This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/RSErlzqCpSdDsRHtwGnzvJLUb9Q.roa File: RSErlzqCpSdDsRHtwGnzvJLUb9Q.roa (raw, json) Hash identifier: rLSLw6+T+Et0d1Efgq167+zRkvB4aSf6ep1NRZLeTMI= Subject key identifier: 45:21:2B:97:3A:82:A5:27:43:B1:11:ED:C0:69:F3:BC:92:D4:6F:D4 Certificate issuer: /CN=3206b1d207b65c0ebd3f23fa7630016d87b41349 Certificate serial: 019B7EA4313F6FC3F965B4CDEED735DFB001 Authority key identifier: 32:06:B1:D2:07:B6:5C:0E:BD:3F:23:FA:76:30:01:6D:87:B4:13:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/RSErlzqCpSdDsRHtwGnzvJLUb9Q.roa Signing time: Fri 02 Jan 2026 12:17:28 +0000 ROA not before: Fri 02 Jan 2026 12:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15830 IP address blocks: 185.69.44.0/22 maxlen: 24 2a05:2000::/29 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.crl rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.mft rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:31:3f:6f:c3:f9:65:b4:cd:ee:d7:35:df:b0:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3206b1d207b65c0ebd3f23fa7630016d87b41349 Validity Not Before: Jan 2 12:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=45212b973a82a52743b111edc069f3bc92d46fd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:85:dc:b5:96:44:98:99:f5:f8:4b:02:61:5d: 40:08:08:01:76:a4:c0:c0:40:7b:96:ea:65:3a:b7: 8a:21:2d:f4:39:6e:5e:ac:83:99:df:3b:18:6d:ad: a0:7e:15:2a:43:2e:45:27:f1:da:6a:12:be:cc:f1: c0:b9:4b:9f:b3:b4:dd:73:7e:53:5c:2c:66:9d:07: ff:2e:b5:9c:53:58:21:67:8e:d5:eb:80:1a:51:9c: 12:70:bc:b6:aa:21:f5:9f:7f:eb:ae:d8:31:b8:48: e1:0b:7f:ac:f1:f8:88:88:91:31:b8:28:9d:59:10: 22:a9:41:e4:cc:5e:ac:a6:d1:7a:4a:c6:9b:d3:68: b4:67:3f:fb:5c:1f:85:62:ae:b0:3e:cf:a3:2a:e3: b7:e1:88:bd:fc:67:bb:13:a9:8b:ff:95:d2:88:fc: ba:2e:3a:e5:be:49:bd:5d:6c:20:2d:8b:6b:38:71: 21:7d:27:fd:5d:08:ed:e9:e6:2e:e6:ac:61:7c:b8: 57:8c:93:52:c6:6f:80:08:68:d3:e4:39:cf:82:6c: fe:e3:76:62:e9:e8:63:38:0f:e9:20:e8:c3:ec:02: 5a:07:64:f7:81:13:20:5f:2f:3b:1f:38:0a:b8:bc: 40:6f:f2:8d:c4:4a:2c:e4:8f:00:e2:7a:ea:72:d7: 99:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:21:2B:97:3A:82:A5:27:43:B1:11:ED:C0:69:F3:BC:92:D4:6F:D4 X509v3 Authority Key Identifier: keyid:32:06:B1:D2:07:B6:5C:0E:BD:3F:23:FA:76:30:01:6D:87:B4:13:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mgax0ge2XA69PyP6djABbYe0E0k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/RSErlzqCpSdDsRHtwGnzvJLUb9Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/693fe2-fbaf-430f-8a22-1bae93cfa078/1/Mgax0ge2XA69PyP6djABbYe0E0k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.69.44.0/22 IPv6: 2a05:2000::/29 Signature Algorithm: sha256WithRSAEncryption 91:a7:01:fd:b7:16:c5:84:48:96:f7:a1:1d:10:e9:cb:ab:eb: 08:27:75:46:82:2d:2f:8d:86:99:26:b7:8a:15:41:75:79:18: 3c:a2:1e:6d:18:94:e2:f7:41:d5:91:82:a0:1c:25:06:af:37: 28:58:b3:f8:f1:53:de:d6:87:b0:7d:d1:d5:26:7b:88:ae:57: 4f:6b:07:00:c6:12:0e:d3:cf:39:a7:72:52:ab:f1:fb:29:00: 8d:40:f4:a0:53:2b:78:bc:64:62:a9:f4:30:e1:4c:d6:e6:09: 86:15:38:7c:2b:42:30:4c:e1:26:ad:82:99:ca:4a:fb:d9:21: a2:44:f3:8b:7e:93:c5:7f:14:60:3e:55:5d:54:e4:a7:0b:df: 0d:6d:d5:ff:a8:de:ef:fc:83:00:87:0d:20:1c:16:61:da:eb: 06:ba:d5:b1:4c:29:c1:a7:39:d0:e8:6c:3c:ed:ab:37:db:f2: a1:44:9c:db:02:78:ad:8e:7b:66:0b:05:65:87:b8:6e:f7:5b: 1d:81:a3:9e:97:f6:1f:35:5e:e1:a9:ef:02:2d:21:4d:95:81: 29:d1:9e:9c:da:08:aa:50:8e:00:c2:95:44:ff:c4:a6:7c:42: de:9f:e1:2d:d7:75:bd:47:c3:57:68:a8:60:20:46:cc:c1:c7: 72:d3:09:03 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+pDE/b8P5ZbTN7tc137ABMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyMDZiMWQyMDdiNjVjMGViZDNmMjNmYTc2MzAwMTZkODdi NDEzNDkwHhcNMjYwMTAyMTIxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTIxMmI5NzNhODJhNTI3NDNiMTExZWRjMDY5ZjNiYzkyZDQ2ZmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoXctZZEmJn1+EsCYV1ACAgBdqTA wEB7luplOreKIS30OW5erIOZ3zsYba2gfhUqQy5FJ/HaahK+zPHAuUufs7Tdc35T XCxmnQf/LrWcU1ghZ47V64AaUZwScLy2qiH1n3/rrtgxuEjhC3+s8fiIiJExuCid WRAiqUHkzF6sptF6Ssab02i0Zz/7XB+FYq6wPs+jKuO34Yi9/Ge7E6mL/5XSiPy6 Ljrlvkm9XWwgLYtrOHEhfSf9XQjt6eYu5qxhfLhXjJNSxm+ACGjT5DnPgmz+43Zi 6ehjOA/pIOjD7AJaB2T3gRMgXy87HzgKuLxAb/KNxEos5I8A4nrqcteZYQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFEUhK5c6gqUnQ7ER7cBp87yS1G/UMB8GA1UdIwQY MBaAFDIGsdIHtlwOvT8j+nYwAW2HtBNJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWdheDBnZTJYQTY5UHlQNmRqQUJiWWUwRTBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy82OTNmZTItZmJhZi00MzBmLThhMjIt MWJhZTkzY2ZhMDc4LzEvUlNFcmx6cUNwU2REc1JIdHdHbnp2SkxVYjlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy82OTNmZTItZmJhZi00MzBmLThhMjItMWJhZTkzY2ZhMDc4 LzEvTWdheDBnZTJYQTY5UHlQNmRqQUJiWWUwRTBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuUUsMA0E AgACMAcDBQMqBSAAMA0GCSqGSIb3DQEBCwUAA4IBAQCRpwH9txbFhEiW96EdEOnL q+sIJ3VGgi0vjYaZJreKFUF1eRg8oh5tGJTi90HVkYKgHCUGrzcoWLP48VPe1oew fdHVJnuIrldPawcAxhIO0885p3JSq/H7KQCNQPSgUyt4vGRiqfQw4UzW5gmGFTh8 K0IwTOEmrYKZykr72SGiRPOLfpPFfxRgPlVdVOSnC98NbdX/qN7v/IMAhw0gHBZh 2usGutWxTCnBpznQ6Gw87as32/KhRJzbAnitjntmCwVlh7hu91sdgaOel/YfNV7h qe8CLSFNlYEp0Z6c2giqUI4AwpVE/8SmfELen+Et13W9R8NXaKhgIEbMwcdy0wkD -----END CERTIFICATE-----Generated at Sat Jan 3 04:53:26 2026 by rpki-client