This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/JfPw3oyzUR-37Xc6cCiQ62n9eSE.roa File: JfPw3oyzUR-37Xc6cCiQ62n9eSE.roa (raw, json) Hash identifier: ulHyjWVLbPLL+fstk9NuGMQUOwEWFc5cWUogpR/gTrY= Subject key identifier: 25:F3:F0:DE:8C:B3:51:1F:B7:ED:77:3A:70:28:90:EB:69:FD:79:21 Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Certificate serial: 019B7AC84A25F152528DAF84E4746A86EE6C Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/JfPw3oyzUR-37Xc6cCiQ62n9eSE.roa Signing time: Thu 01 Jan 2026 18:18:24 +0000 ROA not before: Thu 01 Jan 2026 18:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13332 IP address blocks: 45.115.192.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:4a:25:f1:52:52:8d:af:84:e4:74:6a:86:ee:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Validity Not Before: Jan 1 18:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=25f3f0de8cb3511fb7ed773a702890eb69fd7921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:ab:94:66:81:5e:27:64:4c:84:e1:4b:a0:0a: b4:aa:45:ea:f0:cf:0c:06:29:c8:14:c7:7e:81:6c: d1:eb:ce:48:8f:b2:6a:8e:56:51:84:c6:bf:a2:fb: 1d:6f:3b:f6:96:76:f7:7c:0e:f3:92:2e:f0:91:3e: 9a:d0:01:10:99:bb:26:b6:c1:ef:b0:de:66:dd:d7: 1c:29:7d:cc:8d:29:74:c5:9e:99:d5:bc:ce:2b:c5: 1a:6e:32:45:db:8b:d4:bd:db:16:89:71:ae:55:82: 0a:4d:c5:51:e6:d4:5d:6b:14:b6:67:e9:ad:6f:60: 69:67:6b:6a:12:01:2f:88:b9:b9:d4:11:c0:dc:fe: 91:dd:5d:e0:9f:e0:e4:8a:e5:10:58:26:b2:29:f3: df:3f:48:07:30:04:34:e3:5f:a2:e8:a5:a6:d6:8e: 7c:9a:3e:ba:86:b9:aa:d0:97:7a:ae:08:2b:d5:68: 60:6b:ed:98:ee:a4:98:51:04:c1:88:ad:16:61:a1: f1:4a:5c:c9:6b:2e:81:c8:6c:45:35:f2:92:c1:28: 45:c9:67:a6:e0:e2:60:a9:c9:c7:6d:9c:49:da:f2: 02:12:c9:e4:3e:db:3a:7e:9d:fa:fd:59:42:2e:01: 04:84:21:93:82:3c:6f:f6:5a:7c:bb:42:82:66:4d: aa:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:F3:F0:DE:8C:B3:51:1F:B7:ED:77:3A:70:28:90:EB:69:FD:79:21 X509v3 Authority Key Identifier: keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/JfPw3oyzUR-37Xc6cCiQ62n9eSE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.115.192.0/22 Signature Algorithm: sha256WithRSAEncryption 35:72:c9:31:22:bb:78:aa:09:18:ba:fe:17:83:14:8b:c8:76: 6e:c0:44:d6:a2:1f:5a:39:ac:47:8c:5c:e0:a1:2f:34:fd:c3: c4:67:49:2d:79:4c:52:35:54:37:6a:a4:b6:40:4f:ba:8f:e8: 6a:54:f1:0f:fd:c0:6b:12:04:9b:bb:97:c0:b9:58:db:02:88: 99:d1:07:89:1a:9a:38:51:f4:80:21:e3:eb:7c:98:39:83:5e: 3b:c5:88:21:ea:68:70:72:59:94:1b:0f:56:00:ca:02:3a:db: 8e:6d:d0:32:d2:33:da:c2:fd:d8:56:71:f7:0a:e8:67:eb:4b: 57:d2:a7:2c:3b:4a:0c:12:d6:25:1e:b6:ea:df:a9:76:fe:8b: 62:6f:4e:99:ed:cc:dc:54:71:88:22:aa:0c:c2:fb:ab:60:9a: 5b:e4:c3:3c:85:8c:cc:28:f2:4d:23:d3:06:e2:78:34:28:57: 05:ce:43:34:e6:9a:9b:03:c3:35:90:52:89:d4:61:b8:96:29: 1b:3f:65:38:ef:4b:22:ca:43:f3:d3:f0:37:b2:02:22:33:5a: bc:3a:56:38:54:3c:23:30:3d:13:8b:97:e0:65:64:f1:e4:b1: 40:6a:f0:25:8e:39:3c:e0:eb:9d:5e:c4:52:b8:e4:95:ed:06: 7f:47:78:84 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yEol8VJSja+E5HRqhu5sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz MGNiNjMwHhcNMjYwMTAxMTgxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNWYzZjBkZThjYjM1MTFmYjdlZDc3M2E3MDI4OTBlYjY5ZmQ3OTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6KuUZoFeJ2RMhOFLoAq0qkXq8M8M BinIFMd+gWzR685Ij7JqjlZRhMa/ovsdbzv2lnb3fA7zki7wkT6a0AEQmbsmtsHv sN5m3dccKX3MjSl0xZ6Z1bzOK8UabjJF24vUvdsWiXGuVYIKTcVR5tRdaxS2Z+mt b2BpZ2tqEgEviLm51BHA3P6R3V3gn+DkiuUQWCayKfPfP0gHMAQ041+i6KWm1o58 mj66hrmq0Jd6rggr1Whga+2Y7qSYUQTBiK0WYaHxSlzJay6ByGxFNfKSwShFyWem 4OJgqcnHbZxJ2vICEsnkPts6fp36/VlCLgEEhCGTgjxv9lp8u0KCZk2q6wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCXz8N6Ms1Eft+13OnAokOtp/XkhMB8GA1UdIwQY MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt YjRiOGRiMjBiMWZiLzEvSmZQdzNveXpVUi0zN1hjNmNDaVE2Mm45ZVNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLXPAMA0G CSqGSIb3DQEBCwUAA4IBAQA1cskxIrt4qgkYuv4XgxSLyHZuwETWoh9aOaxHjFzg oS80/cPEZ0kteUxSNVQ3aqS2QE+6j+hqVPEP/cBrEgSbu5fAuVjbAoiZ0QeJGpo4 UfSAIePrfJg5g147xYgh6mhwclmUGw9WAMoCOtuObdAy0jPawv3YVnH3Cuhn60tX 0qcsO0oMEtYlHrbq36l2/otib06Z7czcVHGIIqoMwvurYJpb5MM8hYzMKPJNI9MG 4ng0KFcFzkM05pqbA8M1kFKJ1GG4likbP2U470siykPz0/A3sgIiM1q8OlY4VDwj MD0Ti5fgZWTx5LFAavAljjk84OudXsRSuOSV7QZ/R3iE -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:07 2026 by rpki-client