This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/BREu-oLiWRVnvmr0OZpze-1yZho.roa File: BREu-oLiWRVnvmr0OZpze-1yZho.roa (raw, json) Hash identifier: JOSLUiFQMXinZ2s3xJFw5vOALrZZO+Y0VQuZomqNcNc= Subject key identifier: 05:11:2E:FA:82:E2:59:15:67:BE:6A:F4:39:9A:73:7B:ED:72:66:1A Certificate issuer: /CN=33c342c06aacc359d39439ff58defa8ea1875748 Certificate serial: 019B791131CEE02F25EEB3EE4D9E27DBE567 Authority key identifier: 33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/BREu-oLiWRVnvmr0OZpze-1yZho.roa Signing time: Thu 01 Jan 2026 10:18:48 +0000 ROA not before: Thu 01 Jan 2026 10:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50374 IP address blocks: 45.146.64.0/22 maxlen: 22 109.236.240.0/24 maxlen: 24 109.236.241.0/24 maxlen: 24 185.216.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:31:ce:e0:2f:25:ee:b3:ee:4d:9e:27:db:e5:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33c342c06aacc359d39439ff58defa8ea1875748 Validity Not Before: Jan 1 10:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=05112efa82e2591567be6af4399a737bed72661a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ad:16:09:75:ce:d2:7d:63:b3:e3:14:0f:ce: c1:0f:d7:15:d1:a8:de:1f:95:ed:7e:70:bf:b6:1d: 31:79:8d:1a:8b:36:a9:3f:59:27:3d:e1:28:86:ad: 68:f9:97:29:35:ee:80:5d:69:1b:a9:fc:03:12:14: e2:a4:9d:eb:0c:b4:80:d1:20:df:1a:8e:89:bd:17: 54:b1:0b:de:62:08:5b:5c:2c:9c:02:c2:b9:7e:d5: 0a:4c:f5:b5:87:3c:30:a9:8f:42:5f:57:26:be:45: b4:b3:ca:c9:60:bd:d2:76:58:2c:c6:50:1b:04:fc: 41:22:7e:2c:0e:77:4b:aa:66:f2:99:68:1d:5c:a4: 8d:40:e9:44:cc:d5:31:c9:97:87:ba:cc:03:52:23: e9:36:96:b2:0c:98:0c:f9:56:5f:0a:8c:68:d6:8d: 20:c2:f7:ce:3d:ce:b5:23:4b:e1:ce:a2:7e:8d:b5: e6:df:56:07:27:8b:5f:2c:21:5a:e5:6e:ce:d6:c7: 91:b2:c8:12:1f:51:3e:c3:9d:dc:7a:b9:59:b4:25: 4e:57:a4:bd:d0:5a:7c:60:a9:67:64:39:e1:c9:d2: 77:fb:38:1e:6d:64:3a:96:bc:4a:05:5a:55:c9:1c: 18:76:7f:a3:42:d8:60:70:aa:5e:d2:39:ff:7a:71: 02:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:11:2E:FA:82:E2:59:15:67:BE:6A:F4:39:9A:73:7B:ED:72:66:1A X509v3 Authority Key Identifier: keyid:33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/BREu-oLiWRVnvmr0OZpze-1yZho.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.146.64.0/22 109.236.240.0/23 185.216.100.0/22 Signature Algorithm: sha256WithRSAEncryption 19:4f:7f:99:7d:dc:d2:33:c6:6c:1b:9e:e7:6e:6e:5c:bc:6a: 9f:ba:d6:cf:4f:97:77:e3:4d:ed:a7:8e:7c:e8:60:0a:0d:a7: 2a:fa:11:1f:fe:95:39:76:46:e1:43:f8:0f:ce:3a:3e:87:a3: 30:a6:98:fa:2a:c2:a9:78:cb:0c:36:5a:12:c3:0e:c7:24:ee: 94:92:ae:62:16:d4:9b:0a:e3:59:55:46:ff:70:65:4a:72:43: 6c:0e:7e:0b:cf:db:b8:77:20:fe:3d:26:1e:45:2d:75:6d:4d: cb:cb:e7:2d:07:0a:83:39:fa:f3:7f:40:97:c8:b8:b6:bf:69: 63:02:95:71:08:e1:58:cb:0b:1e:00:a1:0c:1a:a1:f0:dd:bb: 7f:ba:cd:77:c3:85:ef:de:dd:0f:a9:c8:5f:86:24:c3:7c:1e: 63:df:d3:01:b6:d9:4f:0c:55:68:08:7a:4f:5d:6b:3b:96:12: ef:df:9c:e5:f1:d7:93:4a:34:2a:d4:24:3b:0f:4a:cb:a3:95: 32:0e:5e:1c:ac:98:07:c2:bc:2f:00:a0:7e:6f:da:6e:33:5d: b8:ae:e9:eb:ce:fa:f0:ea:f0:d7:f4:a4:d4:09:03:7b:93:0d: bc:01:92:b8:63:d8:5f:9d:77:f0:b7:8f:88:8b:a2:75:60:74: b4:76:c5:fd -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5ETHO4C8l7rPuTZ4n2+VnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzYzM0MmMwNmFhY2MzNTlkMzk0MzlmZjU4ZGVmYThlYTE4 NzU3NDgwHhcNMjYwMTAxMTAxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTExMmVmYTgyZTI1OTE1NjdiZTZhZjQzOTlhNzM3YmVkNzI2NjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApa0WCXXO0n1js+MUD87BD9cV0aje H5XtfnC/th0xeY0aizapP1knPeEohq1o+ZcpNe6AXWkbqfwDEhTipJ3rDLSA0SDf Go6JvRdUsQveYghbXCycAsK5ftUKTPW1hzwwqY9CX1cmvkW0s8rJYL3SdlgsxlAb BPxBIn4sDndLqmbymWgdXKSNQOlEzNUxyZeHuswDUiPpNpayDJgM+VZfCoxo1o0g wvfOPc61I0vhzqJ+jbXm31YHJ4tfLCFa5W7O1seRssgSH1E+w53cerlZtCVOV6S9 0Fp8YKlnZDnhydJ3+zgebWQ6lrxKBVpVyRwYdn+jQthgcKpe0jn/enECdwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFAURLvqC4lkVZ75q9Dmac3vtcmYaMB8GA1UdIwQY MBaAFDPDQsBqrMNZ05Q5/1je+o6hh1dIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTThOQ3dHcXN3MW5UbERuX1dONzZqcUdIVjBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9jNTVmZGYtYTY4YS00YWEwLWI4YzUt N2YyMzMzNjA0OTk3LzEvQlJFdS1vTGlXUlZudm1yME9acHplLTF5WmhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9jNTVmZGYtYTY4YS00YWEwLWI4YzUtN2YyMzMzNjA0OTk3 LzEvTThOQ3dHcXN3MW5UbERuX1dONzZqcUdIVjBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLZJAAwQB bezwAwQCudhkMA0GCSqGSIb3DQEBCwUAA4IBAQAZT3+ZfdzSM8ZsG57nbm5cvGqf utbPT5d3403tp4586GAKDacq+hEf/pU5dkbhQ/gPzjo+h6Mwppj6KsKpeMsMNloS ww7HJO6Ukq5iFtSbCuNZVUb/cGVKckNsDn4Lz9u4dyD+PSYeRS11bU3Ly+ctBwqD Ofrzf0CXyLi2v2ljApVxCOFYywseAKEMGqHw3bt/us13w4Xv3t0PqchfhiTDfB5j 39MBttlPDFVoCHpPXWs7lhLv35zl8deTSjQq1CQ7D0rLo5UyDl4crJgHwrwvAKB+ b9puM124runrzvrw6vDX9KTUCQN7kw28AZK4Y9hfnXfwt4+Ii6J1YHS0dsX9 -----END CERTIFICATE-----Generated at Mon Jan 26 07:42:47 2026 by rpki-client