This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/EDI4hBfvhmhntt7hYvBIEgLQOJA.roa File: EDI4hBfvhmhntt7hYvBIEgLQOJA.roa (raw, json) Hash identifier: 2bxpLwvyVSXEk8/vuBLJpeiNYeHTrUFQCELrB9BRYW4= Subject key identifier: 10:32:38:84:17:EF:86:68:67:B6:DE:E1:62:F0:48:12:02:D0:38:90 Certificate issuer: /CN=262341b433e1f8fcb796322d2fd926409396e7ad Certificate serial: 019B775885530D24F4054D4C46E9D9C52766 Authority key identifier: 26:23:41:B4:33:E1:F8:FC:B7:96:32:2D:2F:D9:26:40:93:96:E7:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/EDI4hBfvhmhntt7hYvBIEgLQOJA.roa Signing time: Thu 01 Jan 2026 02:17:28 +0000 ROA not before: Thu 01 Jan 2026 02:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43088 IP address blocks: 46.31.16.0/21 maxlen: 24 193.200.225.0/24 maxlen: 24 2a02:2530::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.mft rsync://rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:85:53:0d:24:f4:05:4d:4c:46:e9:d9:c5:27:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=262341b433e1f8fcb796322d2fd926409396e7ad Validity Not Before: Jan 1 02:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1032388417ef866867b6dee162f0481202d03890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3f:66:ad:b6:e1:75:b9:84:65:f0:83:73:3d: b1:4d:3a:ac:e7:6b:ac:61:80:60:2f:7e:a7:51:c8: 55:a8:72:b5:67:8c:61:da:6d:20:95:97:7b:4e:a0: 78:2b:70:1b:7f:ff:07:29:a9:2c:ee:36:61:e4:f8: 9c:51:49:c4:16:ca:b7:e1:30:d9:93:9f:38:5f:d7: 22:73:7b:fe:d2:ec:f5:d9:3f:66:67:08:3d:31:e0: d5:11:91:e6:71:ff:50:47:61:3f:f4:6d:6a:aa:a6: e9:02:71:32:73:65:ca:6f:a2:9e:93:5f:00:87:48: d1:e3:8a:b4:57:ca:fc:62:4c:3b:80:61:80:0c:76: 5c:ce:57:c8:e1:82:d9:fb:e9:c8:5a:ae:30:3d:e3: ef:6b:fa:39:cb:93:ed:cd:fa:42:8a:ea:80:a1:87: c5:1a:d9:fb:f5:3d:78:21:94:6c:c8:a2:e4:48:ba: 5e:4a:da:44:30:b0:07:fc:ef:0f:85:d9:f8:26:4b: 22:61:5b:59:32:e2:40:92:bd:f7:bd:b7:ba:75:12: 29:68:07:06:e2:b3:d2:6d:7e:19:e5:97:63:19:30: 8b:16:90:23:07:0c:be:85:f2:ef:60:16:5a:12:73: 96:04:6d:d7:df:d6:8f:d4:45:51:4a:aa:99:a9:25: 44:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:32:38:84:17:EF:86:68:67:B6:DE:E1:62:F0:48:12:02:D0:38:90 X509v3 Authority Key Identifier: keyid:26:23:41:B4:33:E1:F8:FC:B7:96:32:2D:2F:D9:26:40:93:96:E7:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JiNBtDPh-Py3ljItL9kmQJOW560.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/EDI4hBfvhmhntt7hYvBIEgLQOJA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/568e21-53a4-4e55-9c57-98282c89f516/1/JiNBtDPh-Py3ljItL9kmQJOW560.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.31.16.0/21 193.200.225.0/24 IPv6: 2a02:2530::/32 Signature Algorithm: sha256WithRSAEncryption 18:f1:7d:cd:45:46:b4:d4:8b:d0:82:c2:9a:20:87:f1:02:d0: 1a:a4:f3:7a:56:56:2c:0d:05:e1:37:0d:6e:e4:3d:96:fc:6e: f8:0d:4e:c3:9b:f0:30:25:f6:ca:f0:fb:55:5f:d3:24:14:c9: 4e:a6:c1:91:79:da:d9:27:50:24:1b:cc:9b:9b:90:0b:28:cb: 40:32:03:6c:e1:f2:9a:53:86:85:86:ad:c6:d3:39:a6:be:f7: b9:ac:4a:30:47:19:c6:ef:69:6b:26:5e:d8:88:aa:d0:10:ed: 03:73:4b:2e:1d:9c:c0:9c:a9:cc:36:76:52:ab:06:67:46:0d: cc:ed:59:25:9b:ab:35:c4:bd:34:b9:f3:e4:42:99:71:83:48: 59:cd:87:ab:ff:b2:65:7c:59:f9:34:35:f8:df:6d:02:5e:4a: 82:9f:33:8f:76:95:9a:66:d1:58:b6:9d:a6:6d:2b:ad:2d:be: 93:a6:11:2b:50:fe:25:bc:47:44:af:de:6f:d1:f0:3e:74:b1: a2:5a:0e:65:3f:fe:60:c3:0f:10:38:44:a0:16:1c:42:74:d9: 9c:64:3c:eb:8c:60:9b:9a:52:c7:d7:80:98:67:81:1c:35:09: 7a:15:b4:a0:8a:b7:95:16:df:ca:fd:e4:46:9a:f5:cf:7f:f4: 52:e8:e5:c8 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt3WIVTDST0BU1MRunZxSdmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2MjM0MWI0MzNlMWY4ZmNiNzk2MzIyZDJmZDkyNjQwOTM5 NmU3YWQwHhcNMjYwMTAxMDIxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDMyMzg4NDE3ZWY4NjY4NjdiNmRlZTE2MmYwNDgxMjAyZDAzODkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvD9mrbbhdbmEZfCDcz2xTTqs52us YYBgL36nUchVqHK1Z4xh2m0glZd7TqB4K3Abf/8HKaks7jZh5PicUUnEFsq34TDZ k584X9cic3v+0uz12T9mZwg9MeDVEZHmcf9QR2E/9G1qqqbpAnEyc2XKb6Kek18A h0jR44q0V8r8Ykw7gGGADHZczlfI4YLZ++nIWq4wPePva/o5y5PtzfpCiuqAoYfF Gtn79T14IZRsyKLkSLpeStpEMLAH/O8Phdn4JksiYVtZMuJAkr33vbe6dRIpaAcG 4rPSbX4Z5ZdjGTCLFpAjBwy+hfLvYBZaEnOWBG3X39aP1EVRSqqZqSVEowIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFBAyOIQX74ZoZ7be4WLwSBIC0DiQMB8GA1UdIwQY MBaAFCYjQbQz4fj8t5YyLS/ZJkCTluetMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmlOQnREUGgtUHkzbGpJdEw5a21RSk9XNTYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi81NjhlMjEtNTNhNC00ZTU1LTljNTct OTgyODJjODlmNTE2LzEvRURJNGhCZnZobWhudHQ3aFl2QklFZ0xRT0pBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi81NjhlMjEtNTNhNC00ZTU1LTljNTctOTgyODJjODlmNTE2 LzEvSmlOQnREUGgtUHkzbGpJdEw5a21RSk9XNTYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDLh8QAwQA wcjhMA0EAgACMAcDBQAqAiUwMA0GCSqGSIb3DQEBCwUAA4IBAQAY8X3NRUa01IvQ gsKaIIfxAtAapPN6VlYsDQXhNw1u5D2W/G74DU7Dm/AwJfbK8PtVX9MkFMlOpsGR edrZJ1AkG8ybm5ALKMtAMgNs4fKaU4aFhq3G0zmmvve5rEowRxnG72lrJl7YiKrQ EO0Dc0suHZzAnKnMNnZSqwZnRg3M7Vklm6s1xL00ufPkQplxg0hZzYer/7JlfFn5 NDX4320CXkqCnzOPdpWaZtFYtp2mbSutLb6TphErUP4lvEdEr95v0fA+dLGiWg5l P/5gww8QOESgFhxCdNmcZDzrjGCbmlLH14CYZ4EcNQl6FbSgireVFt/K/eRGmvXP f/RS6OXI -----END CERTIFICATE-----Generated at Mon Jan 26 15:31:42 2026 by rpki-client