This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/JEJwDGH6tSVjpBY1h8WbveXmdw8.roa File: JEJwDGH6tSVjpBY1h8WbveXmdw8.roa (raw, json) Hash identifier: icAiQJA6CuQCxFfr68wlBhAPrBN1YQOmgCNH/yLz47M= Subject key identifier: 24:42:70:0C:61:FA:B5:25:63:A4:16:35:87:C5:9B:BD:E5:E6:77:0F Certificate issuer: /CN=e15808f3f921bc8c3eea87c7584c584c1000b051 Certificate serial: 019B77C6D8A2F04D791C13EFD36DB929B3C4 Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/JEJwDGH6tSVjpBY1h8WbveXmdw8.roa Signing time: Thu 01 Jan 2026 04:17:58 +0000 ROA not before: Thu 01 Jan 2026 04:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 10753 IP address blocks: 45.139.36.0/22 maxlen: 24 45.139.56.0/22 maxlen: 24 45.139.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:d8:a2:f0:4d:79:1c:13:ef:d3:6d:b9:29:b3:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051 Validity Not Before: Jan 1 04:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2442700c61fab52563a4163587c59bbde5e6770f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:cb:17:9f:4e:b7:b9:31:8b:ed:cc:97:b7:d8: a2:41:02:e6:dd:f8:d1:03:f6:14:3a:64:75:07:ea: 78:a4:44:81:d1:f3:05:f2:58:b6:26:c1:95:a9:ab: 4e:5f:61:8c:db:f3:60:d8:43:24:3b:57:7f:0d:9d: 95:b8:24:24:93:03:16:64:48:13:d1:c5:a8:85:86: 2b:e0:f4:01:3f:57:c6:aa:7c:f1:3f:86:68:55:66: 32:ab:5c:59:34:fa:9e:9e:45:c3:02:d1:cd:33:bf: d2:fb:86:f3:ef:a0:26:b5:0c:dc:80:de:a5:a9:63: 10:c6:24:c6:5c:10:c2:17:a4:03:a9:c1:f8:8f:c4: 33:b0:ab:73:5b:7d:24:b7:61:39:84:ff:4d:7b:e0: 94:0b:38:4f:82:b4:e1:5e:81:0c:e0:bb:ec:21:b0: 9d:5c:f7:9d:0d:fc:c3:76:f8:f1:e1:d5:f2:69:8b: 0d:89:69:4f:c8:ec:1d:5f:f5:67:e4:5b:02:11:e4: 7c:8a:ca:e6:ca:c5:3f:cc:52:11:63:20:51:c5:6f: b8:5b:7d:85:7a:ef:3d:38:03:56:5d:3a:2a:b5:1d: a0:6e:16:8a:de:c7:39:9b:7b:d6:11:f1:b6:59:22: 08:6d:45:05:ab:d7:b6:2a:90:ce:ba:06:df:c5:99: 64:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:42:70:0C:61:FA:B5:25:63:A4:16:35:87:C5:9B:BD:E5:E6:77:0F X509v3 Authority Key Identifier: keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/JEJwDGH6tSVjpBY1h8WbveXmdw8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.139.36.0/22 45.139.56.0/22 45.139.64.0/22 Signature Algorithm: sha256WithRSAEncryption 3e:c3:68:3f:89:76:d9:b4:f2:34:84:a0:2c:64:2b:c5:86:5d: d5:69:02:b5:16:be:a1:85:35:e8:3f:40:5b:fb:c9:4f:d6:3a: 3a:44:ec:14:e7:cf:f6:37:06:c4:ca:b2:55:72:b4:ee:07:a8: 1e:13:de:44:4e:f1:cb:21:02:ce:ed:dd:86:85:c3:0b:0e:af: 89:c1:87:e4:e1:90:12:f8:0c:c8:87:c6:ee:e9:ec:6a:5d:1a: 36:56:73:99:fe:bf:a4:59:da:34:f7:00:df:16:e2:2a:a2:01: 8f:a8:9c:a4:c9:1a:34:42:87:46:98:55:1d:ad:1a:78:2e:0f: 9d:f8:c5:5b:fc:f5:11:f2:b4:67:a7:fb:8f:cd:2d:dc:c6:9e: b0:b7:37:2b:af:d8:7b:1e:5a:73:c8:ea:81:d4:57:0c:c1:4b: 2b:ba:4b:a4:6b:f8:27:a8:bc:85:4e:e1:6f:99:91:fc:8f:80: 6b:40:8d:73:c4:cc:6c:2b:f6:ba:37:74:95:d0:a0:89:a6:a7: cf:d6:02:83:1b:d7:2f:e1:e3:26:da:55:de:b9:ba:cf:61:8e: 82:34:b0:8d:23:98:7b:00:b4:4b:ac:80:ce:95:38:3e:67:10: be:5a:77:da:51:48:4e:61:02:48:6f:34:0d:27:6f:98:a8:59: e3:7b:af:76 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3xtii8E15HBPv0225KbPEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNTgwOGYzZjkyMWJjOGMzZWVhODdjNzU4NGM1ODRjMTAw MGIwNTEwHhcNMjYwMTAxMDQxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDQyNzAwYzYxZmFiNTI1NjNhNDE2MzU4N2M1OWJiZGU1ZTY3NzBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwssXn063uTGL7cyXt9iiQQLm3fjR A/YUOmR1B+p4pESB0fMF8li2JsGVqatOX2GM2/Ng2EMkO1d/DZ2VuCQkkwMWZEgT 0cWohYYr4PQBP1fGqnzxP4ZoVWYyq1xZNPqenkXDAtHNM7/S+4bz76AmtQzcgN6l qWMQxiTGXBDCF6QDqcH4j8QzsKtzW30kt2E5hP9Ne+CUCzhPgrThXoEM4LvsIbCd XPedDfzDdvjx4dXyaYsNiWlPyOwdX/Vn5FsCEeR8isrmysU/zFIRYyBRxW+4W32F eu89OANWXToqtR2gbhaK3sc5m3vWEfG2WSIIbUUFq9e2KpDOugbfxZlk5wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFCRCcAxh+rUlY6QWNYfFm73l5ncPMB8GA1UdIwQY MBaAFOFYCPP5IbyMPuqHx1hMWEwQALBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC84ZThlODItNTI3NC00ZDJmLThjYTAt YWIxOWZjYjBjZTY0LzEvSkVKd0RHSDZ0U1ZqcEJZMWg4V2J2ZVhtZHc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC84ZThlODItNTI3NC00ZDJmLThjYTAtYWIxOWZjYjBjZTY0 LzEvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLYskAwQC LYs4AwQCLYtAMA0GCSqGSIb3DQEBCwUAA4IBAQA+w2g/iXbZtPI0hKAsZCvFhl3V aQK1Fr6hhTXoP0Bb+8lP1jo6ROwU58/2NwbEyrJVcrTuB6geE95ETvHLIQLO7d2G hcMLDq+JwYfk4ZAS+AzIh8bu6exqXRo2VnOZ/r+kWdo09wDfFuIqogGPqJykyRo0 QodGmFUdrRp4Lg+d+MVb/PUR8rRnp/uPzS3cxp6wtzcrr9h7HlpzyOqB1FcMwUsr ukuka/gnqLyFTuFvmZH8j4BrQI1zxMxsK/a6N3SV0KCJpqfP1gKDG9cv4eMm2lXe ubrPYY6CNLCNI5h7ALRLrIDOlTg+ZxC+WnfaUUhOYQJIbzQNJ2+YqFnje692 -----END CERTIFICATE-----Generated at Sun Jan 25 16:36:25 2026 by rpki-client