This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/9vE-oLNEkTWomT9KtfRKYgQbe4M.roa File: 9vE-oLNEkTWomT9KtfRKYgQbe4M.roa (raw, json) Hash identifier: LQb4UezprdlbrPADEMd/FMMoJXKoReBOeeaZW2IdkYc= Subject key identifier: F6:F1:3E:A0:B3:44:91:35:A8:99:3F:4A:B5:F4:4A:62:04:1B:7B:83 Certificate issuer: /CN=e15808f3f921bc8c3eea87c7584c584c1000b051 Certificate serial: 019B77C6D7A4580D6184D75251A1BF5B9DF0 Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/9vE-oLNEkTWomT9KtfRKYgQbe4M.roa Signing time: Thu 01 Jan 2026 04:17:58 +0000 ROA not before: Thu 01 Jan 2026 04:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1239 IP address blocks: 45.83.132.0/22 maxlen: 24 45.83.152.0/22 maxlen: 24 45.139.44.0/22 maxlen: 24 45.139.56.0/22 maxlen: 24 45.139.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:d7:a4:58:0d:61:84:d7:52:51:a1:bf:5b:9d:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051 Validity Not Before: Jan 1 04:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f6f13ea0b3449135a8993f4ab5f44a62041b7b83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f0:12:ca:a5:4a:d5:79:13:dc:8a:34:f4:f6: 89:48:ab:b1:e2:b9:e4:58:76:61:05:69:2c:3b:bb: 52:bc:e4:a4:2f:50:73:f3:ce:de:e5:22:0d:40:a5: 2b:f2:eb:df:44:d4:3f:24:18:44:d0:f8:09:f8:26: d4:98:15:75:0f:b9:c5:19:65:ee:35:bc:b7:33:b8: cd:79:9b:77:08:38:ac:b1:a7:aa:14:67:d1:e2:03: 8c:20:9f:30:af:9a:fa:1c:42:44:c1:51:7b:19:aa: d2:07:03:b5:71:fe:40:21:93:15:00:95:8d:3c:b3: b3:19:9f:83:65:69:b6:15:76:cb:05:10:f2:b7:6e: e8:dd:47:77:de:1d:fd:b1:6a:a7:1e:9d:f0:22:a3: 31:fb:8f:d7:f0:69:66:42:0a:3a:6e:dd:ae:89:e1: 0b:7f:33:73:cd:35:bf:3c:27:82:d5:86:1d:58:63: 5d:28:28:28:f2:26:77:33:75:b8:ee:7a:a3:cb:ca: e7:37:08:b3:0a:08:75:79:09:99:99:76:0b:1c:53: 1d:43:5a:38:59:7a:3c:d0:28:2b:8e:61:e4:ee:9e: 79:fe:35:aa:53:26:d9:fb:b0:64:c0:e1:80:0a:29: 3b:0d:29:83:9c:fc:d3:f9:ba:2e:2b:cf:8f:a8:cb: 01:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:F1:3E:A0:B3:44:91:35:A8:99:3F:4A:B5:F4:4A:62:04:1B:7B:83 X509v3 Authority Key Identifier: keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/9vE-oLNEkTWomT9KtfRKYgQbe4M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.83.132.0/22 45.83.152.0/22 45.139.44.0/22 45.139.56.0/22 45.139.64.0/22 Signature Algorithm: sha256WithRSAEncryption 14:ea:fe:b9:65:6f:e1:68:47:be:98:b3:96:7b:40:fd:28:88: 4f:b6:fc:4c:f4:a0:2e:a7:22:be:dc:d2:89:94:c5:26:ba:e3: bc:d0:16:1c:93:da:9d:26:9d:b7:2f:1d:1f:ac:6f:be:68:2d: d6:b3:33:58:4d:51:1d:20:52:42:c3:66:d6:d6:26:b7:d8:65: 08:8d:b4:84:25:ce:ee:aa:72:c9:2c:a5:dd:0f:4c:09:d9:d9: 1d:c9:a0:9e:c7:10:aa:29:58:16:9c:fa:e5:7d:8f:e0:3a:f0: 13:32:a5:33:ce:d1:e8:e3:4a:1b:39:6f:c1:c5:99:54:f0:17: 71:b3:fe:17:c2:39:25:70:26:db:f7:3c:a2:48:07:69:d9:3c: d3:9a:08:a4:f3:63:c5:69:41:7f:c2:b3:f1:9d:8e:6d:f9:64: 2b:58:85:9c:40:3a:d7:94:c7:c5:72:2b:95:31:e6:f6:7f:7f: 8c:3a:c1:6d:f8:df:3d:2e:c0:ce:9e:e2:14:28:21:11:21:81: c5:5d:91:2a:c9:ff:bd:d9:93:64:3d:df:37:73:e8:02:73:27: 2a:60:1e:9d:a4:ff:cb:0a:4c:3c:1e:9a:41:db:97:2c:5a:4a: b2:04:27:10:fb:f8:3b:89:97:4f:33:c7:f8:40:13:cf:a7:fa: 18:83:89:9f -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt3xtekWA1hhNdSUaG/W53wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNTgwOGYzZjkyMWJjOGMzZWVhODdjNzU4NGM1ODRjMTAw MGIwNTEwHhcNMjYwMTAxMDQxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNmYxM2VhMGIzNDQ5MTM1YTg5OTNmNGFiNWY0NGE2MjA0MWI3YjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPASyqVK1XkT3Io09PaJSKux4rnk WHZhBWksO7tSvOSkL1Bz887e5SINQKUr8uvfRNQ/JBhE0PgJ+CbUmBV1D7nFGWXu Nby3M7jNeZt3CDissaeqFGfR4gOMIJ8wr5r6HEJEwVF7GarSBwO1cf5AIZMVAJWN PLOzGZ+DZWm2FXbLBRDyt27o3Ud33h39sWqnHp3wIqMx+4/X8GlmQgo6bt2uieEL fzNzzTW/PCeC1YYdWGNdKCgo8iZ3M3W47nqjy8rnNwizCgh1eQmZmXYLHFMdQ1o4 WXo80CgrjmHk7p55/jWqUybZ+7BkwOGACik7DSmDnPzT+bouK8+PqMsB7wIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFPbxPqCzRJE1qJk/SrX0SmIEG3uDMB8GA1UdIwQY MBaAFOFYCPP5IbyMPuqHx1hMWEwQALBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC84ZThlODItNTI3NC00ZDJmLThjYTAt YWIxOWZjYjBjZTY0LzEvOXZFLW9MTkVrVFdvbVQ5S3RmUktZZ1FiZTRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC84ZThlODItNTI3NC00ZDJmLThjYTAtYWIxOWZjYjBjZTY0 LzEvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCLVOEAwQC LVOYAwQCLYssAwQCLYs4AwQCLYtAMA0GCSqGSIb3DQEBCwUAA4IBAQAU6v65ZW/h aEe+mLOWe0D9KIhPtvxM9KAupyK+3NKJlMUmuuO80BYck9qdJp23Lx0frG++aC3W szNYTVEdIFJCw2bW1ia32GUIjbSEJc7uqnLJLKXdD0wJ2dkdyaCexxCqKVgWnPrl fY/gOvATMqUzztHo40obOW/BxZlU8Bdxs/4XwjklcCbb9zyiSAdp2TzTmgik82PF aUF/wrPxnY5t+WQrWIWcQDrXlMfFciuVMeb2f3+MOsFt+N89LsDOnuIUKCERIYHF XZEqyf+92ZNkPd83c+gCcycqYB6dpP/LCkw8HppB25csWkqyBCcQ+/g7iZdPM8f4 QBPPp/oYg4mf -----END CERTIFICATE-----Generated at Sun Jan 25 17:43:16 2026 by rpki-client