This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/E-486E0-raIhh0cU7uEvlJrtVq8.roa File: E-486E0-raIhh0cU7uEvlJrtVq8.roa (raw, json) Hash identifier: vna5ocXCF4M8ZuD7JNv3pkr7ZzkpCUbGfeYWFBWtRTs= Subject key identifier: 13:EE:3C:E8:4D:3E:AD:A2:21:87:47:14:EE:E1:2F:94:9A:ED:56:AF Certificate issuer: /CN=53ef2884e4a13355db649a3493527c44228973b8 Certificate serial: 019B7CECE2B1BF7604C086BA6CA92DFB4D6D Authority key identifier: 53:EF:28:84:E4:A1:33:55:DB:64:9A:34:93:52:7C:44:22:89:73:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/E-486E0-raIhh0cU7uEvlJrtVq8.roa Signing time: Fri 02 Jan 2026 04:17:37 +0000 ROA not before: Fri 02 Jan 2026 04:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202591 IP address blocks: 45.154.164.0/22 maxlen: 22 92.119.28.0/22 maxlen: 22 185.150.184.0/22 maxlen: 22 2a07:7280::/29 maxlen: 29 2a09:b340::/29 maxlen: 29 2a0f:bd00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.mft rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:e2:b1:bf:76:04:c0:86:ba:6c:a9:2d:fb:4d:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53ef2884e4a13355db649a3493527c44228973b8 Validity Not Before: Jan 2 04:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=13ee3ce84d3eada221874714eee12f949aed56af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:04:58:31:d3:33:74:13:88:1f:b2:94:34:c6: 05:06:29:48:aa:06:71:27:5b:84:36:bb:bd:b2:12: ea:83:ef:f5:92:be:fb:e3:00:b1:5e:a3:e2:fb:8d: f7:3f:8c:eb:55:11:0f:a0:d4:f3:e1:6c:63:9a:14: e6:7f:ed:6a:15:a1:58:cb:19:0f:73:a4:7c:8e:af: 2c:3c:7a:d6:e8:2e:3e:d8:cf:89:2d:73:19:88:4b: 11:79:ea:3e:ee:6a:97:0a:45:b3:2a:7e:7b:9d:3c: ef:24:9b:55:96:a9:04:24:65:b5:ba:bc:6f:18:71: e1:a6:73:26:ab:17:29:6a:e1:e5:1b:75:23:f9:a6: 96:23:b6:33:01:1d:d7:09:aa:42:cd:53:4c:9c:87: bc:58:06:39:37:ac:7f:24:a7:e4:cd:d2:20:b5:68: e5:19:ea:45:f9:27:18:3b:2f:4a:c4:f7:47:b2:fc: de:6b:bd:2e:e2:36:ec:18:49:82:9b:2e:0f:5f:0b: 12:4e:e9:40:9e:d1:08:23:1b:9a:e5:ef:3c:04:3a: 32:3f:b9:99:d6:1e:e2:08:f3:6e:dd:72:4d:fb:f8: d5:11:63:d8:0d:37:c7:68:da:fa:41:dc:e6:ea:28: e9:cd:48:59:69:52:e4:4d:0d:e8:db:3b:aa:f5:2f: 6f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:EE:3C:E8:4D:3E:AD:A2:21:87:47:14:EE:E1:2F:94:9A:ED:56:AF X509v3 Authority Key Identifier: keyid:53:EF:28:84:E4:A1:33:55:DB:64:9A:34:93:52:7C:44:22:89:73:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-8ohOShM1XbZJo0k1J8RCKJc7g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/E-486E0-raIhh0cU7uEvlJrtVq8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/13a57c-cc4f-45bc-af9f-9367e42389d9/1/U-8ohOShM1XbZJo0k1J8RCKJc7g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.154.164.0/22 92.119.28.0/22 185.150.184.0/22 IPv6: 2a07:7280::/29 2a09:b340::/29 2a0f:bd00::/29 Signature Algorithm: sha256WithRSAEncryption 0e:f0:86:d1:5f:01:3e:79:41:ae:7f:cc:b7:1a:21:16:25:eb: 1d:46:54:70:e5:7b:7c:0d:aa:f5:39:03:12:66:2e:2b:8e:96: 3e:de:9c:37:fa:88:18:54:4e:f3:c2:62:bc:76:05:1d:5e:b7: 72:f4:f9:e1:3a:60:5c:b5:52:05:fd:60:02:f8:2d:cb:e9:6c: ff:13:a9:58:ec:fb:b1:bc:de:1f:06:d1:c6:6a:84:60:f2:a4: e7:a3:df:52:5d:dc:e4:c8:f0:23:a8:9e:4e:b0:d4:9b:6f:02: 35:8f:5a:41:01:ac:29:2e:b3:d7:22:48:c6:ba:5c:82:01:76: a5:74:cf:2c:37:01:ab:1b:2b:a9:10:4e:d5:6b:58:b1:fe:83: de:3f:17:62:79:6f:4a:ac:01:82:be:0c:21:f0:1c:2e:47:16: 9c:cc:a0:6b:95:d6:8e:25:58:7d:e4:0e:16:1a:da:7e:d2:13: c3:c0:bd:c2:b2:a3:e0:ca:ec:03:f1:94:9a:c5:4b:3d:c8:2c: 44:e5:69:b3:4f:46:f0:7e:55:15:65:17:d4:27:c9:9f:0e:06: b6:61:a0:e5:01:75:46:44:4b:68:5c:0d:96:eb:a1:f5:03:06: 7a:1f:4a:f5:07:b7:6f:7a:16:a6:52:da:88:d0:10:1d:78:fd: 32:67:f8:bc -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgISAZt87OKxv3YEwIa6bKkt+01tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzZWYyODg0ZTRhMTMzNTVkYjY0OWEzNDkzNTI3YzQ0MjI4 OTczYjgwHhcNMjYwMTAyMDQxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxM2VlM2NlODRkM2VhZGEyMjE4NzQ3MTRlZWUxMmY5NDlhZWQ1NmFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQRYMdMzdBOIH7KUNMYFBilIqgZx J1uENru9shLqg+/1kr774wCxXqPi+433P4zrVREPoNTz4WxjmhTmf+1qFaFYyxkP c6R8jq8sPHrW6C4+2M+JLXMZiEsReeo+7mqXCkWzKn57nTzvJJtVlqkEJGW1urxv GHHhpnMmqxcpauHlG3Uj+aaWI7YzAR3XCapCzVNMnIe8WAY5N6x/JKfkzdIgtWjl GepF+ScYOy9KxPdHsvzea70u4jbsGEmCmy4PXwsSTulAntEIIxua5e88BDoyP7mZ 1h7iCPNu3XJN+/jVEWPYDTfHaNr6Qdzm6ijpzUhZaVLkTQ3o2zuq9S9vaQIDAQAB o4ICMjCCAi4wHQYDVR0OBBYEFBPuPOhNPq2iIYdHFO7hL5Sa7VavMB8GA1UdIwQY MBaAFFPvKITkoTNV22SaNJNSfEQiiXO4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVS04b2hPU2hNMVhiWkpvMGsxSjhSQ0tKYzdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xM2E1N2MtY2M0Zi00NWJjLWFmOWYt OTM2N2U0MjM4OWQ5LzEvRS00ODZFMC1yYUloaDBjVTd1RXZsSnJ0VnE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8xM2E1N2MtY2M0Zi00NWJjLWFmOWYtOTM2N2U0MjM4OWQ5 LzEvVS04b2hPU2hNMVhiWkpvMGsxSjhSQ0tKYzdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAYBAIAATASAwQCLZqkAwQC XHccAwQCuZa4MBsEAgACMBUDBQMqB3KAAwUDKgmzQAMFAyoPvQAwDQYJKoZIhvcN AQELBQADggEBAA7whtFfAT55Qa5/zLcaIRYl6x1GVHDle3wNqvU5AxJmLiuOlj7e nDf6iBhUTvPCYrx2BR1et3L0+eE6YFy1UgX9YAL4LcvpbP8TqVjs+7G83h8G0cZq hGDypOej31Jd3OTI8COonk6w1JtvAjWPWkEBrCkus9ciSMa6XIIBdqV0zyw3Aasb K6kQTtVrWLH+g94/F2J5b0qsAYK+DCHwHC5HFpzMoGuV1o4lWH3kDhYa2n7SE8PA vcKyo+DK7APxlJrFSz3ILETlabNPRvB+VRVlF9QnyZ8OBrZhoOUBdUZES2hcDZbr ofUDBnofSvUHt296FqZS2ojQEB14/TJn+Lw= -----END CERTIFICATE-----Generated at Fri Jan 23 11:41:18 2026 by rpki-client