This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/l2DY81SaEGuuhJDEFJ_Lz0piP9E.roa File: l2DY81SaEGuuhJDEFJ_Lz0piP9E.roa (raw, json) Hash identifier: krROF8fyVawsHQ+SK0aUD/ZdvI6BJ/t4uCdSw1pg/M0= Subject key identifier: 97:60:D8:F3:54:9A:10:6B:AE:84:90:C4:14:9F:CB:CF:4A:62:3F:D1 Certificate issuer: /CN=e15808f3f921bc8c3eea87c7584c584c1000b051 Certificate serial: 019B77C6DD33938531AD5B58285C1A56BEF7 Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/l2DY81SaEGuuhJDEFJ_Lz0piP9E.roa Signing time: Thu 01 Jan 2026 04:18:00 +0000 ROA not before: Thu 01 Jan 2026 04:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 401951 IP address blocks: 45.139.36.0/22 maxlen: 24 45.139.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:dd:33:93:85:31:ad:5b:58:28:5c:1a:56:be:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051 Validity Not Before: Jan 1 04:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9760d8f3549a106bae8490c4149fcbcf4a623fd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:e6:a4:37:42:d2:59:8e:0c:bc:f3:e0:c2:37: 65:16:ff:35:0a:1f:c4:c8:e5:d4:3c:8f:dc:3a:89: e1:82:6e:b2:d6:d2:b4:49:02:2c:9a:15:4b:42:b8: 9f:a8:69:d4:cf:ec:65:85:e4:bb:5d:78:4e:c8:af: ee:b1:71:fe:0c:a4:a5:80:ff:f8:cb:0d:f1:a4:0f: 3b:db:31:52:17:7b:17:a2:f1:5d:16:b6:71:c5:bc: c9:14:ad:79:ea:ea:df:16:c9:fc:1b:e3:cb:d5:cf: f7:70:d4:ae:e4:1d:a4:d6:03:e2:11:e4:48:b1:02: 29:f0:49:6e:68:65:ff:41:39:dd:d1:d3:12:dd:07: 9d:05:77:99:2e:14:d0:00:bc:8a:b9:1c:6f:38:7a: a2:88:63:15:aa:d8:28:06:e3:ca:c7:b7:60:ba:2a: 16:9d:da:41:10:33:45:7c:39:b2:a9:8f:dd:4d:e4: 66:de:22:5e:0b:7c:a0:43:c3:13:88:6a:83:cc:85: 8e:13:7e:68:14:bb:46:22:e7:53:b1:5d:cf:b6:92: d4:d3:34:23:f3:28:76:16:77:f3:78:82:95:42:3b: 96:21:e2:30:68:2c:e2:88:5b:c4:b4:8c:01:e1:1b: d5:de:2f:45:f1:c3:cf:6c:04:a2:38:d1:2d:9e:69: 0e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:60:D8:F3:54:9A:10:6B:AE:84:90:C4:14:9F:CB:CF:4A:62:3F:D1 X509v3 Authority Key Identifier: keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/l2DY81SaEGuuhJDEFJ_Lz0piP9E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.139.36.0/22 45.139.64.0/22 Signature Algorithm: sha256WithRSAEncryption 08:1b:67:ec:d7:3a:77:b0:7c:aa:b0:72:44:73:ba:c6:34:ce: 2f:b0:fb:bb:bc:15:26:4e:f1:c5:d1:40:26:65:04:80:85:b4: 86:9e:a1:67:8f:45:12:82:8e:50:81:ff:6e:e4:82:1d:86:6d: e2:ac:d2:59:00:8a:78:eb:1d:cb:f1:3d:a1:44:cb:3c:3e:63: df:34:b7:db:d9:e4:70:55:7c:f2:fc:f7:0b:99:4b:3c:7a:db: fe:5d:e4:0f:cb:9c:60:5b:52:72:75:2d:16:5e:57:fa:22:99: 45:58:80:6c:8f:dd:a9:0a:2b:24:1d:91:12:c2:94:ec:e4:eb: 23:c5:2b:14:0f:b8:24:08:4d:2d:15:c5:86:2c:b0:e4:7b:a4: c4:eb:13:c2:01:0d:5f:07:20:c2:4b:09:d9:af:df:de:4a:61: 0d:d8:2e:c3:ea:9d:4b:8e:07:65:29:c6:62:1f:26:86:af:81: b5:ab:c7:81:f4:e3:6c:54:64:20:ef:0d:9b:c3:c5:34:ae:60: 6c:f7:e1:ad:9b:19:c7:b0:b5:e9:ae:23:5e:91:21:dd:b0:32: 5a:40:cd:ad:df:99:23:34:88:c5:83:eb:98:97:f4:a4:8e:71: 32:96:7b:a5:8f:7a:cd:a4:15:cb:09:0a:c9:ab:6d:89:7b:4f: 54:a0:97:d2 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xt0zk4UxrVtYKFwaVr73MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxNTgwOGYzZjkyMWJjOGMzZWVhODdjNzU4NGM1ODRjMTAw MGIwNTEwHhcNMjYwMTAxMDQxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NzYwZDhmMzU0OWExMDZiYWU4NDkwYzQxNDlmY2JjZjRhNjIzZmQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5eakN0LSWY4MvPPgwjdlFv81Ch/E yOXUPI/cOonhgm6y1tK0SQIsmhVLQrifqGnUz+xlheS7XXhOyK/usXH+DKSlgP/4 yw3xpA872zFSF3sXovFdFrZxxbzJFK156urfFsn8G+PL1c/3cNSu5B2k1gPiEeRI sQIp8EluaGX/QTnd0dMS3QedBXeZLhTQALyKuRxvOHqiiGMVqtgoBuPKx7dguioW ndpBEDNFfDmyqY/dTeRm3iJeC3ygQ8MTiGqDzIWOE35oFLtGIudTsV3PtpLU0zQj 8yh2FnfzeIKVQjuWIeIwaCziiFvEtIwB4RvV3i9F8cPPbASiONEtnmkOVwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJdg2PNUmhBrroSQxBSfy89KYj/RMB8GA1UdIwQY MBaAFOFYCPP5IbyMPuqHx1hMWEwQALBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC84ZThlODItNTI3NC00ZDJmLThjYTAt YWIxOWZjYjBjZTY0LzEvbDJEWTgxU2FFR3V1aEpERUZKX0x6MHBpUDlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC84ZThlODItNTI3NC00ZDJmLThjYTAtYWIxOWZjYjBjZTY0 LzEvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLYskAwQC LYtAMA0GCSqGSIb3DQEBCwUAA4IBAQAIG2fs1zp3sHyqsHJEc7rGNM4vsPu7vBUm TvHF0UAmZQSAhbSGnqFnj0USgo5Qgf9u5IIdhm3irNJZAIp46x3L8T2hRMs8PmPf NLfb2eRwVXzy/PcLmUs8etv+XeQPy5xgW1JydS0WXlf6IplFWIBsj92pCiskHZES wpTs5OsjxSsUD7gkCE0tFcWGLLDke6TE6xPCAQ1fByDCSwnZr9/eSmEN2C7D6p1L jgdlKcZiHyaGr4G1q8eB9ONsVGQg7w2bw8U0rmBs9+GtmxnHsLXpriNekSHdsDJa QM2t35kjNIjFg+uYl/SkjnEylnulj3rNpBXLCQrJq22Je09UoJfS -----END CERTIFICATE-----Generated at Sun Jan 25 19:35:12 2026 by rpki-client