:f8:bc:ac:60:af:d3:5d:57:05:92:6e:e4:b9:e1:e9:a3: 3f:1e:9c:b4:d8:6a:cd:ad:ab:65:6d:4d:2e:bb:18:b2:37:f7: c4:32:56:e2:81:f3:91:1a:9b:1a:c1:94:d1:5c:1b:db:c7:a1: 7b:43:03:c3:2f:64:87:bc:12:71:4d:1c:8c:09:cf:ec:04:e4: 1b:4b:fb:cd:b1:72:4d:89:64:18:38:22:76:d8:c5:c3:bd:e2: dd:b3:19:71:d0:70:dd:6a:56:19:49:98:c2:30:e4:7b:82:96: 1f:90:bf:8f:40:82:4e:8c:af:95:96:76:eb:1c:92:58:b2:06: e4:cf:f3:3f:87:5d:7d:0c:bc:a2:15:b0:da:61:36:d0:ee:4a: 3a:e3:4c:8f:49:fd:1d:50:61:c3:16:4f:bd:0a:43:c9:5c:32: 88:c7:89:e5:09:9b:22:00:bb:29:01:2f:10:91:d3:5b:cc:43: 75:49:86:f2 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZt/FTH87XVeIg7TUwhssr+FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZDRlMGRhNjhjMTQ0NjY4OTQxOWQxMDM3MTFiMTkxZGVk NTY3ZjQwHhcNMjYwMTAyMTQyMDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYmFjMWUwMWNkYTM0MTFlMWNhNmE2NDk4YTMxNWRkNmM3ZjdkMzVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAup90qRwBvkpQTtgNo/XZV0ykRNk5 2tOzeZa5YVPMivSsiBhuRRgPZNq4I+paPRbPTrDsZbkAMoVhCsrtKFXgUanyo6qn mFP4gOm/3f6VVOM4ec4YgQWKlypdPtDWPk1JDV2Xc/wSn0sStEHsH5vprPARMv8D Rd7vIRQGuoU0MU2K8xx/K4EjGaNmfveM2D6IcZxRqJyXvvtf2jvyMJnh9DqsO19s Q5Nwfx3RtFOKakvjccmWMs0QLB5dvZu3jaKJjNXsYC8niG/5LO0MEc2L9U7l74jl CbSYzwpiBw/5ZJaVudCCaSfuyB3P4ZDINm0kNLt8SuUt/WcCraKVPYamtwIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFOusHgHNo0EeHKamSYoxXdbH99NcMB8GA1UdIwQY MBaAFNPU4NpowURmiUGdEDcRsZHe1Wf0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDlUZzJtakJSR2FKUVowUU54R3hrZDdWWl9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8zODE1ZTMtZDNhOC00YjNjLWE0YjIt Y2IzNDRmMTgwMGVkLzEvNjZ3ZUFjMmpRUjRjcHFaSmlqRmQxc2YzMDF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi8zODE1ZTMtZDNhOC00YjNjLWE0YjItY2IzNDRmMTgwMGVk LzEvMDlUZzJtakJSR2FKUVowUU54R3hrZDdWWl9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQALYtrAwQA Lh0jMBgEAgACMBIDBwAqE87AAAADBwAqE87BAAAwDQYJKoZIhvcNAQELBQADggEB AJNRl102lSPwJjUbh6vQqwOUw41+c9r38ePIn0Xbjj8wXnLJ3uspwE4SmSDTeTBL AUp7iucZcvOW9D8C+za6TuOt5DOtlBHkmh8A+LysYK/TXVcFkm7kueHpoz8enLTY as2tq2VtTS67GLI398QyVuKB85EamxrBlNFcG9vHoXtDA8MvZIe8EnFNHIwJz+wE 5BtL+82xck2JZBg4InbYxcO94t2zGXHQcN1qVhlJmMIw5HuClh+Qv49Agk6Mr5WW dusckliyBuTP8z+HXX0MvKIVsNphNtDuSjrjTI9J/R1QYcMWT70KQ8lcMojHieUJ myIAuykBLxCR01vMQ3VJhvI= -----END CERTIFICATE-----Generated at Mon Jan 26 02:43:58 2026 by rpki-client