This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/EGK4nb9z9VfWmRRiWLjjvzCPL0k.roa File: EGK4nb9z9VfWmRRiWLjjvzCPL0k.roa (raw, json) Hash identifier: 6m0dtYv3ZvmHrMVqOYfbNP/IRoFizFOn4VneAK9Wapo= Subject key identifier: 10:62:B8:9D:BF:73:F5:57:D6:99:14:62:58:B8:E3:BF:30:8F:2F:49 Certificate issuer: /CN=77e3c2900b599754283f27f3b4e8d7f6c4510972 Certificate serial: 019B7E38BE71927D423B16BD74A347C745AB Authority key identifier: 77:E3:C2:90:0B:59:97:54:28:3F:27:F3:B4:E8:D7:F6:C4:51:09:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-PCkAtZl1QoPyfztOjX9sRRCXI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/EGK4nb9z9VfWmRRiWLjjvzCPL0k.roa Signing time: Fri 02 Jan 2026 10:20:06 +0000 ROA not before: Fri 02 Jan 2026 10:20:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52214 IP address blocks: 46.226.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.crl rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.mft rsync://rpki.ripe.net/repository/DEFAULT/d-PCkAtZl1QoPyfztOjX9sRRCXI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:be:71:92:7d:42:3b:16:bd:74:a3:47:c7:45:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77e3c2900b599754283f27f3b4e8d7f6c4510972 Validity Not Before: Jan 2 10:20:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1062b89dbf73f557d699146258b8e3bf308f2f49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e9:d9:d7:c7:08:68:c3:8c:e4:92:cf:8b:a9: f4:40:31:8e:9c:ae:22:20:b8:5d:ce:26:4d:b2:83: 1e:33:ea:76:b5:60:7e:ba:25:ed:df:5c:00:49:da: 6e:c3:39:6e:cf:f2:2e:6f:cc:1d:f9:33:fa:e5:df: 57:91:48:0a:50:bb:d6:5c:b0:80:f7:6d:48:cb:f2: 82:64:86:47:d9:78:80:a1:09:da:c4:bb:61:5f:d1: 00:2d:38:8b:af:87:29:f7:c3:f4:d7:a8:f4:3c:7d: 25:22:61:14:a5:2e:44:0d:00:7a:41:31:bf:8b:1c: c8:66:a5:0c:23:6d:a8:6e:72:6a:82:a4:e4:69:40: 7c:7e:10:7a:98:0c:c7:76:95:6b:c2:f1:8e:c7:f6: 9a:cb:8c:d2:da:40:e1:a5:f2:e8:12:dd:f2:ef:8c: f5:17:21:12:a4:c3:00:5a:87:ae:92:f6:36:48:f9: 9e:36:0c:91:c1:9c:40:3d:7e:97:39:84:5b:64:7b: de:d6:c6:81:28:1d:c3:31:1a:0d:c4:f1:95:fc:82: 47:3e:3e:0c:7c:25:31:8a:7b:78:09:e0:4d:24:2a: 6a:3c:80:0f:85:d8:9d:77:5c:2b:5b:fb:b2:e2:c6: b0:bb:ae:eb:9c:94:01:ae:70:29:54:55:db:17:b7: a7:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:62:B8:9D:BF:73:F5:57:D6:99:14:62:58:B8:E3:BF:30:8F:2F:49 X509v3 Authority Key Identifier: keyid:77:E3:C2:90:0B:59:97:54:28:3F:27:F3:B4:E8:D7:F6:C4:51:09:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-PCkAtZl1QoPyfztOjX9sRRCXI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/EGK4nb9z9VfWmRRiWLjjvzCPL0k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ef2b49-035f-40a4-ae51-d3c55d4fda9d/1/d-PCkAtZl1QoPyfztOjX9sRRCXI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.226.210.0/24 Signature Algorithm: sha256WithRSAEncryption 23:23:10:d6:b2:ca:0c:97:29:a6:db:6c:ff:97:c8:89:4e:99: 2f:68:58:db:a3:03:06:f8:3c:f8:90:f9:dd:c3:2b:98:1b:74: 87:a6:83:43:80:83:4d:f1:e5:95:5c:77:8e:9b:97:41:28:16: 58:10:01:0a:66:c5:6f:b4:0f:7f:a7:d2:14:89:e7:9c:78:b9: d8:f4:94:a3:98:74:15:3a:26:2f:49:5f:22:03:86:13:40:b3: e3:56:e1:ee:fb:7b:c8:06:1f:87:78:1e:25:21:93:51:0f:86: 10:61:23:d1:bb:12:06:18:e8:d5:cd:fe:cb:0c:1e:cd:e3:78: 08:1f:69:cf:76:c7:dd:35:47:01:ed:8e:ec:da:b1:76:d6:ab: a3:0d:99:07:10:a5:9b:2b:91:7c:36:bf:5e:2e:c9:cd:23:ca: 99:f6:28:e3:8d:d2:be:89:2c:15:73:71:3d:36:19:fd:40:d0: 55:e2:2e:2d:ae:da:0f:c2:10:4f:30:90:75:9f:dc:20:e9:88: a4:71:8f:76:3d:84:d9:be:a4:4c:97:fc:05:87:e3:40:93:cc: 68:da:bb:90:e1:be:07:8f:74:08:2e:45:b3:be:69:a3:43:69: 69:29:a7:35:ce:4c:cf:18:64:c1:31:4b:66:eb:3a:38:cb:fe: 1c:50:de:02 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OL5xkn1COxa9dKNHx0WrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3ZTNjMjkwMGI1OTk3NTQyODNmMjdmM2I0ZThkN2Y2YzQ1 MTA5NzIwHhcNMjYwMTAyMTAyMDA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDYyYjg5ZGJmNzNmNTU3ZDY5OTE0NjI1OGI4ZTNiZjMwOGYyZjQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOnZ18cIaMOM5JLPi6n0QDGOnK4i ILhdziZNsoMeM+p2tWB+uiXt31wASdpuwzluz/Iub8wd+TP65d9XkUgKULvWXLCA 921Iy/KCZIZH2XiAoQnaxLthX9EALTiLr4cp98P016j0PH0lImEUpS5EDQB6QTG/ ixzIZqUMI22obnJqgqTkaUB8fhB6mAzHdpVrwvGOx/aay4zS2kDhpfLoEt3y74z1 FyESpMMAWoeukvY2SPmeNgyRwZxAPX6XOYRbZHve1saBKB3DMRoNxPGV/IJHPj4M fCUxint4CeBNJCpqPIAPhdidd1wrW/uy4sawu67rnJQBrnApVFXbF7enbwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBBiuJ2/c/VX1pkUYli4478wjy9JMB8GA1UdIwQY MBaAFHfjwpALWZdUKD8n87To1/bEUQlyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZC1QQ2tBdFpsMVFvUHlmenRPalg5c1JSQ1hJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9lZjJiNDktMDM1Zi00MGE0LWFlNTEt ZDNjNTVkNGZkYTlkLzEvRUdLNG5iOXo5VmZXbVJSaVdMamp2ekNQTDBrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9lZjJiNDktMDM1Zi00MGE0LWFlNTEtZDNjNTVkNGZkYTlk LzEvZC1QQ2tBdFpsMVFvUHlmenRPalg5c1JSQ1hJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALuLSMA0G CSqGSIb3DQEBCwUAA4IBAQAjIxDWssoMlymm22z/l8iJTpkvaFjbowMG+Dz4kPnd wyuYG3SHpoNDgINN8eWVXHeOm5dBKBZYEAEKZsVvtA9/p9IUieeceLnY9JSjmHQV OiYvSV8iA4YTQLPjVuHu+3vIBh+HeB4lIZNRD4YQYSPRuxIGGOjVzf7LDB7N43gI H2nPdsfdNUcB7Y7s2rF21qujDZkHEKWbK5F8Nr9eLsnNI8qZ9ijjjdK+iSwVc3E9 Nhn9QNBV4i4trtoPwhBPMJB1n9wg6YikcY92PYTZvqRMl/wFh+NAk8xo2ruQ4b4H j3QILkWzvmmjQ2lpKac1zkzPGGTBMUtm6zo4y/4cUN4C -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:23 2026 by rpki-client