This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/AtUAcyhKEHt9SbfJUvO_17X62S4.roa File: AtUAcyhKEHt9SbfJUvO_17X62S4.roa (raw, json) Hash identifier: 38uNfB4b5q/Bgpq6TDeSxHaQl/g1MDPfj7sk//k9A3o= Subject key identifier: 02:D5:00:73:28:4A:10:7B:7D:49:B7:C9:52:F3:BF:D7:B5:FA:D9:2E Certificate issuer: /CN=18e1732f2c80e3ea4d7279d252b874a6164c35b4 Certificate serial: 019B77C6FA4AA877F8497B9E02170B2B4B38 Authority key identifier: 18:E1:73:2F:2C:80:E3:EA:4D:72:79:D2:52:B8:74:A6:16:4C:35:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/AtUAcyhKEHt9SbfJUvO_17X62S4.roa Signing time: Thu 01 Jan 2026 04:18:07 +0000 ROA not before: Thu 01 Jan 2026 04:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202984 IP address blocks: 45.139.236.0/24 maxlen: 24 45.139.237.0/24 maxlen: 24 45.139.238.0/24 maxlen: 24 45.139.239.0/24 maxlen: 24 185.211.244.0/24 maxlen: 24 185.211.245.0/24 maxlen: 24 185.211.246.0/24 maxlen: 24 185.211.247.0/24 maxlen: 24 2a0b:6cc0::/29 maxlen: 48 2a0b:6cc1:7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.mft rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:fa:4a:a8:77:f8:49:7b:9e:02:17:0b:2b:4b:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18e1732f2c80e3ea4d7279d252b874a6164c35b4 Validity Not Before: Jan 1 04:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=02d50073284a107b7d49b7c952f3bfd7b5fad92e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:0b:45:7e:3d:77:7b:2f:91:b5:58:d5:19:76: 7d:59:10:26:a2:25:69:ec:0a:6c:4f:a7:17:f3:58: 50:bb:d9:47:c4:59:7d:76:cb:49:e2:8e:31:62:d1: 7c:58:fd:2a:f8:33:c2:5f:32:0b:59:25:26:9f:84: 39:04:18:41:84:50:11:b6:4b:e0:23:57:45:2c:96: cd:e3:8b:87:28:d8:6f:98:ef:6d:29:ed:de:6f:06: fd:61:f0:2b:ad:df:c4:7e:c3:ca:11:20:1d:60:55: 41:3c:79:b5:fc:d1:95:1a:76:36:ba:ab:b6:7f:db: df:40:94:91:aa:17:36:21:01:0d:f3:96:60:4c:c6: d7:13:0b:54:57:f8:b1:15:6f:f0:7b:d8:67:8a:5d: 00:3b:00:eb:21:98:35:ce:03:1b:5b:a8:34:d6:ae: e6:0a:7b:c9:9c:d5:7e:3e:fe:b0:59:07:b0:11:20: 6b:f4:fe:68:fb:d9:07:c9:3b:7a:ff:66:57:8a:cc: b3:10:28:ef:31:cf:82:06:7c:56:00:1c:31:f9:16: eb:4d:eb:d8:2a:fb:24:9c:6d:40:f6:6d:a3:ab:b8: 2c:fb:75:58:8f:10:f5:ae:e2:9c:16:e2:64:7b:a9: 2f:f5:49:c4:9a:96:99:fd:4f:22:e6:c9:69:c0:f5: a6:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:D5:00:73:28:4A:10:7B:7D:49:B7:C9:52:F3:BF:D7:B5:FA:D9:2E X509v3 Authority Key Identifier: keyid:18:E1:73:2F:2C:80:E3:EA:4D:72:79:D2:52:B8:74:A6:16:4C:35:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOFzLyyA4-pNcnnSUrh0phZMNbQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/AtUAcyhKEHt9SbfJUvO_17X62S4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ace18f-ed7c-479f-855d-e409260015ef/1/GOFzLyyA4-pNcnnSUrh0phZMNbQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.139.236.0/22 185.211.244.0/22 IPv6: 2a0b:6cc0::/29 Signature Algorithm: sha256WithRSAEncryption 1e:7f:ce:a7:a6:f9:c7:a2:4c:51:df:b0:44:f1:c8:92:d7:d7: 86:39:9d:f6:fe:37:8d:42:c4:38:fb:ab:4a:4d:10:14:78:aa: 4a:c4:1e:5f:e2:61:7e:be:71:66:70:4a:9b:70:e5:88:70:5b: 81:cf:98:05:6c:7d:ab:6f:5d:19:ef:ce:72:fb:6d:9b:a4:07: 0f:55:e5:8f:e8:10:79:05:38:f6:f4:e0:e8:8a:1a:7f:a3:ad: c4:58:89:05:db:56:ee:c5:3b:15:45:58:60:2f:c9:b8:0e:ff: 2d:3c:6a:cb:1c:82:70:43:be:04:ef:0c:c1:0c:9b:ff:32:71: 91:c9:de:7c:4b:34:1e:70:1c:c5:5f:53:e2:1e:78:9e:93:12: f2:dc:a4:d5:36:1e:d8:00:be:c6:ce:4c:60:fa:8d:ea:6c:42: b3:c7:61:2b:bd:a5:ed:c7:e5:97:b3:d1:fe:6b:af:b3:cf:78: 21:68:18:93:21:a1:17:25:bf:dc:cf:2a:95:48:96:9a:10:9b: c0:7d:d6:ae:b4:be:57:27:53:f3:75:b9:01:9e:b5:09:d6:d1: a3:ea:21:97:4b:01:8d:68:7e:65:c4:55:9c:bf:0f:53:71:b9: 2a:b9:ee:19:5d:eb:cc:16:ad:30:99:8d:49:c4:2c:ef:a0:d6: f3:bf:f9:b6 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt3xvpKqHf4SXueAhcLK0s4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4ZTE3MzJmMmM4MGUzZWE0ZDcyNzlkMjUyYjg3NGE2MTY0 YzM1YjQwHhcNMjYwMTAxMDQxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMmQ1MDA3MzI4NGExMDdiN2Q0OWI3Yzk1MmYzYmZkN2I1ZmFkOTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6QtFfj13ey+RtVjVGXZ9WRAmoiVp 7ApsT6cX81hQu9lHxFl9dstJ4o4xYtF8WP0q+DPCXzILWSUmn4Q5BBhBhFARtkvg I1dFLJbN44uHKNhvmO9tKe3ebwb9YfArrd/EfsPKESAdYFVBPHm1/NGVGnY2uqu2 f9vfQJSRqhc2IQEN85ZgTMbXEwtUV/ixFW/we9hnil0AOwDrIZg1zgMbW6g01q7m CnvJnNV+Pv6wWQewESBr9P5o+9kHyTt6/2ZXisyzECjvMc+CBnxWABwx+RbrTevY KvsknG1A9m2jq7gs+3VYjxD1ruKcFuJke6kv9UnEmpaZ/U8i5slpwPWmWwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFALVAHMoShB7fUm3yVLzv9e1+tkuMB8GA1UdIwQY MBaAFBjhcy8sgOPqTXJ50lK4dKYWTDW0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR09Gekx5eUE0LXBOY25uU1VyaDBwaFpNTmJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9hY2UxOGYtZWQ3Yy00NzlmLTg1NWQt ZTQwOTI2MDAxNWVmLzEvQXRVQWN5aEtFSHQ5U2JmSlV2T18xN1g2MlM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9hY2UxOGYtZWQ3Yy00NzlmLTg1NWQtZTQwOTI2MDAxNWVm LzEvR09Gekx5eUE0LXBOY25uU1VyaDBwaFpNTmJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLYvsAwQC udP0MA0EAgACMAcDBQMqC2zAMA0GCSqGSIb3DQEBCwUAA4IBAQAef86npvnHokxR 37BE8ciS19eGOZ32/jeNQsQ4+6tKTRAUeKpKxB5f4mF+vnFmcEqbcOWIcFuBz5gF bH2rb10Z785y+22bpAcPVeWP6BB5BTj29ODoihp/o63EWIkF21buxTsVRVhgL8m4 Dv8tPGrLHIJwQ74E7wzBDJv/MnGRyd58SzQecBzFX1PiHniekxLy3KTVNh7YAL7G zkxg+o3qbEKzx2ErvaXtx+WXs9H+a6+zz3ghaBiTIaEXJb/czyqVSJaaEJvAfdau tL5XJ1PzdbkBnrUJ1tGj6iGXSwGNaH5lxFWcvw9Tcbkque4ZXevMFq0wmY1JxCzv oNbzv/m2 -----END CERTIFICATE-----Generated at Sun Jan 25 19:15:57 2026 by rpki-client