This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/E7RKatZ2-c0USqUVA50ejfPO_LA.roa File: E7RKatZ2-c0USqUVA50ejfPO_LA.roa (raw, json) Hash identifier: Kbpm5sWk9Jg4XBpXaBujpM1V2VgMgPUNQUsGM4QI/6E= Subject key identifier: 13:B4:4A:6A:D6:76:F9:CD:14:4A:A5:15:03:9D:1E:8D:F3:CE:FC:B0 Certificate issuer: /CN=ab06c8f2247d22041c82e555667881e50f9154ab Certificate serial: 019B797F21C9BF0FAA9107B37D021C5A8C6C Authority key identifier: AB:06:C8:F2:24:7D:22:04:1C:82:E5:55:66:78:81:E5:0F:91:54:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwbI8iR9IgQcguVVZniB5Q-RVKs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/E7RKatZ2-c0USqUVA50ejfPO_LA.roa Signing time: Thu 01 Jan 2026 12:18:53 +0000 ROA not before: Thu 01 Jan 2026 12:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48821 IP address blocks: 45.159.32.0/22 maxlen: 24 185.138.52.0/22 maxlen: 24 2a07:a40::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.mft rsync://rpki.ripe.net/repository/DEFAULT/qwbI8iR9IgQcguVVZniB5Q-RVKs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:21:c9:bf:0f:aa:91:07:b3:7d:02:1c:5a:8c:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab06c8f2247d22041c82e555667881e50f9154ab Validity Not Before: Jan 1 12:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=13b44a6ad676f9cd144aa515039d1e8df3cefcb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4a:1e:e5:98:d5:25:87:d0:28:77:60:59:7b: 1c:5c:0d:0d:af:5a:1d:6a:88:6a:5a:c0:04:3a:34: 79:bc:e9:68:00:01:8e:59:02:52:dd:c6:1e:a4:7b: 96:ea:c8:71:b7:3b:20:6d:d3:41:93:b3:8d:a6:72: 00:c3:1f:57:48:68:14:a0:26:d6:8e:82:9b:3d:bc: 81:1b:64:3d:a7:41:bc:d7:d2:bb:74:08:cc:56:92: 2e:89:89:69:44:b9:e8:3b:13:e2:18:07:f2:c1:d4: ab:23:1e:79:40:5c:09:00:dd:50:80:71:b1:72:b8: 4c:68:46:41:71:ed:2a:f8:a1:d4:67:fc:b5:63:9c: 0e:76:03:3a:c7:b1:6d:90:16:d8:82:41:44:9b:e2: 9e:9f:26:03:dc:d6:a6:d6:42:9f:65:6d:9b:a7:47: d7:d1:b2:eb:dc:d6:2b:40:8d:9f:53:9d:7b:9f:63: a8:ce:70:ab:67:36:6c:c3:07:32:88:31:b3:80:46: 51:a4:69:dd:4d:5f:a8:2c:64:99:d9:2c:d4:2c:40: e9:e9:a8:b2:ea:47:9c:a4:f1:6b:07:45:0b:06:75: 92:f8:c9:0a:39:53:db:3b:d7:3c:3c:49:66:89:c8: ca:6c:34:3e:2f:b9:bd:62:50:b8:b3:bd:0d:81:96: 7a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:B4:4A:6A:D6:76:F9:CD:14:4A:A5:15:03:9D:1E:8D:F3:CE:FC:B0 X509v3 Authority Key Identifier: keyid:AB:06:C8:F2:24:7D:22:04:1C:82:E5:55:66:78:81:E5:0F:91:54:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwbI8iR9IgQcguVVZniB5Q-RVKs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/E7RKatZ2-c0USqUVA50ejfPO_LA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a94dea-2ffc-408d-aa9d-1ae36a4469fd/1/qwbI8iR9IgQcguVVZniB5Q-RVKs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.159.32.0/22 185.138.52.0/22 IPv6: 2a07:a40::/29 Signature Algorithm: sha256WithRSAEncryption 1f:3e:70:30:a0:6b:ec:16:2d:b8:79:21:0d:d4:1b:d9:82:b2: 06:25:11:32:8e:13:8d:16:1d:0a:f1:8e:f1:fd:f3:ff:db:fb: a1:f1:03:9b:d5:67:48:4d:27:7b:3c:71:19:3a:82:15:f4:ec: 33:20:90:e3:5e:e7:ee:f3:24:82:45:4b:fc:3e:8d:f3:1a:f6: 39:49:6d:33:a1:87:3c:00:5a:21:a7:1e:44:59:3b:de:85:f9: db:20:7b:9c:f1:21:a1:ac:4b:45:a8:ea:e2:3c:35:67:6a:0f: 55:ac:a9:78:af:29:7c:63:91:3f:f8:66:cb:b7:85:12:91:68: dc:4f:ed:00:ae:17:0d:1a:fc:c5:aa:36:2a:b1:c1:41:cc:99: ec:d2:42:05:00:9a:43:a9:76:6b:bc:40:d6:d5:4f:8a:0f:cf: b6:4c:99:f7:8f:44:9b:a9:f8:c4:de:15:c1:27:47:51:c6:10: 22:0b:ee:93:41:41:26:03:ed:44:f6:32:c9:4a:ab:9a:89:a0: 4a:dd:2c:2d:4e:79:e3:98:e7:b8:0f:6f:34:22:6d:71:cc:6f: 4a:f2:40:50:70:c2:f2:c6:19:05:8c:8e:33:ce:f8:a8:4f:d8: a1:31:44:7f:a9:f8:4b:2f:21:91:95:7b:e5:04:88:97:45:61: 79:e2:88:2a -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt5fyHJvw+qkQezfQIcWoxsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMDZjOGYyMjQ3ZDIyMDQxYzgyZTU1NTY2Nzg4MWU1MGY5 MTU0YWIwHhcNMjYwMTAxMTIxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxM2I0NGE2YWQ2NzZmOWNkMTQ0YWE1MTUwMzlkMWU4ZGYzY2VmY2IwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukoe5ZjVJYfQKHdgWXscXA0Nr1od aohqWsAEOjR5vOloAAGOWQJS3cYepHuW6shxtzsgbdNBk7ONpnIAwx9XSGgUoCbW joKbPbyBG2Q9p0G819K7dAjMVpIuiYlpRLnoOxPiGAfywdSrIx55QFwJAN1QgHGx crhMaEZBce0q+KHUZ/y1Y5wOdgM6x7FtkBbYgkFEm+KenyYD3Nam1kKfZW2bp0fX 0bLr3NYrQI2fU517n2OoznCrZzZswwcyiDGzgEZRpGndTV+oLGSZ2SzULEDp6aiy 6kecpPFrB0ULBnWS+MkKOVPbO9c8PElmicjKbDQ+L7m9YlC4s70NgZZ61QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFBO0SmrWdvnNFEqlFQOdHo3zzvywMB8GA1UdIwQY MBaAFKsGyPIkfSIEHILlVWZ4geUPkVSrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXdiSThpUjlJZ1FjZ3VWVlpuaUI1US1SVktzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9hOTRkZWEtMmZmYy00MDhkLWFhOWQt MWFlMzZhNDQ2OWZkLzEvRTdSS2F0WjItYzBVU3FVVkE1MGVqZlBPX0xBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9hOTRkZWEtMmZmYy00MDhkLWFhOWQtMWFlMzZhNDQ2OWZk LzEvcXdiSThpUjlJZ1FjZ3VWVlpuaUI1US1SVktzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLZ8gAwQC uYo0MA0EAgACMAcDBQMqBwpAMA0GCSqGSIb3DQEBCwUAA4IBAQAfPnAwoGvsFi24 eSEN1BvZgrIGJREyjhONFh0K8Y7x/fP/2/uh8QOb1WdITSd7PHEZOoIV9OwzIJDj Xufu8ySCRUv8Po3zGvY5SW0zoYc8AFohpx5EWTvehfnbIHuc8SGhrEtFqOriPDVn ag9VrKl4ryl8Y5E/+GbLt4USkWjcT+0ArhcNGvzFqjYqscFBzJns0kIFAJpDqXZr vEDW1U+KD8+2TJn3j0SbqfjE3hXBJ0dRxhAiC+6TQUEmA+1E9jLJSquaiaBK3Swt TnnjmOe4D280Im1xzG9K8kBQcMLyxhkFjI4zzvioT9ihMUR/qfhLLyGRlXvlBIiX RWF54ogq -----END CERTIFICATE-----Generated at Mon Jan 26 06:18:07 2026 by rpki-client