This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/E1fZi9ctnO61xdkwBdXsEigsazY.roa File: E1fZi9ctnO61xdkwBdXsEigsazY.roa (raw, json) Hash identifier: AfabkRw7EM5b0Hf4k7+LAG9L1ed9yMxYQaK/+/5IZY8= Subject key identifier: 13:57:D9:8B:D7:2D:9C:EE:B5:C5:D9:30:05:D5:EC:12:28:2C:6B:36 Certificate issuer: /CN=441d4b92dd150364c65b7d21299028678b0a5296 Certificate serial: 019B7CEE10975DBF41BFEB8C54333E39AC09 Authority key identifier: 44:1D:4B:92:DD:15:03:64:C6:5B:7D:21:29:90:28:67:8B:0A:52:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/E1fZi9ctnO61xdkwBdXsEigsazY.roa Signing time: Fri 02 Jan 2026 04:18:55 +0000 ROA not before: Fri 02 Jan 2026 04:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57370 IP address blocks: 144.2.64.0/18 maxlen: 24 178.238.160.0/20 maxlen: 24 185.119.176.0/22 maxlen: 24 2a02:21b0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:10:97:5d:bf:41:bf:eb:8c:54:33:3e:39:ac:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=441d4b92dd150364c65b7d21299028678b0a5296 Validity Not Before: Jan 2 04:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1357d98bd72d9ceeb5c5d93005d5ec12282c6b36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4f:03:62:32:51:e2:95:87:3a:ad:af:44:e7: 5c:53:6b:59:07:c2:b4:2e:54:b2:69:03:2a:e5:ea: 3b:fd:5d:cc:4d:a2:e6:42:74:de:a9:df:18:34:69: 6c:ab:99:de:04:36:bd:1e:f7:44:a4:62:90:70:ab: e2:bf:c5:69:98:fe:19:7b:4e:17:28:09:a2:a1:2f: a9:02:2b:23:20:38:f0:96:82:e8:2b:c6:19:2f:36: 42:e2:76:66:48:4a:b7:2a:9d:b8:a7:05:45:cd:ae: 78:03:5c:ac:0c:74:c3:69:09:41:23:e6:c1:6c:6a: 1c:df:e5:31:54:4b:c8:6e:b1:10:77:75:51:a7:4a: 4a:35:76:4e:f5:e5:cc:49:36:e2:b9:d4:3a:08:16: 16:a1:fa:f0:84:cd:10:16:d2:15:50:7e:c6:a1:d2: 52:75:c9:ce:89:92:7c:b6:17:52:e3:87:f2:77:da: 65:45:4d:27:ac:31:b3:c9:69:bb:86:a4:6d:25:ea: 44:d2:fd:40:2e:3d:74:22:c7:a0:1c:ab:0b:2e:d1: 3f:d8:36:13:f2:3a:50:53:55:54:ea:ee:b5:8f:2d: a5:fb:64:b8:b1:74:58:80:66:54:39:f2:51:27:61: 37:f0:19:b3:c3:72:d8:ef:70:4c:e5:59:8e:f6:8c: c0:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:57:D9:8B:D7:2D:9C:EE:B5:C5:D9:30:05:D5:EC:12:28:2C:6B:36 X509v3 Authority Key Identifier: keyid:44:1D:4B:92:DD:15:03:64:C6:5B:7D:21:29:90:28:67:8B:0A:52:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/E1fZi9ctnO61xdkwBdXsEigsazY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.2.64.0/18 178.238.160.0/20 185.119.176.0/22 IPv6: 2a02:21b0::/29 Signature Algorithm: sha256WithRSAEncryption 14:16:08:a0:72:73:06:92:8d:b1:90:03:48:93:4c:e9:42:82: 85:7f:09:74:0f:5e:89:a2:0c:8b:7b:5d:7a:6f:9b:ad:bf:de: b4:68:bb:ee:de:d2:d2:9c:50:2b:91:a3:ff:9b:ac:2f:c4:c8: ad:e1:4b:a1:b7:aa:3b:f7:27:bd:c6:14:d5:50:ab:17:dc:2a: e5:be:5a:34:90:3a:2d:24:d8:de:83:ed:83:65:4a:1d:9f:a6: d7:97:56:cf:09:c4:68:9e:fc:aa:b5:da:47:84:4a:95:a3:28: 97:2b:1f:d4:8d:2a:05:7b:0a:2a:04:90:41:5f:27:8e:c5:46: 98:38:c8:20:06:5a:16:14:e8:c3:fe:e8:ca:b2:07:cc:fc:8a: 0f:1c:c3:27:2f:2b:34:1a:29:ca:1c:84:b8:59:5a:19:00:10: 2d:c5:4a:bf:9b:bd:e5:af:80:7a:ae:3b:ed:4a:83:45:16:95: 5e:91:bc:6b:39:1b:df:28:9c:f2:25:26:81:15:28:d5:cc:95: 49:bf:32:2f:d5:6b:df:e5:c4:d0:f1:0e:18:5f:ab:9b:44:83: 0d:43:73:ed:c8:60:fb:a9:92:2f:ef:a0:4a:76:0f:60:ea:31: 7a:41:ee:48:48:54:3b:0a:14:00:f8:51:7d:80:4d:a6:7d:ad: c0:96:42:85 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt87hCXXb9Bv+uMVDM+OawJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0MWQ0YjkyZGQxNTAzNjRjNjViN2QyMTI5OTAyODY3OGIw YTUyOTYwHhcNMjYwMTAyMDQxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzU3ZDk4YmQ3MmQ5Y2VlYjVjNWQ5MzAwNWQ1ZWMxMjI4MmM2YjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyE8DYjJR4pWHOq2vROdcU2tZB8K0 LlSyaQMq5eo7/V3MTaLmQnTeqd8YNGlsq5neBDa9HvdEpGKQcKviv8VpmP4Ze04X KAmioS+pAisjIDjwloLoK8YZLzZC4nZmSEq3Kp24pwVFza54A1ysDHTDaQlBI+bB bGoc3+UxVEvIbrEQd3VRp0pKNXZO9eXMSTbiudQ6CBYWofrwhM0QFtIVUH7GodJS dcnOiZJ8thdS44fyd9plRU0nrDGzyWm7hqRtJepE0v1ALj10IsegHKsLLtE/2DYT 8jpQU1VU6u61jy2l+2S4sXRYgGZUOfJRJ2E38Bmzw3LY73BM5VmO9ozAQwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFBNX2YvXLZzutcXZMAXV7BIoLGs2MB8GA1UdIwQY MBaAFEQdS5LdFQNkxlt9ISmQKGeLClKWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkIxTGt0MFZBMlRHVzMwaEtaQW9aNHNLVXBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS81ZDQ1NGItOWQxZC00ZTdkLWFlNzMt N2Y1ZjRkNjA0NzMxLzEvRTFmWmk5Y3RuTzYxeGRrd0JkWHNFaWdzYXpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS81ZDQ1NGItOWQxZC00ZTdkLWFlNzMtN2Y1ZjRkNjA0NzMx LzEvUkIxTGt0MFZBMlRHVzMwaEtaQW9aNHNLVXBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQGkAJAAwQE su6gAwQCuXewMA0EAgACMAcDBQMqAiGwMA0GCSqGSIb3DQEBCwUAA4IBAQAUFgig cnMGko2xkANIk0zpQoKFfwl0D16JogyLe116b5utv960aLvu3tLSnFArkaP/m6wv xMit4Uuht6o79ye9xhTVUKsX3Crlvlo0kDotJNjeg+2DZUodn6bXl1bPCcRonvyq tdpHhEqVoyiXKx/UjSoFewoqBJBBXyeOxUaYOMggBloWFOjD/ujKsgfM/IoPHMMn Lys0GinKHIS4WVoZABAtxUq/m73lr4B6rjvtSoNFFpVekbxrORvfKJzyJSaBFSjV zJVJvzIv1Wvf5cTQ8Q4YX6ubRIMNQ3PtyGD7qZIv76BKdg9g6jF6Qe5ISFQ7ChQA +FF9gE2mfa3AlkKF -----END CERTIFICATE-----Generated at Mon Jan 26 01:01:31 2026 by rpki-client